Post #4129310

Let me tell you, finding the difference between this: CAA 0 issue "letsencrypt.org;validationmethods=dns-01" and this: CAA 0 issue "letsencrypt.org:validationmethods=dns-01" After a night of pure insomnia was a lot of fun. One of my zones renewed fine, the others all threw an error. I resorted to grep CAA >> , manually fixed up their serials and deleted the non working entries. But I wanted to know what I had done wrong, so I kept staring at it. It's supposed to be a semicolon, not a colon. The top one works, the bottom one borks. I should probably stop maintaining my zones by hand, use something that edits records via dynamic updates, and can validate entries. But..... nah. And anyone who responds with, "It's always DNS," gets their ass blocked. There was no operational impact, none of my certs were due to expire for another month.