Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add DNS provider for RU Center #1892

Draft
wants to merge 3 commits into
base: master
Choose a base branch
from
Draft

Conversation

AntonDzyk
Copy link

@AntonDzyk AntonDzyk commented Apr 12, 2023

@ldez ldez changed the title Add DNS provider for RU CENTER (#1891) Add DNS provider for RU CENTER Apr 12, 2023
@ldez
Copy link
Member

ldez commented Apr 12, 2023

Hello, in order for a PR adding a DNS provider to be accepted, you have to:

  • add a description to your PR
  • be able to maintain this provider
  • have a homogeneous design with the other providers
  • add tests (units)
make test
  • add tests ("live")
    func TestLivePresent(t *testing.T) {
    if !envTest.IsLiveTest() {
    t.Skip("skipping live test")
    }
    envTest.RestoreEnv()
    provider, err := NewDNSProvider()
    require.NoError(t, err)
    err = provider.Present(envTest.GetDomain(), "", "123d==")
    require.NoError(t, err)
    }
    func TestLiveCleanUp(t *testing.T) {
    if !envTest.IsLiveTest() {
    t.Skip("skipping live test")
    }
    envTest.RestoreEnv()
    provider, err := NewDNSProvider()
    require.NoError(t, err)
    time.Sleep(2 * time.Second)
    err = provider.CleanUp(envTest.GetDomain(), "", "123d==")
    require.NoError(t, err)
    }
make test
make generate-dns
  • be able to do: (and put the output of this command to a comment in your PR)
rm -rf .lego

./lego -m [email protected] --dns YOUR_PROVIDER_NAME -d *.example.com -d example.com -s https://acme-staging-v02.api.letsencrypt.org/directory run

Note the wildcard domain is important.

make checks
  • do go mod tidy

@ldez ldez self-requested a review April 12, 2023 12:06
@ldez ldez force-pushed the master branch 2 times, most recently from 5a203b9 to 4f9e9d4 Compare April 12, 2023 19:08
@ldez ldez changed the title Add DNS provider for RU CENTER Add DNS provider for RU Center Apr 12, 2023
@ldez
Copy link
Member

ldez commented Apr 12, 2023

Your PR was far away from the design of the other implementations, so I rewrite it and add tests on the client.

You can check my previous comment to know what are the next requirements.

@ldez
Copy link
Member

ldez commented Apr 13, 2023

ping @AntonDzyk

@ldez
Copy link
Member

ldez commented Apr 22, 2023

@AntonDzyk can you provide the missing information?
#1892 (comment)

@ldez ldez force-pushed the master branch 3 times, most recently from 19e63c8 to 1070f0d Compare May 5, 2023 08:38
@ldez
Copy link
Member

ldez commented May 15, 2023

ping @AntonDzyk

@ldez ldez added the state/need-user-tests Need users to test functionality label Jun 7, 2023
@ldez
Copy link
Member

ldez commented Jun 7, 2023

I'm still waiting for feedback @AntonDzyk.


If a user wants to help this PR by testing it, you are welcome to do so.

How to test this PR?
  1. You need Go
  2. Checkout the PR:
    git clone https://github.com/AntonDzyk/lego.git
    cd lego
    git checkout master
  3. Compile lego:
    • if you have make: make build
    • if you don't make make: go build -o dist/lego ./cmd/lego
  4. Run the following command with your own information (email, domain, credentials):
    NICRU_USER="<your_user>" \
    NICRU_PASSWORD="<your_password>" \
    NICRU_SERVICE_ID="<service_id>" \
    NICRU_SECRET="<service_secret>" \
    ./dist/lego --dns nicru --domains "*.example.com" -d *.example.com -d example.com -s https://acme-staging-v02.api.letsencrypt.org/directory run
    The wildcard domain is important
  5. Before each run of the command, you should clean your local environment:
    rm -rf .lego

@livebreakz

This comment was marked as outdated.

@ldez

This comment was marked as outdated.

@ldez

This comment was marked as outdated.

@livebreakz

This comment was marked as outdated.

@ldez

This comment was marked as outdated.

@livebreakz

This comment was marked as outdated.

@ldez

This comment was marked as outdated.

@ldez

This comment was marked as outdated.

@ldez ldez force-pushed the master branch 3 times, most recently from 92e3fbc to 947b043 Compare November 25, 2024 20:41
@ldez
Copy link
Member

ldez commented Dec 3, 2024

@livebreakz any news?

