search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.67k stars 4.91k forks source link

Issuing certificates for wildcard domain with DigitalOcean API returns "domain not found" error #1703

Open balasankarc opened 6 years ago

balasankarc commented 6 years ago

TLDR: DNS verification succeeded for the base domain example.com, and is failing with domain not found for *.example.com, when using DigitalOcean API

Steps to reproduce

(example.com used as placeholder instead of my real domain name)

$ export DO_API_KEY=<my key>
$ acme.sh --issue --dns dns_dgon -d "example.com" -d "*.example.com"

Output

[Sat Jun 30 20:07:02 IST 2018] Multi domain='DNS:example.com,DNS:*.example.com'
[Sat Jun 30 20:07:02 IST 2018] Getting domain auth token for each domain
[Sat Jun 30 20:07:05 IST 2018] Getting webroot for domain='example.com'
[Sat Jun 30 20:07:05 IST 2018] Getting webroot for domain='*.example.com'
[Sat Jun 30 20:07:05 IST 2018] Found domain api file: /home/balasankarc/.acme.sh/dnsapi/dns_dgon.sh
[Sat Jun 30 20:07:05 IST 2018] Using digitalocean dns validation - add record
[Sat Jun 30 20:07:07 IST 2018] domain not found in DigitalOcean account
[Sat Jun 30 20:07:07 IST 2018] domain not found in your account for addition
[Sat Jun 30 20:07:07 IST 2018] Error add txt for domain:_acme-challenge.example.com
[Sat Jun 30 20:07:07 IST 2018] Please add '--debug' or '--log' to check more details.
[Sat Jun 30 20:07:07 IST 2018] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh

Upon checking the debug log (which I am not posting here since it has sensitive data), I see that the domain not found error is for the wildcard domain only. For base domain, DNS verification completed successfully.

Neilpang commented 6 years ago

add --debug 2 [Sat Jun 30 20:07:07 IST 2018] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh