mirror of
https://github.com/0xJacky/nginx-ui.git
synced 2026-04-25 08:45:58 +03:00
[GH-ISSUE #1193] Certificate renewal through Cloudflare stopped working. #3751
Labels
No labels
Q/A
bug
casdoor
dependencies
docker
documentation
duplicate
enhancement
help wanted
invalid
lego
platform:openwrt
platform:windows
pull-request
question
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/nginx-ui#3751
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @mosaati on GitHub (Jun 30, 2025).
Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/1193
Describe the bug
I don't know when this has started. But certificate renewal stopped working. I had it previously running using Cloudflare DNS verification. and it was working fine. Now it just spams "Waiting for DNS record propagation".
and then the error: obtain cert error: error: one or more domains had a problem: [*.xx.xx] propagation: time limit exceeded: last error: authoritative nameservers: NS lou.ns.cloudflare.com.:53 did not return the expected TXT record.
Interestingly:
2 TXT records are created on Cloudflare, however there is a note on the records "The content field of TXT records must be in quotation marks. Cloudflare may add quotation marks on your behalf, which will not affect how the record works."
The error also reads other TXT spf records which are named the same as my domain as found instead of the named _acme-challenge TXT that were created.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
Issue or renew as expected.
Info (please complete the following information):
Additional context
No other changes were observed except of I upgraded the version.
Please let me know if there is a way to revert to an older version to test.
@0xJacky commented on GitHub (Jun 30, 2025):
It seems to be caused by the DNS cache. You can try again at a different time to see if the renewal can be successful. Currently, it is functioning properly here with me.
@mosaati commented on GitHub (Jun 30, 2025):
The error is persisting for almost a week now. I'm not sure why.
I will do some debugging and report back.
Thank you for your time.
@0xJacky commented on GitHub (Jun 30, 2025):
You can try to use another DNS server like 8.8.8.8:53
@mosaati commented on GitHub (Jun 30, 2025):
Sure. Will try. Thanks.
@mosaati commented on GitHub (Jul 10, 2025):
I just wanted to add that I had tried everything and nothing worked. I tried using DNS challenge in other tools and they worked as expected. Not sure where the problem is.
@mosaati commented on GitHub (Jul 10, 2025):
I was able to issue a certificate by editing the text records as soon as they were created and adding quotes at the beginning and end of each record.
@0xJacky commented on GitHub (Jul 10, 2025):
OK, I know the problem. Thanks for your debug!
@mosaati commented on GitHub (Jul 10, 2025):
Just to add, bug #1219 happened to me as well and had to delete them all. The text records keep creating to renew but never confirmed. I guess adding the quotes while testing fixed the issue for now but will happen again when it is time o renew.
@0xJacky commented on GitHub (Jul 10, 2025):
Yes, I have noticed that.
@0xJacky commented on GitHub (Jul 19, 2025):
You can update to the dev version. This issue should have been fixed.
@mosaati commented on GitHub (Jul 20, 2025):
Tried the dev release and renewed right away. Thank you.
Just a minor note. Dev version is v2.1.13 (
ddd538b5). When I switch the channel to stable the version is v2.1.12 but the page still says New version released and to upgrade to it. Not sure if I should create a bug.@0xJacky commented on GitHub (Jul 20, 2025):
This is normal and there's no need to pay attention to it.