signcsr with autodns doesn't work with challenge-alias

[pi-afi]

Hello,

we have problems using acme to signcsr of a wildcard certificate with autodns integration and challenge alias.

All work fine without a challenge-alias, but we're forced to use it and it dosn't work.

We're following the howto on https://github.com/Neilpang/acme.sh/wiki/DNS-alias-mode

As already told

/root/git/acme.sh/acme.sh --issue --dns dns_autodns -d '*.pinuts.de' --challenge-alias 'telefonzelle.de' --debug 2 2>&1 | tee test_debug.log

works as intended, but the signcsr failed while interacting with autodns

/root/git/acme.sh/acme.sh --force --signcsr --csr /root/.acme.sh/*.pinuts.de/*.pinuts.de.csr --dns dns_autodns -d '*.pinuts.de' --domain-alias '_acme-challenge.telefonzelle.de' --debug 2 2>&1 | tee test_debug2.log

see partial debug logfile attached

What we already tried

• Update of acme.sh to actual git status
• having *.telefonzelle.de defined in DNS
• have defined _acme-challenge.telefonzelle.de as TXT with value "empty" defined in DNS
• before all that a issue and signcsr wildcard certifcate without challenge-alias has worked perfektly
• several times controlled the choosen account information for autodns (but logs showd that this works perfectly)

It seem's he is getting the wrong root entry "de" and not "telefonzelle.de" and surely he has no right to attached the _acme-challenge token to "de" only to "telefonzelle.de"

Thanxs for hard working on the certification client, helps a lot.

Best Regards

Andreas

test_debug2.log

[Neilpang]

please give the full log with --debug 2

[pi-afi]

test_debug2.log

see full log (without autondns Account details) attached

[Neilpang]

first, your CSR is wrong, it contains duplicated domain:

DNS:*.pinuts.de,DNS:*.pinuts.de

please make the alias domain telefonzelle.de is in your account.

[pi-afi]

Found the problem the Api from autodns doesn't return needed informations in the data tag .... I'll contact autodns to fix their api function with task code 0205

I'll get you informed when everything is working again

[auerswald]

Found the problem the Api from autodns doesn't return needed informations in the data tag .... I'll contact autodns to fix their api function with task code 0205

I'll get you informed when everything is working again

i found this open issue to my plugin "dns_autodns" very late. probably your problem has been solved in the meantime.

the return of the autodns api from internetx is indeed a bit misleading or wrong to interpret. but it is not an api error if you query a zone that does not exist in the given context "4". the criterion of the result of the query is hidden in the property "summary". if the queried zone exists, the value is 1 (means 1 zone was found), otherwise 0 or even a value greater than 1 if multiple zones are found.

in your concrete case the value is 0 - so the zone does not exist in your specified context no. 4.

the errors you describe have nothing to do with the functionality of the dns_autodns plugin. by the way, the behavior of the internetx api (xml and json api) is still exactly as described by me.

-- andré