vamos criptografar a renovação do certificado no correio falhar

Question

Eu tenho que renovar o certificado de e-mail, mas ele não é renovado quando tento fazer manualmente.

root@ubuntu:/etc/postfix# certbot -d mail.gamesyap.com --manual --preferred-challenges dns certonly
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator manual, Installer None
Cert is due for renewal, auto-renewing...
Renewing an existing certificate
Performing the following challenges:
dns-01 challenge for mail.gamesyap.com

-------------------------------------------------------------------------------
NOTE: The IP of this machine will be publicly logged as having requested this
certificate. If you're running certbot in manual mode on a machine that is not
your server, please ensure you're okay with that.

Are you OK with your IP being logged?
-------------------------------------------------------------------------------
(Y)es/(N)o: y

-------------------------------------------------------------------------------
Please deploy a DNS TXT record under the name
_acme-challenge.mail.gamesyap.com with the following value:

9He32h8kCKBOXp67WHh4e927qaSBeVoNxQXLTUqispA

Before continuing, verify the record is deployed.
-------------------------------------------------------------------------------
Press Enter to Continue
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. mail.gamesyap.com (dns-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Incorrect TXT record "hYExcCMnSyNbDeoO5-CM40CPD6BirJP_8yAKI29Chh8" found at _acme-challenge.mail.gamesyap.com

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: mail.gamesyap.com
   Type:   unauthorized
   Detail: Incorrect TXT record
   "hYExcCMnSyNbDeoO5-CM40CPD6BirJP_8yAKI29Chh8" found at
   _acme-challenge.mail.gamesyap.com

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

Mas a renovação do certificado não funciona.

Alguma idéia?

    

Answer 1

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: mail.gamesyap.com
   Type:   unauthorized
   Detail: Incorrect TXT record
   "hYExcCMnSyNbDeoO5-CM40CPD6BirJP_8yAKI29Chh8" found at
   _acme-challenge.mail.gamesyap.com

Esta parte diz exatamente qual é o erro.

O processo de verificação espera encontrar 9He32h8kCKBOXp67WHh4e927qaSBeVoNxQXLTUqispA , mas na verdade encontrou hYExcCMnSyNbDeoO5-CM40CPD6BirJP_8yAKI29Chh8 . Você realmente seguiu as instruções na tela e atualizou o registro TXT? Se não, então esse é o problema.

Se você seguiu as instruções na tela e atualizou o registro TXT, você o configurou para o valor errado ou o seu provedor de DNS teve um problema.

Você pode verificar o registro manualmente usando dig :

[~]$ dig +short txt _acme-challenge.mail.gamesyap.com
"hYExcCMnSyNbDeoO5-CM40CPD6BirJP_8yAKI29Chh8"
[~]$ 

dig faz parte do pacote dnsutils e pode ser instalado com sudo apt-get install dnsutils

Observe que o código do desafio será novo em cada execução do certbot.