Generate SAN SSL with Plesk provider - error: 1013

[imrelaszlo84]

After switch to DEBUG level log, I've found some related issues:

Traefik cannot issue certificate for CNAMEd wildcard domain

All IPs and domains are anonymized. In a nutshell: I have a domain in Cloudflare called example.com I have a kubernetes cluster with a cloudprovider This cloudprovider handles my LoadBalancer and provides a DNS name for it The DNS name is 1.2.3.4.haip.cloudprovider.net I created a wildcard CNAME record: *.example.com CNAME 1.2.3.4.haip.cloudprovider.net I created a deployment called 'whoami' with a hostname of whoami.example.com I request a certificate using Traefik with the Cloudflare A…

Purpose of LEGO_DISABLE_CNAME_SUPPORT

@Idez Thanks! I know the difference between A and CNAME, but I'm not an expert like you... The log error is acme: error presenting token: gandiv5: no subdomain because the domain and the zone are identical: My zone file is "typical". Why is this not a problem for other people - is it maybe because of Gandi specifically? I had similar config with other dns providers (e.g. digitalocean, ovh, linode) but never had this weird problem. I wonder whether the problem is the provider, or i…

If I add LEGO_DISABLE_CNAME_SUPPORT: true as environment variable, the SSL certificate still not generated, but the error message changed:

2024-12-31T19:58:11Z ERR Unable to obtain ACME certificate for domains error="unable to generate a certificate for the domains [portal.subdomainDOTmydomainDOTcom proxy.portal.subdomainDOTmydomainDOTcom .proxy.portal.subdomainDOTmydomainDOTcom]: error: one or more domains had a problem:\n[portal.subdomainDOTmydomainDOTcom] [portal.subdomainDOTmydomainDOTcom] acme: error presenting token: plesk: failed to add record: error: 1007 - DNS record '_acme-challenge.portal.subdomainDOTmydomainDOTcom. IN TXT KTx3lYJqwRW73OiB8AWEmyqHme145pPsAJs6l3MFdLY' already exists.\n" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["portal.subdomainDOTmydomainDOTcom","proxy.portal.subdomainDOTmydomainDOTcom",".proxy.portal.subdomainDOTmydomainDOTcom"] providerName=leresolver-dns-plesk.acme routerName=myservice-https@file rule=Host(portal.subdomainDOTmydomainDOTcom)