Home / server / Questions / 1094399
Accepted
Alexis Wilke
Asked: 2022-02-22 20:27:33 +0800 CST

What commands can I use to simulate letsencrypt adding the TXT field to my server?

  • 772

I'm trying to debug my DNS setup for the letsencrypt challenge.

I understand that BIND9 may not be receiving the requests, although it was earlier in the day. The .jnl does not get created, unfortunately.

What I'd like to know is how can I send a request from a remote computer to eventually see what fails on the other end. What does letsencrypt do to send us a TXT field update? What command line command(s) can I run?

That would be an equivalent to the nsupdate command, but from a remote computer.

domain-name-system bind lets-encrypt

2 Answers

  1. Use Let's Encrypt staging environment with your ACME client of choice.

    Test with staging first, to not get rate limited from production.

    Note that it is not Let's Encrypt sending you DNS update requests, but the API tells you what they should be set to. Various clients have hooks to automate DNS. Read your favorite hooks and the nsupdate man page to get an idea of how they delete and add the TXT records, and if the DNS server is configurable.

    • 3
  2. Best Answer

    That would be an equivalent to the nsupdate command, but from a remote computer.

    nsupdate works from a remote computer.

    Simply run nsupdate -k keyfile and issue the command server example.com when nsupdate has started to tell it which server to send updates to.

    • 1