Thanks for implementing RFC2136!

I've just tested this new plugin and found a few things.

1. Hostname of DNS server not working

At one step win-acme is asking for DNS server host/ip. If you provide a hostname (like dns.example.com) an error is shown after chosing additional installation steps:

(SocketException): Ein ungültiges Argument wurde angegeben.
 Wrapped in FormatException: An invalid IP address was specified.

If you provide an IP address here, it works. I know that certbots RFC2136 plugin also only allows IP addresses. Maybe this also the case here?

2. TXT don't get deleted + only works on retry

I tried to create a certificate for tolljens.de,*.tolljens.de. I also retried with another domain and the result was the same. This was the result:

As you can see, the record can't get deleted (there were 3 TXT records in the end) and it also works only after retrying.

The error in the logs says

2023-04-21 10:45:38.473 +02:00 [VRB] Starting post-validation cleanup
2023-04-21 10:45:38.477 +02:00 [ERR] Error deleting DNS record
System.Exception: FormatError
   at PKISharp.WACS.Plugins.ValidationPlugins.Dns.Rfc2136.SendUpdate(DnsUpdateMessage msg)
   at PKISharp.WACS.Plugins.ValidationPlugins.Dns.Rfc2136.DeleteRecord(DnsValidationRecord record)
2023-04-21 10:45:38.477 +02:00 [VRB] Post-validation cleanup was succesful

I also can't see any reason why letsencrypt is sending the unauthorized error. Both records are available on both DNS servers and the precheck is also successful.

If you need a system for testing, I would be happy to provide you the needed credentials for my DNS setup. You can use one of my unused domains or I can setup a domain for you.

Platform:

• OS: Windows 11
• Version: 2.2.4.1500 (release, pluggable, standalone, 64-bit)