Hi all, When testing dns challenge with let's encrypt using this website https://letsdebug.net/ It says my domain name is OK even tho my ddns provider let's encrypt I havnt got an txt record or an api for my acme client on my opnsense firewall Why is this please Thanks, Rob

[image] robertkwild: so I need a DDNS provider that supports an api Yup. [image] robertkwild: aswell that can talk to the acme client No, the other way around: the ACME client will talk to the DNS providers API.

OK il look for a provider that does both DDNS and ACME challenge

I don't understand. What do you mean by "a provider that does [...] ACME challenge"?

I don't know the correct terminolgy then Dns challenge ACME support

The only thing a DDNS provider can do, is provide a well documented API. The rest all comes down to the ACME client.

Yeah so I need a DDNS provider that supports an api aswell that can talk to the acme client?

Great perfect, so I just need to find a DDNS provider that provides api support to talk to the ACME client on my opnsense firewall

Sorry the client talks to the dns api

[image] robertkwild: so I just need to find a DDNS provider that provides api support to talk to the ACME client on my opnsense firewall You need to find a DDNS provider for which acme.sh has support, assuming acme.sh is the ACME client available on opnsense (according to the PR you mentioned…

When you say a DDNS provider that supports acme.sh you mean that does the api handshake

Just reading I could get a Txt record for my DDNS provider instead of using the acme method but they say its not really the best method for dns challenge Although it is technically possible to issue and renew certificates by manually updating TXT records every 60-90 days, it is not a recommended w…

Dns challenge OK even when I havnt got a txt record

Help

Osiris February 5, 2022, 10:27pm 18

Yup.

No, the other way around: the ACME client will talk to the DNS providers API.

Topic		Replies	Views
Free DDNS that offers TXT record for DNS challenge Help	16	7823	March 9, 2022
[Suggestion] Let's Encrypt operated, TXT-only DNS Hosting for DNS challenges Feature Requests	19	8847	February 14, 2018
DNS challenge is in staging Feature Requests	49	28077	February 10, 2016
DNS-01 challenge acme-dns internal Bind Help	44	4132	May 29, 2024
Help me understand acme-dns Issuance Tech	24	21265	May 31, 2018

Dns challenge OK even when I havnt got a txt record

Related topics