search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.67k stars 4.91k forks source link

Digital Ocean DNS API not tidying up #1122

Open xyleth opened 6 years ago

xyleth commented 6 years ago

Hello,

When I'm using the Digital Ocean DNS API to issue certificates the process mostly works and the cert gets issues, but it fails at the end with the following error:

[Mon 27 Nov 10:09:14 UTC 2017] Using digitalocean dns validation - remove record [Mon 27 Nov 10:09:16 UTC 2017] no record and no nextpage in digital ocean DNS removal [Mon 27 Nov 10:09:16 UTC 2017] Error removing txt for domain:_acme-

and leaves behind the validation TXT records in my DNS Zone file which need to be cleared out by hand. I've run a debug on a test cert request and include the output below. I'm afraid my shell scripting isn't up to debugging the code directly but if there's anything else I can do to help please let me know - this is an great tool and I'm happy to provide feedback.

I am using the latest version (updated last night) and I've searched the issues page for similar key words and can't find anything hence raising the new ticket. The only change I have made to the debug output is to obscure my API key with DEADBEEF for reasons that I hope are obvious.

Steps to reproduce

acme.sh --issue --dns dns_dgon -d test.local.xyleth.co.uk --debug 2

Debug log

[Mon 27 Nov 10:26:00 UTC 2017] Lets find script dir. [Mon 27 Nov 10:26:00 UTC 2017] SCRIPT='/home/pi/.acme.sh/acme.sh' [Mon 27 Nov 10:26:00 UTC 2017] _script='/home/pi/.acme.sh/acme.sh' [Mon 27 Nov 10:26:00 UTC 2017] _script_home='/home/pi/.acme.sh' [Mon 27 Nov 10:26:00 UTC 2017] Using config home:/home/pi/.acme.sh [Mon 27 Nov 10:26:00 UTC 2017] LE_WORKING_DIR='/home/pi/.acme.sh' [Mon 27 Nov 10:26:00 UTC 2017] Using config home:/home/pi/.acme.sh [Mon 27 Nov 10:26:00 UTC 2017] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Mon 27 Nov 10:26:00 UTC 2017] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org' [Mon 27 Nov 10:26:00 UTC 2017] DOMAIN_PATH='/home/pi/.acme.sh/test.local.xyleth.co.uk' [Mon 27 Nov 10:26:00 UTC 2017] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory [Mon 27 Nov 10:26:00 UTC 2017] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Mon 27 Nov 10:26:00 UTC 2017] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change' [Mon 27 Nov 10:26:00 UTC 2017] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Mon 27 Nov 10:26:00 UTC 2017] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert' [Mon 27 Nov 10:26:00 UTC 2017] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg' [Mon 27 Nov 10:26:00 UTC 2017] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert' [Mon 27 Nov 10:26:01 UTC 2017] _on_before_issue [Mon 27 Nov 10:26:01 UTC 2017] 'dns_dgon' does not contain 'no' [Mon 27 Nov 10:26:01 UTC 2017] Le_LocalAddress [Mon 27 Nov 10:26:01 UTC 2017] Check for domain='test.local.xyleth.co.uk' [Mon 27 Nov 10:26:01 UTC 2017] _currentRoot='dns_dgon' [Mon 27 Nov 10:26:01 UTC 2017] 'dns_dgon' does not contain 'apache' [Mon 27 Nov 10:26:01 UTC 2017] _saved_account_key_hash='lVuzTvtmqx5SedJUGSYmQR0tdJtPB0vjPq6hvkHPZGY=' [Mon 27 Nov 10:26:01 UTC 2017] _saved_account_key_hash is not changed, skip register account. [Mon 27 Nov 10:26:01 UTC 2017] Read key length: [Mon 27 Nov 10:26:01 UTC 2017] Use DEFAULT_DOMAIN_KEY_LENGTH=2048 [Mon 27 Nov 10:26:01 UTC 2017] Using config home:/home/pi/.acme.sh [Mon 27 Nov 10:26:01 UTC 2017] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Mon 27 Nov 10:26:01 UTC 2017] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org' [Mon 27 Nov 10:26:01 UTC 2017] _createkey for file:/home/pi/.acme.sh/test.local.xyleth.co.uk/test.local.xyleth.co.uk.key [Mon 27 Nov 10:26:01 UTC 2017] Use length 2048 [Mon 27 Nov 10:26:01 UTC 2017] Using RSA: 2048 [Mon 27 Nov 10:26:03 UTC 2017] _createcsr [Mon 27 Nov 10:26:03 UTC 2017] domain='test.local.xyleth.co.uk' [Mon 27 Nov 10:26:03 UTC 2017] domainlist [Mon 27 Nov 10:26:03 UTC 2017] csrkey='/home/pi/.acme.sh/test.local.xyleth.co.uk/test.local.xyleth.co.uk.key' [Mon 27 Nov 10:26:03 UTC 2017] csr='/home/pi/.acme.sh/test.local.xyleth.co.uk/test.local.xyleth.co.uk.csr' [Mon 27 Nov 10:26:03 UTC 2017] csrconf='/home/pi/.acme.sh/test.local.xyleth.co.uk/test.local.xyleth.co.uk.csr.conf' [Mon 27 Nov 10:26:03 UTC 2017] _is_idn_d='test.local.xyleth.co.uk' [Mon 27 Nov 10:26:03 UTC 2017] _idn_temp [Mon 27 Nov 10:26:03 UTC 2017] _csr_cn='test.local.xyleth.co.uk' [Mon 27 Nov 10:26:03 UTC 2017] _w='dns_dgon' [Mon 27 Nov 10:26:03 UTC 2017] _currentRoot='dns_dgon' [Mon 27 Nov 10:26:03 UTC 2017] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Mon 27 Nov 10:26:03 UTC 2017] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change' [Mon 27 Nov 10:26:03 UTC 2017] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Mon 27 Nov 10:26:03 UTC 2017] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert' [Mon 27 Nov 10:26:03 UTC 2017] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg' [Mon 27 Nov 10:26:03 UTC 2017] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert' [Mon 27 Nov 10:26:03 UTC 2017] Try new-authz for the 0 time. [Mon 27 Nov 10:26:03 UTC 2017] _is_idn_d='test.local.xyleth.co.uk' [Mon 27 Nov 10:26:03 UTC 2017] _idn_temp [Mon 27 Nov 10:26:03 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Mon 27 Nov 10:26:03 UTC 2017] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "test.local.xyleth.co.uk"}}' [Mon 27 Nov 10:26:03 UTC 2017] RSA key [Mon 27 Nov 10:26:03 UTC 2017] Get nonce. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Mon 27 Nov 10:26:03 UTC 2017] GET [Mon 27 Nov 10:26:03 UTC 2017] url='https://acme-v01.api.letsencrypt.org/directory' [Mon 27 Nov 10:26:03 UTC 2017] timeout [Mon 27 Nov 10:26:03 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.bYsEHcMuCY ' [Mon 27 Nov 10:26:04 UTC 2017] ret='0' [Mon 27 Nov 10:26:04 UTC 2017] _headers='HTTP/1.1 200 OK Server: nginx Content-Type: application/json Content-Length: 562 Replay-Nonce: kxmgFqchITsOfnao2mlXk2L-JNicr0FplxQnkscx8tw X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Mon, 27 Nov 2017 10:26:04 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 27 Nov 2017 10:26:04 GMT Connection: keep-alive ' [Mon 27 Nov 10:26:04 UTC 2017] _CACHED_NONCE='kxmgFqchITsOfnao2mlXk2L-JNicr0FplxQnkscx8tw' [Mon 27 Nov 10:26:04 UTC 2017] nonce='kxmgFqchITsOfnao2mlXk2L-JNicr0FplxQnkscx8tw' [Mon 27 Nov 10:26:04 UTC 2017] POST [Mon 27 Nov 10:26:04 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Mon 27 Nov 10:26:04 UTC 2017] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "x1HN7ObHyVGWtlFqHJ2KKYq0eG8OxK06kCzclm0908MPHMCMVyBVavA-cvCrTFeNb99SBTaqH9893sZmdvahG8RcaJVW9qcIGYesjdTe-VBbHQCOQlEDrhntJDCwqJ_wuFIT_jSXmetsOHLLZkyxNInpD_8mLHhp2JIPRkAle8DO4ZRldxOi25hTK8MpAdWO5Ja2kEb9OLEvuopIeTslmN0kYud6IVPXj26T1c5wOSLP2eboGAy1bsqy9S3IoEjuAR1gvwShsVo_EcqYaErM5bTfvBA-ne7ad_VjHXwN4MBdAS6oMde1_GT-S3DjniSXy_LNMpisse-KAnTQMaGVcw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAidGVzdC5sb2NhbC54eWxldGguY28udWsifX0", "signature": "bXyKM0WkxkhoEqg3K3gU3GsbHkKtTdUngcjQkz1lZZaEOAEJWYOby0I8nvG8D6KuZIbgRIcJls7PfDX718p5ZvYKMUTRsCXYFvxBP_mpwqRdN34Qf9QlNm5aDEsMyfGXcEIPcDQnhvOEiYl0HKKmyJKKqz3GjYrPHcLv-InEllMK357WjXQ3sIaOiQKMy9PHs-Tic9A9GJD9F5DImFMCY7tU6GK9WD5aCb0KoX_VAMq0GGT-SWBCiGFU1E5EB-8TAxou8DZ2zA04aoL5PWBXV1b_iIVy0Hd0jE41Ip7TxgYHoT9NNQd6PNuD7lsmxYxFJ_6lhU8Z_TsnSCTQeODwrA"}' [Mon 27 Nov 10:26:04 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.sla9oxYwod ' [Mon 27 Nov 10:26:05 UTC 2017] _ret='0' [Mon 27 Nov 10:26:05 UTC 2017] original='{ "identifier": { "type": "dns", "value": "test.local.xyleth.co.uk" }, "status": "pending", "expires": "2017-12-04T10:26:05.232511196Z", "challenges": [ { "type": "http-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990579", "token": "JFnOLmGSRrx4VZ2gv2gL4ZzT8IVh220jbKtRsb2Zr4I" }, { "type": "tls-sni-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990580", "token": "djl3Flk9gLfn1Zq0YZvQoCZWLMX_Wt5RhAFcUqG5mfg" }, { "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581", "token": "Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw" } ], "combinations": [ [ 1 ], [ 0 ], [ 2 ] ] }' [Mon 27 Nov 10:26:05 UTC 2017] responseHeaders='HTTP/1.1 100 Continue Expires: Mon, 27 Nov 2017 10:26:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache

