Is there a way to change prefix of expected dns record?

I have a crappy DNS provider that propagate old txt dns records even after the end of TTL. But I found out that it correctly propagate to the new subdomain. It would be great if I could define a random prefix for each chanllenge.
I am using certbot 1.3.0

Hi @thepeshka

That’s impossible (for the current standard / protocol).
The txt record name and its content (value) are defined in ACME standard Section 8.4.

Thank you

1 Like

Hi @thepeshka

you can use a CNAME.

CNAME _acme-challenge.yourdomain.com -> other-domain.com

Then other-domain.com is checked if there is a correct TXT value. So if the DNS provider updates the CNAME entry, you have something like a “random destination”.

acme.sh supports such a configuration.

1 Like

@JuergenAuer Do I need to specify any additional parameters for certbot?

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.