No TXT record found at _acme-challenge for nginx server

Biju

2/24/23, 4:56 AM

I am trying to add a wildcard domain with certbot to nginx server, run the following commands

 sudo certbot --server https://acme-v02.api.letsencrypt.org/directory --manual --preferred-challenges dns  --installer nginx -d photoss.co.in -d *.photoss.co.in

I got the message

 Please deploy a DNS TXT record under the name
_acme-challenge.photoss.co.in with the following `value:tXKNeJ2OIWdsDa3Lxnj5fSVXqX5u4ko38ceHd6Pbs`

so I entered a txt record on go daddy name server with the above value, when continuing on terminal one more similar message came, so I entered one more txt record without deleting or editing the previous record, but when continuing getting the following error

waiting for verification...
Challenge failed for domain photoss.co.in
Challenge failed for domain photoss.co.in
dns-01 challenge for photoss.co.in
dns-01 challenge for photoss.co.in
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: photoss.co.in
   Type:   unauthorized
   Detail: No TXT record found at _acme-challenge.photoss.co.in

   Domain: photoss.co.in
   Type:   unauthorized
   Detail: No TXT record found at _acme-challenge.photoss.co.in

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

802

0 + 0

ssl

nginx

Steffen Ullrich

2/24/23, 6:04 AM

There is currently no such TXT record, so you probably did something wrong when adding the record. *"... so I entered a txt record on go daddy name server with the above value ... "* - Impossible to tell what exactly you did in all detail and thus impossible to tell what went wrong when doing this.

Score:0

Server

Paul

2/24/23, 1:06 PM

When using the DNS-01 challenge, you have to delete the old record, because you cannot have two records with the same hostname and pass the test.

If you fail the test and know you have the record correct, you should set the lowest TTL your DNS server will permit.

This is based only on my own experience of never passing the test without deleting the old record and never passing the test within the TTL of the first test.

0 + 0

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: No TXT record found at _acme-challenge for nginx server

TH: ไม่พบบันทึก TXT ที่ _acme-challenge สำหรับเซิร์ฟเวอร์ nginx

RO: Nu a fost găsită nicio înregistrare TXT la _acme-challenge pentru serverul nginx

RU: Не найдена запись TXT в _acme-challenge для сервера nginx

VI: Không tìm thấy bản ghi TXT tại _acme-challenge cho máy chủ nginx

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.