HTTP/1.1 201 Created Server: nginx Content-Type: application/json Content-Length: 1011 Boulder-Requester: 24919877 Link: https://acme-v01.api.letsencrypt.org/acme/new-cert;rel="next" Location: https://acme-v01.api.letsencrypt.org/acme/authz/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s Replay-Nonce: HBMA2P8WXdPPFTUOfHmAG8hP_6VwIgwnieCoWeLuwnU X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Mon, 27 Nov 2017 10:26:05 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 27 Nov 2017 10:26:05 GMT Connection: keep-alive ' [Mon 27 Nov 10:26:05 UTC 2017] response='{"identifier":{"type":"dns","value":"test.local.xyleth.co.uk"},"status":"pending","expires":"2017-12-04T10:26:05.232511196Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990579","token":"JFnOLmGSRrx4VZ2gv2gL4ZzT8IVh220jbKtRsb2Zr4I"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990580","token":"djl3Flk9gLfn1Zq0YZvQoCZWLMX_Wt5RhAFcUqG5mfg"},{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581","token":"Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw"}],"combinations":[[1],[0],[2]]}' [Mon 27 Nov 10:26:05 UTC 2017] code='201' [Mon 27 Nov 10:26:05 UTC 2017] entry='"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581","token":"Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw"' [Mon 27 Nov 10:26:05 UTC 2017] token='Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw' [Mon 27 Nov 10:26:05 UTC 2017] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581' [Mon 27 Nov 10:26:05 UTC 2017] keyauthorization='Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-GvLA' [Mon 27 Nov 10:26:05 UTC 2017] dvlist='test.local.xyleth.co.uk#Gn-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA#https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581#dns-01#dns_dgon' [Mon 27 Nov 10:26:05 UTC 2017] vlist='test.local.xyleth.co.uk#Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA#https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581#dns-01#dns_dgon,' [Mon 27 Nov 10:26:05 UTC 2017] txtdomain='_acme-challenge.test.local.xyleth.co.uk' [Mon 27 Nov 10:26:05 UTC 2017] txt='9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY' [Mon 27 Nov 10:26:05 UTC 2017] d_api='/home/pi/.acme.sh/dnsapi/dns_dgon.sh' [Mon 27 Nov 10:26:05 UTC 2017] fulldomain='_acme-challenge.test.local.xyleth.co.uk' [Mon 27 Nov 10:26:05 UTC 2017] txtvalue='9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY' [Mon 27 Nov 10:26:05 UTC 2017] fulldomain='_acme-challenge.test.local.xyleth.co.uk' [Mon 27 Nov 10:26:05 UTC 2017] DO_API_KEY='DEADBEEF' [Mon 27 Nov 10:26:05 UTC 2017] GET [Mon 27 Nov 10:26:05 UTC 2017] url='https://api.digitalocean.com/v2/domains' [Mon 27 Nov 10:26:05 UTC 2017] timeout [Mon 27 Nov 10:26:05 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.GH7ayH6iBQ ' [Mon 27 Nov 10:26:06 UTC 2017] ret='0' [Mon 27 Nov 10:26:06 UTC 2017] domain_list='{"domains":[{"name":"xyleth.co.uk","ttl":1800,"zone_file":"$ORIGIN xyleth.co.uk.\n$TTL 1800\nxyleth.co.uk. IN SOA ns1.digitalocean.com. hostmaster.xyleth.co.uk. 1511777227 10800 3600 604800 1800\nxyleth.co.uk. 1800 IN NS ns1.digitalocean.com.\nxyleth.co.uk. 1800 IN NS ns2.digitalocean.com.\nxyleth.co.uk. 1800 IN NS ns3.digitalocean.com.\nexchange.xyleth.co.uk. 3600 IN A 217.171.193.192\nmail.xyleth.co.uk. 3600 IN A 213.171.216.40\nmailserver.xyleth.co.uk. 3600 IN A 213.171.216.40\nmcp.xyleth.co.uk. 3600 IN A 213.171.195.10\nsmtp.xyleth.co.uk. 3600 IN A 213.171.216.50\nwebmail.xyleth.co.uk. 3600 IN A 213.171.216.231\nmqtt.xyleth.co.uk. 3600 IN A 138.68.171.226\nxyleth.co.uk. 14400 IN MX 10 mailserver.xyleth.co.uk.