search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.42k stars 4.89k forks source link

Error code 7 About to connect() port 443 (#0) #1477

Closed A5t3r closed 6 years ago

A5t3r commented 6 years ago

Error code 7 一直报这句

Info:About to connect() to acme-v02.api.letsencrypt.org port 443 (#0)

是443端口有问题么,有设置允许访问 centos7 nginx lnmp环境 域名在cloudxns解析，api也是cx的

> [root@VM_64_251_centos ~]# export CX_Key="f238d89***************d74db7c"
[root@VM_64_251_centos ~]# export CX_Secret="39ed*******5798b"
[root@VM_64_251_centos ~]# acme.sh --issue --dns dns_cx -d mydomain.com -d *.mydomain.com --force --debug 2
[Sun Apr  1 22:14:05 CST 2018] Lets find script dir.
[Sun Apr  1 22:14:05 CST 2018] _SCRIPT_='/root/.acme.sh/acme.sh'
[Sun Apr  1 22:14:05 CST 2018] _script='/root/.acme.sh/acme.sh'
[Sun Apr  1 22:14:05 CST 2018] _script_home='/root/.acme.sh'
[Sun Apr  1 22:14:05 CST 2018] Using config home:/root/.acme.sh
[Sun Apr  1 22:14:05 CST 2018] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/Neilpang/acme.sh
v2.7.8
[Sun Apr  1 22:14:05 CST 2018] _main_domain='mydomain.com'
[Sun Apr  1 22:14:05 CST 2018] _alt_domains='*.mydomain.com'
[Sun Apr  1 22:14:05 CST 2018] Using config home:/root/.acme.sh
[Sun Apr  1 22:14:05 CST 2018] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun Apr  1 22:14:05 CST 2018] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sun Apr  1 22:14:05 CST 2018] DOMAIN_PATH='/root/.acme.sh/mydomain.com'
[Sun Apr  1 22:14:06 CST 2018] 'dns_cx' does not contain 'dns'
[Sun Apr  1 22:14:06 CST 2018] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Sun Apr  1 22:14:06 CST 2018] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sun Apr  1 22:14:06 CST 2018] GET
[Sun Apr  1 22:14:06 CST 2018] url='https://acme-v02.api.letsencrypt.org/directory'
[Sun Apr  1 22:14:06 CST 2018] timeout=
[Sun Apr  1 22:14:06 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.W3qAxCTkXC  -g '
[Sun Apr  1 22:16:13 CST 2018] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 7
[Sun Apr  1 22:16:13 CST 2018] Here is the curl dump log:
[Sun Apr  1 22:16:13 CST 2018] == Info: About to connect() to acme-v02.api.letsencrypt.org port 443 (#0)
== Info:   Trying 104.124.231.147...
== Info: Connection timed out
== Info:   Trying 2600:1417:e:285::3a8e...
== Info: Failed to connect to 2600:1417:e:285::3a8e: Network is unreachable
== Info:   Trying 2600:1417:e:282::3a8e...
== Info: Failed to connect to 2600:1417:e:282::3a8e: Network is unreachable
== Info: Failed connect to acme-v02.api.letsencrypt.org:443; Network is unreachable
== Info: Closing connection 0
[Sun Apr  1 22:16:13 CST 2018] ret='7'
[Sun Apr  1 22:16:13 CST 2018] response
[Sun Apr  1 22:16:13 CST 2018] Can not init api.
[Sun Apr  1 22:16:13 CST 2018] Le_NextRenewTime
[Sun Apr  1 22:16:13 CST 2018] _on_before_issue
[Sun Apr  1 22:16:13 CST 2018] _chk_main_domain='mydomain.com'
[Sun Apr  1 22:16:13 CST 2018] _chk_alt_domains='*.mydomain.com'
[Sun Apr  1 22:16:13 CST 2018] 'dns_cx' does not contain 'no'
