joohoi / acme-dns

Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.
MIT License
2.19k stars 234 forks source link

Issue with Certificate Renewal from Let's Encrypt #348

Open cuongdo926 opened 10 months ago

cuongdo926 commented 10 months ago

I'm currently experiencing an issue while attempting to renew a certificate from Let's Encrypt for the domain example.domain.com [*.example.domain.com] using the ACME provider "le.acme." The ACME CA is set to "https://acme-staging-v02.api.letsencrypt.org/directory."

The error message I'm encountering is as follows:

error renewing certificate from LE: {example.domain.com [*.example.domain.com]}" providerName=le.acme ACME CA="https://acme-staging-v02.api.letsencrypt.org/directory" error="error: one or more domains had a problem:\n[*.example.domain.com] [*.example.domain.com] acme: error presenting token: failed to update txt record : status code 401 response: {\"error\": \"forbidden\"}

There is a wildcard CNAME in the DNS records. I've attempted troubleshooting with LEGO_DISABLE_CNAME_SUPPORT=true but the issue persists. Could someone please provide guidance or assistance on how to resolve this?