https://andreas.scherbaum.la/tags/bind/Recent content in Bind on ads' cornerHugoen-usMon, 09 Jun 2025 00:00:00 +0200https://andreas.scherbaum.la/post/2025-06-09_certbot-on-debian-bookworm-fails-with-the-peer-didnt-know-the-key-we-used/Mon, 09 Jun 2025 00:00:00 +0200https://andreas.scherbaum.la/post/2025-06-09_certbot-on-debian-bookworm-fails-with-the-peer-didnt-know-the-key-we-used/<p>Was setting up a new <em>Debian Bookworm</em> system in my home environment. So far I was not using certificates at home, and wanted to change this along the way, using <a href="https://en.wikipedia.org/wiki/Let%27s_Encrypt">Let&rsquo;s Encrypt</a>. Since the IP-addresses here are <a href="https://en.wikipedia.org/wiki/Private_network">RFC1918</a>, I can&rsquo;t use the <a href="https://letsencrypt.org/docs/challenge-types/">http01 challenge</a>, and have to resort to dns01 challenges. On <a href="https://packages.debian.org/bookworm/">Debian Bookworm</a>, using <a href="https://certbot.eff.org/">certbot</a>, this fails reproducible.</p> <div class="highlight"><div style="background-color:#f7f7f7;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"> <table style="border-spacing:0;padding:0;margin:0;border:0;"><tr><td style="vertical-align:top;padding:0;margin:0;border:0;"> <pre tabindex="0" style="background-color:#f7f7f7;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code><span style="white-space:pre;-webkit-user-select:none;user-select:none;margin-right:0.4em;padding:0 0.4em 0 0.4em;color:#7f7f7f">1 </span></code></pre></td> <td style="vertical-align:top;padding:0;margin:0;border:0;;width:100%"> <pre tabindex="0" style="background-color:#f7f7f7;-moz-tab-size:4;-o-tab-size:4;tab-size:4;-webkit-text-size-adjust:none;"><code class="language-plaintext" data-lang="plaintext"><span style="display:flex;"><span>Encountered error when making query: The peer didn&#39;t know the key we used </span></span></code></pre></td></tr></table> </div> </div><p>Note: Domain names in this blog posting are protected, I&rsquo;m not really using the <code>home</code> zone but a valid domain name.</p>