Closed gzd0071 closed 5 years ago
我用dns alias方式签发证书一直报错,烦请指教。 命令: ./acme.sh --issue --dns dns_gd -d server.guozhongda.cn --challenge-alias so-honor.com
log如下:
[Fri Dec 14 10:05:21 CST 2018] Lets find script dir. [Fri Dec 14 10:05:21 CST 2018] SCRIPT='./acme.sh' [Fri Dec 14 10:05:21 CST 2018] _script='/tmp/mnt/sdb/entware/usr/local/acme.sh/acme.sh' [Fri Dec 14 10:05:21 CST 2018] _script_home='/tmp/mnt/sdb/entware/usr/local/acme.sh' [Fri Dec 14 10:05:21 CST 2018] Using default home:/root/.acme.sh [Fri Dec 14 10:05:21 CST 2018] Using config home:/root/.acme.sh [Fri Dec 14 10:05:21 CST 2018] LE_WORKING_DIR='/root/.acme.sh' https://github.com/Neilpang/acme.sh v2.8.0 [Fri Dec 14 10:05:21 CST 2018] _main_domain='server.guozhongda.cn' [Fri Dec 14 10:05:21 CST 2018] _alt_domains='no' [Fri Dec 14 10:05:21 CST 2018] Using config home:/root/.acme.sh [Fri Dec 14 10:05:21 CST 2018] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:21 CST 2018] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org' [Fri Dec 14 10:05:21 CST 2018] DOMAIN_PATH='/root/.acme.sh/server.guozhongda.cn' [Fri Dec 14 10:05:21 CST 2018] 'dns_gd' does not contain 'dns' [Fri Dec 14 10:05:21 CST 2018] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory [Fri Dec 14 10:05:21 CST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Fri Dec 14 10:05:21 CST 2018] GET [Fri Dec 14 10:05:21 CST 2018] url='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:21 CST 2018] timeout= [Fri Dec 14 10:05:21 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753121.tmp -g ' [Fri Dec 14 10:05:22 CST 2018] ret='0' [Fri Dec 14 10:05:22 CST 2018] response='{ "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "terms-of-service": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf", "website": "https://letsencrypt.org" }, "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz", "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert", "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg", "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert", "zj8SOMxEF84": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417" }' [Fri Dec 14 10:05:22 CST 2018] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg' [Fri Dec 14 10:05:22 CST 2018] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert' [Fri Dec 14 10:05:22 CST 2018] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_NONCE [Fri Dec 14 10:05:22 CST 2018] ACME_VERSION [Fri Dec 14 10:05:22 CST 2018] Le_NextRenewTime [Fri Dec 14 10:05:22 CST 2018] _on_before_issue [Fri Dec 14 10:05:22 CST 2018] _chk_main_domain='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] _chk_alt_domains [Fri Dec 14 10:05:22 CST 2018] 'dns_gd' does not contain 'no' [Fri Dec 14 10:05:22 CST 2018] Le_LocalAddress [Fri Dec 14 10:05:22 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] Check for domain='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] _currentRoot='dns_gd' [Fri Dec 14 10:05:22 CST 2018] d [Fri Dec 14 10:05:22 CST 2018] 'dns_gd' does not contain 'apache' [Fri Dec 14 10:05:22 CST 2018] _saved_account_key_hash='Spmp50/gtSu8yLVBfMdXwZ3H8v9RYMDmig1ra7xu9lo=' [Fri Dec 14 10:05:22 CST 2018] _saved_account_key_hash is not changed, skip register account. [Fri Dec 14 10:05:22 CST 2018] Read key length: [Fri Dec 14 10:05:22 CST 2018] _createcsr [Fri Dec 14 10:05:22 CST 2018] domain='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] domainlist [Fri Dec 14 10:05:22 CST 2018] csrkey='/root/.acme.sh/server.guozhongda.cn/server.guozhongda.cn.key' [Fri Dec 14 10:05:23 CST 2018] csr='/root/.acme.sh/server.guozhongda.cn/server.guozhongda.cn.csr' [Fri Dec 14 10:05:23 CST 2018] csrconf='/root/.acme.sh/server.guozhongda.cn/server.guozhongda.cn.csr.conf' [Fri Dec 14 10:05:23 CST 2018] Single domain='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _is_idn_d='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _idn_temp [Fri Dec 14 10:05:23 CST 2018] _csr_cn='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] Getting domain auth token for each domain [Fri Dec 14 10:05:23 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] Getting webroot for domain='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _w='dns_gd' [Fri Dec 14 10:05:23 CST 2018] _currentRoot='dns_gd' [Fri Dec 14 10:05:23 CST 2018] Getting new-authz for domain='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Fri Dec 14 10:05:23 CST 2018] Try new-authz for the 0 time. [Fri Dec 14 10:05:23 CST 2018] _is_idn_d='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _idn_temp [Fri Dec 14 10:05:23 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Fri Dec 14 10:05:23 CST 2018] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "server.guozhongda.cn"}}' [Fri Dec 14 10:05:23 CST 2018] RSA key [Fri Dec 14 10:05:23 CST 2018] _URGLY_PRINTF [Fri Dec 14 10:05:23 CST 2018] xargs [Fri Dec 14 10:05:23 CST 2018] _URGLY_PRINTF [Fri Dec 14 10:05:23 CST 2018] xargs [Fri Dec 14 10:05:23 CST 2018] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:23 CST 2018] GET [Fri Dec 14 10:05:23 CST 2018] url='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:23 CST 2018] timeout= [Fri Dec 14 10:05:23 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753123.tmp -g ' [Fri Dec 14 10:05:24 CST 2018] ret='0' [Fri Dec 14 10:05:24 CST 2018] _headers='HTTP/1.1 200 OK Server: nginx Content-Type: application/json Content-Length: 658 Replay-Nonce: VgwaXOD3OXWRxWxXyXQIf2xb7Om3RSuLegswHvqPVos X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Fri, 14 Dec 2018 02:05:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:05:24 GMT Connection: keep-alive ' [Fri Dec 14 10:05:24 CST 2018] _CACHED_NONCE='VgwaXOD3OXWRxWxXyXQIf2xb7Om3RSuLegswHvqPVos' [Fri Dec 14 10:05:24 CST 2018] nonce='VgwaXOD3OXWRxWxXyXQIf2xb7Om3RSuLegswHvqPVos' [Fri Dec 14 10:05:25 CST 2018] POST [Fri Dec 14 10:05:25 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Fri Dec 14 10:05:25 CST 2018] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0iBWj5ymhvdfI_nF2o9heAFDXSihOCZroEeo9-P5O7IsAv4DIrvYjjhFWcQ1g3moGfOZEv5zOnD4Ggwo4Ms7ZGUHvc6mH_qx0drUVJl3_b9lfIW7qHLtAm5U4wtrW8cBzcqBGwy_FZQCDXkGwkpg9YjD7N9YTTErUGBmH2Z8YtMaPc12USK0eCki9NQc5vxRdvHYWVtGoI6yt3dOB6qgWAwsu0hb9ZPnvEevtYy2NT2oIhPFmfQj6C8eZV_Cm2cLqODBO8CY9WOQo-ogf8lRfXZAEo6yR-R3bE7aGk79Rbu5m9Ztp9yK-wQBhOnRu3TpJlNUU6cp1u4gYvLfsd05w"}}, "protected": "eyJub25jZSI6ICJWZ3dhWE9EM09YV1J4V3hYeVhRSWYyeGI3T20zUlN1TGVnc3dIdnFQVm9zIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctYXV0aHoiLCAiYWxnIjogIlJTMjU2IiwgImp3ayI6IHsiZSI6ICJBUUFCIiwgImt0eSI6ICJSU0EiLCAibiI6ICIwaUJXajV5bWh2ZGZJX25GMm85aGVBRkRYU2loT0Nacm9FZW85LVA1TzdJc0F2NERJcnZZampoRldjUTFnM21vR2ZPWkV2NXpPbkQ0R2d3bzRNczdaR1VIdmM2bUhfcXgwZHJVVkpsM19iOWxmSVc3cUhMdEFtNVU0d3RyVzhjQnpjcUJHd3lfRlpRQ0RYa0d3a3BnOVlqRDdOOVlUVEVyVUdCbUgyWjhZdE1hUGMxMlVTSzBlQ2tpOU5RYzV2eFJkdkhZV1Z0R29JNnl0M2RPQjZxZ1dBd3N1MGhiOVpQbnZFZXZ0WXkyTlQyb0loUEZtZlFqNkM4ZVpWX0NtMmNMcU9EQk84Q1k5V09Rby1vZ2Y4bFJmWFpBRW82eVItUjNiRTdhR2s3OVJidTVtOVp0cDl5Sy13UUJoT25SdTNUcEpsTlVVNmNwXzF1NGdZdkxmc2QwNXcifX0", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAic2VydmVyLmd1b3pob25nZGEuY24ifX0", "signature": "cTu6nLCtTYltxhQ7PMRcdRxy7gEQCa5Job-7RwVnKAPwMHRcrZpZjswwEuB-BPUtZ_JzP4mjsdiItf-QyHJc8gjRUE4Twlmrde67LFmqyWcp52EwMD-26quN2FDU3xgk63Y0WjiKV1UIB-Q9aA0wil0gpwjhv59Vthh4MV6vdqaVKJhcrzMYEjt-h66XTvm7VDkolq2echO45aWhjFbG8S8NmU_9BFk4zfsyqQ1Bdb9aw1H6Dh5C_0FVO6RlzbhTd_KBODJ9M_m6rn2-sJ-go5V_GROZed4BEMbOlIQIwpiwrPRxLIPik3QQWANWrkoOLNLeE3GCQHxhi7JhyQAXw"}' [Fri Dec 14 10:05:25 CST 2018] _postContentType='application/jose+json' [Fri Dec 14 10:05:25 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753125.tmp -g ' [Fri Dec 14 10:05:27 CST 2018] _ret='0' [Fri Dec 14 10:05:27 CST 2018] original='{ "identifier": { "type": "dns", "value": "server.guozhongda.cn" }, "status": "pending", "expires": "2018-12-21T02:05:26Z", "challenges": [ { "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w" }, { "type": "tls-alpn-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858807", "token": "DP8wsRty2W-Gv6HTi66MUqCvAVNqnkffGslT-9TE_gI" }, { "type": "http-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858808", "token": "vdFSI9laa3BrDjjMliamOCA8UzGRU9eD5dn79YFaeAk" } ], "combinations": [ [ 2 ], [ 0 ], [ 1 ] ] }' [Fri Dec 14 10:05:27 CST 2018] responseHeaders='HTTP/1.1 100 Continue Expires: Fri, 14 Dec 2018 02:05:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache
HTTP/1.1 201 Created Server: nginx Content-Type: application/json Content-Length: 1002 Boulder-Requester: 47537316 Link: https://acme-v01.api.letsencrypt.org/acme/new-cert;rel="next" Location: https://acme-v01.api.letsencrypt.org/acme/authz/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0 Replay-Nonce: nsYZ8Cw6QOLVd6FIRm46C7Z9DlOXkF76eR-HSW8snmk X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Fri, 14 Dec 2018 02:05:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:05:27 GMT Connection: keep-alive ' [Fri Dec 14 10:05:27 CST 2018] response='{"identifier":{"type":"dns","value":"server.guozhongda.cn"},"status":"pending","expires":"2018-12-21T02:05:26Z","challenges":[{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"},{"type":"tls-alpn-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858807","token":"DP8wsRty2W-Gv6HTi66MUqCvAVNqnkffGslT-9TE_gI"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858808","token":"vdFSI9laa3BrDjjMliamOCA8UzGRU9eD5dn79YFaeAk"}],"combinations":[[2],[0],[1]]}' [Fri Dec 14 10:05:27 CST 2018] code='201' [Fri Dec 14 10:05:27 CST 2018] The new-authz request is ok. [Fri Dec 14 10:05:27 CST 2018] entry='"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"' [Fri Dec 14 10:05:27 CST 2018] token='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w' [Fri Dec 14 10:05:27 CST 2018] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:05:27 CST 2018] keyauthorization='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:05:27 CST 2018] dvlist='server.guozhongda.cn#elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE#https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806#dns-01#dns_gd' [Fri Dec 14 10:05:27 CST 2018] d [Fri Dec 14 10:05:27 CST 2018] vlist='server.guozhongda.cn#elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE#https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806#dns-01#dns_gd,' [Fri Dec 14 10:05:27 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:05:27 CST 2018] _d_alias='so-honor.com' [Fri Dec 14 10:05:27 CST 2018] txtdomain='_acme-challenge.so-honor.com' [Fri Dec 14 10:05:27 CST 2018] txt='x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14' [Fri Dec 14 10:05:27 CST 2018] d_api='/tmp/mnt/sdb/entware/usr/local/acme.sh/dnsapi/dns_gd.sh' [Fri Dec 14 10:05:27 CST 2018] Found domain api file: /tmp/mnt/sdb/entware/usr/local/acme.sh/dnsapi/dns_gd.sh [Fri Dec 14 10:05:27 CST 2018] First detect the root zone [Fri Dec 14 10:05:27 CST 2018] domains/so-honor.com [Fri Dec 14 10:05:28 CST 2018] GET [Fri Dec 14 10:05:28 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com' [Fri Dec 14 10:05:28 CST 2018] timeout= [Fri Dec 14 10:05:28 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753128.tmp -g ' [Fri Dec 14 10:05:28 CST 2018] ret='0' [Fri Dec 14 10:05:28 CST 2018] response='{"authCode":"0!+]Q56KFBC4452C","contactAdmin":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactBilling":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactRegistrant":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactTech":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"createdAt":"2018-07-16T03:35:46.000Z","domain":"so-honor.com","domainId":272538616,"expirationProtected":false,"expires":"2019-07-16T03:35:46.000Z","holdRegistrar":false,"locked":true,"nameServers":["ns35.domaincontrol.com","ns36.domaincontrol.com"],"privacy":false,"renewAuto":false,"renewDeadline":"2019-08-30T01:35:45.000Z","renewable":true,"status":"ACTIVE","transferProtected":false}' [Fri Dec 14 10:05:28 CST 2018] _sub_domain='_acme-challenge' [Fri Dec 14 10:05:28 CST 2018] _domain='so-honor.com' [Fri Dec 14 10:05:28 CST 2018] Getting existing records [Fri Dec 14 10:05:28 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:05:28 CST 2018] GET [Fri Dec 14 10:05:28 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:05:28 CST 2018] timeout= [Fri Dec 14 10:05:29 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753128.tmp -g ' [Fri Dec 14 10:05:30 CST 2018] ret='0' [Fri Dec 14 10:05:30 CST 2018] response='[{"data":"","name":"_acme-challenge","ttl":600,"type":"TXT"}]' [Fri Dec 14 10:05:30 CST 2018] t='""' [Fri Dec 14 10:05:30 CST 2018] _add_data='{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"},{"data":""}' [Fri Dec 14 10:05:30 CST 2018] Adding record [Fri Dec 14 10:05:30 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:05:30 CST 2018] data='[{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"},{"data":""}]' [Fri Dec 14 10:05:30 CST 2018] PUT [Fri Dec 14 10:05:30 CST 2018] _post_url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:05:30 CST 2018] body='[{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"},{"data":""}]' [Fri Dec 14 10:05:30 CST 2018] _postContentType [Fri Dec 14 10:05:30 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753130.tmp -g ' [Fri Dec 14 10:05:31 CST 2018] _ret='0' [Fri Dec 14 10:05:31 CST 2018] response [Fri Dec 14 10:05:31 CST 2018] Added, sleeping 10 seconds [Fri Dec 14 10:05:42 CST 2018] Sleep 120 seconds for the txt records to take effect [Fri Dec 14 10:07:46 CST 2018] ok, let's start to verify [Fri Dec 14 10:07:46 CST 2018] Verifying:server.guozhongda.cn [Fri Dec 14 10:07:46 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:07:46 CST 2018] keyauthorization='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:07:46 CST 2018] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] _currentRoot='dns_gd' [Fri Dec 14 10:07:46 CST 2018] tigger domain validation. [Fri Dec 14 10:07:46 CST 2018] _t_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] _t_key_authz='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:07:46 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] payload='{"resource": "challenge", "keyAuthorization": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE"}' [Fri Dec 14 10:07:46 CST 2018] Use cached jwk for file: /root/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key [Fri Dec 14 10:07:46 CST 2018] Use _CACHED_NONCE='nsYZ8Cw6QOLVd6FIRm46C7Z9DlOXkF76eR-HSW8snmk' [Fri Dec 14 10:07:46 CST 2018] nonce='nsYZ8Cw6QOLVd6FIRm46C7Z9DlOXkF76eR-HSW8snmk' [Fri Dec 14 10:07:46 CST 2018] POST [Fri Dec 14 10:07:46 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0iBWj5ymhvdfI_nF2o9heAFDXSihOCZroEeo9-P5O7IsAv4DIrvYjjhFWcQ1g3moGfOZEv5zOnD4Ggwo4Ms7ZGUHvc6mH_qx0drUVJl3_b9lfIW7qHLtAm5U4wtrW8cBzcqBGwy_FZQCDXkGwkpg9YjD7N9YTTErUGBmH2Z8YtMaPc12USK0eCki9NQc5vxRdvHYWVtGoI6yt3dOB6qgWAwsu0hb9ZPnvEevtYy2NT2oIhPFmfQj6C8eZV_Cm2cLqODBO8CY9WOQo-ogf8lRfXZAEo6yR-R3bE7aGk79Rbu5m9Ztp9yK-wQBhOnRu3TpJlNUU6cp_1u4gYvLfsd05w"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJlbFFWMXZIOU1aTEVwWkZWVnl5VFdzb0p1ajFMT01ha01mRkJzVVlqUTB3LmFSNDNjeHVxMUlveXhNWnlYTDRlSHIzOXJBZXlFeV93S21jY3prQWxoZEUifQ", "signature": "dN2TK0R8lOQJ94SSidoC-lGUk8faU4C6BH61capsrE8FKl-_yQ3lFnnCmwmF9448oxJND_IbPL67F1-X0zWPL_i_WpEEqDh3LRh_4xyfPhY3cPt2n1dKyNvz72Ix0DWtYCN6uQp_7qTqQmyyi4pnZLztmG4NuPuWV_JcaEiS96SXX-_76jyYhQ9MqN2O0CKHP0YWByd7faDUHMmxj56hB8d0cG1vyj8OLVN7xjpZ-xf5d-3Pm_vL6dVZ-2426Dz2s4azZu-PFl4BAzBx13YlXAZEcDj9stntB81RJijWuHtx-XCvKNz46ZeMAFfHMnmCDTtfPuzvifb5R-YbZlS7ew"}' [Fri Dec 14 10:07:46 CST 2018] _postContentType='application/jose+json' [Fri Dec 14 10:07:46 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753266.tmp -g ' [Fri Dec 14 10:07:48 CST 2018] _ret='0' [Fri Dec 14 10:07:48 CST 2018] original='{ "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w", "keyAuthorization": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE" }' [Fri Dec 14 10:07:48 CST 2018] responseHeaders='HTTP/1.1 100 Continue Expires: Fri, 14 Dec 2018 02:07:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache
HTTP/1.1 202 Accepted Server: nginx Content-Type: application/json Content-Length: 336 Boulder-Requester: 47537316 Link: https://acme-v01.api.letsencrypt.org/acme/authz/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0;rel="up" Location: https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806 Replay-Nonce: Oz6Vio01I58bdiV7V0_EQZUkco_r0PIuVo7XpVfNxQo Expires: Fri, 14 Dec 2018 02:07:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:07:48 GMT Connection: keep-alive ' [Fri Dec 14 10:07:48 CST 2018] response='{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w","keyAuthorization":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE"}' [Fri Dec 14 10:07:48 CST 2018] code='202' [Fri Dec 14 10:07:48 CST 2018] sleep 2 secs to verify [Fri Dec 14 10:07:50 CST 2018] checking [Fri Dec 14 10:07:50 CST 2018] GET [Fri Dec 14 10:07:50 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:50 CST 2018] timeout= [Fri Dec 14 10:07:50 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753270.tmp -g ' [Fri Dec 14 10:07:51 CST 2018] ret='0' [Fri Dec 14 10:07:51 CST 2018] original='{ "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w" }' [Fri Dec 14 10:07:51 CST 2018] response='{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"}' [Fri Dec 14 10:07:51 CST 2018] Pending [Fri Dec 14 10:07:51 CST 2018] sleep 2 secs to verify [Fri Dec 14 10:07:53 CST 2018] checking [Fri Dec 14 10:07:53 CST 2018] GET [Fri Dec 14 10:07:53 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:53 CST 2018] timeout= [Fri Dec 14 10:07:53 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753273.tmp -g ' [Fri Dec 14 10:07:54 CST 2018] ret='0' [Fri Dec 14 10:07:54 CST 2018] original='{ "type": "dns-01", "status": "invalid", "error": { "type": "urn:acme:error:dns", "detail": "DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn", "status": 400 }, "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w" }' [Fri Dec 14 10:07:54 CST 2018] response='{"type":"dns-01","status":"invalid","error":{"type":"urn:acme:error:dns","detail":"DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn","status": 400},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"}' [Fri Dec 14 10:07:54 CST 2018] error='"error":{"type":"urn:acme:error:dns","detail":"DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn","status": 400' [Fri Dec 14 10:07:54 CST 2018] errordetail='DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn' [Fri Dec 14 10:07:54 CST 2018] server.guozhongda.cn:Verify error:DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn [Fri Dec 14 10:07:54 CST 2018] Skip for removelevel: [Fri Dec 14 10:07:54 CST 2018] pid [Fri Dec 14 10:07:54 CST 2018] No need to restore nginx, skip. [Fri Dec 14 10:07:54 CST 2018] _clearupdns [Fri Dec 14 10:07:54 CST 2018] Removing DNS records. [Fri Dec 14 10:07:54 CST 2018] txt='x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14' [Fri Dec 14 10:07:54 CST 2018] d_api='/tmp/mnt/sdb/entware/usr/local/acme.sh/dnsapi/dns_gd.sh' [Fri Dec 14 10:07:54 CST 2018] _d_alias='so-honor.com' [Fri Dec 14 10:07:54 CST 2018] First detect the root zone [Fri Dec 14 10:07:54 CST 2018] domains/so-honor.com [Fri Dec 14 10:07:54 CST 2018] GET [Fri Dec 14 10:07:54 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com' [Fri Dec 14 10:07:54 CST 2018] timeout= [Fri Dec 14 10:07:54 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753274.tmp -g ' [Fri Dec 14 10:07:55 CST 2018] ret='0' [Fri Dec 14 10:07:55 CST 2018] response='{"authCode":"0!+]Q56KFBC4452C","contactAdmin":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactBilling":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactRegistrant":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactTech":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"createdAt":"2018-07-16T03:35:46.000Z","domain":"so-honor.com","domainId":272538616,"expirationProtected":false,"expires":"2019-07-16T03:35:46.000Z","holdRegistrar":false,"locked":true,"nameServers":["ns35.domaincontrol.com","ns36.domaincontrol.com"],"privacy":false,"renewAuto":false,"renewDeadline":"2019-08-30T01:35:45.000Z","renewable":true,"status":"ACTIVE","transferProtected":false}' [Fri Dec 14 10:07:55 CST 2018] _sub_domain='_acme-challenge' [Fri Dec 14 10:07:55 CST 2018] _domain='so-honor.com' [Fri Dec 14 10:07:55 CST 2018] Getting existing records [Fri Dec 14 10:07:55 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:07:55 CST 2018] GET [Fri Dec 14 10:07:55 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:07:55 CST 2018] timeout= [Fri Dec 14 10:07:55 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753275.tmp -g ' [Fri Dec 14 10:07:56 CST 2018] ret='0' [Fri Dec 14 10:07:56 CST 2018] response='[{"data":"","name":"_acme-challenge","ttl":600,"type":"TXT"},{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14","name":"_acme-challenge","ttl":600,"type":"TXT"}]' [Fri Dec 14 10:07:56 CST 2018] t='""' [Fri Dec 14 10:07:56 CST 2018] t='"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"' [Fri Dec 14 10:07:56 CST 2018] _add_data='{"data":""}' [Fri Dec 14 10:07:56 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:07:56 CST 2018] data='[{"data":""}]' [Fri Dec 14 10:07:56 CST 2018] PUT [Fri Dec 14 10:07:56 CST 2018] _post_url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:07:56 CST 2018] body='[{"data":""}]' [Fri Dec 14 10:07:56 CST 2018] _postContentType [Fri Dec 14 10:07:56 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753276.tmp -g ' [Fri Dec 14 10:07:57 CST 2018] _ret='0' [Fri Dec 14 10:07:57 CST 2018] response [Fri Dec 14 10:07:57 CST 2018] _on_issue_err [Fri Dec 14 10:07:57 CST 2018] Please check log file for more details: /root/.acme.sh/acme.sh.log [Fri Dec 14 10:07:57 CST 2018] _chk_vlist='server.guozhongda.cn#elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE#https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806#dns-01#dns_gd,' [Fri Dec 14 10:07:57 CST 2018] start to deactivate authz [Fri Dec 14 10:07:57 CST 2018] tigger domain validation. [Fri Dec 14 10:07:57 CST 2018] _t_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:57 CST 2018] _t_key_authz='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:07:57 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:57 CST 2018] payload='{"resource": "challenge", "keyAuthorization": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE"}' [Fri Dec 14 10:07:57 CST 2018] Use cached jwk for file: /root/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key [Fri Dec 14 10:07:57 CST 2018] Use _CACHED_NONCE='Oz6Vio01I58bdiV7V0_EQZUkco_r0PIuVo7XpVfNxQo' [Fri Dec 14 10:07:57 CST 2018] nonce='Oz6Vio01I58bdiV7V0_EQZUkco_r0PIuVo7XpVfNxQo' [Fri Dec 14 10:07:57 CST 2018] POST [Fri Dec 14 10:07:57 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:57 CST 2018] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0iBWj5ymhvdfI_nF2o9heAFDXSihOCZroEeo9-P5O7IsAv4DIrvYjjhFWcQ1g3moGfOZEv5zOnD4Ggwo4Ms7ZGUHvc6mH_qx0drUVJl3_b9lfIW7qHLtAm5U4wtrW8cBzcqBGwy_FZQCDXkGwkpg9YjD7N9YTTErUGBmH2Z8YtMaPc12USK0eCki9NQc5vxRdvHYWVtGoI6yt3dOB6qgWAwsu0hb9ZPnvEevtYy2NT2oIhPFmfQj6C8eZV_Cm2cLqODBO8CY9WOQo-ogf8lRfXZAEo6yR-R3bE7aGk79Rbu5m9Ztp9yK-wQBhOnRu3TpJlNUU6cp_1u4gYvLfsd05w"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJlbFFWMXZIOU1aTEVwWkZWVnl5VFdzb0p1ajFMT01ha01mRkJzVVlqUTB3LmFSNDNjeHVxMUlveXhNWnlYTDRlSHIzOXJBZXlFeV93S21jY3prQWxoZEUifQ", "signature": "j16iUApqX3IDJ75cfdlB6d1uJ1apXckUI1qDpsqd71Ek3-80OIMDr_59GQVMLSeb1ZgSEDm-lkQ4neeo-AjYm7Hb0mKiU4TKf_LBBxWaJhX0RZ0SzEIkSCg_MzCIz6rE0rSPdYcyxQ8LjOQtkGl5lLgys9OxzsuLn_VEaXaHiM9IKgbL7_9KzPmB5ndNen0I2LfphzTAi1frLTzHkXGda4d1ziFZVnkDGPg46akdm4LcEIBEuozGXW8qTQS0enzUxgAA1NqunLPWQxhPNBlWLAYM5_q-IOVsg5Fxfx4zzcgEs70yeLs-k21pZoQ0geOourl_Qi6FS4mvR59StI5ltw"}' [Fri Dec 14 10:07:57 CST 2018] _postContentType='application/jose+json' [Fri Dec 14 10:07:57 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753277.tmp -g ' [Fri Dec 14 10:07:58 CST 2018] _ret='0' [Fri Dec 14 10:07:58 CST 2018] original='{ "type": "urn:acme:error:malformed", "detail": "Unable to update challenge :: authorization must be pending", "status": 400 }' [Fri Dec 14 10:07:58 CST 2018] responseHeaders='HTTP/1.1 100 Continue Expires: Fri, 14 Dec 2018 02:07:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache
HTTP/1.1 400 Bad Request Server: nginx Content-Type: application/problem+json Content-Length: 132 Boulder-Requester: 47537316 Replay-Nonce: s4C0KW0qgu2boWr95j7d5iLjyP5iDfQZuKqUyB4h14c Expires: Fri, 14 Dec 2018 02:07:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:07:58 GMT Connection: close ' [Fri Dec 14 10:07:58 CST 2018] response='{"type":"urn:acme:error:malformed","detail":"Unable to update challenge :: authorization must be pending","status": 400}' [Fri Dec 14 10:07:58 CST 2018] code='400' [Fri Dec 14 10:07:58 CST 2018] socat doesn't exists. [Fri Dec 14 10:07:58 CST 2018] Diagnosis versions: openssl:openssl OpenSSL 1.0.2q 20 Nov 2018 apache: apache doesn't exists. nginx: nginx version: nginx/1.14.0 built by gcc 7.3.0 (OpenWrt GCC 7.3.0 r641-9cf57f2) built with OpenSSL 1.0.2p 14 Aug 2018 TLS SNI support enabled configure arguments: --crossbuild=Linux::aarch64 --with-cc=aarch64-openwrt-linux-gnu-gcc --with-cc-opt='-I/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/include -I/media/ware/Entware.2018.09/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.3.0_glibc-2.27/include -O2 -pipe -mcpu=cortex-a53 -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -I/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/include/libxml2 -Wno-error=parentheses -Wno-error=implicit-fallthrough' --with-ld-opt='-L/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/lib -Wl,-rpath,/opt/lib -Wl,-rpath-link=/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/lib -Wl,--dynamic-linker=/opt/lib/ld-linux-aarch64.so.1 -L/media/ware/Entware.2018.09/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.3.0_glibc-2.27/lib -lxml2' --prefix=/opt --conf-path=/opt/etc/nginx/nginx.conf --http-log-path=/opt/var/log/nginx/access.log --error-log-path=/opt/var/log/nginx/error.log --lock-path=/opt/var/lock/nginx.lock --pid-path=/opt/var/run/nginx.pid --modules-path=/opt/lib/nginx --http-client-body-temp-path=/opt/var/lib/nginx/body --http-fastcgi-temp-path=/opt/var/lib/nginx/fastcgi --http-proxy-temp-path=/opt/var/lib/nginx/proxy --http-scgi-temp-path=/opt/var/lib/nginx/scgi --http-uwsgi-temp-path=/opt/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_auth_request_module --with-http_v2_module --with-http_dav_module --with-http_slice_module --without-http_upstream_zone_module --without-stream_upstream_zone_module --with-http_addition_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_secure_link_module --with-http_sub_module --with-http_xslt_module=dynamic --with-mail=dynamic --with-mail_ssl_module --with-stream=dynamic --with-stream_ssl_module --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-headers-more-filter --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-auth-pam --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-cache-purge --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-dav-ext --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-ndk --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-echo --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-fancyindex --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/nchan --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-lua --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/rtmp --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-uploadprogress --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-upstream-fair --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-subs-filter
你没有设置 cname. 请检查, 一步一步的照做 https://github.com/Neilpang/acme.sh/wiki/DNS-alias-mode
我用dns alias方式签发证书一直报错,烦请指教。 命令: ./acme.sh --issue --dns dns_gd -d server.guozhongda.cn --challenge-alias so-honor.com
log如下:
