acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
37.88k stars 4.86k forks source link

无法颁发中文域名证书,txt记录添加失败 #1864

Open Lengsir opened 5 years ago

Lengsir commented 5 years ago

root@coding:/home/coding/.acme.sh# ./acme.sh --issue --dns dns_cx -d xn--4jv.xn--6qq986b3xl --debug [Sun Sep 30 11:11:07 UTC 2018] Lets find script dir. [Sun Sep 30 11:11:07 UTC 2018] SCRIPT='./acme.sh' [Sun Sep 30 11:11:07 UTC 2018] _script='/home/coding/.acme.sh/acme.sh' [Sun Sep 30 11:11:07 UTC 2018] _script_home='/home/coding/.acme.sh' [Sun Sep 30 11:11:07 UTC 2018] Using default home:/root/.acme.sh [Sun Sep 30 11:11:07 UTC 2018] Using config home:/root/.acme.sh https://github.com/Neilpang/acme.sh v2.8.0 [Sun Sep 30 11:11:07 UTC 2018] _main_domain='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:07 UTC 2018] _alt_domains='no' [Sun Sep 30 11:11:07 UTC 2018] Using config home:/root/.acme.sh [Sun Sep 30 11:11:07 UTC 2018] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Sun Sep 30 11:11:07 UTC 2018] DOMAIN_PATH='/root/.acme.sh/xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:07 UTC 2018] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory [Sun Sep 30 11:11:07 UTC 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Sun Sep 30 11:11:07 UTC 2018] GET [Sun Sep 30 11:11:07 UTC 2018] url='https://acme-v01.api.letsencrypt.org/directory' [Sun Sep 30 11:11:07 UTC 2018] timeout= [Sun Sep 30 11:11:07 UTC 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g ' [Sun Sep 30 11:11:14 UTC 2018] ret='0' [Sun Sep 30 11:11:14 UTC 2018] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change' [Sun Sep 30 11:11:14 UTC 2018] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Sun Sep 30 11:11:14 UTC 2018] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert' [Sun Sep 30 11:11:14 UTC 2018] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg' [Sun Sep 30 11:11:14 UTC 2018] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert' [Sun Sep 30 11:11:14 UTC 2018] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf' [Sun Sep 30 11:11:14 UTC 2018] ACME_NEW_NONCE [Sun Sep 30 11:11:14 UTC 2018] ACME_VERSION [Sun Sep 30 11:11:14 UTC 2018] Le_NextRenewTime [Sun Sep 30 11:11:14 UTC 2018] _on_before_issue [Sun Sep 30 11:11:14 UTC 2018] _chk_main_domain='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:14 UTC 2018] _chk_alt_domains [Sun Sep 30 11:11:14 UTC 2018] Le_LocalAddress [Sun Sep 30 11:11:14 UTC 2018] d='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:14 UTC 2018] Check for domain='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:14 UTC 2018] _currentRoot='dns_cx' [Sun Sep 30 11:11:15 UTC 2018] d [Sun Sep 30 11:11:15 UTC 2018] _saved_account_key_hash is not changed, skip register account. [Sun Sep 30 11:11:15 UTC 2018] Read key length: [Sun Sep 30 11:11:15 UTC 2018] _createcsr [Sun Sep 30 11:11:15 UTC 2018] Single domain='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:15 UTC 2018] Getting domain auth token for each domain [Sun Sep 30 11:11:15 UTC 2018] d='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:15 UTC 2018] Getting webroot for domain='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:15 UTC 2018] _w='dns_cx' [Sun Sep 30 11:11:15 UTC 2018] _currentRoot='dns_cx' [Sun Sep 30 11:11:15 UTC 2018] Getting new-authz for domain='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:15 UTC 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Sun Sep 30 11:11:15 UTC 2018] Try new-authz for the 0 time. [Sun Sep 30 11:11:15 UTC 2018] url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Sun Sep 30 11:11:15 UTC 2018] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "xn--4jv.xn--6qq986b3xl"}}' [Sun Sep 30 11:11:15 UTC 2018] RSA key [Sun Sep 30 11:11:15 UTC 2018] GET [Sun Sep 30 11:11:15 UTC 2018] url='https://acme-v01.api.letsencrypt.org/directory' [Sun Sep 30 11:11:15 UTC 2018] timeout= [Sun Sep 30 11:11:15 UTC 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g ' [Sun Sep 30 11:11:22 UTC 2018] ret='0' [Sun Sep 30 11:11:22 UTC 2018] POST [Sun Sep 30 11:11:22 UTC 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Sun Sep 30 11:11:22 UTC 