3 people 55ccb9fe61 fix: DNS Manual SSL certificate issues for wildcard domains (#11642) ...

This fix addresses three bugs in the DNS Manual SSL certificate flow:

1. **Order caching fails when Expires is zero**: ACME orders often have
   zero Expires initially. The condition `!Expires.IsZero()` caused valid
   cached orders to be deleted and recreated with different TXT values.
   Fixed by checking `Expires.IsZero() || Expires.After(now)`.

2. **Wildcard and base domain TXT records overwrite each other**: When
   requesting SSL for both `example.com` and `*.example.com`, both
   authorizations have identifier `example.com`, causing one TXT value
   to overwrite the other. Fixed by using `*.domain` as the map key.

3. **Only first TXT record checked**: When multiple TXT records exist,
   only the first was checked. Fixed by returning all TXT values and
   checking if expected value exists in any of them.

```release-note
Fix DNS Manual SSL certificate issues for wildcard domains
```

Co-authored-by: DeployThemAll <deploythemall@users.noreply.github.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-15 10:42:59 +08:00

..

acme.go

feat: update Let's Encrypt to official endpoint (#11444)

2025-12-24 11:24:17 +08:00

client.go

fix: add missing intermediate certificates for IP certificate requests (#11470)

2025-12-26 08:31:03 +00:00

dns_provider.go

feat: add support for Porkbun DNS provider (#11614)

2026-01-14 10:38:12 +08:00

manual_client.go

fix: DNS Manual SSL certificate issues for wildcard domains (#11642)

2026-01-15 10:42:59 +08:00