[Fri Dec 14 10:05:21 CST 2018] Lets find script dir. [Fri Dec 14 10:05:21 CST 2018] SCRIPT='./acme.sh' [Fri Dec 14 10:05:21 CST 2018] _script='/tmp/mnt/sdb/entware/usr/local/acme.sh/acme.sh' [Fri Dec 14 10:05:21 CST 2018] _script_home='/tmp/mnt/sdb/entware/usr/local/acme.sh' [Fri Dec 14 10:05:21 CST 2018] Using default home:/root/.acme.sh [Fri Dec 14 10:05:21 CST 2018] Using config home:/root/.acme.sh [Fri Dec 14 10:05:21 CST 2018] LE_WORKING_DIR='/root/.acme.sh' https://github.com/Neilpang/acme.sh v2.8.0 [Fri Dec 14 10:05:21 CST 2018] _main_domain='server.guozhongda.cn' [Fri Dec 14 10:05:21 CST 2018] _alt_domains='no' [Fri Dec 14 10:05:21 CST 2018] Using config home:/root/.acme.sh [Fri Dec 14 10:05:21 CST 2018] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:21 CST 2018] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org' [Fri Dec 14 10:05:21 CST 2018] DOMAIN_PATH='/root/.acme.sh/server.guozhongda.cn' [Fri Dec 14 10:05:21 CST 2018] 'dns_gd' does not contain 'dns' [Fri Dec 14 10:05:21 CST 2018] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory [Fri Dec 14 10:05:21 CST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Fri Dec 14 10:05:21 CST 2018] GET [Fri Dec 14 10:05:21 CST 2018] url='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:21 CST 2018] timeout= [Fri Dec 14 10:05:21 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753121.tmp -g ' [Fri Dec 14 10:05:22 CST 2018] ret='0' [Fri Dec 14 10:05:22 CST 2018] response='{ "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "terms-of-service": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf", "website": "https://letsencrypt.org" }, "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz", "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert", "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg", "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert", "zj8SOMxEF84": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417" }' [Fri Dec 14 10:05:22 CST 2018] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg' [Fri Dec 14 10:05:22 CST 2018] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert' [Fri Dec 14 10:05:22 CST 2018] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf' [Fri Dec 14 10:05:22 CST 2018] ACME_NEW_NONCE [Fri Dec 14 10:05:22 CST 2018] ACME_VERSION [Fri Dec 14 10:05:22 CST 2018] Le_NextRenewTime [Fri Dec 14 10:05:22 CST 2018] _on_before_issue [Fri Dec 14 10:05:22 CST 2018] _chk_main_domain='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] _chk_alt_domains [Fri Dec 14 10:05:22 CST 2018] 'dns_gd' does not contain 'no' [Fri Dec 14 10:05:22 CST 2018] Le_LocalAddress [Fri Dec 14 10:05:22 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] Check for domain='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] _currentRoot='dns_gd' [Fri Dec 14 10:05:22 CST 2018] d [Fri Dec 14 10:05:22 CST 2018] 'dns_gd' does not contain 'apache' [Fri Dec 14 10:05:22 CST 2018] _saved_account_key_hash='Spmp50/gtSu8yLVBfMdXwZ3H8v9RYMDmig1ra7xu9lo=' [Fri Dec 14 10:05:22 CST 2018] _saved_account_key_hash is not changed, skip register account. [Fri Dec 14 10:05:22 CST 2018] Read key length: [Fri Dec 14 10:05:22 CST 2018] _createcsr [Fri Dec 14 10:05:22 CST 2018] domain='server.guozhongda.cn' [Fri Dec 14 10:05:22 CST 2018] domainlist [Fri Dec 14 10:05:22 CST 2018] csrkey='/root/.acme.sh/server.guozhongda.cn/server.guozhongda.cn.key' [Fri Dec 14 10:05:23 CST 2018] csr='/root/.acme.sh/server.guozhongda.cn/server.guozhongda.cn.csr' [Fri Dec 14 10:05:23 CST 2018] csrconf='/root/.acme.sh/server.guozhongda.cn/server.guozhongda.cn.csr.conf' [Fri Dec 14 10:05:23 CST 2018] Single domain='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _is_idn_d='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _idn_temp [Fri Dec 14 10:05:23 CST 2018] _csr_cn='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] Getting domain auth token for each domain [Fri Dec 14 10:05:23 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] Getting webroot for domain='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _w='dns_gd' [Fri Dec 14 10:05:23 CST 2018] _currentRoot='dns_gd' [Fri Dec 14 10:05:23 CST 2018] Getting new-authz for domain='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory [Fri Dec 14 10:05:23 CST 2018] Try new-authz for the 0 time. [Fri Dec 14 10:05:23 CST 2018] _is_idn_d='server.guozhongda.cn' [Fri Dec 14 10:05:23 CST 2018] _idn_temp [Fri Dec 14 10:05:23 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Fri Dec 14 10:05:23 CST 2018] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "server.guozhongda.cn"}}' [Fri Dec 14 10:05:23 CST 2018] RSA key [Fri Dec 14 10:05:23 CST 2018] _URGLY_PRINTF [Fri Dec 14 10:05:23 CST 2018] xargs [Fri Dec 14 10:05:23 CST 2018] _URGLY_PRINTF [Fri Dec 14 10:05:23 CST 2018] xargs [Fri Dec 14 10:05:23 CST 2018] Get nonce with GET. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:23 CST 2018] GET [Fri Dec 14 10:05:23 CST 2018] url='https://acme-v01.api.letsencrypt.org/directory' [Fri Dec 14 10:05:23 CST 2018] timeout= [Fri Dec 14 10:05:23 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753123.tmp -g ' [Fri Dec 14 10:05:24 CST 2018] ret='0' [Fri Dec 14 10:05:24 CST 2018] _headers='HTTP/1.1 200 OK Server: nginx Content-Type: application/json Content-Length: 658 Replay-Nonce: VgwaXOD3OXWRxWxXyXQIf2xb7Om3RSuLegswHvqPVos X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Fri, 14 Dec 2018 02:05:24 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:05:24 GMT Connection: keep-alive ' [Fri Dec 14 10:05:24 CST 2018] _CACHED_NONCE='VgwaXOD3OXWRxWxXyXQIf2xb7Om3RSuLegswHvqPVos' [Fri Dec 14 10:05:24 CST 2018] nonce='VgwaXOD3OXWRxWxXyXQIf2xb7Om3RSuLegswHvqPVos' [Fri Dec 14 10:05:25 CST 2018] POST [Fri Dec 14 10:05:25 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz' [Fri Dec 14 10:05:25 CST 2018] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0iBWj5ymhvdfI_nF2o9heAFDXSihOCZroEeo9-P5O7IsAv4DIrvYjjhFWcQ1g3moGfOZEv5zOnD4Ggwo4Ms7ZGUHvc6mH_qx0drUVJl3_b9lfIW7qHLtAm5U4wtrW8cBzcqBGwy_FZQCDXkGwkpg9YjD7N9YTTErUGBmH2Z8YtMaPc12USK0eCki9NQc5vxRdvHYWVtGoI6yt3dOB6qgWAwsu0hb9ZPnvEevtYy2NT2oIhPFmfQj6C8eZV_Cm2cLqODBO8CY9WOQo-ogf8lRfXZAEo6yR-R3bE7aGk79Rbu5m9Ztp9yK-wQBhOnRu3TpJlNUU6cp1u4gYvLfsd05w"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAic2VydmVyLmd1b3pob25nZGEuY24ifX0", "signature": "cTu6nLCtTYltxhQ7PMRcdRxy7gEQCa5Job-7RwVnKAPwMHRcrZpZjswwEuB-BPUtZ_JzP4mjsdiItf-QyHJc8gjRUE4Twlmrde67LFmqyWcp52EwMD-26quN2FDU3xgk63Y0WjiKV1UIB-Q9aA0wil0gpwjhv59Vthh4MV6vdqaVKJhcrzMYEjt-h66XTvm7VDkolq2echO45aWhjFbG8S8NmU_9BFk4zfsyqQ1Bdb9aw1H6Dh5C_0FVO6RlzbhTd_KBODJ9M_m6rn2-sJ-go5V_GROZed4BEMbOlIQIwpiwrPRxLIPik3QQWANWrkoOLNLeE3GCQHxhi7JhyQAXw"}' [Fri Dec 14 10:05:25 CST 2018] _postContentType='application/jose+json' [Fri Dec 14 10:05:25 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753125.tmp -g ' [Fri Dec 14 10:05:27 CST 2018] _ret='0' [Fri Dec 14 10:05:27 CST 2018] original='{ "identifier": { "type": "dns", "value": "server.guozhongda.cn" }, "status": "pending", "expires": "2018-12-21T02:05:26Z", "challenges": [ { "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w" }, { "type": "tls-alpn-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858807", "token": "DP8wsRty2W-Gv6HTi66MUqCvAVNqnkffGslT-9TE_gI" }, { "type": "http-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858808", "token": "vdFSI9laa3BrDjjMliamOCA8UzGRU9eD5dn79YFaeAk" } ], "combinations": [ [ 2 ], [ 0 ], [ 1 ] ] }' [Fri Dec 14 10:05:27 CST 2018] responseHeaders='HTTP/1.1 100 Continue Expires: Fri, 14 Dec 2018 02:05:26 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache
HTTP/1.1 201 Created Server: nginx Content-Type: application/json Content-Length: 1002 Boulder-Requester: 47537316 Link: https://acme-v01.api.letsencrypt.org/acme/new-cert;rel="next" Location: https://acme-v01.api.letsencrypt.org/acme/authz/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0 Replay-Nonce: nsYZ8Cw6QOLVd6FIRm46C7Z9DlOXkF76eR-HSW8snmk X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 Expires: Fri, 14 Dec 2018 02:05:27 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:05:27 GMT Connection: keep-alive ' [Fri Dec 14 10:05:27 CST 2018] response='{"identifier":{"type":"dns","value":"server.guozhongda.cn"},"status":"pending","expires":"2018-12-21T02:05:26Z","challenges":[{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"},{"type":"tls-alpn-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858807","token":"DP8wsRty2W-Gv6HTi66MUqCvAVNqnkffGslT-9TE_gI"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858808","token":"vdFSI9laa3BrDjjMliamOCA8UzGRU9eD5dn79YFaeAk"}],"combinations":[[2],[0],[1]]}' [Fri Dec 14 10:05:27 CST 2018] code='201' [Fri Dec 14 10:05:27 CST 2018] The new-authz request is ok. [Fri Dec 14 10:05:27 CST 2018] entry='"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"' [Fri Dec 14 10:05:27 CST 2018] token='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w' [Fri Dec 14 10:05:27 CST 2018] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:05:27 CST 2018] keyauthorization='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:05:27 CST 2018] dvlist='server.guozhongda.cn#elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE#https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806#dns-01#dns_gd' [Fri Dec 14 10:05:27 CST 2018] d [Fri Dec 14 10:05:27 CST 2018] vlist='server.guozhongda.cn#elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE#https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806#dns-01#dns_gd,' [Fri Dec 14 10:05:27 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:05:27 CST 2018] _d_alias='so-honor.com' [Fri Dec 14 10:05:27 CST 2018] txtdomain='_acme-challenge.so-honor.com' [Fri Dec 14 10:05:27 CST 2018] txt='x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14' [Fri Dec 14 10:05:27 CST 2018] d_api='/tmp/mnt/sdb/entware/usr/local/acme.sh/dnsapi/dns_gd.sh' [Fri Dec 14 10:05:27 CST 2018] Found domain api file: /tmp/mnt/sdb/entware/usr/local/acme.sh/dnsapi/dns_gd.sh [Fri Dec 14 10:05:27 CST 2018] First detect the root zone [Fri Dec 14 10:05:27 CST 2018] domains/so-honor.com [Fri Dec 14 10:05:28 CST 2018] GET [Fri Dec 14 10:05:28 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com' [Fri Dec 14 10:05:28 CST 2018] timeout= [Fri Dec 14 10:05:28 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753128.tmp -g ' [Fri Dec 14 10:05:28 CST 2018] ret='0' [Fri Dec 14 10:05:28 CST 2018] response='{"authCode":"0!+]Q56KFBC4452C","contactAdmin":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactBilling":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactRegistrant":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactTech":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"createdAt":"2018-07-16T03:35:46.000Z","domain":"so-honor.com","domainId":272538616,"expirationProtected":false,"expires":"2019-07-16T03:35:46.000Z","holdRegistrar":false,"locked":true,"nameServers":["ns35.domaincontrol.com","ns36.domaincontrol.com"],"privacy":false,"renewAuto":false,"renewDeadline":"2019-08-30T01:35:45.000Z","renewable":true,"status":"ACTIVE","transferProtected":false}' [Fri Dec 14 10:05:28 CST 2018] _sub_domain='_acme-challenge' [Fri Dec 14 10:05:28 CST 2018] _domain='so-honor.com' [Fri Dec 14 10:05:28 CST 2018] Getting existing records [Fri Dec 14 10:05:28 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:05:28 CST 2018] GET [Fri Dec 14 10:05:28 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:05:28 CST 2018] timeout= [Fri Dec 14 10:05:29 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753128.tmp -g ' [Fri Dec 14 10:05:30 CST 2018] ret='0' [Fri Dec 14 10:05:30 CST 2018] response='[{"data":"","name":"_acme-challenge","ttl":600,"type":"TXT"}]' [Fri Dec 14 10:05:30 CST 2018] t='""' [Fri Dec 14 10:05:30 CST 2018] _add_data='{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"},{"data":""}' [Fri Dec 14 10:05:30 CST 2018] Adding record [Fri Dec 14 10:05:30 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:05:30 CST 2018] data='[{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"},{"data":""}]' [Fri Dec 14 10:05:30 CST 2018] PUT [Fri Dec 14 10:05:30 CST 2018] _post_url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:05:30 CST 2018] body='[{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"},{"data":""}]' [Fri Dec 14 10:05:30 CST 2018] _postContentType [Fri Dec 14 10:05:30 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753130.tmp -g ' [Fri Dec 14 10:05:31 CST 2018] _ret='0' [Fri Dec 14 10:05:31 CST 2018] response [Fri Dec 14 10:05:31 CST 2018] Added, sleeping 10 seconds [Fri Dec 14 10:05:42 CST 2018] Sleep 120 seconds for the txt records to take effect [Fri Dec 14 10:07:46 CST 2018] ok, let's start to verify [Fri Dec 14 10:07:46 CST 2018] Verifying:server.guozhongda.cn [Fri Dec 14 10:07:46 CST 2018] d='server.guozhongda.cn' [Fri Dec 14 10:07:46 CST 2018] keyauthorization='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:07:46 CST 2018] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] _currentRoot='dns_gd' [Fri Dec 14 10:07:46 CST 2018] tigger domain validation. [Fri Dec 14 10:07:46 CST 2018] _t_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] _t_key_authz='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:07:46 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] payload='{"resource": "challenge", "keyAuthorization": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE"}' [Fri Dec 14 10:07:46 CST 2018] Use cached jwk for file: /root/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key [Fri Dec 14 10:07:46 CST 2018] Use _CACHED_NONCE='nsYZ8Cw6QOLVd6FIRm46C7Z9DlOXkF76eR-HSW8snmk' [Fri Dec 14 10:07:46 CST 2018] nonce='nsYZ8Cw6QOLVd6FIRm46C7Z9DlOXkF76eR-HSW8snmk' [Fri Dec 14 10:07:46 CST 2018] POST [Fri Dec 14 10:07:46 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:46 CST 2018] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0iBWj5ymhvdfI_nF2o9heAFDXSihOCZroEeo9-P5O7IsAv4DIrvYjjhFWcQ1g3moGfOZEv5zOnD4Ggwo4Ms7ZGUHvc6mH_qx0drUVJl3_b9lfIW7qHLtAm5U4wtrW8cBzcqBGwy_FZQCDXkGwkpg9YjD7N9YTTErUGBmH2Z8YtMaPc12USK0eCki9NQc5vxRdvHYWVtGoI6yt3dOB6qgWAwsu0hb9ZPnvEevtYy2NT2oIhPFmfQj6C8eZV_Cm2cLqODBO8CY9WOQo-ogf8lRfXZAEo6yR-R3bE7aGk79Rbu5m9Ztp9yK-wQBhOnRu3TpJlNUU6cp_1u4gYvLfsd05w"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJlbFFWMXZIOU1aTEVwWkZWVnl5VFdzb0p1ajFMT01ha01mRkJzVVlqUTB3LmFSNDNjeHVxMUlveXhNWnlYTDRlSHIzOXJBZXlFeV93S21jY3prQWxoZEUifQ", "signature": "dN2TK0R8lOQJ94SSidoC-lGUk8faU4C6BH61capsrE8FKl-_yQ3lFnnCmwmF9448oxJND_IbPL67F1-X0zWPL_i_WpEEqDh3LRh_4xyfPhY3cPt2n1dKyNvz72Ix0DWtYCN6uQp_7qTqQmyyi4pnZLztmG4NuPuWV_JcaEiS96SXX-_76jyYhQ9MqN2O0CKHP0YWByd7faDUHMmxj56hB8d0cG1vyj8OLVN7xjpZ-xf5d-3Pm_vL6dVZ-2426Dz2s4azZu-PFl4BAzBx13YlXAZEcDj9stntB81RJijWuHtx-XCvKNz46ZeMAFfHMnmCDTtfPuzvifb5R-YbZlS7ew"}' [Fri Dec 14 10:07:46 CST 2018] _postContentType='application/jose+json' [Fri Dec 14 10:07:46 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753266.tmp -g ' [Fri Dec 14 10:07:48 CST 2018] _ret='0' [Fri Dec 14 10:07:48 CST 2018] original='{ "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w", "keyAuthorization": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE" }' [Fri Dec 14 10:07:48 CST 2018] responseHeaders='HTTP/1.1 100 Continue Expires: Fri, 14 Dec 2018 02:07:47 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache
HTTP/1.1 202 Accepted Server: nginx Content-Type: application/json Content-Length: 336 Boulder-Requester: 47537316 Link: https://acme-v01.api.letsencrypt.org/acme/authz/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0;rel="up" Location: https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806 Replay-Nonce: Oz6Vio01I58bdiV7V0_EQZUkco_r0PIuVo7XpVfNxQo Expires: Fri, 14 Dec 2018 02:07:48 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:07:48 GMT Connection: keep-alive ' [Fri Dec 14 10:07:48 CST 2018] response='{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w","keyAuthorization":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE"}' [Fri Dec 14 10:07:48 CST 2018] code='202' [Fri Dec 14 10:07:48 CST 2018] sleep 2 secs to verify [Fri Dec 14 10:07:50 CST 2018] checking [Fri Dec 14 10:07:50 CST 2018] GET [Fri Dec 14 10:07:50 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:50 CST 2018] timeout= [Fri Dec 14 10:07:50 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753270.tmp -g ' [Fri Dec 14 10:07:51 CST 2018] ret='0' [Fri Dec 14 10:07:51 CST 2018] original='{ "type": "dns-01", "status": "pending", "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w" }' [Fri Dec 14 10:07:51 CST 2018] response='{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"}' [Fri Dec 14 10:07:51 CST 2018] Pending [Fri Dec 14 10:07:51 CST 2018] sleep 2 secs to verify [Fri Dec 14 10:07:53 CST 2018] checking [Fri Dec 14 10:07:53 CST 2018] GET [Fri Dec 14 10:07:53 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:53 CST 2018] timeout= [Fri Dec 14 10:07:53 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753273.tmp -g ' [Fri Dec 14 10:07:54 CST 2018] ret='0' [Fri Dec 14 10:07:54 CST 2018] original='{ "type": "dns-01", "status": "invalid", "error": { "type": "urn:acme:error:dns", "detail": "DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn", "status": 400 }, "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806", "token": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w" }' [Fri Dec 14 10:07:54 CST 2018] response='{"type":"dns-01","status":"invalid","error":{"type":"urn:acme:error:dns","detail":"DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn","status": 400},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806","token":"elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w"}' [Fri Dec 14 10:07:54 CST 2018] error='"error":{"type":"urn:acme:error:dns","detail":"DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn","status": 400' [Fri Dec 14 10:07:54 CST 2018] errordetail='DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn' [Fri Dec 14 10:07:54 CST 2018] server.guozhongda.cn:Verify error:DNS problem: NXDOMAIN looking up TXT for _acme-challenge.server.guozhongda.cn [Fri Dec 14 10:07:54 CST 2018] Skip for removelevel: [Fri Dec 14 10:07:54 CST 2018] pid [Fri Dec 14 10:07:54 CST 2018] No need to restore nginx, skip. [Fri Dec 14 10:07:54 CST 2018] _clearupdns [Fri Dec 14 10:07:54 CST 2018] Removing DNS records. [Fri Dec 14 10:07:54 CST 2018] txt='x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14' [Fri Dec 14 10:07:54 CST 2018] d_api='/tmp/mnt/sdb/entware/usr/local/acme.sh/dnsapi/dns_gd.sh' [Fri Dec 14 10:07:54 CST 2018] _d_alias='so-honor.com' [Fri Dec 14 10:07:54 CST 2018] First detect the root zone [Fri Dec 14 10:07:54 CST 2018] domains/so-honor.com [Fri Dec 14 10:07:54 CST 2018] GET [Fri Dec 14 10:07:54 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com' [Fri Dec 14 10:07:54 CST 2018] timeout= [Fri Dec 14 10:07:54 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753274.tmp -g ' [Fri Dec 14 10:07:55 CST 2018] ret='0' [Fri Dec 14 10:07:55 CST 2018] response='{"authCode":"0!+]Q56KFBC4452C","contactAdmin":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactBilling":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactRegistrant":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"contactTech":{"addressMailing":{"address1":"Chang Ping Ou Ding Si Lu 103Hao Yuan","address2":"","city":"Beijing","country":"CN","postalCode":"100094","state":"Beijing"},"email":"gzd0071@163.com","fax":"","nameFirst":"Zhong Da","nameLast":"Guo","organization":"","phone":"+86.17710154255"},"createdAt":"2018-07-16T03:35:46.000Z","domain":"so-honor.com","domainId":272538616,"expirationProtected":false,"expires":"2019-07-16T03:35:46.000Z","holdRegistrar":false,"locked":true,"nameServers":["ns35.domaincontrol.com","ns36.domaincontrol.com"],"privacy":false,"renewAuto":false,"renewDeadline":"2019-08-30T01:35:45.000Z","renewable":true,"status":"ACTIVE","transferProtected":false}' [Fri Dec 14 10:07:55 CST 2018] _sub_domain='_acme-challenge' [Fri Dec 14 10:07:55 CST 2018] _domain='so-honor.com' [Fri Dec 14 10:07:55 CST 2018] Getting existing records [Fri Dec 14 10:07:55 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:07:55 CST 2018] GET [Fri Dec 14 10:07:55 CST 2018] url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:07:55 CST 2018] timeout= [Fri Dec 14 10:07:55 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753275.tmp -g ' [Fri Dec 14 10:07:56 CST 2018] ret='0' [Fri Dec 14 10:07:56 CST 2018] response='[{"data":"","name":"_acme-challenge","ttl":600,"type":"TXT"},{"data":"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14","name":"_acme-challenge","ttl":600,"type":"TXT"}]' [Fri Dec 14 10:07:56 CST 2018] t='""' [Fri Dec 14 10:07:56 CST 2018] t='"x-2_BVIlDG6vVevPEhKWvjV0v74H8kFi6LmXguHhi14"' [Fri Dec 14 10:07:56 CST 2018] _add_data='{"data":""}' [Fri Dec 14 10:07:56 CST 2018] domains/so-honor.com/records/TXT/_acme-challenge [Fri Dec 14 10:07:56 CST 2018] data='[{"data":""}]' [Fri Dec 14 10:07:56 CST 2018] PUT [Fri Dec 14 10:07:56 CST 2018] _post_url='https://api.godaddy.com/v1/domains/so-honor.com/records/TXT/_acme-challenge' [Fri Dec 14 10:07:56 CST 2018] body='[{"data":""}]' [Fri Dec 14 10:07:56 CST 2018] _postContentType [Fri Dec 14 10:07:56 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753276.tmp -g ' [Fri Dec 14 10:07:57 CST 2018] _ret='0' [Fri Dec 14 10:07:57 CST 2018] response [Fri Dec 14 10:07:57 CST 2018] _on_issue_err [Fri Dec 14 10:07:57 CST 2018] Please check log file for more details: /root/.acme.sh/acme.sh.log [Fri Dec 14 10:07:57 CST 