-
-
Notifications
You must be signed in to change notification settings - Fork 4.8k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
acme.sh error Please check log file for more details: /root/.acme.sh/acme.sh.log #4768
Comments
Please upgrade to the latest code and try again first. Maybe it's already fixed. |
thank you [sre avg 30 12:39:04 CEST 2023] Running cmd: issue |
please upgrade to latest code and give the debug log again.
|
Thank you I did. DEBUG2 ' ' ' ' ' ' |
can you open this url of your server:
|
No I can't |
Steps to reproduce
acme.sh --issue -d mail.cpi.si -w /var/www/html --debug --log
Debug log
[sre avg 30 12:39:04 CEST 2023] Running cmd: issue
[sre avg 30 12:39:04 CEST 2023] _main_domain='mail.cpi.si'
[sre avg 30 12:39:04 CEST 2023] _alt_domains='no'
[sre avg 30 12:39:04 CEST 2023] Using config home:/root/.acme.sh
[sre avg 30 12:39:04 CEST 2023] default_acme_server
[sre avg 30 12:39:04 CEST 2023] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[sre avg 30 12:39:04 CEST 2023] DOMAIN_PATH='/root/.acme.sh/mail.cpi.si_ecc'
[sre avg 30 12:39:04 CEST 2023] Le_NextRenewTime
[sre avg 30 12:39:04 CEST 2023] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[sre avg 30 12:39:04 CEST 2023] _init api for server: https://acme.zerossl.com/v2/DV90
[sre avg 30 12:39:04 CEST 2023] GET
[sre avg 30 12:39:04 CEST 2023] url='https://acme.zerossl.com/v2/DV90'
[sre avg 30 12:39:04 CEST 2023] timeout=
[sre avg 30 12:39:04 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[sre avg 30 12:39:05 CEST 2023] ret='0'
[sre avg 30 12:39:05 CEST 2023] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[sre avg 30 12:39:05 CEST 2023] ACME_NEW_AUTHZ
[sre avg 30 12:39:05 CEST 2023] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[sre avg 30 12:39:05 CEST 2023] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[sre avg 30 12:39:05 CEST 2023] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[sre avg 30 12:39:05 CEST 2023] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20230516_Certificate_Subscriber_Agreement_v_2_6_click.pdf'
[sre avg 30 12:39:05 CEST 2023] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[sre avg 30 12:39:05 CEST 2023] Using CA: https://acme.zerossl.com/v2/DV90
[sre avg 30 12:39:05 CEST 2023] _on_before_issue
[sre avg 30 12:39:05 CEST 2023] _chk_main_domain='mail.cpi.si'
[sre avg 30 12:39:05 CEST 2023] _chk_alt_domains
[sre avg 30 12:39:05 CEST 2023] Le_LocalAddress
[sre avg 30 12:39:05 CEST 2023] d='mail.cpi.si'
[sre avg 30 12:39:05 CEST 2023] Check for domain='mail.cpi.si'
[sre avg 30 12:39:05 CEST 2023] _currentRoot='/var/www/html'
[sre avg 30 12:39:05 CEST 2023] d
[sre avg 30 12:39:05 CEST 2023] _saved_account_key_hash is not changed, skip register account.
