search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
39.31k stars 4.97k forks source link

dnsapi dns_ali urlencode function is invalid to encode idn #2771

Open cxgreat2014 opened 4 years ago

cxgreat2014 commented 4 years ago

https://github.com/acmesh-official/acme.sh/blob/d437d6fde95dc7368d4fa76c05648a8dd4cbe69e/dnsapi/dns_ali.sh#L100

this function cannot encode idn, refence: https://www.v2ex.com/t/439940

log :

root@hw:~# STAGE=1 Ali_Key=******* Ali_Secret=******* acme.sh --issue --dns dns_ali -d 百度.com --debug 2
[Wed Mar  4 05:32:48 UTC 2020] Lets find script dir.
[Wed Mar  4 05:32:48 UTC 2020] _SCRIPT_='/root/.acme.sh/acme.sh'
[Wed Mar  4 05:32:48 UTC 2020] _script='/root/.acme.sh/acme.sh'
[Wed Mar  4 05:32:48 UTC 2020] _script_home='/root/.acme.sh'
[Wed Mar  4 05:32:48 UTC 2020] Using config home:/root/.acme.sh
[Wed Mar  4 05:32:48 UTC 2020] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/acmesh-official/acme.sh
v2.8.6
[Wed Mar  4 05:32:48 UTC 2020] Running cmd: issue
[Wed Mar  4 05:32:48 UTC 2020] _main_domain='百度.com'
[Wed Mar  4 05:32:48 UTC 2020] _alt_domains='no'
[Wed Mar  4 05:32:48 UTC 2020] Using config home:/root/.acme.sh
[Wed Mar  4 05:32:48 UTC 2020] Using stage ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
[Wed Mar  4 05:32:48 UTC 2020] ACME_DIRECTORY='https://acme-staging-v02.api.letsencrypt.org/directory'
[Wed Mar  4 05:32:48 UTC 2020] _ACME_SERVER_HOST='acme-staging-v02.api.letsencrypt.org'
[Wed Mar  4 05:32:48 UTC 2020] DOMAIN_PATH='/root/.acme.sh/百度.com'
[Wed Mar  4 05:32:48 UTC 2020] 'dns_ali' does not contain 'dns'
[Wed Mar  4 05:32:48 UTC 2020] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
[Wed Mar  4 05:32:48 UTC 2020] _init api for server: https://acme-staging-v02.api.letsencrypt.org/directory
[Wed Mar  4 05:32:48 UTC 2020] GET
[Wed Mar  4 05:32:48 UTC 2020] url='https://acme-staging-v02.api.letsencrypt.org/directory'
[Wed Mar  4 05:32:48 UTC 2020] timeout=
[Wed Mar  4 05:32:48 UTC 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.9JlPpBYwbT  -g '
[Wed Mar  4 05:32:49 UTC 2020] ret='0'
[Wed Mar  4 05:32:49 UTC 2020] response='{
  "AoZuGogH4XU": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-staging-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
    "website": "https://letsencrypt.org/docs/staging-environment/"
  },
  "newAccount": "https://acme-staging-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order",
  "revokeCert": "https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert"
}'
[Wed Mar  4 05:32:49 UTC 2020] ACME_KEY_CHANGE='https://acme-staging-v02.api.letsencrypt.org/acme/key-change'
[Wed Mar  4 05:32:49 UTC 2020] ACME_NEW_AUTHZ
[Wed Mar  4 05:32:49 UTC 2020] ACME_NEW_ORDER='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Wed Mar  4 05:32:49 UTC 2020] ACME_NEW_ACCOUNT='https://acme-staging-v02.api.letsencrypt.org/acme/new-acct'
[Wed Mar  4 05:32:49 UTC 2020] ACME_REVOKE_CERT='https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert'
[Wed Mar  4 05:32:49 UTC 2020] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Wed Mar  4 05:32:49 UTC 2020] ACME_NEW_NONCE='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Wed Mar  4 05:32:49 UTC 2020] ACME_VERSION='2'
[Wed Mar  4 05:32:49 UTC 2020] Le_NextRenewTime
[Wed Mar  4 05:32:50 UTC 2020] _on_before_issue
[Wed Mar  4 05:32:50 UTC 2020] _chk_main_domain='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] _chk_alt_domains
[Wed Mar  4 05:32:50 UTC 2020] 'dns_ali' does not contain 'no'
[Wed Mar  4 05:32:50 UTC 2020] Le_LocalAddress
[Wed Mar  4 05:32:50 UTC 2020] d='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] Check for domain='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] _currentRoot='dns_ali'
[Wed Mar  4 05:32:50 UTC 2020] d
[Wed Mar  4 05:32:50 UTC 2020] 'dns_ali' does not contain 'apache'
[Wed Mar  4 05:32:50 UTC 2020] _saved_account_key_hash='tlav24TH8a/r5FbiUB9CVlzyfnDn5PD2WS77V2fcWWo='
[Wed Mar  4 05:32:50 UTC 2020] _saved_account_key_hash is not changed, skip register account.
[Wed Mar  4 05:32:50 UTC 2020] Read key length:
[Wed Mar  4 05:32:50 UTC 2020] _createcsr
[Wed Mar  4 05:32:50 UTC 2020] domain='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] domainlist
[Wed Mar  4 05:32:50 UTC 2020] csrkey='/root/.acme.sh/百度.com/百度.com.key'
[Wed Mar  4 05:32:50 UTC 2020] csr='/root/.acme.sh/百度.com/百度.com.csr'
[Wed Mar  4 05:32:50 UTC 2020] csrconf='/root/.acme.sh/百度.com/百度.com.csr.conf'
[Wed Mar  4 05:32:50 UTC 2020] Single domain='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] _is_idn_d='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] _idn_temp='百度'
[Wed Mar  4 05:32:50 UTC 2020] _is_idn_d='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] _idn_temp='百度'
[Wed Mar  4 05:32:50 UTC 2020] _csr_cn='xn--wxtr44c.com'
[Wed Mar  4 05:32:50 UTC 2020] Getting domain auth token for each domain
[Wed Mar  4 05:32:50 UTC 2020] _is_idn_d='百度.com'
[Wed Mar  4 05:32:50 UTC 2020] _idn_temp='百度'
[Wed Mar  4 05:32:50 UTC 2020] d
[Wed Mar  4 05:32:50 UTC 2020] _identifiers='{"type":"dns","value":"xn--wxtr44c.com"}'
[Wed Mar  4 05:32:50 UTC 2020] url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Wed Mar  4 05:32:50 UTC 2020] payload='{"identifiers": [{"type":"dns","value":"xn--wxtr44c.com"}]}'
[Wed Mar  4 05:32:50 UTC 2020] RSA key
[Wed Mar  4 05:32:50 UTC 2020] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Wed Mar  4 05:32:50 UTC 2020] HEAD
[Wed Mar  4 05:32:50 UTC 2020] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Wed Mar  4 05:32:50 UTC 2020] body
[Wed Mar  4 05:32:50 UTC 2020] _postContentType='application/jose+json'
[Wed Mar  4 05:32:50 UTC 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.Y7ftJx3G7G  -g  -I  '
[Wed Mar  4 05:32:51 UTC 2020] _ret='0'
[Wed Mar  4 05:32:51 UTC 2020] _headers='HTTP/2 200 
server: nginx
date: Wed, 04 Mar 2020 05:32:51 GMT
cache-control: public, max-age=0, no-cache
link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 0001f6VWQpLa_sDoKieHvs0xfCmDIaEO3Lo05_i5VTgHy3o
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Wed Mar  4 05:32:51 UTC 2020] _CACHED_NONCE='0001f6VWQpLa_sDoKieHvs0xfCmDIaEO3Lo05_i5VTgHy3o'
[Wed Mar  4 05:32:51 UTC 2020] nonce='0001f6VWQpLa_sDoKieHvs0xfCmDIaEO3Lo05_i5VTgHy3o'
[Wed Mar  4 05:32:51 UTC 2020] POST
[Wed Mar  4 05:32:51 UTC 2020] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Wed Mar  4 05:32:51 UTC 2020] body='{"protected": "eyJub25jZSI6ICIwMDAxZjZWV1FwTGFfc0RvS2llSHZzMHhmQ21ESWFFTzNMbzA1X2k1VlRnSHkzbyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIiLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTI2NjA3NjcifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InhuLS13eHRyNDRjLmNvbSJ9XX0", "signature": "SFnZLi5NR7FIXJmm8w-SA95ha56aNH4SAn33NYr0nj8YsR_MEKwcEGcDbNNJUU17Zz7wC-Yrv-8pGBvTjBd-2YmET9C0A8JE4qchnwvR5CR0SR8S-7aXRlZvsnu9uUnSXexOQ-AzuqCTpPmB-wxgsvaECHhYj_nl5ljvcvWrHKRlWOeul8LOSQoEGsWF_Bf3Ebu9YfXbDLSExJHoDrLuxrUMhNZZriwpPWng-m8Qbwo3KjiJBXHYTRw_KSWX4K_WpdoxJUR-WQXxtWFInv0LvXs4HNzSiON8uOKYfa-umDbx3sLTNVS-MJa7n0ioYS2WagTuvf4HFswWQtTanEAt0w"}'
[Wed Mar  4 05:32:51 UTC 2020] _postContentType='application/jose+json'
[Wed Mar  4 05:32:51 UTC 2020] Http already initialized.
[Wed Mar  4 05:32:51 UTC 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.Y7ftJx3G7G  -g '
[Wed Mar  4 05:32:52 UTC 2020] _ret='0'
[Wed Mar  4 05:32:52 UTC 2020] responseHeaders='HTTP/2 201 
server: nginx
date: Wed, 04 Mar 2020 05:32:52 GMT
content-type: application/json
content-length: 357
boulder-requester: 12660767
cache-control: public, max-age=0, no-cache
link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
location: https://acme-staging-v02.api.letsencrypt.org/acme/order/12660767/77823140
replay-nonce: 0002nN15T5w1xDXJ807yK78Kx3bejhxNjJACw26mdttUihA
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Wed Mar  4 05:32:52 UTC 2020] code='201'
[Wed Mar  4 05:32:52 UTC 2020] original='{
  "status": "pending",
  "expires": "2020-03-11T05:32:52.523148751Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "xn--wxtr44c.com"
    }
  ],
  "authorizations": [
    "https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/41961439"
  ],
  "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/12660767/77823140"
}'
[Wed Mar  4 05:32:52 UTC 2020] response='{"status":"pending","expires":"2020-03-11T05:32:52.523148751Z","identifiers":[{"type":"dns","value":"xn--wxtr44c.com"}],"authorizations":["https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/41961439"],"finalize":"https://acme-staging-v02.api.letsencrypt.org/acme/finalize/12660767/77823140"}'
[Wed Mar  4 05:32:52 UTC 2020] Le_LinkOrder='https://acme-staging-v02.api.letsencrypt.org/acme/order/12660767/77823140'
[Wed Mar  4 05:32:52 UTC 2020] Le_OrderFinalize='https://acme-staging-v02.api.letsencrypt.org/acme/finalize/12660767/77823140'
[Wed Mar  4 05:32:52 UTC 2020] _authorizations_seg='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/41961439'
[Wed Mar  4 05:32:52 UTC 2020] _authz_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/41961439'
[Wed Mar  4 05:32:52 UTC 2020] url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/41961439'
[Wed Mar  4 05:32:52 UTC 2020] payload
[Wed Mar  4 05:32:52 UTC 2020] Use cached jwk for file: /root/.acme.sh/ca/acme-staging-v02.api.letsencrypt.org/account.key
[Wed Mar  4 05:32:52 UTC 2020] Use _CACHED_NONCE='0002nN15T5w1xDXJ807yK78Kx3bejhxNjJACw26mdttUihA'
[Wed Mar  4 05:32:52 UTC 2020] nonce='0002nN15T5w1xDXJ807yK78Kx3bejhxNjJACw26mdttUihA'
[Wed Mar  4 05:32:52 UTC 2020] POST
[Wed Mar  4 05:32:52 UTC 2020] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/41961439'
[Wed Mar  4 05:32:52 UTC 2020] body='{"protected": "eyJub25jZSI6ICIwMDAybk4xNVQ1dzF4RFhKODA3eUs3OEt4M2Jlamh4TmpKQUN3MjZtZHR0VWloQSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My80MTk2MTQzOSIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xMjY2MDc2NyJ9", "payload": "", "signature": "HXnYDjB_fB5vC4Knes6rtQ2efRvQ00UkZxjSCx2LAMHDSUDU1udqQomL7yeO1ZxQ-86f-XalWLxJgqmD0XH8aV1N19QCIkRTEHQIqOqXGuDJqAp6mNYU6DLdSQ1qJ2vwTJHhlH8EZXoeTjHZm4L8l8Jj6ITK-BnmzjZPBvlkVSf2ThfWqWcGEx-KOaBUNQbCN8E6raQiIDNJpFFmo6vJQLxKuJStafU1ZYLiwtmxxgWFsQas42NVGxuOLppQKpuU_zFlw_R6w27uFQdxyNn6dABhv4rjILgn9uhz191GwkQdcomUDmucnADvtylwEpN8AsmMUHn4vbWOTlOMpGDMzg"}'
[Wed Mar  4 05:32:52 UTC 2020] _postContentType='application/jose+json'
[Wed Mar  4 05:32:52 UTC 2020] Http already initialized.
[Wed Mar  4 05:32:52 UTC 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.Y7ftJx3G7G  -g '
[Wed Mar  4 05:32:53 UTC 2020] _ret='0'
[Wed Mar  4 05:32:53 UTC 2020] responseHeaders='HTTP/2 200 
server: nginx
date: Wed, 04 Mar 2020 05:32:53 GMT
content-type: application/json
content-length: 811
boulder-requester: 12660767
cache-control: public, max-age=0, no-cache
link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 0001tbsnPJnL8-ib7TQOAzmyXjwhlpLlUkqBasJkjOfhD6k
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Wed Mar  4 05:32:53 UTC 2020] code='200'
[Wed Mar  4 05:32:53 UTC 2020] original='{
  "identifier": {
    "type": "dns",
    "value": "xn--wxtr44c.com"
  },
  "status": "pending",
  "expires": "2020-03-11T05:32:52Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/uWxgjw",
      "token": "e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw",
      "token": "e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/tnKYeA",
      "token": "e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"
    }
  ]
}'
[Wed Mar  4 05:32:53 UTC 2020] response='{"identifier":{"type":"dns","value":"xn--wxtr44c.com"},"status":"pending","expires":"2020-03-11T05:32:52Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/uWxgjw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/tnKYeA","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"}]}'
[Wed Mar  4 05:32:53 UTC 2020] response='{"identifier":{"type":"dns","value":"xn--wxtr44c.com"},"status":"pending","expires":"2020-03-11T05:32:52Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/uWxgjw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/tnKYeA","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"}]}'
[Wed Mar  4 05:32:53 UTC 2020] _d='xn--wxtr44c.com'
[Wed Mar  4 05:32:53 UTC 2020] _authorizations_map='xn--wxtr44c.com,{"identifier":{"type":"dns","value":"xn--wxtr44c.com"},"status":"pending","expires":"2020-03-11T05:32:52Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/uWxgjw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/tnKYeA","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"}]}
'
[Wed Mar  4 05:32:53 UTC 2020] d='百度.com'
[Wed Mar  4 05:32:53 UTC 2020] Getting webroot for domain='百度.com'
[Wed Mar  4 05:32:53 UTC 2020] _w='dns_ali'
[Wed Mar  4 05:32:54 UTC 2020] _currentRoot='dns_ali'
