cb601/dyntls
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

fix(acme): wait for DNS propagation and clean up challenge tokens individually

Browse Source
This commit is contained in:
sduesterhaupt committed 2026-11-01 13:04:38 +01:00
1 parent 7e5adb1b2e
commit 13d5387c8e
2 files changed
+132 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

CHANGELOG.md
+6 -2
View File
@@ -7,13 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## Unreleased
## 1.1.0 - 2026-11-01
### Added
- Added an early dns-01 prerequisite check in certificate creation for wildcard certificates.
- Added an early DNS-01 prerequisite check in certificate creation for wildcard certificates.
### Fixed
- Fixed silent failures for wildcard dns-01 runs by aborting certificate creation and logging a clear error when the configured TSIG/RNDC key file is missing.
- Fixed silent failures for wildcard DNS-01 runs by aborting the current certificate creation step and logging a clear error when the configured TSIG/RNDC key file is missing or unreadable.
- Fixed premature DNS-01 validation requests by checking all pending challenge TXT values on dynamically discovered authoritative nameservers before requesting ACME validation. The check performs up to ten rounds, with five-second delays between unsuccessful rounds, and aborts issuance with cleanup if the values remain unavailable.
- Fixed DNS-01 cleanup to remove only the TXT value belonging to each challenge, preserving other challenge tokens at the same record name when validating base domains and wildcards together.
## 1.0.0 - 2026-06-28