letsencrypt.sh request doesn't show TXT value anymore

[vinzzz]

I have a directadmin server and for a long time, each time when I had to renew the SSL certificate for every subdomain I could do that running:

cd /usr/local/directadmin/scripts
./letsencrypt.sh request server.domain.com

(server.domain.com is my server's hostname).

In the terminal I would get the TXT value to put into my DNS and after 5 minutes or so everything worked fine. Today I wanted to do this renewal again, but I'm getting another output (I guess the letsencrypt.sh scripts was updated through directadmin). So there is no TXT value anymore that I can copy, instead some standard messages and a link to AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/********** Following that link would show some object with a token in it, I've tried copying that token and put it in the TXT record, but no luck.

Then after some trial and error I've tried the following command:

./letsencrypt.sh request_full server.domain.com

and it states it was succesfull, but https is still not working. Even if I try the first command again, it only will show now that it is already validated. This is the output:

2020/11/25 20:22:14 [INFO] [server.domain.com] acme: Obtaining SAN certificate
2020/11/25 20:22:15 [INFO] [server.domain.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/**********
2020/11/25 20:22:15 [INFO] [server.domain.com] acme: authorization already valid; skipping challenge
2020/11/25 20:22:15 [INFO] [server.domain.com] acme: Validations succeeded; requesting certificates
2020/11/25 20:22:16 [INFO] [server.domain.com] Server responded with a certificate.
Certificate for server.domain.com has been created successfully!
DirectAdmin certificate has been setup.
Setting up cert for Exim...
Setting up cert for WWW server...
Setting up cert for FTP server...
The services will be restarted in about 1 minute via the dataskq.

My guess is I only have a single certificate now (https://server.domain.com is indeed working), but I wanted a wildcard SSL (I have a lot of student subdomains in this server which all need to have https). Am I missing something, could someone point me in the right direction?

 

[LawsHosting]

You should add your normal domain in DA (without server.) and create a wildcard for that..

If you mean, you want to have separate sub-domains for individuals, you'd need to add the sub-domains as actual domains to individual accounts.

Am having a hard time understanding what you need, to be honest.

 

[vinzzz]

The command needs the hostname to my understanding. And that is server.domain.com.

The thing is all worked just fine untill some update.

I have domain.com for the admin (me) and hundreds of subdomains like student1.domain.com, student2.domain.com. therefor I once set up the wildcard ssl through letsencrypt. Running that first command in my post did just work fine. I would get a TXT valie, i would copy paste it into my DNS and after one or two retries every subdomain worked with https...

 

[LawsHosting]

If you host your nameservers on the server, the TXT record will get added automatically...... If you use external nameservers/DNS, then, yes, there was a changed, see https://directadmin.com/features.php?id=2825- however, not sure if this works in ssh command...... It only works in Evolution.......

 

[vinzzz]

Yes, I have external DNS. I just want to see which TXT record I need to copy
Thanks for your link, but if I scanned it correctly they are talking about DNS API from your external DNS service...

 

[LawsHosting]

Exactly, it uses API...... Maybe @smtalk can shed some light.

 

[vinzzz]

hmm, maybe I can find an older/ previous version of letsencrypt.sh that would still work for me