@livebreakz
Copy link

@livebreakz any news?

It's on my side. Problem with zones...

@ldez ldez force-pushed the master branch 2 times, most recently from e45f9b1 to 3d16c09 Compare February 21, 2025 22:28
@vtolstov
Copy link

i have tested this pr and it not works

<response>
   <status>fail</status>
   <errors>
      <error code="Invalid structure XML." xpath="/request/rr-list/rr">Invalid structure XML.</error>
      <validator-output>schema file: rr_add.xsd; message: Element &apos;aaaa&apos; is not valid for content model: &apos;((name,idn-name,ttl,type),((a|aaaa|cname|dname|dnskey|ds|hinfo|isdn|mx|ns|nsec|nsec3|nsec3param|naptr|ptr|rp|rrsig|rt|soa|spf|srv|txt|x25)|caa))&apos;; xpath: /request/rr-list/rr; line: 13; column: 10</validator-output>
   </errors>
</response>

@vtolstov
Copy link

vtolstov commented Mar 22, 2025

my zone contains AAAA record

 <rr id="64819056"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>AAAA</type><aaaa>2a04:ac01:0:3:230:48ff:fedb:7eee</aaaa></rr>

@ldez
Copy link
Member

ldez commented Mar 22, 2025

@vtolstov can you provide all the logs?

@vtolstov
Copy link

vtolstov commented Mar 23, 2025

2025/03/23 13:08:00 [INFO] [*.selfip.ru] acme: Obtaining bundled SAN certificate
2025/03/23 13:08:01 [INFO] [*.selfip.ru] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/2296633836/494141464336
2025/03/23 13:08:01 [INFO] [*.selfip.ru] acme: use dns-01 solver
2025/03/23 13:08:01 [INFO] [*.selfip.ru] acme: Preparing to solve DNS-01
<?xml version="1.0" encoding="UTF-8" ?>
<response>
   <status>success</status>
   <data>
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="675210" idn-name="emailu.ru" name="emailu.ru" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684356" idn-name="selfip.ru" name="selfip.ru" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684358" idn-name="unistack.dev" name="unistack.dev" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684359" idn-name="unistack.host" name="unistack.host" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684357" idn-name="unistack.org" name="unistack.org" payer="340511/NIC-D" service="DP2503200648" />
   </data>
</response>

