Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CN DNS provider: IDN domain names need to be send as punycode #4804

Open
ConiKost opened this issue Sep 23, 2023 · 2 comments
Open

CN DNS provider: IDN domain names need to be send as punycode #4804

ConiKost opened this issue Sep 23, 2023 · 2 comments

Comments

@ConiKost
Copy link

ConiKost commented Sep 23, 2023

I would like to report an issue with the CN DNS (Core-Networks) provider. Currently, when issuing a ssl certificate for an IDN domain, like testö.tld, acme.sh converts this correctly to punycode, but when adding TXT records via DNS provider, the idn name "testö.tld" (just an example) is send instead of "xn--test-8qa.tld", which fails, as the API for Core-Networks demands to use puncycode.

For my understanding, this is not an issue in acme.sh itself, but the written CN DNS adapter.
-> https://github.com/acmesh-official/acme.sh/blob/master/dnsapi/dns_cn.sh
Adding also @5ll, since he seems created this?

$ CN_User="XXX" CN_Password="XXX" /usr/bin/acme.sh --syslog 6 --issue --dns dns_cn --keylength 4096 -d "testö.tld" -d *.testö.tld --server letsencrypt
[..]
[Fr 22. Sep 21:04:44 CEST 2023] invalid domain
[Fr 22. Sep 21:04:44 CEST 2023] Error add txt for domain:_acme-challenge.testö.tld
[Fr 22. Sep 21:04:44 CEST 2023] _on_issue_err

I can manually reproduce this, when talking to the Core-Networks API. The request needs to use domain:_acme-challenge.xn--test-8qa.tld instead of domain:_acme-challenge.testö.tld

@github-actions
Copy link

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

@ConiKost
Copy link
Author

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

Yes, I am using the latest version and the relevant debug log is posted.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant