Skip to content

DNS auth creates TXT record with "value=" prepended to the payload causing validation failure. #6674

@lifeboy

Description

@lifeboy

I use the following command to attempt to issue a certificate.

/root/.acme.sh/acme.sh --issue -d poc.fast.za.net --post-hook "/root/restart-after-cert-update.sh" --server letsencrypt_test --staging --test --force --dns dns_miab --dnssleep 300

The output shows this:

[Mon Dec 8 15:07:40 SAST 2025] Using CA: https://acme-staging-v02.api.letsencrypt.org/directory
[Mon Dec 8 15:07:40 SAST 2025] Single domain='poc.fast.za.net'
[Mon Dec 8 15:07:44 SAST 2025] Getting webroot for domain='poc.fast.za.net'
[Mon Dec 8 15:07:44 SAST 2025] Adding TXT value: 5OJ_vQicbfid4_tEhPfiouTpg1vpRANB_N-MAQ2o6hs for domain: _acme-challenge.poc.fast.za.net
[Mon Dec 8 15:07:47 SAST 2025] TXT record added successfully
[Mon Dec 8 15:07:47 SAST 2025] The TXT record has been successfully added.
[Mon Dec 8 15:07:47 SAST 2025] Sleeping for 300 seconds to wait for the the TXT records to take effect
[Mon Dec 8 15:12:50 SAST 2025] Verifying: poc.fast.za.net
[Mon Dec 8 15:12:51 SAST 2025] Pending. The CA is processing your order, please wait. (1/30)

[Mon Dec 8 15:12:55 SAST 2025] poc.fast.za.net: Invalid status. Verification error details: Incorrect TXT record

[Mon Dec 8 15:12:55 SAST 2025] Removing DNS records.
[Mon Dec 8 15:12:55 SAST 2025] Removing txt: 5OJ_vQicbfid4_tEhPfiouTpg1vpRANB_N-MAQ2o6hs for domain: _acme-challenge.poc.fast.za.net
[Mon Dec 8 15:12:57 SAST 2025] TXT record removed successfully
[Mon Dec 8 15:12:57 SAST 2025] Successfully removed
[Mon Dec 8 15:12:57 SAST 2025] Please check log file for more details: /root/.acme.sh/acme.sh.log
`[Mon Dec 8 15:12:57 SAST 2025] Running post hook: '/root/restart-after-cert-update.sh'

However, then I check the record that was created. I see this:

; ANSWER SECTION: _acme-challenge.poc.fast.za.net. 43200 IN TXT "value=5OJ_vQicbfid4_tEhPfiouTpg1vpRANB_N-MAQ2o6hs"

I have been testing a lot with this dns validation process and out of the blue it seems (same server, same domain, same DNS server (MIAB)), I get the "value=" prepended.

What's going on here?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions