Registation failed with letsencrypt and duckdns

[hemin]

Hello,

I have a little problem trying to register with letsencrypt and duckdns.

I configured the challenge type with DNS-01, DuckDNS API and the API token.

Certificate Options:
 Common Name *******.duckdns.org
 Description
 Alt Names:

Let's Encrypt Settings
 LE Account: Firewall WEB GUI Cert Acc
 Challenge Type: Firewall WEB GUI Cert
 Auto Renewal
 Renewal Interval 60

Security Settings
 Key Length 4096 bit
 OCSP Must Staple "unchecked"
   
Advanced Settings
 Automations
 DNS Alias: Mode Not using DNS alias mode


When I try to register the certificate, I get the following error:

Code: [Select]

Trying to add TXT record
param='domains=_acme-challenge.********.duckdns.org&token=******&txt=*****'
url='https://www.duckdns.org/update?domains=_acme-challenge.******.duckdns.org&token=*****&txt=******'
GET
url='https://www.duckdns.org/update?domains=_acme-challenge.******.duckdns.org&token=*********&txt=*********'
timeout=
_CURL='curl -L --silent --dump-header /var/etc/acme-client/home/http.header '
ret='0'
Errors happened during adding the TXT record, response=KO
Error add txt for domain:_acme-challenge.******.duckdns.org

Any ideas what it's wrong?

thanks

[Fright]

hi!
try
https://github.com/opnsense/plugins/issues/2060

[hemin]

Hi Fright,

Seems that the method on the link doesn't work for some users, and I'm one of these.
I have done a "dirty" workaround editing the script on '/usr/local/share/examples/acme.sh/dnsapi/dns_duckdns.sh'
and changed all "fulldomain=$1" lines by "fulldomain=*****.duckdns.org", and that works...

Hope it will be solved on the future.

Thanks!