appliedprivacy

Hi, thanks for the fast reply! Yes, we use desec.io as DNS provider. > To find the "real" domain, lego will perform recursively CNAME calls. This is done via DNS...

Thanks for your reply. To avoid confusion around the "real" and "original" wording: * user wants a certificate for `www.example.com` * `_acme-challenge.www.example.com` is a CNAME pointing to `www.acme.example.com` * `_acme-challenge.www.example.com`...

a quick recap: * the current assumption by @ldez is that there is a transient DNS resolution failure that causes this problem * following this assumption lego continues its procedures...

Thanks for your prompt reply! > Adding logs will not provide something more precise than what you already have. I see your point there, the only difference is that it...

This topic (redundancy via zone transfer) has become more relevant today due to the [DDoS related outage](https://desec-status.net/incidents/11). Forum post: https://talk.desec.io/t/zone-transfer-to-secondary-ns-for-availability-reasons/568 Please also consider RFC9103 Zone Transfer over TLS when implementing...

Looks like DDoS issues will become more frequent. We are committing to donate 100€ if AXFR support gets implemented sometime before 2024.

> Did you compile getdns/stubby yourself? stubby has been installed using apt https://packages.debian.org/buster/stubby > Would it be possible for you to compile latest (so version 1.5.2) of getdns/stubby with debugging...

``` Program received signal SIGSEGV, Segmentation fault. 0x00007ffff7d5f980 in ?? () from /usr/lib/x86_64-linux-gnu/libgetdns.so.10 (gdb) backtrace #0 0x00007ffff7d5f980 in ?? () from /usr/lib/x86_64-linux-gnu/libgetdns.so.10 #1 0x00007ffff7d7ed56 in ?? () from /usr/lib/x86_64-linux-gnu/libgetdns.so.10 #2...

sorry that was my fault (LD_LIBRARY_PATH was not set to include the correct folder) ``` Program received signal SIGSEGV, Segmentation fault. 0x00007ffff7d7a393 in _getdns_rbtree_first (rbtree=0x555555560bd8) at ./util/rbtree.c:553 553 for (node...

I didn't collect many backtraces, but here is another: ``` Program received signal SIGABRT, Aborted. __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:50 50 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) backtrace #0 __GI_raise...