{"action":"created","issue":{"url":"https://api.github.com/repos/ebekker/letsencrypt-win/issues/1","labels_url":"https://api.github.com/repos/ebekker/letsencrypt-win/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/ebekker/letsencrypt-win/issues/1/comments","events_url":"https://api.github.com/repos/ebekker/letsencrypt-win/issues/1/events","html_url":"https://github.com/ebekker/letsencrypt-win/issues/1","id":102036841,"number":1,"title":"DNS challenge validation fails","user":{"login":"ebekker","id":3308726,"avatar_url":"https://avatars.githubusercontent.com/u/3308726?v=3","gravatar_id":"","url":"https://api.github.com/users/ebekker","html_url":"https://github.com/ebekker","followers_url":"https://api.github.com/users/ebekker/followers","following_url":"https://api.github.com/users/ebekker/following{/other_user}","gists_url":"https://api.github.com/users/ebekker/gists{/gist_id}","starred_url":"https://api.github.com/users/ebekker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ebekker/subscriptions","organizations_url":"https://api.github.com/users/ebekker/orgs","repos_url":"https://api.github.com/users/ebekker/repos","events_url":"https://api.github.com/users/ebekker/events{/privacy}","received_events_url":"https://api.github.com/users/ebekker/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/ebekker/letsencrypt-win/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":{"login":"ebekker","id":3308726,"avatar_url":"https://avatars.githubusercontent.com/u/3308726?v=3","gravatar_id":"","url":"https://api.github.com/users/ebekker","html_url":"https://github.com/ebekker","followers_url":"https://api.github.com/users/ebekker/followers","following_url":"https://api.github.com/users/ebekker/following{/other_user}","gists_url":"https://api.github.com/users/ebekker/gists{/gist_id}","starred_url":"https://api.github.com/users/ebekker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ebekker/subscriptions","organizations_url":"https://api.github.com/users/ebekker/orgs","repos_url":"https://api.github.com/users/ebekker/repos","events_url":"https://api.github.com/users/ebekker/events{/privacy}","received_events_url":"https://api.github.com/users/ebekker/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-08-20T01:34:16Z","updated_at":"2015-08-20T16:23:07Z","closed_at":"2015-08-20T16:23:07Z","body":"The DNS-type Challenge for a DNS-type Identifier Authorization has been implemented as per the [ACME spec](https://letsencrypt.github.io/acme-spec/#rfc.section.7.4) however, testing against the Boulder CA fails.\r\n\r\nThe ACME sequence of steps entails:\r\n1 Submit a New Authorization for DNS-type Identifer, receive an Authorization object with a list of Challenges.\r\n2 For DNS-type Challenge, create the necessary TXT record with a name of `_acme-challenge.your.target.domain` and value of the JWS signature.\r\n3 Submit a Challenge Validation response to the URI in the original Challenge to signal the challenge has been satisfied and can be validated.\r\n4 Query the status of the pending DNS-type Challenge via the URI in the original Challenge.\r\n\r\nAll the steps above complete successfully and without any error at the protocol level, except that the final status of the DNS-type Challenge in the last step query indicates `invalid`.\r\n\r\nUpon inspection, we see the Boulder console indicates `Correct value not found for DNS challenge`.  Note, for our testing we updated the dnsResolver setting in the `test/boulder-config.json` to point to a real DNS server (Windows AD) and created the necessary record in the second step above to satisfy the challenge.\r\n"},"comment":{"url":"https://api.github.com/repos/ebekker/letsencrypt-win/issues/comments/133065649","html_url":"https://github.com/ebekker/letsencrypt-win/issues/1#issuecomment-133065649","issue_url":"https://api.github.com/repos/ebekker/letsencrypt-win/issues/1","id":133065649,"user":{"login":"ebekker","id":3308726,"avatar_url":"https://avatars.githubusercontent.com/u/3308726?v=3","gravatar_id":"","url":"https://api.github.com/users/ebekker","html_url":"https://github.com/ebekker","followers_url":"https://api.github.com/users/ebekker/followers","following_url":"https://api.github.com/users/ebekker/following{/other_user}","gists_url":"https://api.github.com/users/ebekker/gists{/gist_id}","starred_url":"https://api.github.com/users/ebekker/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ebekker/subscriptions","organizations_url":"https://api.github.com/users/ebekker/orgs","repos_url":"https://api.github.com/users/ebekker/repos","events_url":"https://api.github.com/users/ebekker/events{/privacy}","received_events_url":"https://api.github.com/users/ebekker/received_events","type":"User","site_admin":false},"created_at":"2015-08-20T16:23:07Z","updated_at":"2015-08-20T16:23:07Z","body":"After updating to the latest version of Boulder and reformatting the content of the TXT record, we were able to success complete a DNS-type challenge validation.\r\n"}}