[Wed Mar  4 05:32:54 UTC 2020] _is_idn_d='百度.com'
[Wed Mar  4 05:32:54 UTC 2020] _idn_temp='百度'
[Wed Mar  4 05:32:54 UTC 2020] _candindates='xn--wxtr44c.com,{"identifier":{"type":"dns","value":"xn--wxtr44c.com"},"status":"pending","expires":"2020-03-11T05:32:52Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/uWxgjw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/tnKYeA","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"}]}'
[Wed Mar  4 05:32:54 UTC 2020] response='{"identifier":{"type":"dns","value":"xn--wxtr44c.com"},"status":"pending","expires":"2020-03-11T05:32:52Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/uWxgjw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/tnKYeA","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"}]}'
[Wed Mar  4 05:32:54 UTC 2020] entry='"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"'
[Wed Mar  4 05:32:54 UTC 2020] token='e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0'
[Wed Mar  4 05:32:54 UTC 2020] uri='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw'
[Wed Mar  4 05:32:54 UTC 2020] keyauthorization='e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0.dCHqbLkSNKpoMxfuxionrcI7xryt6bQDS-jZ1h2Bw1s'
[Wed Mar  4 05:32:54 UTC 2020] dvlist='百度.com#e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0.dCHqbLkSNKpoMxfuxionrcI7xryt6bQDS-jZ1h2Bw1s#https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw#dns-01#dns_ali'
[Wed Mar  4 05:32:54 UTC 2020] d
[Wed Mar  4 05:32:54 UTC 2020] vlist='百度.com#e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0.dCHqbLkSNKpoMxfuxionrcI7xryt6bQDS-jZ1h2Bw1s#https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw#dns-01#dns_ali,'
[Wed Mar  4 05:32:54 UTC 2020] d='百度.com'
[Wed Mar  4 05:32:54 UTC 2020] _d_alias
[Wed Mar  4 05:32:54 UTC 2020] txtdomain='_acme-challenge.百度.com'
[Wed Mar  4 05:32:54 UTC 2020] txt='VnxJLbvL8ornqiDKIffJjMqC0ighXs2M83hwWgMrxe4'
[Wed Mar  4 05:32:54 UTC 2020] d_api='/root/.acme.sh/dnsapi/dns_ali.sh'
[Wed Mar  4 05:32:54 UTC 2020] dns_entry='百度.com,_acme-challenge.百度.com,,dns_ali,VnxJLbvL8ornqiDKIffJjMqC0ighXs2M83hwWgMrxe4,/root/.acme.sh/dnsapi/dns_ali.sh'
[Wed Mar  4 05:32:54 UTC 2020] Found domain api file: /root/.acme.sh/dnsapi/dns_ali.sh
[Wed Mar  4 05:32:54 UTC 2020] Adding txt value: VnxJLbvL8ornqiDKIffJjMqC0ighXs2M83hwWgMrxe4 for domain:  _acme-challenge.百度.com
[Wed Mar  4 05:32:54 UTC 2020] First detect the root zone
[Wed Mar  4 05:32:55 UTC 2020] GET
[Wed Mar  4 05:32:55 UTC 2020] url='https://alidns.aliyuncs.com/?AccessKeyId=LTAI4Fchb41ykG53mfxCm3PT&Action=DescribeDomainRecords&DomainName=百度.com&Format=json&SignatureMethod=HMAC-SHA1&SignatureNonce=1583299974337461871&SignatureVersion=1.0&Timestamp=2020-03-04T05%3A32%3A54Z&Version=2015-01-09&Signature=bMbKNQzZ0opok1lDQamOnA1CKqg%3D'
[Wed Mar  4 05:32:55 UTC 2020] timeout=
[Wed Mar  4 05:32:55 UTC 2020] Http already initialized.