2025/03/23 13:08:01 [INFO] zones count: 5
2025/03/23 13:08:01 [INFO] zone.Name=emailu.ru, authZone=selfip.ru
2025/03/23 13:08:01 [INFO] zone.Name=selfip.ru, authZone=selfip.ru
<?xml version="1.0" encoding="UTF-8" ?>
<response>
   <status>success</status>
   <data>
      <zone admin="340511/NIC-D" has-changes="false" id="684356" idn-name="selfip.ru" name="selfip.ru" service="DP2503200648">
         <rr id="64820727"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>SOA</type><soa><mname><name>ns1.selectel.ru.</name><idn-name>ns1.selectel.ru.</idn-name></mname><rname><name>no-reply</name><idn-name>no-reply</idn-name></rname><serial>2025032008</serial><refresh>10800</refresh><retry>3600</retry><expire>604800</expire><minimum>300</minimum></soa></rr>
         <rr id="64819087"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns3-l2.nic.ru.</name><idn-name>ns3-l2.nic.ru.</idn-name></ns></rr>
         <rr id="64819088"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns4-cloud.nic.ru.</name><idn-name>ns4-cloud.nic.ru.</idn-name></ns></rr>
         <rr id="64819089"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns4-l2.nic.ru.</name><idn-name>ns4-l2.nic.ru.</idn-name></ns></rr>
         <rr id="64819091"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns8-cloud.nic.ru.</name><idn-name>ns8-cloud.nic.ru.</idn-name></ns></rr>
         <rr id="64819092"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns8-l2.nic.ru.</name><idn-name>ns8-l2.nic.ru.</idn-name></ns></rr>
         <rr id="64819046"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>A</type><a>89.223.81.126</a></rr>
         <rr id="64819056"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>AAAA</type><aaaa>2a04:ac01:0:3:230:48ff:fedb:7eee</aaaa></rr>
         <rr id="64819074"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>MX</type><mx><preference>1</preference><exchange><name>smtp.google.com.</name><idn-name>smtp.google.com.</idn-name></exchange></mx></rr>
         <rr id="64819054"><name>docs</name><idn-name>docs</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>ghs.google.com.</name><idn-name>ghs.google.com.</idn-name></cname></rr>
         <rr id="64819034"><name>drive</name><idn-name>drive</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>ghs.google.com.</name><idn-name>ghs.google.com.</idn-name></cname></rr>
         <rr id="64819033"><name>imap</name><idn-name>imap</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819042"><name>k14</name><idn-name>k14</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>c6140cc7ca9d.sn.mynetname.net.</name><idn-name>c6140cc7ca9d.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819057"><name>kostromskoy</name><idn-name>kostromskoy</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>c6140cc7ca9d.sn.mynetname.net.</name><idn-name>c6140cc7ca9d.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819053"><name>m3</name><idn-name>m3</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>e5780e09b1d5.sn.mynetname.net.</name><idn-name>e5780e09b1d5.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819037"><name>mail</name><idn-name>mail</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819029"><name>manchesterskaya</name><idn-name>manchesterskaya</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>e5780e09b1d5.sn.mynetname.net.</name><idn-name>e5780e09b1d5.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819038"><name>mxs</name><idn-name>mxs</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819051"><name>ocis</name><idn-name>ocis</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64820725"><name>rtr</name><idn-name>rtr</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64820726"><name>sip</name><idn-name>sip</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819052"><name>smtp</name><idn-name>smtp</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819032"><name>vladimir</name><idn-name>vladimir</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819027"><name>www</name><idn-name>www</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819026"><name>_sip._tcp</name><idn-name>_sip._tcp</idn-name><ttl>60</ttl><type>SRV</type><srv><priority>20</priority><weight>0</weight><port>5060</port><target><name>sip</name><idn-name>sip</idn-name></target></srv></rr>
         <rr id="64819049"><name>_sip._udp</name><idn-name>_sip._udp</idn-name><ttl>60</ttl><type>SRV</type><srv><priority>20</priority><weight>0</weight><port>5060</port><target><name>sip</name><idn-name>sip</idn-name></target></srv></rr>
         <rr id="64819055"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>TXT</type><txt><string>google-site-verification=bQGUk_bQbERNxZSd7DdCUcBSNLWHDhHvv7XWcvytsSA</string></txt></rr>
         <rr id="64819041"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZpJ43B6aECbE8QIoi5etlAjA9hi1dPoLfFsMnpE/RTEf7bfr9vbaHVkhZWj4PdF1YuYLMTHySgVYqfduw7nte7+O4FXJqyOv2U4D68h2sXLYxsfm54kEAMCFxL2lhQsd97o7JSwOQOJDBr3X490oZayTXfA+6dnnSAXDr/ldUE6xVskvbwjADy9LTgUeF7Rj</string><string>nzpyOyT1nGwaz8dxNvHcOObC3XU2ttGc9ziII9oVYxIeVKTJ2JguyCD2XLgUv+LvUTR0XqXGU6gfOaomal2R5HkB83GZyeoatZs9g++bc3ylgvcA0VE/FWF9mowAeycBJ0X/AefMJ6VC15sCi0FYQIDAQAB</string></txt></rr>
         <rr id="64819047"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=spf1 ip4:89.223.81.126/32 +a include:_spf.google.com include:_spf.yandex.net ~all</string></txt></rr>
         <rr id="64819024"><name>_dmarc.unistack.org</name><idn-name>_dmarc.unistack.org</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1:d:s; pct=100; ri=86400; adkim=s; aspf=s</string></txt></rr>
         <rr id="64819031"><name>google._domainkey</name><idn-name>google._domainkey</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCB0PUvGgnds2mm+PCfc7HeXHPhKMY8P2ymaWSznYZnhQma5xU+aUUF04Ar8qXwYsGFqQjswSQD+AJCT0byD+ay3CpmRBLoEKcl8ytAO5NIbtJodRAjCvlKC6t41F3p9cuuzIAO8ANp7enBXBeylxTb+qvtIuifO+pGlLRLxLoYtwIDAQAB</string></txt></rr>
      </zone>
   </data>
</response>

<response>
   <status>fail</status>
   <errors>
      <error code="Invalid structure XML." xpath="/request/rr-list/rr">Invalid structure XML.</error>
      <validator-output>schema file: rr_add.xsd; message: Element &apos;aaaa&apos; is not valid for content model: &apos;((name,idn-name,ttl,type),((a|aaaa|cname|dname|dnskey|ds|hinfo|isdn|mx|ns|nsec|nsec3|nsec3param|naptr|ptr|rp|rrsig|rt|soa|spf|srv|txt|x25)|caa))&apos;; xpath: /request/rr-list/rr; line: 13; column: 10</validator-output>
   </errors>
</response>

