Unable to setup custom domain and TLS certificate

dookanooka

New Member
Nov 29, 2023
2
0
1
hi,
I've been trying to create a TLS certificate and use a custom domain. I've added a domain to ACME, then moved along to the node for System->certificate. When I click on 'Order Certificates Now' the output is as follows, bar my redactions:

Loading ACME account details
Placing ACME order
Order URL: https://acme-v02.api.letsencrypt.org/acme/order/xxx

Getting authorization details from 'https://acme-v02.api.letsencrypt.org/acme/authz-v3/xxx'
The validation for xxx is pending!
[Wed Jul 31 13:15:05 AEST 2024] Adding record
[Wed Jul 31 13:15:07 AEST 2024] Added, OK
Add TXT record: _acme-challenge.xxx
Triggering validation
Sleeping for 5 seconds
Remove TXT record: _acme-challenge.xxx
TASK ERROR: validating challenge 'xxx' failed - status: invalid

looking at the error URL,

{
"identifier": {
"type": "dns",
"value": "xxx"
},
"status": "invalid",
"expires": "2024-08-07T02:42:07Z",
"challenges": [
{
"type": "dns-01",
"url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/xxx/EX-d_g",
"status": "invalid",
"validated": "2024-07-31T02:42:11Z",
"error": {
"type": "urn:ietf:params:acme:error:dns",
"detail": "DNS problem: NXDOMAIN looking up TXT for _acme-challenge.xxx - check that a DNS record exists for this domain",
"status": 400
},
"token": "xxx"
}
]
}

I do get a method not allowed 405 when registering an ACME account (even though it responds that the TASKS OK when actually outputting to the log),

and when looking at the 'Order URL' I get
{
"type": "urn:ietf:params:acme:error:malformed",
"detail": "Method not allowed",
"status": 405
}

Dig for an A record says my subdomain is known which makes sense as it appears to be completing part of the process. I've added nothing else for this to the DNS record.

Any guidance or thoughts much appreciated.
 
So, an easy one, it needed more time to be able to read the TXT content.

In Datacenter -> ACME in my created DNS plugin, validation delay defaults to zero. Putting 10 in there was enough time (seconds) for it to work
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!