[Wed Mar  4 05:32:55 UTC 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.Y7ftJx3G7G  -g '
[Wed Mar  4 05:32:55 UTC 2020] ret='0'
[Wed Mar  4 05:32:55 UTC 2020] response='{"RequestId":"B2F138E0-550F-470E-B6B7-192E71225144","Message":"Specified signature is not matched with our calculation. server string to sign is:GET&%2F&AccessKeyId%3DLTAI4Fchb41ykG53mfxCm3PT%26Action%3DDescribeDomainRecords%26DomainName%3D%25E7%2599%25BE%25E5%25BA%25A6.com%26Format%3Djson%26SignatureMethod%3DHMAC-SHA1%26SignatureNonce%3D1583299974337461871%26SignatureVersion%3D1.0%26Timestamp%3D2020-03-04T05%253A32%253A54Z%26Version%3D2015-01-09","Recommend":"https://error-center.aliyun.com/status/search?Keyword=SignatureDoesNotMatch&source=PopGw","HostId":"alidns.aliyuncs.com","Code":"SignatureDoesNotMatch"}'
[Wed Mar  4 05:32:56 UTC 2020] GET
[Wed Mar  4 05:32:56 UTC 2020] url='https://alidns.aliyuncs.com/?AccessKeyId=LTAI4Fchb41ykG53mfxCm3PT&Action=DescribeDomainRecords&DomainName=com&Format=json&SignatureMethod=HMAC-SHA1&SignatureNonce=1583299975772779324&SignatureVersion=1.0&Timestamp=2020-03-04T05%3A32%3A55Z&Version=2015-01-09&Signature=lEkaFzrFzGQhSSH31T2Ozfs5RfI%3D'
[Wed Mar  4 05:32:56 UTC 2020] timeout=
[Wed Mar  4 05:32:56 UTC 2020] Http already initialized.
[Wed Mar  4 05:32:56 UTC 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.Y7ftJx3G7G  -g '
[Wed Mar  4 05:32:57 UTC 2020] ret='0'
[Wed Mar  4 05:32:57 UTC 2020] response='{"RequestId":"36C9621D-D8FD-4C62-947F-604EE97AEFDF","HostId":"alidns.aliyuncs.com","Code":"InvalidDomainName.Format","Message":"Invalid domain name."}'
[Wed Mar  4 05:32:57 UTC 2020] Error add txt for domain:_acme-challenge.百度.com
[Wed Mar  4 05:32:57 UTC 2020] _on_issue_err
[Wed Mar  4 05:32:57 UTC 2020] Please add '--debug' or '--log' to check more details.
[Wed Mar  4 05:32:57 UTC 2020] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
[Wed Mar  4 05:32:57 UTC 2020] _chk_vlist='百度.com#e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0.dCHqbLkSNKpoMxfuxionrcI7xryt6bQDS-jZ1h2Bw1s#https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw#dns-01#dns_ali,'
[Wed Mar  4 05:32:57 UTC 2020] start to deactivate authz
[Wed Mar  4 05:32:57 UTC 2020] Trigger domain validation.
[Wed Mar  4 05:32:57 UTC 2020] _t_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw'
[Wed Mar  4 05:32:57 UTC 2020] _t_key_authz='e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0.dCHqbLkSNKpoMxfuxionrcI7xryt6bQDS-jZ1h2Bw1s'
[Wed Mar  4 05:32:57 UTC 2020] _t_vtype
[Wed Mar  4 05:32:57 UTC 2020] url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw'
[Wed Mar  4 05:32:57 UTC 2020] payload='{}'
[Wed Mar  4 05:32:57 UTC 2020] Use cached jwk for file: /root/.acme.sh/ca/acme-staging-v02.api.letsencrypt.org/account.key
[Wed Mar  4 05:32:57 UTC 2020] Use _CACHED_NONCE='0001tbsnPJnL8-ib7TQOAzmyXjwhlpLlUkqBasJkjOfhD6k'
[Wed Mar  4 05:32:57 UTC 2020] nonce='0001tbsnPJnL8-ib7TQOAzmyXjwhlpLlUkqBasJkjOfhD6k'
[Wed Mar  4 05:32:57 UTC 2020] POST
[Wed Mar  4 05:32:57 UTC 2020] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw'