2025/03/23 13:08:01 [INFO] [*.selfip.ru] acme: Cleaning DNS-01 challenge
<?xml version="1.0" encoding="UTF-8" ?>
<response>
   <status>success</status>
   <data>
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="675210" idn-name="emailu.ru" name="emailu.ru" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684356" idn-name="selfip.ru" name="selfip.ru" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684358" idn-name="unistack.dev" name="unistack.dev" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684359" idn-name="unistack.host" name="unistack.host" payer="340511/NIC-D" service="DP2503200648" />
      <zone admin="340511/NIC-D" enable="true" has-changes="false" has-primary="true" id="684357" idn-name="unistack.org" name="unistack.org" payer="340511/NIC-D" service="DP2503200648" />
   </data>
</response>

2025/03/23 13:08:01 [INFO] zones count: 5
2025/03/23 13:08:01 [INFO] zone.Name=emailu.ru, authZone=selfip.ru
2025/03/23 13:08:01 [INFO] zone.Name=selfip.ru, authZone=selfip.ru
<?xml version="1.0" encoding="UTF-8" ?>
<response>
   <status>success</status>
   <data>
      <zone admin="340511/NIC-D" has-changes="false" id="684356" idn-name="selfip.ru" name="selfip.ru" service="DP2503200648">
         <rr id="64820727"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>SOA</type><soa><mname><name>ns1.selectel.ru.</name><idn-name>ns1.selectel.ru.</idn-name></mname><rname><name>no-reply</name><idn-name>no-reply</idn-name></rname><serial>2025032008</serial><refresh>10800</refresh><retry>3600</retry><expire>604800</expire><minimum>300</minimum></soa></rr>
         <rr id="64819087"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns3-l2.nic.ru.</name><idn-name>ns3-l2.nic.ru.</idn-name></ns></rr>
         <rr id="64819088"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns4-cloud.nic.ru.</name><idn-name>ns4-cloud.nic.ru.</idn-name></ns></rr>
         <rr id="64819089"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns4-l2.nic.ru.</name><idn-name>ns4-l2.nic.ru.</idn-name></ns></rr>
         <rr id="64819091"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns8-cloud.nic.ru.</name><idn-name>ns8-cloud.nic.ru.</idn-name></ns></rr>
         <rr id="64819092"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>NS</type><ns><name>ns8-l2.nic.ru.</name><idn-name>ns8-l2.nic.ru.</idn-name></ns></rr>
         <rr id="64819046"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>A</type><a>89.223.81.126</a></rr>
         <rr id="64819056"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>AAAA</type><aaaa>2a04:ac01:0:3:230:48ff:fedb:7eee</aaaa></rr>
         <rr id="64819074"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>MX</type><mx><preference>1</preference><exchange><name>smtp.google.com.</name><idn-name>smtp.google.com.</idn-name></exchange></mx></rr>
         <rr id="64819054"><name>docs</name><idn-name>docs</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>ghs.google.com.</name><idn-name>ghs.google.com.</idn-name></cname></rr>
         <rr id="64819034"><name>drive</name><idn-name>drive</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>ghs.google.com.</name><idn-name>ghs.google.com.</idn-name></cname></rr>
         <rr id="64819033"><name>imap</name><idn-name>imap</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819042"><name>k14</name><idn-name>k14</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>c6140cc7ca9d.sn.mynetname.net.</name><idn-name>c6140cc7ca9d.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819057"><name>kostromskoy</name><idn-name>kostromskoy</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>c6140cc7ca9d.sn.mynetname.net.</name><idn-name>c6140cc7ca9d.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819053"><name>m3</name><idn-name>m3</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>e5780e09b1d5.sn.mynetname.net.</name><idn-name>e5780e09b1d5.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819037"><name>mail</name><idn-name>mail</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819029"><name>manchesterskaya</name><idn-name>manchesterskaya</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>e5780e09b1d5.sn.mynetname.net.</name><idn-name>e5780e09b1d5.sn.mynetname.net.</idn-name></cname></rr>
         <rr id="64819038"><name>mxs</name><idn-name>mxs</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819051"><name>ocis</name><idn-name>ocis</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64820725"><name>rtr</name><idn-name>rtr</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64820726"><name>sip</name><idn-name>sip</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819052"><name>smtp</name><idn-name>smtp</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819032"><name>vladimir</name><idn-name>vladimir</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819027"><name>www</name><idn-name>www</idn-name><ttl>60</ttl><type>CNAME</type><cname><name>@</name><idn-name>@</idn-name></cname></rr>
         <rr id="64819026"><name>_sip._tcp</name><idn-name>_sip._tcp</idn-name><ttl>60</ttl><type>SRV</type><srv><priority>20</priority><weight>0</weight><port>5060</port><target><name>sip</name><idn-name>sip</idn-name></target></srv></rr>
         <rr id="64819049"><name>_sip._udp</name><idn-name>_sip._udp</idn-name><ttl>60</ttl><type>SRV</type><srv><priority>20</priority><weight>0</weight><port>5060</port><target><name>sip</name><idn-name>sip</idn-name></target></srv></rr>
         <rr id="64819055"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>TXT</type><txt><string>google-site-verification=bQGUk_bQbERNxZSd7DdCUcBSNLWHDhHvv7XWcvytsSA</string></txt></rr>
         <rr id="64819041"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZpJ43B6aECbE8QIoi5etlAjA9hi1dPoLfFsMnpE/RTEf7bfr9vbaHVkhZWj4PdF1YuYLMTHySgVYqfduw7nte7+O4FXJqyOv2U4D68h2sXLYxsfm54kEAMCFxL2lhQsd97o7JSwOQOJDBr3X490oZayTXfA+6dnnSAXDr/ldUE6xVskvbwjADy9LTgUeF7Rj</string><string>nzpyOyT1nGwaz8dxNvHcOObC3XU2ttGc9ziII9oVYxIeVKTJ2JguyCD2XLgUv+LvUTR0XqXGU6gfOaomal2R5HkB83GZyeoatZs9g++bc3ylgvcA0VE/FWF9mowAeycBJ0X/AefMJ6VC15sCi0FYQIDAQAB</string></txt></rr>
         <rr id="64819047"><name>@</name><idn-name>@</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=spf1 ip4:89.223.81.126/32 +a include:_spf.google.com include:_spf.yandex.net ~all</string></txt></rr>
         <rr id="64819024"><name>_dmarc.unistack.org</name><idn-name>_dmarc.unistack.org</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1:d:s; pct=100; ri=86400; adkim=s; aspf=s</string></txt></rr>
         <rr id="64819031"><name>google._domainkey</name><idn-name>google._domainkey</idn-name><ttl>60</ttl><type>TXT</type><txt><string>v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCB0PUvGgnds2mm+PCfc7HeXHPhKMY8P2ymaWSznYZnhQma5xU+aUUF04Ar8qXwYsGFqQjswSQD+AJCT0byD+ay3CpmRBLoEKcl8ytAO5NIbtJodRAjCvlKC6t41F3p9cuuzIAO8ANp7enBXBeylxTb+qvtIuifO+pGlLRLxLoYtwIDAQAB</string></txt></rr>
      </zone>
   </data>
</response>

<?xml version="1.0" encoding="UTF-8" ?>
<response>
   <status>success</status>
</response>

2025/03/23 13:08:02 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz/2296633836/494141464336
2025/03/23 13:08:02 Could not obtain certificates:
	error: one or more domains had a problem:
[*.selfip.ru] [*.selfip.ru] acme: error presenting token: nicru: add records: [status code=400] fail: Invalid structure XML. (code Invalid structure XML.)

@vtolstov
Copy link

vtolstov commented Mar 23, 2025

after latest pull of this branch pr, i can't reproduce issue, now all works fine.
i think that it ready to merge, what do you think ?

@ldez
Copy link
Member

ldez commented Mar 23, 2025

@vtolstov can you give the redacted output of the following command:

rm -rf .lego

./lego -m [email protected] --dns nicru -d '*.example.com' -d example.com -s https://acme-staging-v02.api.letsencrypt.org/directory run

@vtolstov
Copy link

@ldez what i need to replace in provided cmd?
i'm already issue 4 certs for 4 domains and all works fine.

@ldez
Copy link
Member

ldez commented Mar 23, 2025

You should replace the email [email protected], and the domain example.com.

@ldez
Copy link
Member

ldez commented Mar 25, 2025

@vtolstov any news?

@ldez
Copy link
Member

ldez commented Mar 28, 2025

@vtolstov can you give me the output? #1892 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Development

Successfully merging this pull request may close these issues.

Add DNS Provider for RU CENTER
4 participants