nginx-proxy-manager icon indicating copy to clipboard operation
nginx-proxy-manager copied to clipboard

GoDaddy SSL Issue

Open ghost opened this issue 1 year ago • 13 comments

When using GoDaddy DNS-Letsencrypt seems to use the subdomain on the API wich seems to be wrong.

Error determining zone identifier for vault.xyz.com: 404 Client Error: Not Found for url: https://api.godaddy.com/v1/domains/vault.xyz.com. Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

ghost avatar Feb 12 '24 20:02 ghost

I have a very similar issue, I keep getting:

Error determining zone identifier for <DOMAIN>: 401 Client Error: Unauthorized for url: https://api.godaddy.com/v1/domains/<DOMAIN>.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

Does anyone have a solution for this?

Red3nzo avatar Mar 30 '24 20:03 Red3nzo

Create a Wildcardzertificat. That works.

ghost avatar Apr 01 '24 00:04 ghost

@Voltherthorn how did you resolve it?

TarekMSayed avatar May 16 '24 07:05 TarekMSayed

I have a very similar issue, I keep getting:

Error determining zone identifier for <DOMAIN>: 401 Client Error: Unauthorized for url: https://api.godaddy.com/v1/domains/<DOMAIN>.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

Does anyone have a solution for this? I still have the same issue with the latest version 2.11.2

TarekMSayed avatar May 16 '24 08:05 TarekMSayed

Runnging in the same error and have no access to my local devices with my own domain any more. Created a wildcard certificat in the passt.

`CommandError: Saving debug log to /tmp/letsencrypt-log/letsencrypt.log Error determining zone identifier for neuendot.com: 403 Client Error: Forbidden for url: https://api.godaddy.com/v1/domains/mydomain.com. Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

at /app/lib/utils.js:16:13
at ChildProcess.exithandler (node:child_process:430:5)
at ChildProcess.emit (node:events:519:28)
at maybeClose (node:internal/child_process:1105:16)
at ChildProcess._handle.onexit (node:internal/child_process:305:5)`

Any workaround or help for this issue?

NetRat88 avatar Jul 02 '24 17:07 NetRat88

I had the same Issue. It seems GoDaddy removed API access unless you have 10 domains

https://new.reddit.com/r/selfhosted/comments/1cnipp3/warning_godaddy_silently_cut_access_to_their_dns/

So I moved to CloudFlare

Edit: Typo

danmarce avatar Jul 03 '24 02:07 danmarce

GoDaddy just changed their API without notice and broke my complete pipeline. https://www.reddit.com/r/godaddy/comments/1bl0f5r/am_i_the_only_one_who_cant_use_the_api/

I cannot believe they thought this to be a good idea.

TheRealVira avatar Jul 04 '24 19:07 TheRealVira

I immediately switched from GoDaddy to Cloudflare after getting in contact with GoDaddy support. This support and answers were horrible! The whole communication of GoDaddy was the worst I have ever had!

The domain transfer to cloudflare took only one day and I could directly create the SSL wildcard certificate after adding the domain and set the DNS server in the GoDaddy settings. (all before the final transfer was done)

Bye bye GoDaddy, this was a really stupid move!

NetRat88 avatar Jul 04 '24 22:07 NetRat88

Yeah, moving to Cloudflare was good.

If their idea was to force users to buy more domains with them, they are wrong. I only had 3 domains for my homelab and other personal stuff. I wonder how many small users will move too. I even deleted my account.

And now I'm even using Cloudflare's Zero Trust, really easy to do to expose my services safely, an only using the free tier. Also the whole thing is more "professional".

danmarce avatar Jul 04 '24 23:07 danmarce

This repo is a webhook for certbot in Kubernetes, they manage to call the API and submit the dns entries I don't have enough time to make the migration, but some else could look into. https://github.com/snowdrop/godaddy-webhook/

Where the api call is made: https://github.com/snowdrop/godaddy-webhook/blob/ebac6469fcbd9a6171d9d018d66baeb3528125ab/main.go#L382C28-L382C41

vbalexr avatar Aug 04 '24 03:08 vbalexr

GoDaddy OTE API endpoint does not have a domain limit of 10, but you will need to update other dependencies to support this.. Note that the endpoint addresses for the production key ( https://api.godaddy.com/ ) and the OTE key ( https://api.ote-godaddy.com/ ) are different.

ghost avatar Sep 08 '24 17:09 ghost

Issue is now considered stale. If you want to keep it open, please comment :+1:

github-actions[bot] avatar May 26 '25 02:05 github-actions[bot]

I am running into this issue. I don't have the ability to move my DNS to another provider at this point in time. It appears to be utilizing the correct API URL for production but it does not appear to work unfortunately.

rashuge avatar Jun 12 '25 20:06 rashuge