[sre avg 30 12:39:05 CEST 2023] Read key length:ec-256
[sre avg 30 12:39:05 CEST 2023] _createcsr
[sre avg 30 12:39:05 CEST 2023] Single domain='mail.cpi.si'
[sre avg 30 12:39:05 CEST 2023] Getting domain auth token for each domain
[sre avg 30 12:39:05 CEST 2023] d
[sre avg 30 12:39:05 CEST 2023] =======Begin Send Signed Request=======
[sre avg 30 12:39:05 CEST 2023] url='https://acme.zerossl.com/v2/DV90/newOrder'
[sre avg 30 12:39:05 CEST 2023] payload='{"identifiers": [{"type":"dns","value":"mail.cpi.si"}]}'
[sre avg 30 12:39:05 CEST 2023] EC key
[sre avg 30 12:39:05 CEST 2023] HEAD
[sre avg 30 12:39:05 CEST 2023] _post_url='https://acme.zerossl.com/v2/DV90/newNonce'
[sre avg 30 12:39:05 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g -I '
[sre avg 30 12:39:13 CEST 2023] _ret='0'
[sre avg 30 12:39:13 CEST 2023] POST
[sre avg 30 12:39:13 CEST 2023] _post_url='https://acme.zerossl.com/v2/DV90/newOrder'
[sre avg 30 12:39:13 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[sre avg 30 12:39:20 CEST 2023] _ret='0'
[sre avg 30 12:39:20 CEST 2023] code='201'
[sre avg 30 12:39:20 CEST 2023] Le_LinkOrder='https://acme.zerossl.com/v2/DV90/order/tFkEdWr_EKjMttia4BWGKQ'
[sre avg 30 12:39:20 CEST 2023] Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/tFkEdWr_EKjMttia4BWGKQ/finalize'
[sre avg 30 12:39:20 CEST 2023] =======Begin Send Signed Request=======
[sre avg 30 12:39:20 CEST 2023] url='https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA'
[sre avg 30 12:39:20 CEST 2023] payload
[sre avg 30 12:39:20 CEST 2023] POST
[sre avg 30 12:39:20 CEST 2023] _post_url='https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA'
[sre avg 30 12:39:20 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[sre avg 30 12:39:21 CEST 2023] _ret='0'
[sre avg 30 12:39:22 CEST 2023] code='200'
[sre avg 30 12:39:22 CEST 2023] d='mail.cpi.si'
[sre avg 30 12:39:22 CEST 2023] Getting webroot for domain='mail.cpi.si'
[sre avg 30 12:39:22 CEST 2023] _w='/var/www/html'
[sre avg 30 12:39:22 CEST 2023] _currentRoot='/var/www/html'
[sre avg 30 12:39:22 CEST 2023] _authz_url='https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA'
[sre avg 30 12:39:22 CEST 2023] entry='"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA","status":"pending","token":"nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM"'
[sre avg 30 12:39:22 CEST 2023] token='nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM'
[sre avg 30 12:39:22 CEST 2023] uri='https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA'
[sre avg 30 12:39:22 CEST 2023] keyauthorization='nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM.jVBg8sWurGFu5GLRxK8Va-WearnArQmkznF96uSfuv0'
[sre avg 30 12:39:22 CEST 2023] dvlist='mail.cpi.si#nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM.jVBg8sWurGFu5GLRxK8Va-WearnArQmkznF96uSfuv0#https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA#http-01#/var/www/html#https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA'
[sre avg 30 12:39:22 CEST 2023] d
[sre avg 30 12:39:22 CEST 2023] vlist='mail.cpi.si#nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM.jVBg8sWurGFu5GLRxK8Va-WearnArQmkznF96uSfuv0#https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA#http-01#/var/www/html#https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA,'
[sre avg 30 12:39:22 CEST 2023] d='mail.cpi.si'
[sre avg 30 12:39:22 CEST 2023] ok, let's start to verify
[sre avg 30 12:39:22 CEST 2023] Verifying: mail.cpi.si
[sre avg 30 12:39:22 CEST 2023] d='mail.cpi.si'
[sre avg 30 12:39:22 CEST 2023] keyauthorization='nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM.jVBg8sWurGFu5GLRxK8Va-WearnArQmkznF96uSfuv0'
[sre avg 30 12:39:22 CEST 2023] uri='https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA'
[sre avg 30 12:39:22 CEST 2023] _authz_url='https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA'
[sre avg 30 12:39:22 CEST 2023] _currentRoot='/var/www/html'
[sre avg 30 12:39:22 CEST 2023] wellknown_path='/var/www/html/.well-known/acme-challenge'
[sre avg 30 12:39:22 CEST 2023] writing token:nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM to /var/www/html/.well-known/acme-challenge/nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM
[sre avg 30 12:39:22 CEST 2023] =======Begin Send Signed Request=======
[sre avg 30 12:39:22 CEST 2023] url='https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA'
[sre avg 30 12:39:22 CEST 2023] payload='{}'
[sre avg 30 12:39:22 CEST 2023] POST
[sre avg 30 12:39:22 CEST 2023] _post_url='https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA'
[sre avg 30 12:39:22 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[sre avg 30 12:39:28 CEST 2023] _ret='0'
[sre avg 30 12:39:28 CEST 2023] code='200'
[sre avg 30 12:39:28 CEST 2023] trigger validation code: 200
[sre avg 30 12:39:28 CEST 2023] Lets check the status of the authz
[sre avg 30 12:39:28 CEST 2023] Processing, The CA is processing your order, please just wait. (1/30)
[sre avg 30 12:39:28 CEST 2023] sleep 2 secs to verify again
[sre avg 30 12:39:31 CEST 2023] checking
[sre avg 30 12:39:31 CEST 2023] =======Begin Send Signed Request=======
[sre avg 30 12:39:31 CEST 2023] url='https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA'
[sre avg 30 12:39:31 CEST 2023] payload
[sre avg 30 12:39:32 CEST 2023] POST
[sre avg 30 12:39:32 CEST 2023] _post_url='https://acme.zerossl.com/v2/DV90/authz/s98RJYeRzMT4CSN8aUKphA'
[sre avg 30 12:39:32 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[sre avg 30 12:39:35 CEST 2023] _ret='0'
[sre avg 30 12:39:35 CEST 2023] code='200'
[sre avg 30 12:39:35 CEST 2023] mail.cpi.si:Verify error:"error":{
[sre avg 30 12:39:35 CEST 2023] Debug: get token url.
