Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docker最新版的镜像使用dns_ali会颁发证书失败,改用3.0.1版本可以颁发成功 #5136

Closed
uscwifi opened this issue May 6, 2024 · 1 comment

Comments

@uscwifi
Copy link

uscwifi commented May 6, 2024

日志显示是DNS查询超时,不知道是不是国内网络环境的原因,但是改用3.0.1版本颁发证书成功了 😂

镜像版本:

~]# docker images neilpang/acme.sh:latest 
REPOSITORY          TAG                 IMAGE ID            CREATED             SIZE
neilpang/acme.sh    latest              d8eab6b52214        6 days ago          36.1M

复现过程:

~]# docker run -d --name acme.sh -v /data/nginx:/data/nginx neilpang/acme.sh daemon
~]# docker exec -it acme.sh sh
/ # acme.sh --set-default-ca --server letsencrypt
/ # export Ali_Key="*******************************"
/ # export Ali_Secret="**************************"
/ # acme.sh --issue --dns dns_ali -d mydomain.com -d *.mydomain.com

日志

[Mon May  6 08:43:23 UTC 2024] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Mon May  6 08:43:23 UTC 2024] Multi domain='DNS:mydomain.com,DNS:*.mydomain.com'
[Mon May  6 08:43:29 UTC 2024] Getting webroot for domain='mydomain.com'
[Mon May  6 08:43:29 UTC 2024] Getting webroot for domain='*.mydomain.com'
[Mon May  6 08:43:29 UTC 2024] Adding txt value: y9kC1kXsOHC8W9OFGLpwFgIpwWsbvqFbBMfOPLusFk0 for domain:  _acme-challenge.mydomain.com
[Mon May  6 08:43:31 UTC 2024] The txt record is added: Success.
[Mon May  6 08:43:31 UTC 2024] Adding txt value: 0fPq04UWZsjQiFxaX-SuUG3VW8_VzIy4jzX8F-42n8w for domain:  _acme-challenge.mydomain.com
[Mon May  6 08:43:33 UTC 2024] The txt record is added: Success.
[Mon May  6 08:43:33 UTC 2024] Let's check each DNS record now. Sleep 20 seconds first.
[Mon May  6 08:43:54 UTC 2024] You can use '--dnssleep' to disable public dns checks.
[Mon May  6 08:43:54 UTC 2024] See: https://github.com/acmesh-official/acme.sh/wiki/dnscheck
[Mon May  6 08:43:54 UTC 2024] Checking mydomain.com for _acme-challenge.mydomain.com
[Mon May  6 08:43:54 UTC 2024] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 35
[Mon May  6 08:44:04 UTC 2024] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 28
[Mon May  6 08:44:04 UTC 2024] Not valid yet, let's wait 10 seconds and check next one.
[Mon May  6 08:44:21 UTC 2024] Checking mydomain.com for _acme-challenge.mydomain.com
[Mon May  6 08:44:21 UTC 2024] Domain mydomain.com '_acme-challenge.mydomain.com' success.
[Mon May  6 08:44:21 UTC 2024] Let's wait 10 seconds and check again.
[Mon May  6 08:44:32 UTC 2024] You can use '--dnssleep' to disable public dns checks.
[Mon May  6 08:44:32 UTC 2024] See: https://github.com/acmesh-official/acme.sh/wiki/dnscheck
[Mon May  6 08:44:32 UTC 2024] Checking mydomain.com for _acme-challenge.mydomain.com
[Mon May  6 08:44:33 UTC 2024] Domain mydomain.com '_acme-challenge.mydomain.com' success.
[Mon May  6 08:44:33 UTC 2024] Checking mydomain.com for _acme-challenge.mydomain.com
[Mon May  6 08:44:33 UTC 2024] Already success, continue next one.
[Mon May  6 08:44:33 UTC 2024] All success, let's return
[Mon May  6 08:44:33 UTC 2024] Verifying: mydomain.com
[Mon May  6 08:44:34 UTC 2024] Pending, The CA is processing your order, please just wait. (1/30)
[Mon May  6 08:44:38 UTC 2024] Pending, The CA is processing your order, please just wait. (2/30)
[Mon May  6 08:44:45 UTC 2024] Pending, The CA is processing your order, please just wait. (3/30)
[Mon May  6 08:44:49 UTC 2024] Pending, The CA is processing your order, please just wait. (4/30)
[Mon May  6 08:44:53 UTC 2024] Pending, The CA is processing your order, please just wait. (5/30)
[Mon May  6 08:44:58 UTC 2024] Pending, The CA is processing your order, please just wait. (6/30)
[Mon May  6 08:45:02 UTC 2024] Pending, The CA is processing your order, please just wait. (7/30)
[Mon May  6 08:45:06 UTC 2024] Invalid status, mydomain.com:Verify error detail:During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.mydomain.com
[Mon May  6 08:45:06 UTC 2024] Removing DNS records.
[Mon May  6 08:45:06 UTC 2024] Removing txt: y9kC1kXsOHC8W9OFGLpwFgIpwWsbvqFbBMfOPLusFk0 for domain: _acme-challenge.mydomain.com
[Mon May  6 08:45:08 UTC 2024] Removed: Success
[Mon May  6 08:45:08 UTC 2024] Removing txt: 0fPq04UWZsjQiFxaX-SuUG3VW8_VzIy4jzX8F-42n8w for domain: _acme-challenge.mydomain.com
[Mon May  6 08:45:11 UTC 2024] Removed: Success
[Mon May  6 08:45:11 UTC 2024] Please add '--debug' or '--log' to check more details.
[Mon May  6 08:45:11 UTC 2024] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

image

Copy link

github-actions bot commented May 6, 2024

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

@uscwifi uscwifi closed this as completed May 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant