Hi William.

On 2025-11-21 (Fr.) 12:37, William Lallemand wrote:
On Fri, Nov 21, 2025 at 11:05:11AM +0100, Aleksandar Lazic wrote:
Subject: Re: Some questions about ACME challenge dns-01
Seems like a bug to me, since there are 2 domains it generated 2 challenges to
set but your wildcard has the same base as the 2nd domain so there's a
problem. I'll take a look.

The task seems stuck waiting for every challenge_ready. I think I'll add more
states in the `acme status` command so we can debug this more easily.


I just pushed a fix in master, you will have to set the 2 TXT entries with the 
same domain name like explained in the
logs. But using `acme challenge_ready` will set every domain with the same name 
ready.

Thanks. Have pulled and compiled.

Sorry I do not understand what you mean with 2 TXT records.

This one is set, which further TXT record do I need?
```
# dig @ns1.desec.io +short _acme-challenge.none.at txt
"uInm4ilCxq2ghvKYlu2GQTjFvs3cg5UaQM8l_0azSjA"
```

Unfortunately the 3.2 release was already pushed so this will be backported for 
the next one.

Thank you.
Maybe some `trace acme ...???` can help here?

That won't help because it's not the traffic, it's just waiting for all 
challenge_ready commands.
But traces are already available with -dt acme:developer:complete if you need 
them.

Thank you.

I will wait for your patches to test the ACME DNS setup to make it
production reday :-)

Should I create an Issue for that or do you want to keept the work on the ML?

I don't think a ticket is needed, unless you really want one. I'm already 
working on it.

Great. Just for your info here the trace output.


Be careful when sharng traces like that, there's crypto details about your ACME 
account that you probably don't want to share.

Okay.

Regards
Aleks


Reply via email to