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g ' [Sun Sep 30 11:11:29 UTC 2018] _ret='0' [Sun Sep 30 11:11:29 UTC 2018] code='201' [Sun Sep 30 11:11:29 UTC 2018] The new-authz request is ok. [Sun Sep 30 11:11:29 UTC 2018] entry='"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/5syLq_N2enlcZb3PZOtplsl3m58PQfuSsdadYZU5BY4/7820897518","token":"xclz_CQdQKbxFshzjY0p5iZ8aHz_JL5QC4oKj7Z2A9I"' [Sun Sep 30 11:11:29 UTC 2018] token='xclz_CQdQKbxFshzjY0p5iZ8aHz_JL5QC4oKj7Z2A9I' [Sun Sep 30 11:11:29 UTC 2018] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/5syLq_N2enlcZb3PZOtplsl3m58PQfuSsdadYZU5BY4/7820897518' [Sun Sep 30 11:11:29 UTC 2018] keyauthorization='xclz_CQdQKbxFshzjY0p5iZ8aHz_JL5QC4oKj7Z2A9I.hyyM2pM8Kwi24I_z24usGbcp3tm83mAidd2-95bIBkE' [Sun Sep 30 11:11:29 UTC 2018] dvlist='xn--4jv.xn--6qq986b3xl#xclz_CQdQKbxFshzjY0p5iZ8aHz_JL5QC4oKj7Z2A9I.hyyM2pM8Kwi24I_z24usGbcp3tm83mAidd2-95bIBkE#https://acme-v01.api.letsencrypt.org/acme/challenge/5syLq_N2enlcZb3PZOtplsl3m58PQfuSsdadYZU5BY4/7820897518#dns-01#dns_cx' [Sun Sep 30 11:11:29 UTC 2018] d [Sun Sep 30 11:11:29 UTC 2018] vlist='xn--4jv.xn--6qq986b3xl#xclz_CQdQKbxFshzjY0p5iZ8aHz_JL5QC4oKj7Z2A9I.hyyM2pM8Kwi24I_z24usGbcp3tm83mAidd2-95bIBkE#https://acme-v01.api.letsencrypt.org/acme/challenge/5syLq_N2enlcZb3PZOtplsl3m58PQfuSsdadYZU5BY4/7820897518#dns-01#dns_cx,' [Sun Sep 30 11:11:29 UTC 2018] d='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:29 UTC 2018] _d_alias [Sun Sep 30 11:11:29 UTC 2018] txtdomain='_acme-challenge.xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:29 UTC 2018] txt='eN5BZsflmIJTpa3Ong9_yRDPIwILTOKZijWLfH1jFbc' [Sun Sep 30 11:11:29 UTC 2018] d_api='/home/coding/.acme.sh/dnsapi/dns_cx.sh' [Sun Sep 30 11:11:29 UTC 2018] Found domain api file: /home/coding/.acme.sh/dnsapi/dns_cx.sh [Sun Sep 30 11:11:30 UTC 2018] First detect the root zone [Sun Sep 30 11:11:30 UTC 2018] ep='domain' [Sun Sep 30 11:11:30 UTC 2018] url='https://www.cloudxns.net/api2/domain' [Sun Sep 30 11:11:30 UTC 2018] cdate='2018-09-30 11:11:30 UTC' [Sun Sep 30 11:11:30 UTC 2018] data [Sun Sep 30 11:11:30 UTC 2018] sec='b497bcff52eabe0e77e4490b4287af41https://www.cloudxns.net/api2/domain2018-09-30 11:11:30 UTCccbed89f03802c88' [Sun Sep 30 11:11:30 UTC 2018] hmac='f73e7077bd212db6e274746718102078' [Sun Sep 30 11:11:30 UTC 2018] GET [Sun Sep 30 11:11:30 UTC 2018] url='https://www.cloudxns.net/api2/domain' [Sun Sep 30 11:11:30 UTC 2018] timeout= [Sun Sep 30 11:11:30 UTC 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g ' [Sun Sep 30 11:11:36 UTC 2018] ret='0' [Sun Sep 30 11:11:36 UTC 2018] h='xn--4jv.xn--6qq986b3xl' [Sun Sep 30 11:11:36 UTC 2018] h='xn--6qq986b3xl' [Sun Sep 30 11:11:36 UTC 2018] h [Sun Sep 30 11:11:36 UTC 2018] invalid domain [Sun Sep 30 11:11:36 UTC 2018] Error add txt for domain:_acme-challenge.xn--4jv.xn--6qq986b3xl [Sun Sep 30 11:11:36 UTC 2018] pid [Sun Sep 30 11:11:36 UTC 2018] No need to restore nginx, skip. [Sun Sep 30 11:11:36 UTC 2018] _clearupdns [Sun Sep 30 11:11:36 UTC 2018] skip dns. [Sun Sep 30 11:11:36 UTC 2018] _on_issue_err [Sun Sep 30 11:11:36 UTC 2018] Please add '--debug' or '--log' to check more details. [Sun Sep 30 11:11:36 UTC 2018] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh [Sun Sep 30 11:11:36 UTC 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/5syLq_N2enlcZb3PZOtplsl3m58PQfuSsdadYZU5BY4/7820897518' [Sun Sep 30 11:11:36 UTC 2018] payload='{"resource": "challenge", "keyAuthorization": "xclz_CQdQKbxFshzjY0p5iZ8aHz_JL5QC4oKj7Z2A9I.hyyM2pM8Kwi24I_z24usGbcp3tm83mAidd2-95bIBkE"}' [Sun Sep 30 11:11:36 UTC 2018] POST [Sun Sep 30 11:11:36 UTC 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/5syLq_N2enlcZb3PZOtplsl3m58PQfuSsdadYZU5BY4/7820897518' [Sun Sep 30 11:11:36 UTC 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g ' [Sun Sep 30 11:11:43 UTC 2018] _ret='0' [Sun Sep 30 11:11:43 UTC 2018] code='202' [Sun Sep 30 11:11:43 UTC 2018] socat doesn't exists. [Sun Sep 30 11:11:43 UTC 2018] Diagnosis versions: openssl:openssl OpenSSL 1.0.2g 1 Mar 2016 apache: apache doesn't exists. nginx: nginx doesn't exists. socat:

yi-ge commented 9 months ago

同样的问题