\n_acme-challenge.control.local.xyleth.co.uk. 1800 IN TXT dBygn_EQGIt_w3x6mujdAFXRUHOnoGHbDxMqI59DJYE\n_acme-challenge.dashboard.local.xyleth.co.uk. 1800 IN TXT _bzDMEBhKIO8WBJnKI4vesPObLSVGwx28Ehrj3SNeQM\n"}],"links":{},"meta":{"total":1}}' [Mon 27 Nov 10:26:07 UTC 2017] _domain='xyleth.co.uk' [Mon 27 Nov 10:26:07 UTC 2017] _sub_domain='_acme-challenge.test.local' [Mon 27 Nov 10:26:07 UTC 2017] _sub_domain='_acme-challenge.test.local' [Mon 27 Nov 10:26:07 UTC 2017] _domain='xyleth.co.uk' [Mon 27 Nov 10:26:07 UTC 2017] PURL='https://api.digitalocean.com/v2/domains/xyleth.co.uk/records' [Mon 27 Nov 10:26:07 UTC 2017] PBODY='{"type":"TXT","name":"_acme-challenge.test.local","data":"9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY"}' [Mon 27 Nov 10:26:07 UTC 2017] POST [Mon 27 Nov 10:26:07 UTC 2017] url='https://api.digitalocean.com/v2/domains/xyleth.co.uk/records' [Mon 27 Nov 10:26:07 UTC 2017] body='{"type":"TXT","name":"_acme-challenge.test.local","data":"9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY"}' [Mon 27 Nov 10:26:07 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.PVUfJelicb ' [Mon 27 Nov 10:26:08 UTC 2017] _ret='0' [Mon 27 Nov 10:26:08 UTC 2017] response='{"domain_record":{"id":31034839,"type":"TXT","name":"acme-challenge.test.local","data":"9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY","priority":null,"port":null,"ttl":1800,"weight":null,"flags":null,"tag":null}}' [Mon 27 Nov 10:28:08 UTC 2017] ok, let's start to verify [Mon 27 Nov 10:28:08 UTC 2017] d='test.local.xyleth.co.uk' [Mon 27 Nov 10:28:08 UTC 2017] keyauthorization='Gn-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA' [Mon 27 Nov 10:28:08 UTC 2017] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581' [Mon 27 Nov 10:28:08 UTC 2017] _currentRoot='dns_dgon' [Mon 27 Nov 10:28:08 UTC 2017] tigger domain validation. [Mon 27 Nov 10:28:08 UTC 2017] _t_url='https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581' [Mon 27 Nov 10:28:08 UTC 2017] _t_keyauthz='Gn-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA' [Mon 27 Nov 10:28:08 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581' [Mon 27 Nov 10:28:08 UTC 2017] payload='{"resource": "challenge", "keyAuthorization": "Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA"}' [Mon 27 Nov 10:28:08 UTC 2017] Use cached jwk for file: /home/pi/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key [Mon 27 Nov 10:28:08 UTC 2017] Use _CACHED_NONCE='HBMA2P8WXdPPFTUOfHmAG8hP_6VwIgwnieCoWeLuwnU' [Mon 27 Nov 10:28:08 UTC 2017] nonce='HBMA2P8WXdPPFTUOfHmAG8hP_6VwIgwnieCoWeLuwnU' [Mon 27 Nov 10:28:08 UTC 2017] POST [Mon 27 Nov 10:28:08 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581' [Mon 27 Nov 10:28:08 UTC 2017] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "x1HN7ObHyVGWtlFqHJ2KKYq0eG8OxK06kCzclm0908MPHMCMVyBVavA-cvCrTFeNb99SBTaqH9893sZmdvahG8RcaJVW9qcIGYesjdTe-VBbHQCOQlEDrhntJDCwqJ_wuFIT_jSXmetsOHLLZkyxNInpD_8mLHhp2JIPRkAle8DO4ZRldxOi25hTK8MpAdWO5Ja2kEb9OLEvuopIeTslmN0kYud6IVPXj26T1c5wOSLP2eboGAy1bsqy9S3IoEjuAR1gvwShsVo_EcqYaErM5bTfvBA-ne7ad_VjHXwN4MBdAS6oMde1_GT-S3DjniSXy_LNMpisse-KAnTQMaGVcw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJHbl8tTFhlOVhRWG5MeGx5VmhycEczN0dlckV3R0pOOFRRc1REN0xDc2N3Lm5OSUdHUjdXaW41MndUS0dMQmRWclM1Q0hPY21NOWg3dEdSeHMtX0d2TEEifQ", "signature": "Q-Z83SEnWoLtRKRJgTVDA5X-fprXfnmqQCpAKZe8G6MAS1xL0rAbCoXw03B_nz5KrbIsg_ywzAkwHVfwP-OKvibjMIGx06T65LbvPApnWdx6F89pGcZNHcxTPuyw9UIBuSoUw1t02Cr-8VR7kztsTGnf9B25vOnnQadfV6y43YSv2X74EW8yaw4LhieeJ0pr1uiVUwaatkz9R7HLu-k8J2JIIphkTfgQHqbvD7BzVyiqBqDRJRwkcg4FipNuKlZIB0YLIj9QRkx7S3Z3Hq6qZckA8Na8OIT45w_w1JTbiodznKDE3SsJ3QzOG93HrUylRrhH-AjF8eT48SgAXqjGtA"}' [Mon 27 Nov 10:28:08 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.1017E3drmP ' [Mon 27 Nov 10:28:09 UTC 2017] _ret='0' [Mon 27 Nov 10:28:09 UTC 2017] original='{ "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581", "token": "Gn-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw", "keyAuthorization": "Gn-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA" }' [Mon 27 Nov 10:28:09 UTC 2017] responseHeaders='HTTP/1.1 100 Continue Expires: Mon, 27 Nov 2017 10:28:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache

HTTP/1.1 202 Accepted Server: nginx Content-Type: application/json Content-Length: 335 Boulder-Requester: 24919877 Link: https://acme-v01.api.letsencrypt.org/acme/authz/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s;rel="up" Location: https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581 Replay-Nonce: A-K0dVjAdpP9nW9doWwzh5JxON52tepy6M12KvBv71I Expires: Mon, 27 Nov 2017 10:28:09 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 27 Nov 2017 10:28:09 GMT Connection: keep-alive ' [Mon 27 Nov 10:28:09 UTC 2017] response='{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581","token":"Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw","keyAuthorization":"Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA"}' [Mon 27 Nov 10:28:09 UTC 2017] code='202' [Mon 27 Nov 10:28:09 UTC 2017] sleep 2 secs to verify [Mon 27 Nov 10:28:11 UTC 2017] checking [Mon 27 Nov 10:28:11 UTC 2017] GET [Mon 27 Nov 10:28:11 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581' [Mon 27 Nov 10:28:11 UTC 2017] timeout [Mon 27 Nov 10:28:11 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.HJljvExoBY ' [Mon 27 Nov 10:28:12 UTC 2017] ret='0' [Mon 27 Nov 10:28:12 UTC 2017] original='{ "type": "dns-01", "status": "valid", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581", "token": "Gn-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw", "keyAuthorization": "Gn-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA", "validationRecord": [ { "hostname": "test.local.xyleth.co.uk", "port": "", "addressesResolved": [], "addressUsed": "", "addressesTried": [] } ] }' [Mon 27 Nov 10:28:12 UTC 2017] response='{"type":"dns-01","status":"valid","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/LaSczbNYxK9jR35oSOpvPYMBIzk5F1giHT0EtQvLE_s/2577990581","token":"Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw","keyAuthorization":"Gn_-LXe9XQXnLxlyVhrpG37GerEwGJN8TQsTD7LCscw.nNIGGR7Win52wTKGLBdVrS5CHOcmM9h7tGRxs-_GvLA","validationRecord":[{"hostname":"test.local.xyleth.co.uk","port":"","addressesResolved":[],"addressUsed":"","addressesTried":[]}]}' [Mon 27 Nov 10:28:12 UTC 2017] pid [Mon 27 Nov 10:28:12 UTC 2017] Skip for removelevel: [Mon 27 Nov 10:28:12 UTC 2017] pid [Mon 27 Nov 10:28:12 UTC 2017] No need to restore nginx, skip. [Mon 27 Nov 10:28:12 UTC 2017] _clearupdns [Mon 27 Nov 10:28:12 UTC 2017] txt='9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY' [Mon 27 Nov 10:28:12 UTC 2017] d_api='/home/pi/.acme.sh/dnsapi/dns_dgon.sh' [Mon 27 Nov 10:28:12 UTC 2017] fulldomain='_acme-challenge.test.local.xyleth.co.uk' [Mon 27 Nov 10:28:12 UTC 2017] txtvalue='9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY' [Mon 27 Nov 10:28:12 UTC 2017] fulldomain='_acme-challenge.test.local.xyleth.co.uk' [Mon 27 Nov 10:28:12 UTC 2017] DO_API_KEY='DEADBEEF' [Mon 27 Nov 10:28:12 UTC 2017] GET [Mon 27 Nov 10:28:12 UTC 2017] url='https://api.digitalocean.com/v2/domains' [Mon 27 Nov 10:28:12 UTC 2017] timeout [Mon 27 Nov 10:28:12 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.mEh6TdF4tE ' [Mon 27 Nov 10:28:13 UTC 2017] ret='0' [Mon 27 Nov 10:28:13 UTC 2017] domain_list='{"domains":[{"name":"xyleth.co.uk","ttl":1800,"zone_file":"$ORIGIN xyleth.co.uk.\n$TTL 1800\nxyleth.co.uk. IN SOA ns1.digitalocean.com. hostmaster.xyleth.co.uk. 1511778367 10800 3600 604800 1800\nxyleth.co.uk. 1800 IN NS ns1.digitalocean.com.