Just one _acme-challenge value for all domains in same DNS validation

Feature Requests
6

I think that's not correct: the error you've shown with the "and 9 more" text is produced by the Let's Encrypt validation server and not certbot. Certbot is just showing you the error from the validation server, but does not generate it.
And the Let's Encrypt validation server just tells you what it found when it queried for the TXT records: it found 10 TXT records.
Therefore, I'm stil enclined to think it has something to do with your DNS provider: the screenshot you're showing also shows just 10 TXT records and not 13.

Also, I've shown in your other thread about the max. 10 issue certbot works perfectly with 20 DNS challenges :wink:

My suggestion to you is to try to automate the DNS challenge somehow as stated earlier and not to try to add the TXT records manually for two reasons:

  • I think your DNS service provider is the issue here, automation through e.g. acme-dns might resolve this issue;
  • renewing so much DNS challenges every 60 days is very cumbersome, so automation is also in your own best interest :wink:

Also, I'm very puzzled: why would there be a need for 10+ TXT records for the same hostname? (Earlier I missed that it all were records for the exact same hostname..) Usually, this is maxed to just two similar hostnames:

  • One for the "bare" apex domain example.com;
  • and one for the wildcard *.example.com.

I don't see the need for more than two TXT records for the same hostname.

2 Likes