DNS challenge workflow

Client dev
1

When I get the challenge response I take the value in the text field and add it my DNS server as a TXT record for _acme-challenge.FQDN. But the order fails to finalize due to failed verification. Do I have the workflow correct? Thanks.

dig -t txt _acme-challenge.gw.gkc.leostreamvpam.com +short

"8Sw77SNDA56pBKFEDnLoIezvrpfO4hctQtCCInol4aQ.l173mXvPx3vAAtV9mErp40-mBPrSqkj2v9l5NwVndWQ"

Domain gw.gkc.leostreamvpam.com has failed verification (status code 200).
All verifications failed
Connecting to https://acme-v02.api.letsencrypt.org/acme/finalize/2595831206/417897447186
Could not finalize an order.

2

No, the token doesn't go right in DNS. You should go re-read the DNS challenge section of RFC8555 for details on how to compute the final value.

I'd also suggest you test against Pebble locally, which will allow you to introspect the process a bit more.

6 Likes
3

Thank you! Will do.

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.