Skip to content

Amazon Route53 DNS API with multi-domain certificates #734

@Rastas

Description

@Rastas

There is an issue when requesting a certificate that has multiple domains specified and uses the Amazon Route53 API. It seems it calls the API to create the TXT DNS entry, then validates the first domain ( i.e. wrxfreestyle.com ). Once validated it then calls the API and deletes the TXT DNS entry and then attempts to validate the second domain ( i.e. *.wrxfreestyle.com ). This subsequent validation fails causing the entire certificate renewal to fail. I have logged this issue before but cant find the correspondence ( I was told it would be fixed in the next update ). However it is a persistent issue.

The unfortunate part is that is does NOT consistently happen. It seems to be that sometimes the validation of the second domain occurs before the DNS record is deleted and then the process finishes perfectly.

I have attached the log file that shows the failure at 7:48 Am and then success at 10:40 AM ( a few hours later )

I am more than happy to help out if you need anything else from me.

certify_renewal_log.txt

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions