[GH-ISSUE #5349] all-inkl certbot DNS challenge: zone not found #3175

Closed
opened 2026-02-26 07:38:02 +03:00 by kerem · 3 comments
Owner

Originally created by @trininja2k on GitHub (Feb 24, 2026).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5349

Checklist

  • Have you pulled and found the error with jc21/nginx-proxy-manager:latest docker image?
    • Yes
  • Are you sure you're not using someone else's docker image?
    • Yes
  • Have you searched for similar issues (both open and closed)?
    • Yes

Describe the bug

I try to set one of my domains for local routing and SSL certs via wildcard with all-inkl, problem comes up, that it always throws "zone not found" errors.

Nginx Proxy Manager Version

2.14.0

To Reproduce
Steps to reproduce the behavior:

  1. Go to 'Certificates'
  2. Click on 'Lets Encrypt via DNS'
  3. Scroll down to 'All-inkl'
  4. See error
[2/24/2026] [8:12:57 PM] [Nginx    ] › ℹ  info      Reloading Nginx

[2/24/2026] [8:12:57 PM] [Certbot  ] › ▶  start     Installing kas...

[2/24/2026] [8:12:57 PM] [Certbot  ] › ☒  complete  Installed kas

[2/24/2026] [8:12:57 PM] [SSL      ] › ℹ  info      Requesting LetsEncrypt certificates via All-Inkl for Cert #3: *.somedomain.or.at

[2/24/2026] [8:12:57 PM] [SSL      ] › ℹ  info      Command: certbot certonly --config /etc/letsencrypt.ini --work-dir /tmp/letsencrypt-lib --logs-dir /data/logs --cert-name npm-3 --agree-tos -m dude@somedomain.de --preferred-challenges dns --domains *.somedomain.or.at --authenticator dns-kas --dns-kas-credentials /etc/letsencrypt/credentials/credentials-3 --dns-kas-propagation-seconds 240 --key-type rsa

[2/24/2026] [8:13:04 PM] [Nginx    ] › ℹ  info      Reloading Nginx

[2/24/2026] [8:13:04 PM] [Express  ] › ⚠  warning   Saving debug log to /data/logs/letsencrypt.log

Hit flood protection, retrying in 1s

Hit flood protection, retrying in 2s

Failed to delete DNS record: zone_not_found

An unexpected error occurred:

zeep.exceptions.Fault: zone_not_found

Ask for help or search for solutions at https://community.letsencrypt.org./ See the logfile /data/logs/letsencrypt.log or re-run Certbot with -v for more details.

Expected behavior
Add the dns records and work with them and issue a SSL certificate.

Operating System
Tried it on an RPI4, Debian Linux Desktop and a Debian VPS

Additional context
I don't know if this is important, but my domain ends with .or.at

Originally created by @trininja2k on GitHub (Feb 24, 2026). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5349 **Checklist** - Have you pulled and found the error with `jc21/nginx-proxy-manager:latest` docker image? - Yes - Are you sure you're not using someone else's docker image? - Yes - Have you searched for similar issues (both open and closed)? - Yes **Describe the bug** <!-- A clear and concise description of what the bug is. --> I try to set one of my domains for local routing and SSL certs via wildcard with all-inkl, problem comes up, that it always throws "zone not found" errors. **Nginx Proxy Manager Version** <!-- What version of Nginx Proxy Manager is reported on the login page? --> 2.14.0 **To Reproduce** Steps to reproduce the behavior: 1. Go to 'Certificates' 2. Click on 'Lets Encrypt via DNS' 3. Scroll down to 'All-inkl' 4. See error ``` [2/24/2026] [8:12:57 PM] [Nginx ] › ℹ info Reloading Nginx [2/24/2026] [8:12:57 PM] [Certbot ] › ▶ start Installing kas... [2/24/2026] [8:12:57 PM] [Certbot ] › ☒ complete Installed kas [2/24/2026] [8:12:57 PM] [SSL ] › ℹ info Requesting LetsEncrypt certificates via All-Inkl for Cert #3: *.somedomain.or.at [2/24/2026] [8:12:57 PM] [SSL ] › ℹ info Command: certbot certonly --config /etc/letsencrypt.ini --work-dir /tmp/letsencrypt-lib --logs-dir /data/logs --cert-name npm-3 --agree-tos -m dude@somedomain.de --preferred-challenges dns --domains *.somedomain.or.at --authenticator dns-kas --dns-kas-credentials /etc/letsencrypt/credentials/credentials-3 --dns-kas-propagation-seconds 240 --key-type rsa [2/24/2026] [8:13:04 PM] [Nginx ] › ℹ info Reloading Nginx [2/24/2026] [8:13:04 PM] [Express ] › ⚠ warning Saving debug log to /data/logs/letsencrypt.log Hit flood protection, retrying in 1s Hit flood protection, retrying in 2s Failed to delete DNS record: zone_not_found An unexpected error occurred: zeep.exceptions.Fault: zone_not_found Ask for help or search for solutions at https://community.letsencrypt.org./ See the logfile /data/logs/letsencrypt.log or re-run Certbot with -v for more details. ``` **Expected behavior** Add the dns records and work with them and issue a SSL certificate. **Operating System** Tried it on an RPI4, Debian Linux Desktop and a Debian VPS **Additional context** I don't know if this is important, but my domain ends with .or.at
kerem 2026-02-26 07:38:02 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@trininja2k commented on GitHub (Feb 25, 2026):

I tried around and everything with a first level TLD works just fine, but second level TLDs like .or.at and .co.uk and others do not work in any way. zone_not_found. I tested around a bit, the Kasserver API Playground from All-Inkl returns all domains without a problem, the problem sits in certbot-dns-kas with splitting the domains in the wrong way. kasserver is out, it works, certbot works too, the problem sits in certbot-dns-kas in "def _perfom", I tried around, but I am not skilled enough to find a solution to get it running and open a PR to the certbot-dns-kas repo.

<!-- gh-comment-id:3959176547 --> @trininja2k commented on GitHub (Feb 25, 2026): I tried around and everything with a first level TLD works just fine, but second level TLDs like .or.at and .co.uk and others do not work in any way. zone_not_found. I tested around a bit, the Kasserver API Playground from All-Inkl returns all domains without a problem, the problem sits in certbot-dns-kas with splitting the domains in the wrong way. kasserver is out, it works, certbot works too, the problem sits in certbot-dns-kas in "def _perfom", I tried around, but I am not skilled enough to find a solution to get it running and open a PR to the certbot-dns-kas repo.
Author
Owner

@jc21 commented on GitHub (Feb 25, 2026):

Yeah this is already reported, albeit with less diagnostic information on the plugin itself: https://github.com/mobilandi/certbot-dns-kas/issues/3

<!-- gh-comment-id:3962307765 --> @jc21 commented on GitHub (Feb 25, 2026): Yeah this is already reported, albeit with less diagnostic information on the plugin itself: https://github.com/mobilandi/certbot-dns-kas/issues/3
Author
Owner

@trininja2k commented on GitHub (Feb 25, 2026):

Yeah, that was also me, since no reaction was going on even when I provided logs over there and the error still comes up I thought this is the correct place to report. I did my tests with normal NPM, since I use NPM and NPM-plus and traced it down to this findings.

<!-- gh-comment-id:3962325548 --> @trininja2k commented on GitHub (Feb 25, 2026): Yeah, that was also me, since no reaction was going on even when I provided logs over there and the error still comes up I thought this is the correct place to report. I did my tests with normal NPM, since I use NPM and NPM-plus and traced it down to this findings.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#3175
No description provided.