-
-
Notifications
You must be signed in to change notification settings - Fork 5.5k
Description
I use the following command to attempt to issue a certificate.
/root/.acme.sh/acme.sh --issue -d poc.fast.za.net --post-hook "/root/restart-after-cert-update.sh" --server letsencrypt_test --staging --test --force --dns dns_miab --dnssleep 300
The output shows this:
[Mon Dec 8 15:07:40 SAST 2025] Using CA: https://acme-staging-v02.api.letsencrypt.org/directory
[Mon Dec 8 15:07:40 SAST 2025] Single domain='poc.fast.za.net'
[Mon Dec 8 15:07:44 SAST 2025] Getting webroot for domain='poc.fast.za.net'
[Mon Dec 8 15:07:44 SAST 2025] Adding TXT value: 5OJ_vQicbfid4_tEhPfiouTpg1vpRANB_N-MAQ2o6hs for domain: _acme-challenge.poc.fast.za.net
[Mon Dec 8 15:07:47 SAST 2025] TXT record added successfully
[Mon Dec 8 15:07:47 SAST 2025] The TXT record has been successfully added.
[Mon Dec 8 15:07:47 SAST 2025] Sleeping for 300 seconds to wait for the the TXT records to take effect
[Mon Dec 8 15:12:50 SAST 2025] Verifying: poc.fast.za.net
[Mon Dec 8 15:12:51 SAST 2025] Pending. The CA is processing your order, please wait. (1/30)
[Mon Dec 8 15:12:55 SAST 2025] poc.fast.za.net: Invalid status. Verification error details: Incorrect TXT record
[Mon Dec 8 15:12:55 SAST 2025] Removing DNS records.
[Mon Dec 8 15:12:55 SAST 2025] Removing txt: 5OJ_vQicbfid4_tEhPfiouTpg1vpRANB_N-MAQ2o6hs for domain: _acme-challenge.poc.fast.za.net
[Mon Dec 8 15:12:57 SAST 2025] TXT record removed successfully
[Mon Dec 8 15:12:57 SAST 2025] Successfully removed
[Mon Dec 8 15:12:57 SAST 2025] Please check log file for more details: /root/.acme.sh/acme.sh.log
`[Mon Dec 8 15:12:57 SAST 2025] Running post hook: '/root/restart-after-cert-update.sh'
However, then I check the record that was created. I see this:
; ANSWER SECTION: _acme-challenge.poc.fast.za.net. 43200 IN TXT "value=5OJ_vQicbfid4_tEhPfiouTpg1vpRANB_N-MAQ2o6hs"
I have been testing a lot with this dns validation process and out of the blue it seems (same server, same domain, same DNS server (MIAB)), I get the "value=" prepended.
What's going on here?