I hope it's ok to continue in this thread. I got domain from namecheap and configurated DNS records on Cloudflare site with working Cloudflare nameservers records. My DNS records are: [image] I'm trying to get the certificate to my ReadyNAS102 server. I couldn't install certbot but somehow I go…

[image] tumiro: I hope it's ok to continue in this thread. It's not, actually. Even if some problems look the same at a glance, they often are not. So we prefer separate threads for separate problems. Thus, I've moved your post to a new thread. [image] tumiro: root@ReadyNAS:/home/mirssh#…

I'm now trying to get the certificate from ZeroSSL. I got the error "We were unable to verify your CNAME entry. Please check for errors on your side and try again after 5-10 minutes." CNAME has been changed and I will delete TXT as well. Tnx

Still error with ZeroSSL. mirnas.xyz domain is working as I can get to my insecure server, so I don't understand why ZeroSSL cannot identify my domain. Done everything as they suggested. I'm considering going over to Letsencrypt acme.sh --issue -d example.com --dns dns_cf --server letsencry…

While I prefer Let's Encrypt over ZeroSSL (and this is the Let's Encrypt support forum, not the ZeroSSL support forum) I don't think switching CAs would actually differ, as all ACME CAs adhere to RFC 8555 and would, in essence, do the same. I also have no clue why ZeroSSL would complain about the C…

I got this "Congratulations, your SSL certificate is en route! However, you need to verify ownership of your domain before installing your certificate. Please follow the steps below." which means I have to choose a verification method for mirnas.xyz I need to upload a AuthFile to my server. Be ba…

I'm not familiar with acme.sh myself, but you specified the Cloudflare DNS plugin with --dns dns_cf, right? Maybe you need to instruct acme.sh to actually use that plugin somehow for the dns-01 challenge? Uploading a file won't work if you domain name points to a private IP address space..

I tried another option with ZeroSSL Upload the Auth File to my HTTP server under: /.well-known/pki-validation/ Not working. "The requested URL /.well-known/pki-validation/0AD057D02D059xxxxxxxxxxxxx.txt was not found on this server. Otherwise mirnas/xyz/subdirs are working. AI says that some system…

you are supposed to add a txt record on the _acme-challenge.mirnas.xyz subdomain, your acme client will tell you about the string you have to put there. you should automate that with cloudflare apis, tho. [image] tumiro: -d _acme-challenge.mirnas.xyz this does not make any sense. you should…

[image] 9peppe: you should automate that with cloudflare apis, tho. That's what --dns dns_cf is for, although I don't have enough knowledge of acme.sh (the things I do know about it, makes me not like it at all) to say how that actually works. Perhaps it's as simple as specifying the challeng…

Problem with DNS challenge with Cloudflare

Help

MikeMcQ April 3, 2024, 3:27pm 10

The Cloudflare DNS is pointing to a private IP address. So DNS Challenge would be needed. I think Cloudflare also offer tunneling which might allow HTTP Challenge but DNS Challenge probably easier.

Topic		Replies	Views
ACME challenge and certificate issurance via CNAME (hosting) Help	10	6116	October 28, 2020
Can't Pass ACME Challenge for DNS Help	6	1866	April 19, 2019
Acme-dns.service - Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely Help	6	1702	December 18, 2021
Trying to get the dns text to enter the dns challenge Help	11	1749	February 9, 2023
Generate dns-01 TXT challenge with ACME-python Help	11	1914	March 3, 2023

Problem with DNS challenge with Cloudflare

Related topics