[sre avg 30 12:39:35 CEST 2023] GET
[sre avg 30 12:39:35 CEST 2023] url='http://mail.cpi.si/.well-known/acme-challenge/nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM'
[sre avg 30 12:39:35 CEST 2023] timeout=1
[sre avg 30 12:39:35 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g --connect-timeout 1'
[sre avg 30 12:39:35 CEST 2023] ret='0'
[sre avg 30 12:39:35 CEST 2023] Debugging, skip removing: /var/www/html/.well-known/acme-challenge/nSCUZPLOmKL-KuPeH1_D0D_0evDk0dF9MVUx1QBx8LM
[sre avg 30 12:39:35 CEST 2023] pid
[sre avg 30 12:39:35 CEST 2023] No need to restore nginx, skip.
[sre avg 30 12:39:35 CEST 2023] _clearupdns
[sre avg 30 12:39:35 CEST 2023] dns_entries
[sre avg 30 12:39:35 CEST 2023] skip dns.
[sre avg 30 12:39:35 CEST 2023] _on_issue_err
[sre avg 30 12:39:35 CEST 2023] Please check log file for more details: /root/.acme.sh/acme.sh.log
[sre avg 30 12:39:35 CEST 2023] =======Begin Send Signed Request=======
[sre avg 30 12:39:35 CEST 2023] url='https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA'
[sre avg 30 12:39:35 CEST 2023] payload='{}'
[sre avg 30 12:39:35 CEST 2023] POST
[sre avg 30 12:39:35 CEST 2023] _post_url='https://acme.zerossl.com/v2/DV90/chall/Wrx_zCAjrWGJGkSjPHgAaA'
[sre avg 30 12:39:35 CEST 2023] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g '
[sre avg 30 12:39:40 CEST 2023] _ret='0'
[sre avg 30 12:39:40 CEST 2023] code='200'
[sre avg 30 12:39:40 CEST 2023] Diagnosis versions:
openssl:openssl
OpenSSL 1.1.1k FIPS 25 Mar 2021
apache:
apache doesn't exist.
nginx:
nginx version: nginx/1.14.1
built by gcc 8.5.0 20210514 (Red Hat 8.5.0-3) (GCC)
built with OpenSSL 1.1.1k FIPS 25 Mar 2021
TLS SNI support enabled
configure arguments: --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --user=nginx --group=nginx --with-file-aio --with-ipv6 --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module=dynamic --with-http_auth_request_module --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-debug --with-cc-opt='-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-E'
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.4.1 on Apr 21 2021 15:36:49
running on Linux version #1 SMP Tue Aug 22 16:03:20 UTC 2023, release 4.18.0-512.el8.x86_64, machine x86_64
features:
#define WITH_STDIO 1
#define WITH_FDNUM 1
#define WITH_FILE 1
#define WITH_CREAT 1
#define WITH_GOPEN 1
#define WITH_TERMIOS 1
#define WITH_PIPE 1
#define WITH_UNIX 1
#define WITH_ABSTRACT_UNIXSOCKET 1
#define WITH_IP4 1
#define WITH_IP6 1
#define WITH_RAWIP 1
#define WITH_GENERICSOCKET 1
#define WITH_INTERFACE 1
#define WITH_TCP 1
#define WITH_UDP 1
#define WITH_SCTP 1
#define WITH_LISTEN 1
#define WITH_SOCKS4 1
#define WITH_SOCKS4A 1
#define WITH_VSOCK 1
#define WITH_PROXY 1
#define WITH_SYSTEM 1
#define WITH_EXEC 1
#define WITH_READLINE 1
#define WITH_TUN 1
#define WITH_PTY 1
#define WITH_OPENSSL 1
#undef WITH_FIPS
#undef WITH_LIBWRAP
#define WITH_SYCLS 1
#define WITH_FILAN 1
#define WITH_RETRY 1
#define WITH_MSGLEVEL 0 /debug/
The text was updated successfully, but these errors were encountered: