certera-io / certera

A central validation server for Let's Encrypt certificates
https://docs.certera.io
Other
69 stars 14 forks source link

DNS Challenge is waiting for wrong TXT Entry #27

Open pattisonmichael opened 2 years ago

pattisonmichael commented 2 years ago

Hi,

I'm trying to get the dns challenge to work, but it seems like the validation function that checks if the DNS entry has been propagated is checking the wrong name. I found this by sniffing the dns traffic on the machine.

My hosts are all internal and NOT reachable via public dns. So for example I want to validate test.example.com. For this to work I need a TXT entry for _acme_challenge.test.example.com on the NS that is in charge for LE to validate. The Set DNS script is successfully generating this entry, but then Certera is trying to check if there is a record for test.example.com which is of course failing as this will not be available externally.

Is this a bug or am I missing something here?