ERROR: Validating this certificate is not possible using http-01. Possible validation methods are: dns-01 #316

New Issue

adam · 2025-12-29T01:22:27+01:00

adam commented

2025-12-29 01:22:27 +01:00

Originally created by @nadermx on GitHub (Mar 26, 2018).

I'm trying to use the domains.txt file with

*.domain.com > wildcard.domain.com

But when I use it I get

ERROR: Validating this certificate is not possible using http-01. Possible validation methods are: dns-01
I'm having a pretty hard time finding how to do this

Originally created by @nadermx on GitHub (Mar 26, 2018). I'm trying to use the domains.txt file with ```*.domain.com > wildcard.domain.com``` But when I use it I get `ERROR: Validating this certificate is not possible using http-01. Possible validation methods are: dns-01 ` I'm having a pretty hard time finding how to do this

adam closed this issue

2025-12-29 01:22:28 +01:00

adam commented

2025-12-29 01:22:29 +01:00

@lukas2511 commented on GitHub (Mar 26, 2018):

Please take a look at the documentation before opening issues like this: https://github.com/lukas2511/dehydrated/blob/master/docs/dns-verification.md

@lukas2511 commented on GitHub (Mar 26, 2018): Please take a look at the documentation before opening issues like this: https://github.com/lukas2511/dehydrated/blob/master/docs/dns-verification.md

adam commented

2025-12-29 01:22:29 +01:00

@jribbens commented on GitHub (Jan 3, 2019):

It might be worth mentioning in the documentation that LetsEncrypt require dns-01 validation for wildcard certificates. You might think it's obvious from the error message, but I did not find it so (the error doesn't mention that it's the wildcard-ness of the certificate that is the issue).

@jribbens commented on GitHub (Jan 3, 2019): It might be worth mentioning in the documentation that LetsEncrypt *require* `dns-01` validation for wildcard certificates. You might think it's obvious from the error message, but I did not find it so (the error doesn't mention that it's the wildcard-ness of the certificate that is the issue).

adam commented

2025-12-29 01:22:30 +01:00

@7eggert commented on GitHub (Mar 23, 2020):

I second this. A closed issue does not replace proper documentation.

@7eggert commented on GitHub (Mar 23, 2020): I second this. A closed issue does not replace proper documentation.

adam commented

2025-12-29 01:22:33 +01:00

@txr13 commented on GitHub (Mar 23, 2020):

Let's Encrypt has documentation on this: https://letsencrypt.org/docs/challenge-types/

You cannot use any client tool to perform an action prohibited by the CA. Therefore it's appropriate to review the documentation available from the CA before attempting to use any client to interact with it. If instead you want an overview of the ACME spec, the RFC is available online.

But if the question was actually "I'm having a pretty hard time finding how to do this [dns-01 validation]", then it's been answered in the most appropriate fashion--by linking to the existing dehydrated-specific documentation on performing dns-01 validation.

@txr13 commented on GitHub (Mar 23, 2020): Let's Encrypt _has_ documentation on this: https://letsencrypt.org/docs/challenge-types/ You cannot use any client tool to perform an action prohibited by the CA. Therefore it's appropriate to review the documentation available from the CA before attempting to use any client to interact with it. If instead you want an overview of the ACME spec, the RFC is available online. But if the question was actually "I'm having a pretty hard time finding how to do this [dns-01 validation]", then it's been answered in the most appropriate fashion--by linking to the existing dehydrated-specific documentation on performing dns-01 validation.

adam commented

2025-12-29 01:22:35 +01:00

@7eggert commented on GitHub (Mar 23, 2020):

Sorry to have bothered you as there will be sent an email to myseld with a good explanation. I just was too fast and google was even faster directing me here.

I don't even expect domain validation to be possible using selfhost.de, but this may be untrue. That may or may be not my task for another day

@7eggert commented on GitHub (Mar 23, 2020): Sorry to have bothered you as there will be sent an email to myseld with a good explanation. I just was too fast and google was even faster directing me here. I don't even expect domain validation to be possible using selfhost.de, but this may be untrue. That may or may be not my task for another day

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#316