DNS validation

I tried almost all combinations but cant make it works.

// Comptue key authorization for dns-01
dnsChallenge = authz.Data.Challenges.First(c => c.Type == ChallengeTypes.Dns01);
keyAuthString = client.ComputeKeyAuthorization(dnsChallenge);

// Do something to fullfill the challenge,
// e.g. upload key auth string to well known path, or make changes to DNS

Let`s say i try to get certificate for “test.example.com” where “example.com” is registered domain.

I tried to create txt record with keyAuthString value in _acme-challenge.test.example.com but process is always failed.

Can you give example how does this works?

[fszlin]

Could you confirm you are using the SHA-256 digest of the key authorization for the DNS record?

You may get the DNS value using this:

    var keyAuthBytes = Encoding.UTF8.GetBytes(keyAuthString);
    var sha256 = new Sha256Digest();
    var hashed = new byte[sha256.GetDigestSize()];

    sha256.BlockUpdate(keyAuthBytes, 0, keyAuthBytes.Length);
    sha256.DoFinal(hashed, 0);

    var dnsValue = JwsConvert.ToBase64String(hashed);

[fszlin]

Actually, you may just compile it for .NET 4.5 by using something like this in project.json:

"dependencies": {
  "Newtonsoft.Json": "9.0.1",
  "Portable.BouncyCastle": "1.8.1.1"
},
"frameworks": {
  "netstandard1.3": {
    "dependencies": {
      "System.Net.Http": "4.1.0",
      "System.Runtime.InteropServices": "4.1.0"
    }
  },
  "net45": {
    "frameworkAssemblies": {
      "System.Net.Http": ""
    }
  }
}

wrt the nuget package, contributions are welcome. 😛