[GH-ISSUE #987] DNS Name is not canonical error - PowerDNS Letsencrypt DNS Probe #524

Closed
opened 2026-02-26 12:08:36 +03:00 by kerem · 3 comments
Owner

Originally created by @GivouDev on GitHub (Apr 24, 2025).
Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/987

Wrong PowerDNS API Call.
When you try to issue a wildcard certificate with dns probe and use the powerdns api you get this error message:

obtain certificate error: error: one or more domains had a problem: [.example.com] [.example.com] acme: error presenting token: pdns: error talking to PDNS API: DNS Name '_acme-challenge.example.com' is not canonical [´example.com] [example.com] acme: error presenting token: pdns: error talking to PDNS API: DNS Name '_acme-challenge.example.com' is not canonical

I think powerdns is waiting for a "." add the end of the record.

Originally created by @GivouDev on GitHub (Apr 24, 2025). Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/987 Wrong PowerDNS API Call. When you try to issue a wildcard certificate with dns probe and use the powerdns api you get this error message: obtain certificate error: error: one or more domains had a problem: [*.example.com] [*.example.com] acme: error presenting token: pdns: error talking to PDNS API: DNS Name '_acme-challenge.example.com' is not canonical [´example.com] [example.com] acme: error presenting token: pdns: error talking to PDNS API: DNS Name '_acme-challenge.example.com' is not canonical I think powerdns is waiting for a "." add the end of the record.
kerem 2026-02-26 12:08:36 +03:00
  • closed this issue
  • added the
    bug
    lego
    labels
Author
Owner

@0xJacky commented on GitHub (May 10, 2025):

We have updated the dependencies of Lego. You can try the latest development version (first perform an OTA update to v2.0.0-rc.6 and then select to install the development version) to see if this issue still persists.

<!-- gh-comment-id:2868961247 --> @0xJacky commented on GitHub (May 10, 2025): We have updated the dependencies of Lego. You can try the latest development version (first perform an OTA update to v2.0.0-rc.6 and then select to install the development version) to see if this issue still persists.
Author
Owner

@GivouDev commented on GitHub (May 14, 2025):

I will try it this weekend and will give you feedback. Thank you so much

<!-- gh-comment-id:2878798111 --> @GivouDev commented on GitHub (May 14, 2025): I will try it this weekend and will give you feedback. Thank you so much
Author
Owner

@destotelhorus commented on GitHub (Aug 31, 2025):

Still a problem as of version: 2.1.17 (468)

when trying to get a wildcard cert for a domain X.Y.net (anonymized) I am getting:
obtain cert error: error: one or more domains had a problem: [*.X.Y.net] [*.X.Y.net] acme: error presenting token: pdns: update records: error talking to PDNS API: DNS Name '_acme-challenge.X.Y.net' is not canonical [X.Y.net] [X.Y.net] acme: error presenting token: pdns: update records: error talking to PDNS API: DNS Name '_acme-challenge.X.Y.net' is not canonical

Please reopen.

<!-- gh-comment-id:3240414033 --> @destotelhorus commented on GitHub (Aug 31, 2025): Still a problem as of version: 2.1.17 (468) when trying to get a wildcard cert for a domain ``X.Y.net`` (anonymized) I am getting: ```obtain cert error: error: one or more domains had a problem: [*.X.Y.net] [*.X.Y.net] acme: error presenting token: pdns: update records: error talking to PDNS API: DNS Name '_acme-challenge.X.Y.net' is not canonical [X.Y.net] [X.Y.net] acme: error presenting token: pdns: update records: error talking to PDNS API: DNS Name '_acme-challenge.X.Y.net' is not canonical``` Please reopen.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-ui#524
No description provided.