[Wed Mar  4 05:32:57 UTC 2020] body='{"protected": "eyJub25jZSI6ICIwMDAxdGJzblBKbkw4LWliN1RRT0F6bXlYandobHBMbFVrcUJhc0prak9maEQ2ayIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbC12My80MTk2MTQzOS8zaThoWnciLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTI2NjA3NjcifQ", "payload": "e30", "signature": "evh0ZSPyB8OtOaPNbDz1wPPjdKDPOw-RvuC-edzLY4fKhnJ2eJFueySXb_UefdzdskN3FyHk4wARvIXpFayN-yY8g9yR-wF7IgiiJ9E1JI5XqY_SA8ZMTig759xiGq8F3wm2LswSKBy5A_IAjFYVltdSvwWy8YIt6wZUtbC8dwW1pudNhjLc8SeCdgXW3y9lb6nS3PRYF1JNyjEXjo37QYjdww9cBrPL8OGuLI71XWZF20NsM5x8mZ8iTN-WUPae6620SbzRwq5MNvdU4qLzksa2zC94n_k9daqzivj_bLEIiqhY3uWvqDRcZtc08YmnR3hoJlJXA6fzEiwLzDDX8Q"}'
[Wed Mar  4 05:32:57 UTC 2020] _postContentType='application/jose+json'
[Wed Mar  4 05:32:57 UTC 2020] Http already initialized.
[Wed Mar  4 05:32:57 UTC 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.Y7ftJx3G7G  -g '
[Wed Mar  4 05:32:58 UTC 2020] _ret='0'
[Wed Mar  4 05:32:58 UTC 2020] responseHeaders='HTTP/2 200 
server: nginx
date: Wed, 04 Mar 2020 05:32:58 GMT
content-type: application/json
content-length: 190
boulder-requester: 12660767
cache-control: public, max-age=0, no-cache
link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/41961439>;rel="up"
location: https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw
replay-nonce: 0001Re-28Dktp7YnQovvOg0qUTZhZjRtdA0dxCGLlMMNqVQ
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Wed Mar  4 05:32:58 UTC 2020] code='200'
[Wed Mar  4 05:32:58 UTC 2020] original='{
  "type": "dns-01",
  "status": "pending",
  "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw",
  "token": "e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"
}'
[Wed Mar  4 05:32:58 UTC 2020] response='{"type":"dns-01","status":"pending","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/41961439/3i8hZw","token":"e6kSOny3MIYGXg1SIPMdwch1yHDm63iQlZGq7wELvM0"}'
[Wed Mar  4 05:32:58 UTC 2020] socat doesn't exists.
[Wed Mar  4 05:32:58 UTC 2020] Diagnosis versions: 
openssl:openssl
OpenSSL 1.1.1  11 Sep 2018
apache:
apache doesn't exists.
nginx:
nginx version: nginx/1.14.0 (Ubuntu)
built with OpenSSL 1.1.1  11 Sep 2018
TLS SNI support enabled
configure arguments: --with-cc-opt='-g -O2 -fdebug-prefix-map=/build/nginx-GkiujU/nginx-1.14.0=. -fstack-protector-strong -Wformat -Werror=format-security -fPIC -Wdate-time -D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro -Wl,-z,now -fPIC' --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf --http-log-path=/var/log/nginx/access.log --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --modules-path=/usr/lib/nginx/modules --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_auth_request_module --with-http_v2_module --with-http_dav_module --with-http_slice_module --with-threads --with-http_addition_module --with-http_geoip_module=dynamic --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_sub_module --with-http_xslt_module=dynamic --with-stream=dynamic --with-stream_ssl_module --with-mail=dynamic --with-mail_ssl_module
socat:
[Wed Mar  4 05:32:58 UTC 2020] pid
[Wed Mar  4 05:32:58 UTC 2020] No need to restore nginx, skip.
[Wed Mar  4 05:32:58 UTC 2020] _clearupdns
[Wed Mar  4 05:32:58 UTC 2020] dns_entries
[Wed Mar  4 05:32:58 UTC 2020] skip dns.
capric98 commented 4 years ago

got the same problem in https://github.com/acmesh-official/acme.sh/issues/2825#issue-591832892