Hello! I've successfully set up a custom certbot configuration and due to specifics of my certificate (several domains, some of which also should contain wildcards) I have to use DNS authentication since it is the only available option. And here s the caveat: I create the needed domain through my …

You will probably need to wait for more of a DNS expert than me. But, when checking the TXT record for a DNS challenge the Let's Encrypt servers check the authoritative name servers. Typically the delay is short (often just seconds) for the DNS provider to sync those. You can use the unboundtest.…

Who is your DNS provider? Several providers are notorious for using read-through caches on their public servers, but not implementing a write-through cache on their internal API. That means edits you make on their systems can usually take anywhere from 301 seconds (5minutes + 1 second) to 3601 sec…

I use Yandex 360 DNS , I don't know if it helps. And yes, it is my own script, AFAIK there is no plugin for Yandex

SO, I can see I can use GET request with unboundtest.com and it gives me the results in a text format (is it like a dig?) So is the format documented, should I parse it somehow or there are some more reliable way to get the content of TXT records?

Well, what you'd want to do in a script, rather than parsing unboundtest, is to query your authoritative DNS servers directly yourself, just like Let's Encrypt would do.

[image] dredkin: I use Yandex 360 DNS , I don't know if it helps. Honestly, for this particular requirement, it is doing the opposite of helping. Are you able to switch to any other DNS service provider (DSP)? [any DSP that can handle TXT updates via API; and do them quickly will work bette…

[image] rg305: Honestly, for this particular requirement, it is doing the opposite of helping. Are you able to switch to any other DNS service provider (DSP)? Why?

As shown by the other post ( No TXT records found - #2 by rg305 ), Yandex DNS isn't working as advertised.

[image] petercooperjr: Well, what you'd want to do in a script, rather than parsing unboundtest, is to query your authoritative DNS servers directly yourself, just like Let's Encrypt would do. Sorry but this was of course my first guess. And of course it didn't work, so that's when I introduc…

DNS authentication and timings

Help

MikeMcQ April 29, 2022, 10:01pm 7

You might want to check out the post below. We recently helped someone with some Yandex problems. It has some unusual behavior

Topic		Replies	Views
DNS challenge questions Help	13	905	June 20, 2024
Dns01 with OVH doesn't seems to work Issuance Tech	17	5335	August 24, 2017
DNS authorization fails randomly Help	9	926	January 7, 2021
DNS challenge isn't working as expected Help	5	2460	December 2, 2022
Retry TXT DNS verification Help	3	3140	August 10, 2018

DNS authentication and timings

Related topics