[Sun Apr  1 22:16:13 CST 2018] Le_LocalAddress
[Sun Apr  1 22:16:13 CST 2018] d='mydomain.com'
[Sun Apr  1 22:16:13 CST 2018] Check for domain='mydomain.com'
[Sun Apr  1 22:16:13 CST 2018] _currentRoot='dns_cx'
[Sun Apr  1 22:16:13 CST 2018] d='*.mydomain.com'
[Sun Apr  1 22:16:13 CST 2018] Check for domain='*.mydomain.com'
[Sun Apr  1 22:16:13 CST 2018] _currentRoot='dns_cx'
[Sun Apr  1 22:16:13 CST 2018] d
[Sun Apr  1 22:16:13 CST 2018] 'dns_cx' does not contain 'apache'
[Sun Apr  1 22:16:13 CST 2018] _saved_account_key_hash='xQTVqu6Dv/5vYQHwnQWRovyvYwh5LPU9YW1pXPXrbLM='
[Sun Apr  1 22:16:13 CST 2018] _saved_account_key_hash is not changed, skip register account.
[Sun Apr  1 22:16:13 CST 2018] Read key length:
[Sun Apr  1 22:16:13 CST 2018] _createcsr
[Sun Apr  1 22:16:13 CST 2018] domain='mydomain.com'
[Sun Apr  1 22:16:13 CST 2018] domainlist='*.mydomain.com'
[Sun Apr  1 22:16:14 CST 2018] csrkey='/root/.acme.sh/mydomain.com/mydomain.com.key'
[Sun Apr  1 22:16:14 CST 2018] csr='/root/.acme.sh/mydomain.com/mydomain.com.csr'
[Sun Apr  1 22:16:14 CST 2018] csrconf='/root/.acme.sh/mydomain.com/mydomain.com.csr.conf'
[Sun Apr  1 22:16:14 CST 2018] _is_idn_d='*.mydomain.com'
[Sun Apr  1 22:16:14 CST 2018] _idn_temp
[Sun Apr  1 22:16:14 CST 2018] domainlist='*.mydomain.com'
[Sun Apr  1 22:16:14 CST 2018] Multi domain='DNS:mydomain.com,DNS:*.mydomain.com'
[Sun Apr  1 22:16:14 CST 2018] _is_idn_d='mydomain.com'
[Sun Apr  1 22:16:14 CST 2018] _idn_temp
[Sun Apr  1 22:16:14 CST 2018] _csr_cn='mydomain.com'
[Sun Apr  1 22:16:14 CST 2018] Getting domain auth token for each domain
[Sun Apr  1 22:16:14 CST 2018] d='*.mydomain.com'
[Sun Apr  1 22:16:14 CST 2018] d
[Sun Apr  1 22:16:14 CST 2018] _identifiers='{"type":"dns","value":"mydomain.com"},{"type":"dns","value":"*.mydomain.com"}'
[Sun Apr  1 22:16:14 CST 2018] url
[Sun Apr  1 22:16:14 CST 2018] payload='{"identifiers": [{"type":"dns","value":"mydomain.com"},{"type":"dns","value":"*.mydomain.com"}]}'
[Sun Apr  1 22:16:14 CST 2018] RSA key
[Sun Apr  1 22:16:14 CST 2018] Get nonce. ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun Apr  1 22:16:14 CST 2018] GET
[Sun Apr  1 22:16:14 CST 2018] url='https://acme-v02.api.letsencrypt.org/directory'
[Sun Apr  1 22:16:14 CST 2018] timeout=
[Sun Apr  1 22:16:14 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.yzDMS9hTzi  -g '
[Sun Apr  1 22:16:15 CST 2018] ret='0'
[Sun Apr  1 22:16:15 CST 2018] _headers='HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Content-Length: 562
Replay-Nonce: qz-Y-WjRNP9uwF2td6U3zhBPtoBvYFcI7bJboMERshE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Sun, 01 Apr 2018 14:16:15 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 01 Apr 2018 14:16:15 GMT
Connection: keep-alive
'
[Sun Apr  1 22:16:15 CST 2018] _CACHED_NONCE='qz-Y-WjRNP9uwF2td6U3zhBPtoBvYFcI7bJboMERshE'
[Sun Apr  1 22:16:15 CST 2018] nonce='qz-Y-WjRNP9uwF2td6U3zhBPtoBvYFcI7bJboMERshE'
[Sun Apr  1 22:16:15 CST 2018] POST
