sub-domain DNS error (Unable to rotate DNS challenges)

[ScubaDrew]

I can issue a cert for my root domain with out any issue, but sub-domains result in an error. Thanks for any guidance!

➜  ~ sudo certbot certonly -d xxx.com,gitlab.xxx.com --server "https://dv.acme-v02.api.pki.goog/directory" --authenticator 'dns-google-domains' --dns-google-domains-credentials '/var/lib/letsencrypt/dns_google_domains_credentials.ini'
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
You have an existing certificate that contains a portion of the domains you
requested (ref: /etc/letsencrypt/renewal/xxx.com.conf)

It contains these names: xxx.com

You requested these names for the new certificate: xxx.com,
gitlab.xxx.com.

Do you want to expand and replace this existing certificate with the new
certificate?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(E)xpand/(C)ancel: E
Renewing an existing certificate for xxx.com and gitlab.xxx.com
Encountered exception during recovery: certbot.errors.PluginError: Unable to rotate DNS challenges: 400 Client Error: Bad Request for url: https://acmedns.googleapis.com/v1/acmeChallengeSets/gitlab.xxx.com:rotateChallenges
Unable to rotate DNS challenges: 400 Client Error: Bad Request for url: https://acmedns.googleapis.com/v1/acmeChallengeSets/gitlab.xxx.com:rotateChallenges

[aaomidi]

Thanks for reporting this!

[aaomidi]

Ah one of those classic mistakes. I wrongly assumed that the backend will handle subdomains with 🪄 . PR #11 should fix this problem.

[ScubaDrew]

Thanks @aaomidi 🪄 fix! Appreciate it.

[ttocsr]

Thanks for making this and fixing this. I was trying to get this working in nginx proxy manager and came to open an issue.
It looks like your release workflow failed so 0.1.3 didn't become a release.

[aaomidi]

@ttocsr Thanks! Forgot that I don't have the pypi automation setup yet. Creating a bug to remember it too (#13). Here's the updated package: https://pypi.org/project/certbot-dns-google-domains/