\nxyleth.co.uk. 1800 IN NS ns2.digitalocean.com.\nxyleth.co.uk. 1800 IN NS ns3.digitalocean.com.\nexchange.xyleth.co.uk. 3600 IN A 217.171.193.192\nmail.xyleth.co.uk. 3600 IN A 213.171.216.40\nmailserver.xyleth.co.uk. 3600 IN A 213.171.216.40\nmcp.xyleth.co.uk. 3600 IN A 213.171.195.10\nsmtp.xyleth.co.uk. 3600 IN A 213.171.216.50\nwebmail.xyleth.co.uk. 3600 IN A 213.171.216.231\nmqtt.xyleth.co.uk. 3600 IN A 138.68.171.226\nxyleth.co.uk. 14400 IN MX 10 mailserver.xyleth.co.uk.\n_acme-challenge.control.local.xyleth.co.uk. 1800 IN TXT dBygn_EQGIt_w3x6mujdAFXRUHOnoGHbDxMqI59DJYE\n_acme-challenge.dashboard.local.xyleth.co.uk. 1800 IN TXT _bzDMEBhKIO8WBJnKI4vesPObLSVGwx28Ehrj3SNeQM\n_acme-challenge.test.local.xyleth.co.uk. 1800 IN TXT 9FAggXX3DanKb3qkeBvIdhDbjwxpU2gGHcL4Z9CXSWY\n"}],"links":{},"meta":{"total":1}}' [Mon 27 Nov 10:28:13 UTC 2017] _domain='xyleth.co.uk' [Mon 27 Nov 10:28:13 UTC 2017] _sub_domain='_acme-challenge.test.local' [Mon 27 Nov 10:28:13 UTC 2017] _sub_domain='_acme-challenge.test.local' [Mon 27 Nov 10:28:13 UTC 2017] _domain='xyleth.co.uk' [Mon 27 Nov 10:28:13 UTC 2017] GET [Mon 27 Nov 10:28:13 UTC 2017] url='https://api.digitalocean.com/v2/domains/xyleth.co.uk/records' [Mon 27 Nov 10:28:13 UTC 2017] timeout [Mon 27 Nov 10:28:13 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.pcVetAYUgN ' [Mon 27 Nov 10:28:14 UTC 2017] ret='0' [Mon 27 Nov 10:28:14 UTC 2017] no record and no nextpage in digital ocean DNS removal [Mon 27 Nov 10:28:14 UTC 2017] Error removing txt for domain:_acme-challenge.test.local.xyleth.co.uk [Mon 27 Nov 10:28:14 UTC 2017] i='2' [Mon 27 Nov 10:28:14 UTC 2017] j='15' [Mon 27 Nov 10:28:14 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/new-cert' [Mon 27 Nov 10:28:14 UTC 2017] payload='{"resource": "new-cert", "csr": "MIIChTCCAW0CAQAwIjEgMB4GA1UEAwwXdGVzdC5sb2NhbC54eWxldGguY28udWswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVp-b2Y_mJWOK_MIafpyrYPYOsMbMOtn_4T8lvSCKojDlYn4LKbcKSoia-tJsd7BHTK54jIs2bU3_ULa5Aq9K6DPr-eNHoaQxtTfqXeT8n-egkd04UdrORxRGa1-xd_TKfgGwa3wV1SowbFukDP56iU2iy5MC7aOBy-7ZD3s_Tnv5oPf40TsaHS2U948ShAzm0fcKSk7AiS9D53SuXR7L5QnVVK9xYIR2ddUUS484hnqz2BM0qRUOTYfXAQzRtQt0t4W7xXa67dBXdOkYk0jJkelvWMYdHuRE1v_aZSKWUybvUwAIDnqHKululWRkjhumrcwFbZObMh4v9qE4vIWJAgMBAAGgHjAcBgkqhkiG9w0BCQ4xDzANMAsGA1UdDwQEAwIF4DANBgkqhkiG9w0BAQsFAAOCAQEAS5xUh0W1J5uRnZnfkmZZM2z3Ih38f-J-_lVQOC5Q2bH0R8Vu6BTG_HljCdLw6bGFoy2FpM6rmJzERiWjTIaZcnthPW3YmIBvMJ2v8QXXq8EKmAf7doTgum_j_Do7L9Ge4BcgxTzYNa8PacgkgU8Sko1-tZsxWsDGulqIgdvb3fCopRW-jwZdrDG9_gBzvnezBoXqE7GNJ3yiwn7aE_h9delm7PT08_hDCvqtslKbj9BzvltCW00Gt1pyP3ufllMGP59PI7RO--caQ0O01LA7ISFXXSei0yPgQJ7kQXpnaPhGlo512KbxSpH-4GF2zbvcFP1Wc7QgMjzcx4jOLsD4IA"}' [Mon 27 Nov 10:28:14 UTC 2017] Use cached jwk for file: /home/pi/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key [Mon 27 Nov 10:28:14 UTC 2017] Use _CACHED_NONCE='A-K0dVjAdpP9nW9doWwzh5JxON52tepy6M12KvBv71I' [Mon 27 Nov 10:28:14 UTC 2017] nonce='A-K0dVjAdpP9nW9doWwzh5JxON52tepy6M12KvBv71I' [Mon 27 Nov 10:28:14 UTC 2017] POST [Mon 27 Nov 10:28:14 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/new-cert' [Mon 27 Nov 10:28:14 UTC 2017] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "x1HN7ObHyVGWtlFqHJ2KKYq0eG8OxK06kCzclm0908MPHMCMVyBVavA-cvCrTFeNb99SBTaqH9893sZmdvahG8RcaJVW9qcIGYesjdTe-VBbHQCOQlEDrhntJDCwqJ_wuFIT_jSXmetsOHLLZkyxNInpD_8mLHhp2JIPRkAle8DO4ZRldxOi25hTK8MpAdWO5Ja2kEb9OLEvuopIeTslmN0kYud6IVPXj26T1c5wOSLP2eboGAy1bsqy9S3IoEjuAR1gvwShsVo_EcqYaErM5bTfvBA-ne7ad_VjHXwN4MBdAS6oMde1_GT-S3DjniSXy_LNMpisse-KAnTQMaGVcw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctY2VydCIsICJjc3IiOiAiTUlJQ2hUQ0NBVzBDQVFBd0lqRWdNQjRHQTFVRUF3d1hkR1Z6ZEM1c2IyTmhiQzU0ZVd4bGRHZ3VZMjh1ZFdzd2dnRWlNQTBHQ1NxR1NJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUUN0VnAtYjJZX21KV09LX01JYWZweXJZUFlPc01iTU90bl80VDhsdlNDS29qRGxZbjRMS2JjS1NvaWEtdEpzZDdCSFRLNTRqSXMyYlUzX1VMYTVBcTlLNkRQci1lTkhvYVF4dFRmcVhlVDhuLWVna2QwNFVkck9SeFJHYTEteGRfVEtmZ0d3YTN3VjFTb3diRnVrRFA1NmlVMml5NU1DN2FPQnktN1pEM3NfVG52NW9QZjQwVHNhSFMyVTk0OFNoQXptMGZjS1NrN0FpUzlENTNTdVhSN0w1UW5WVks5eFlJUjJkZFVVUzQ4NGhucXoyQk0wcVJVT1RZZlhBUXpSdFF0MHQ0Vzd4WGE2N2RCWGRPa1lrMGpKa2VsdldNWWRIdVJFMXZfYVpTS1dVeWJ2VXdBSURucUhLdWx1bFdSa2podW1yY3dGYlpPYk1oNHY5cUU0dklXSkFnTUJBQUdnSGpBY0Jna3Foa2lHOXcwQkNRNHhEekFOTUFzR0ExVWREd1FFQXdJRjREQU5CZ2txaGtpRzl3MEJBUXNGQUFPQ0FRRUFTNXhVaDBXMUo1dVJuWm5ma21aWk0yejNJaDM4Zi1KLV9sVlFPQzVRMmJIMFI4VnU2QlRHX0hsakNkTHc2YkdGb3kyRnBNNnJtSnpFUmlXalRJYVpjbnRoUFczWW1JQnZNSjJ2OFFYWHE4RUttQWY3ZG9UZ3VtX2pfRG83TDlHZTRCY2d4VHpZTmE4UGFjZ2tnVThTa28xLXRac3hXc0RHdWxxSWdkdmIzZkNvcFJXLWp3WmRyREc5X2dCenZuZXpCb1hxRTdHTkozeWl3bjdhRV9oOWRlbG03UFQwOF9oREN2cXRzbEtiajlCenZsdENXMDBHdDFweVAzdWZsbE1HUDU5UEk3Uk8tLWNhUTBPMDFMQTdJU0ZYWFNlaTB5UGdRSjdrUVhwbmFQaEdsbzUxMktieFNwSC00R0YyemJ2Y0ZQMVdjN1FnTWp6Y3g0ak9Mc0Q0SUEifQ", "signature": "S-sdfqXdwJ9Tt9_QS9HtVv-DTwLmUESfbrUft4B1c_Z5KZ2QQhucOKEMen4BtKz2cM8iifWeWXKFDcW-JL6a4JWHob89m1ZaNDuq_S7Mdp3LA5AkkLIDdVuPvSCrnOjxCjYecBTKE6UR3i0o7yltd0k3oNeS44Q3LNXpX8iEI7mdeUt-U6pjQJdG4Rm554TOr5kZLHOdMZe5CmvOLXRl77wHLJSbJAWCQLN-3mu3pcSkRl2X3toPhuB2LgOFicpqdFbEH3tmVYeGvWG7YoKooUaw_1vUpyLc8DmcXFj2fIF9BNeH4ArkfTvtCFFaMyrQWKXyuEw1qrMtpkrOuQCKtA"}' [Mon 27 Nov 10:28:14 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.V4NlRb0Ygv ' [Mon 27 Nov 10:28:15 UTC 2017] _ret='0' [Mon 27 Nov 10:28:15 UTC 2017] original='MIIFETCCA/mgAwIBAgISAzOzFrCFWesZujhw9PJLFVRlMA0GCSqGSIb3DQEBCwUAMEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQDExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xNzExMjcwOTI4MTVaFw0xODAyMjUwOTI4MTVaMCIxIDAeBgNVBAMTF3Rlc3QubG9jYWwueHlsZXRoLmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVafm9mP5iVjivzCGn6cq2D2DrDGzDrZ/+E/Jb0giqIw5WJ+Cym3CkqImvrSbHewR0yueIyLNm1N/1C2uQKvSugz6/njR6GkMbU36l3k/J/noJHdOFHazkcURmtfsXf0yn4BsGt8FdUqMGxbpAz+eolNosuTAu2jgcvu2Q97P057+aD3+NE7Gh0tlPePEoQM5tH3CkpOwIkvQ+d0rl0ey+UJ1VSvcWCEdnXVFEuPOIZ6s9gTNKkVDk2H1wEM0bULdLeFu8V2uu3QV3TpGJNIyZHpb1jGHR7kRNb/2mUillMm71MACA56hyrpbpVkZI4bpq3MBW2TmzIeL/ahOLyFiQIDAQABo4ICFzCCAhMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRFPyy/B/8cqLycjnGFRVvH4TRBuTAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcvMCIGA1UdEQQbMBmCF3Rlc3QubG9jYWwueHlsZXRoLmNvLnVrMIH+BgNVHSAEgfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3NpdG9yeS8wDQYJKoZIhvcNAQELBQADggEBABb8/rb2VLiV2pregoLWyCcCXDic4QPyrXs8mDMqW1NeSDB0/Sav0RClPiURahFP8+00SmdlquWfW2ieTkfcX3gRVo03hCw+4crcQ5myXU4uaGAxsoM2VcjxDEf+HD5yZSC+ppiROvUAcNPk+7UpHGTHHXY5oFm2dSFSTIshbXByHftJCZgrOdC0eVwyXGqVaA1rkUCC3HoHnz/v7NVYzC6aiI3X3h1gNRP+8OqlmnFOt6B8+Q/vf2XsM2/Tbhsnl2Yq0u8ko0W6bMPYDh0AbR2kCrJTtzN3fWvXvBlllzJI/Vy3QUqsypJwEASaRdmXHbOcWPWadwg3R89Oq2fBvY0=' [Mon 27 Nov 10:28:15 UTC 2017] responseHeaders='HTTP/1.1 100 Continue Expires: Mon, 27 Nov 2017 10:28:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache

HTTP/1.1 201 Created Server: nginx Content-Type: application/pkix-cert Content-Length: 1301 Boulder-Requester: 24919877 Link: https://acme-v01.api.letsencrypt.org/acme/issuer-cert;rel="up" Location: https://acme-v01.api.letsencrypt.org/acme/cert/0333b316b08559eb19ba3870f4f24b155465 Replay-Nonce: jcSWLX-i8wb5eBwM-oOeyaDcmcbHGmZ7n0jdGk_r3cM X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Mon, 27 Nov 2017 10:28:15 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Mon, 27 Nov 2017 10:28:15 GMT Connection: keep-alive ' [Mon 27 Nov 10:28:15 UTC 2017] response='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' [Mon 27 Nov 10:28:15 UTC 2017] code='201' [Mon 27 Nov 10:28:15 UTC 2017] _body='0??U ??0??g? 0?? +??0??0+http://cps.letsencrypt.org0?+0?? ??This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/0 ?H?? ?????T??ښނ???'\8???{<?3[S^H0t?&???>%jO??4Jge??[h?NG?_xV?7?,>???C??]N.h1??6U?? k?@??z?????X?.?????5??꥚qN??|??e?3o?n?f*??$?E?l??m? G?>re ????:?p????)d?v9?Y?u!RL?!mpr?I ?+9дy\2\j?h ?S?3w}k׼e?2H?\?AJ?ʒp?Eٗ??X??7G?N?g???' [Mon 27 Nov 10:28:15 UTC 2017] Le_LinkCert='https://acme-v01.api.letsencrypt.org/acme/cert/0333b316b08559eb19ba3870f4f24b155465' [Mon 27 Nov 10:28:16 UTC 2017] Le_LinkIssuer='https://acme-v01.api.letsencrypt.org/acme/issuer-cert' [Mon 27 Nov 10:28:16 UTC 2017] _link_issuer_retry='0' [Mon 27 Nov 10:28:16 UTC 2017] GET [Mon 27 Nov 10:28:16 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/issuer-cert' [Mon 27 Nov 10:28:16 UTC 2017] timeout [Mon 27 Nov 10:28:16 UTC 2017] _CURL='curl -L --silent --dump-header /home/pi/.acme.sh/http.header --trace-ascii /tmp/tmp.vzZSnvdjc1 ' [Mon 27 Nov 10:28:16 UTC 2017] ret='0' [Mon 27 Nov 10:28:16 UTC 2017] _on_issue_success [Mon 27 Nov 10:28:16 UTC 2017] '' does not contain 'dns'

thomaspaulb commented 6 years ago

Fix is merged, could this be closed?

thomaspaulb commented 6 years ago

Sorry was not fixed, but submitted a fix.