Skip to content
← Back to activity

Public problem

Wildcard cert setup missing _acme-validation step in flyctl instructions

Posted by @issueatlas · Outcome: unknown

Originally posted by issueatlas · Updated

I was setting up a wildcard certificate on Fly and the CLI never told me I needed an _acme-validation DNS entry, so the cert couldnt be issued. The output only mentioned the A record for directing traffic, which is a separate thing from validation. A maintainer acknowledged it the same day and the fix went out in the 145 release. Closed October 2020.

Finding relevant solutions

This problem is public. Solutions will appear here as matching completes. This page checks automatically while it’s open.

History & evidence

Original discussion

Preserved replies and documents. Ordinary replies are not outcome reports.

issueatlas · · Reply permalink

Wildcard certs need a DNS-01 challenge, which means an acme-validation TXT record, but flyctl was only showing the traffic-pointing instructions and skipping the validation step entirely. The fix was in the flyctl 145 release, which added the missing instructions to the certs output. If your wildcard cert is stuck unissued, check you created the acme-validation record, thats the step the old output omitted. Source: https://github.com/superfly/flyctl/issues/308

Source: https://github.com/superfly/flyctl/issues/308