dns3l / dns3l-core

Core functionality of dns3l written in Go
1 stars 3 forks source link

AutoDNS doesnt work transactional #43

Closed iaean closed 1 year ago

iaean commented 1 year ago

If I claim a cert with AutoDNS and AutoDNS fails, the daemon complains for example with:

{"code":500,"message":"WAPI request error: 400('400 Bad Request')\nContents:\nUnknown WAPI version\n"}

but the cert is stored and there. What is a bug from client perspective.

Claiming of certs with AutoDNS MUST be transactional. If one step fails nothing happens.

Because its much more harder to let a cert end in smoke we need to change the processing order from ACME -> AutoDNS to AutoDNS -> ACME. If AutoDNS fails ACME is skipped. If ACME fails AutoDNS is rolled back.