New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Time limit exceeded / did not return the expected TXT record #241
Comments
Ok I figured out what might be triggering these issues. I had a CNAME wildcard record pointing to ghs.googlehosted.com. This might explain why Lego was using ns*.google.com as the domain server to check. Seems like there's a bug in there somewhere. Why not use the SOA or NS record of the naked domain? |
Hey @steadicat ! |
@xenolf I am getting this on the latest binary release and also when I compile it myself from the master branch too. I am using CloudFlare as my DNS provider + not using a |
@lenovouser Can you open a separate ticket for the CloudFlare provider and paste the error output and any other observations. |
fwiw, cloudflare considers a 5 minute propagation to be "within reason" so it may be a good idea to adjust the timeout in the CloudFlare provider accordingly. |
Since 1.1.0 you can change propagation timeout and polling interval. |
This is similar to #212, but slightly different. I'm using the manual DNS challenge with Google Domains. I get:
Yet if I query the DNS server directly, I get the right response:
I tried this a dozen times, even bumping up the DNS timeout to 5 minutes and the TXT record TTL down to 1 minute, and I get the same error every time. The only thing that changes is the name server in the error message. Sometimes it's one of the domain’s nameservers (e.g.
ns-cloud-a1.googledomains.com
), sometimes it’sns*.google.com
(?!?).Note that the error message seems really confused, because it says “you can now remove this TXT record”, right before “did not return the expected TXT record”.
The workaround I found is to NOT “press enter when you are done” as Lego instructs me, but wait until l can confirm that the DNS records have fully propagated, then press enter.
To sum up, I believe there are a few different issues here:
The text was updated successfully, but these errors were encountered: