Implementing DNS-01 Challenge

[FirstTimeEZ]

I'm implementing the DNS-01 challenge so I can issue wild card certificates, progress so far.

DNS Providers will be located by name, the rest of the object will be whatever the DNS provider requires to update the record.

Currently only Cloud Flare will be supported

const dnsProvider = {
    name: "Cloud Flare",
    wildcard: true,
    token: "Examplefbf8Q-v0q0_MZssExamplesssLd",
    zone: "f50a61db53728a38252ab10f50a65" // optional, can be located automatically.
}

If a dnsProvider is provided during start then wild card certificates can be generated, if no provider is detected the wild card will be removed automatically and HTTP-01 generation will continue

startLetsEncryptDaemon(..., dnsProvider)

if you provide www and * then www will be removed automatically.

[FirstTimeEZ]

J@BUD MINGW64 ~/Desktop/server-ssl (main)
$ node server-ssl.js --letsEncrypt --domains=['www.ssl.boats','ssl.boats','*.ssl.boats'] --staging
.+++++++++++++++++++++++++++++++++++++++*.....+..+....+...+........+...+.+...+......+.....+......+..........
.....+++++++++++++++++++++++++++++++++++++++*..+.........+...+.........+...+...+........+......+....+..+....
+...+..+..........+...+......+.....+.......+.................+.+..+.............+......+...............+....
.+...+.+..+...+.+...+...+.........+...........+.......+.....+.......+...+..+.....................+...+......
+.+...+.....+......+...+.......+........+...+...+.+.....+.+.....+.............+......+.........+.....+......
...+......+......+.+..+......+..........+......+......+.....+...+.......+...+..+...............+............
..........+......+..+...+.........+.......+..............+.+...+........+.......+........+...+....+..+.+....
........+.....+......+.......+..+.+.....+....+......+...............+..+...+......+.+....................+..
...........+..+.........+....+.....+.+...+.....+.+...........+...+.+............+.....+..........+..+.......
+...+..+.........+.......+..............+...+.+..+.......+...+..+.+............+...+............++++++
.+.+......+..............+++++++++++++++++++++++++++++++++++++++*........+.+......+.........+......+++++++++
++++++++++++++++++++++++++++++*..........+......++++++
-----
USING THE STAGING SERVER
Starting Lets Encrypt ACME Daemon! v30.0.3
Copyright © 2024 FirstTimeEZ
--------
HTTPS Server is running on port 443
HTTP Server is redirecting requests to 443
Starting Server SSL v42.0.1
There is a more recent version of Node.js available: v23.4.0
Determining if its time to issue a new SSL Certificate
Creating a Key Chain to use for ACME Challenges and CSRs
ACME Keys saved to File
Signing Keys saved to File
Removed 'www' from Wildcard Certificate
Creating Order [ 'ssl.boats', '*.ssl.boats' ] Wild Card true
Next Nonce J6d90a-td8sgS1quAchuUd8l5JUN9hmmXk9_b5dLs6SZmCioHk4
Next Nonce XCuYn79eSdXtS_oBc_TNa8M7unpEqNmxoDeOp4obA09eGay6H1E
Next Nonce XCuYn79ezaVPwDBjuKe0BIXaSU5YORTKuVZU4wDnyqy7zqnSWMg
DNS Provider Cloud Flare
Challenges [
  {
    type: 'dns-01',
    url: 'https://acme-staging-v02.api.letsencrypt.org/acme/chall/176627174/15416475834/MxNDvw',
    status: 'pending',
    token: 'YPcdduY76ql2jOLDafwSvxXauewVJfqPetsWZDlZaMY',
    answered: false,
    domain: 'ssl.boats',
    wildcard: true,
    answer: 'UzhR1cIOueCxc503T3YpLbBW3Tcz34tU3C-ZBm94T3k'
  },
  {
    type: 'dns-01',
    url: 'https://acme-staging-v02.api.letsencrypt.org/acme/chall/176627174/15416475844/06Y_Nw',
    status: 'pending',
    token: 'KexgkmnnIqxGbt_tRU8CDWWZKU2rnakr6wqdjciuTac',
    answered: false,
    domain: 'ssl.boats',
    wildcard: false,
    answer: 'U7z0D1dPdL0DgwgJgE-COqmvjbqQlyHjY2C8hpBAYMo'
  }
]
true
Created "UzhR1cIOueCxc503T3YpLbBW3Tcz34tU3C-ZBm94T3k"
{
  get: {
    id: 'e7e1bdaac5ded9bbfcf6e2743d52b3d0',
    zone_id: '6f6707581db53728a38252ab10f50a65',
    zone_name: 'ssl.boats',
    name: '_acme-challenge.ssl.boats',
    type: 'TXT',
    content: '"UzhR1cIOueCxc503T3YpLbBW3Tcz34tU3C-ZBm94T3k"',
    proxiable: false,
    proxied: false,
    ttl: 60,
    settings: {},
    meta: {
      auto_added: false,
      managed_by_apps: false,
      managed_by_argo_tunnel: false
    },
    comment: 'Domain verification record',
    tags: [],
    created_on: '2024-12-18T12:05:38.082281Z',
    modified_on: '2024-12-18T12:05:38.082281Z',
    comment_modified_on: '2024-12-18T12:05:38.082281Z',
    changed: true
  }
}
false
Created "U7z0D1dPdL0DgwgJgE-COqmvjbqQlyHjY2C8hpBAYMo"
{
  get: {
    id: '9646237627a0e69ef7ca35ed709ecc5f',
    zone_id: '6f6707581db53728a38252ab10f50a65',
    zone_name: 'ssl.boats',
    name: '_acme-challenge.ssl.boats',
    type: 'TXT',
    content: '"U7z0D1dPdL0DgwgJgE-COqmvjbqQlyHjY2C8hpBAYMo"',
    proxiable: false,
    proxied: false,
    ttl: 60,
    settings: {},
    meta: {
      auto_added: false,
      managed_by_apps: false,
      managed_by_argo_tunnel: false
    },
    comment: 'Domain verification record',
    tags: [],
    created_on: '2024-12-18T12:05:39.052181Z',
    modified_on: '2024-12-18T12:05:39.052181Z',
    comment_modified_on: '2024-12-18T12:05:39.052181Z',
    changed: true
  }
}
[
  {
    type: 'dns-01',
    url: 'https://acme-staging-v02.api.letsencrypt.org/acme/chall/176627174/15416475834/MxNDvw',
    status: 'pending',
    token: 'YPcdduY76ql2jOLDafwSvxXauewVJfqPetsWZDlZaMY',
    answered: false,
    domain: 'ssl.boats',
    wildcard: true,
    answer: 'UzhR1cIOueCxc503T3YpLbBW3Tcz34tU3C-ZBm94T3k'
  },
  {
    type: 'dns-01',
    url: 'https://acme-staging-v02.api.letsencrypt.org/acme/chall/176627174/15416475844/06Y_Nw',
    status: 'pending',
    token: 'KexgkmnnIqxGbt_tRU8CDWWZKU2rnakr6wqdjciuTac',
    answered: false,
    domain: 'ssl.boats',
    wildcard: false,
    answer: 'U7z0D1dPdL0DgwgJgE-COqmvjbqQlyHjY2C8hpBAYMo'
  }
]
waiting a minute before asking server to verify
Next Nonce J6d90a-t81FragL_Jt3-CNk_9Ky8QkQXa4wfmrFET_L32Uu7ldw Authed Challenge
sent auth
Next Nonce XCuYn79eiHbEcNa4wUtMmM_p0d015iSdmnrRJGCe8ePnGw4-_oM Authed Challenge
sent auth
Preparing to Finalize
Ready to Finalize [ 'ssl.boats', '*.ssl.boats' ]
MIIBATCBqgIBADAUMRIwEAYDVQQDDAlzc2wuYm9hdHMwWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAAQ2AeU1uZyGHbqLzuAmacQmlLN07TdM
rGaDM8xihOMyRM86ONwx-8u7Nt0wnDPvn4E9v-Z4aouBgznI1FDhYK8MoDQwMgYJKoZIhvcNAQkOMSUwIzAhBgNVHREEGjAYgglzc2wuYm9h
dHOCCyouc3NsLmJvYXRzMAoGCCqGSM49BAMCA0YAMEMCHwo545AvDc7deJk1N76IV5xFPEyx4YzEx4B0EtpnvnACIBKn6nfZVKnhRwTBrS4w
tn0XfHszUGoinoQHL_sdo6lp
Certificate Location https://acme-staging-v02.api.letsencrypt.org/acme/order/176627174/21395123094
Waiting for Certificate to be Ready for Download
Certificate URL: https://acme-staging-v02.api.letsencrypt.org/acme/cert/2b40ca03a7806d8dcc1b79b8648d50eaaa33
Certificate Downloaded, Saving to file
Updated Server Certificate
Completed Successfully 1
{ start: '2025-02-15T11:27:48Z', end: '2025-02-17T11:27:48Z' }
Time until renewal required: 89 days, 23 hours, 1 minutes

I already have it working but its still a bit rough.

[FirstTimeEZ]

[FirstTimeEZ]

#2