2018] _chk_vlist='server.guozhongda.cn#elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE#https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806#dns-01#dns_gd,' [Fri Dec 14 10:07:57 CST 2018] start to deactivate authz [Fri Dec 14 10:07:57 CST 2018] tigger domain validation. [Fri Dec 14 10:07:57 CST 2018] _t_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:57 CST 2018] _t_key_authz='elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE' [Fri Dec 14 10:07:57 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:57 CST 2018] payload='{"resource": "challenge", "keyAuthorization": "elQV1vH9MZLEpZFVVyyTWsoJuj1LOMakMfFBsUYjQ0w.aR43cxuq1IoyxMZyXL4eHr39rAeyEy_wKmcczkAlhdE"}' [Fri Dec 14 10:07:57 CST 2018] Use cached jwk for file: /root/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key [Fri Dec 14 10:07:57 CST 2018] Use _CACHED_NONCE='Oz6Vio01I58bdiV7V0_EQZUkco_r0PIuVo7XpVfNxQo' [Fri Dec 14 10:07:57 CST 2018] nonce='Oz6Vio01I58bdiV7V0_EQZUkco_r0PIuVo7XpVfNxQo' [Fri Dec 14 10:07:57 CST 2018] POST [Fri Dec 14 10:07:57 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/w01D8-4fBBjGkBF4OLLWU6TZ4lMOynArGy8WxxPr-L0/10305858806' [Fri Dec 14 10:07:57 CST 2018] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "0iBWj5ymhvdfI_nF2o9heAFDXSihOCZroEeo9-P5O7IsAv4DIrvYjjhFWcQ1g3moGfOZEv5zOnD4Ggwo4Ms7ZGUHvc6mH_qx0drUVJl3_b9lfIW7qHLtAm5U4wtrW8cBzcqBGwy_FZQCDXkGwkpg9YjD7N9YTTErUGBmH2Z8YtMaPc12USK0eCki9NQc5vxRdvHYWVtGoI6yt3dOB6qgWAwsu0hb9ZPnvEevtYy2NT2oIhPFmfQj6C8eZV_Cm2cLqODBO8CY9WOQo-ogf8lRfXZAEo6yR-R3bE7aGk79Rbu5m9Ztp9yK-wQBhOnRu3TpJlNUU6cp_1u4gYvLfsd05w"}}, "protected": "eyJub25jZSI6ICJPejZWaW8wMUk1OGJkaVY3VjBfRVFaVWtjb19yMFBJdVZvN1hwVmZOeFFvIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAxLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbGVuZ2UvdzAxRDgtNGZCQmpHa0JGNE9MTFdVNlRaNGxNT3luQXJHeThXeHhQci1MMC8xMDMwNTg1ODgwNiIsICJhbGciOiAiUlMyNTYiLCAiandrIjogeyJlIjogIkFRQUIiLCAia3R5IjogIlJTQSIsICJuIjogIjBpQldqNXltaHZkZklfbkYybzloZUFGRFhTaWhPQ1pyb0VlbzktUDVPN0lzQXY0RElydllqamhGV2NRMWczbW9HZk9aRXY1ek9uRDRHZ3dvNE1zN1pHVUh2YzZtSF9xeDBkclVWSmwzX2I5bGZJVzdxSEx0QW01VTR3dHJXOGNCemNxQkd3eV9GWlFDRFhrR3drcGc5WWpEN045WVRURXJVR0JtSDJaOFl0TWFQYzEyVVNLMGVDa2k5TlFjNXZ4UmR2SFlXVnRHb0k2eXQzZE9CNnFnV0F3c3UwaGI5WlBudkVldnRZeTJOVDJvSWhQRm1mUWo2QzhlWlZfQ20yY0xxT0RCTzhDWTlXT1FvLW9nZjhsUmZYWkFFbzZ5Ui1SM2JFN2FHazc5UmJ1NW05WnRwOXlLLXdRQmhPblJ1M1RwSmxOVVU2Y3BfMXU0Z1l2TGZzZDA1dyJ9fQ", "payload": "eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJlbFFWMXZIOU1aTEVwWkZWVnl5VFdzb0p1ajFMT01ha01mRkJzVVlqUTB3LmFSNDNjeHVxMUlveXhNWnlYTDRlSHIzOXJBZXlFeV93S21jY3prQWxoZEUifQ", "signature": "j16iUApqX3IDJ75cfdlB6d1uJ1apXckUI1qDpsqd71Ek3-80OIMDr_59GQVMLSeb1ZgSEDm-lkQ4neeo-AjYm7Hb0mKiU4TKf_LBBxWaJhX0RZ0SzEIkSCg_MzCIz6rE0rSPdYcyxQ8LjOQtkGl5lLgys9OxzsuLn_VEaXaHiM9IKgbL7_9KzPmB5ndNen0I2LfphzTAi1frLTzHkXGda4d1ziFZVnkDGPg46akdm4LcEIBEuozGXW8qTQS0enzUxgAA1NqunLPWQxhPNBlWLAYM5_q-IOVsg5Fxfx4zzcgEs70yeLs-k21pZoQ0geOourl_Qi6FS4mvR59StI5ltw"}' [Fri Dec 14 10:07:57 CST 2018] _postContentType='application/jose+json' [Fri Dec 14 10:07:57 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1544753277.tmp -g ' [Fri Dec 14 10:07:58 CST 2018] _ret='0' [Fri Dec 14 10:07:58 CST 2018] original='{ "type": "urn:acme:error:malformed", "detail": "Unable to update challenge :: authorization must be pending", "status": 400 }' [Fri Dec 14 10:07:58 CST 2018] responseHeaders='HTTP/1.1 100 Continue Expires: Fri, 14 Dec 2018 02:07:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache
HTTP/1.1 400 Bad Request Server: nginx Content-Type: application/problem+json Content-Length: 132 Boulder-Requester: 47537316 Replay-Nonce: s4C0KW0qgu2boWr95j7d5iLjyP5iDfQZuKqUyB4h14c Expires: Fri, 14 Dec 2018 02:07:58 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 14 Dec 2018 02:07:58 GMT Connection: close ' [Fri Dec 14 10:07:58 CST 2018] response='{"type":"urn:acme:error:malformed","detail":"Unable to update challenge :: authorization must be pending","status": 400}' [Fri Dec 14 10:07:58 CST 2018] code='400' [Fri Dec 14 10:07:58 CST 2018] socat doesn't exists. [Fri Dec 14 10:07:58 CST 2018] Diagnosis versions: openssl:openssl OpenSSL 1.0.2q 20 Nov 2018 apache: apache doesn't exists. nginx: nginx version: nginx/1.14.0 built by gcc 7.3.0 (OpenWrt GCC 7.3.0 r641-9cf57f2) built with OpenSSL 1.0.2p 14 Aug 2018 TLS SNI support enabled configure arguments: --crossbuild=Linux::aarch64 --with-cc=aarch64-openwrt-linux-gnu-gcc --with-cc-opt='-I/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/include -I/media/ware/Entware.2018.09/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.3.0_glibc-2.27/include -O2 -pipe -mcpu=cortex-a53 -fno-caller-saves -fno-plt -fhonour-copts -Wno-error=unused-but-set-variable -Wno-error=unused-result -I/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/include/libxml2 -Wno-error=parentheses -Wno-error=implicit-fallthrough' --with-ld-opt='-L/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/lib -Wl,-rpath,/opt/lib -Wl,-rpath-link=/media/ware/Entware.2018.09/staging_dir/target-aarch64_cortex-a53_glibc-2.27/opt/lib -Wl,--dynamic-linker=/opt/lib/ld-linux-aarch64.so.1 -L/media/ware/Entware.2018.09/staging_dir/toolchain-aarch64_cortex-a53_gcc-7.3.0_glibc-2.27/lib -lxml2' --prefix=/opt --conf-path=/opt/etc/nginx/nginx.conf --http-log-path=/opt/var/log/nginx/access.log --error-log-path=/opt/var/log/nginx/error.log --lock-path=/opt/var/lock/nginx.lock --pid-path=/opt/var/run/nginx.pid --modules-path=/opt/lib/nginx --http-client-body-temp-path=/opt/var/lib/nginx/body --http-fastcgi-temp-path=/opt/var/lib/nginx/fastcgi --http-proxy-temp-path=/opt/var/lib/nginx/proxy --http-scgi-temp-path=/opt/var/lib/nginx/scgi --http-uwsgi-temp-path=/opt/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_auth_request_module --with-http_v2_module --with-http_dav_module --with-http_slice_module --without-http_upstream_zone_module --without-stream_upstream_zone_module --with-http_addition_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_random_index_module --with-http_secure_link_module --with-http_sub_module --with-http_xslt_module=dynamic --with-mail=dynamic --with-mail_ssl_module --with-stream=dynamic --with-stream_ssl_module --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-headers-more-filter --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-auth-pam --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-cache-purge --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-dav-ext --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-ndk --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-echo --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-fancyindex --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/nchan --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-lua --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/rtmp --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-uploadprogress --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-upstream-fair --add-dynamic-module=/media/ware/Entware.2018.09/build_dir/target-aarch64_cortex-a53_glibc-2.27/nginx-1.14.0/modules/http-subs-filter