Question Incorrect TXT record "f-SabDKKcvWsjfiCn08yEbfdWiafvFo6" found at _acme-challenge.mydomain.com - What am I doing wrong?

[carlsson]

Server operating system version

Ubuntu 20.04.6 LTS

Plesk version and microupdate number

18.0.59 Update #2

Every now and then I get this message "Incorrect TXT record "f-SabDKKcvWsjfiCn08yEbfdWiafvFo6" found at _acme-challenge.mydomain.com".
Even though I have issued a Let's encrypt certificate recently, and I know that I haven't altered the _acme-challenge record after that.

The only way I know of that fixes this is to re-issue a new certificate. Feels kinda unnecessary though, but I can't find any way in Plesk that gives me the TXT record that it wants.

Is it only me?
What am I doing wrong?

 

[scsa20]

The ACME challenge can change depending on how it's being issued and if it's a renewal.

If you're using the DNS service built into Plesk, the ACM challenge will update accordingly automatically but it's still possible that it's still waiting on the DNS changes but should auto fix itself.

If you've got a wildcard cert issued on a domain and you want to use apply a certificate to a sub domain, instead of issuing a new certificate, edit the hosting setting and select your wildcard certificate instead.

 

[carlsson]

Thanks for the input.

I really want to use the built in DNS, but I'm afraid of only having one DNS. Maybe another topic, but should I?

 

[scsa20]

If you're using an external DNS service like Cloudflare or DNSMadeEasy or even your registrars, then the ACME challenge will fail until you update the record yourself manually.

Also if you want to use your own, most registrars will force you to have at least 2 DNS name servers (usually can get away using the same IP address), and you don't have to if you don't want to, it can get kinda annoying to get the name servers set up correctly on other registrars for it to work correctly. Just know that when it comes to renewing the certificate that uses the DNS challenge that it might fail until you update the challenge key with the new one.