Can't authorize DNS challenge.

[NicoxDJ]

Well, when i found the proper way to add the DNS as TXT not as CNAME it finally read it, but it says it's wrong :(

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Challenges loaded. Press continue to submit to CA. Pass "-v" for more info about
challenges.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Press Enter to Continue
Challenge failed for domain subdomain.here
dns-01 challenge for subdomain.here
Cleaning up challenges
Some challenges have failed.

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: subdomain.here
   Type:   unauthorized
   Detail: Incorrect TXT record
   "hash-hash-hash.auth.acme-dns.io." found at
   _acme-challenge.subdomain.here

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

(i masked the sensitive data)

using command:

sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d subdomain.here

Whats wrong now?

[tenshiAMD]

I've also encountered this error, @NicoxDJ what do you use for setting the DNS? is it Route 53?

[tenshiAMD]

@NicoxDJ I've got it now, it just follow the instructions here https://www.digitalocean.com/community/tutorials/how-to-acquire-a-let-s-encrypt-certificate-using-dns-validation-with-acme-dns-certbot-on-ubuntu-18-04

[maddes-b]

With the given information no help can be provided.

In general the challenge domain is CNAME to the fulldomain of the acme-dns registration.
acme-dns must be the name server for its domain.
Check with other tools like nslookup or dig that your setup is correct and you retrieve an txt record for the challenge domain.

I wrote my own acme-dns-client that works with certbot and acme.sh.
Please have a look here: https://github.com/maddes-b/acme-dns-client-2
Feedback welcome.