[Sun Apr  1 22:16:15 CST 2018] _post_url
[Sun Apr  1 22:16:15 CST 2018] body='{"protected": "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", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InB1bnlzdWIuY29tIn0seyJ0eXBlIjoiZG5zIiwidmFsdWUiOiIqLnB1bnlzdWIuY29tIn1dfQ", "signature": "MsOjAZzHeagjgCEEpqqK2WIsslXIzd-xrqUr7I8N0UPueQ0y3sLRjI3j51S-47gPNy06q-rq-qJgGMF8uccDfwE37JBQ22vpb7tjhfuADBNSWTpoArUWVPik2YSjvbhkg3u5kAclMjI96pauCAgRv4v_32DZzfnyrertYTItehq-XR6vJXV7bK_MOlE7b14Rt8g0ZAlwheN6APL0ACaHxKDHFBDXydJh5Bdgtk5lx4NHq9jkyBX62WoSsa9J9-udQHtgoNOHKYCLNJk_RM62ZX52zoiSkzqq2Be_EedZjVa7Cp-VA0Ugw3JbFyT5PO64mlPblNtt0QWBa_CO-REjeQ"}'
[Sun Apr  1 22:16:15 CST 2018] _postContentType='application/jose+json'
[Sun Apr  1 22:16:15 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.T9Wn8dg1cU  -g '
[Sun Apr  1 22:16:15 CST 2018] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 3
[Sun Apr  1 22:16:15 CST 2018] Here is the curl dump log:
[Sun Apr  1 22:16:15 CST 2018] == Info: <url> malformed
== Info: Closing connection -1
[Sun Apr  1 22:16:15 CST 2018] _ret='3'
[Sun Apr  1 22:16:15 CST 2018] original
[Sun Apr  1 22:16:15 CST 2018] responseHeaders
[Sun Apr  1 22:16:15 CST 2018] response
[Sun Apr  1 22:16:15 CST 2018] code
[Sun Apr  1 22:16:15 CST 2018] Le_OrderFinalize
[Sun Apr  1 22:16:15 CST 2018] Create new order error. Le_OrderFinalize not found.
[Sun Apr  1 22:16:15 CST 2018] pid
[Sun Apr  1 22:16:15 CST 2018] No need to restore nginx, skip.
[Sun Apr  1 22:16:15 CST 2018] _clearupdns
[Sun Apr  1 22:16:15 CST 2018] skip dns.
[Sun Apr  1 22:16:15 CST 2018] _on_issue_err
[Sun Apr  1 22:16:15 CST 2018] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Sun Apr  1 22:16:15 CST 2018] _chk_vlist
[Sun Apr  1 22:16:15 CST 2018] socat doesn't exists.
[Sun Apr  1 22:16:15 CST 2018] Diagnosis versions:
openssl:openssl
OpenSSL 1.0.2k-fips  26 Jan 2017
apache:
apache doesn't exists.
nginx:
nginx version: nginx/1.12.2
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-16) (GCC)
built with OpenSSL 1.0.2k-fips  26 Jan 2017
TLS SNI support enabled
configure arguments: --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --user=nginx --group=nginx --with-file-aio --with-ipv6 --with-http_auth_request_module --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_geoip_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module=dynamic --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-google_perftools_module --with-debug --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' --with-ld-opt='-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-E'
socat:
>
Neilpang commented 6 years ago 
== Info:   Trying 104.124.231.147...
== Info: Connection timed out
== Info:   Trying 2600:1417:e:285::3a8e...
== Info: Failed to connect to 2600:1417:e:285::3a8e: Network is unreachable
== Info:   Trying 2600:1417:e:282::3a8e...
== Info: Failed to connect to 2600:1417:e:282::3a8e: Network is unreachable
== Info: Failed connect to acme-v02.api.letsencrypt.org:443; Network is unreachable