search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
39.08k stars 4.95k forks source link

new nonce request(https://acme-v02.api.letsencrypt.org/acme/new-nonce), url is "" in response #3290

Open ACanOfGas opened 3 years ago

ACanOfGas commented 3 years ago

Steps to reproduce

1.apply certificate error in aliyun dns mode 2.in logs, discovery request_url _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce' return response '{"nonce": "0004BPAPOBQEeP3CUaCp2D53nTwx9PkrSbBzJNuDaPfiQF8", "url": "", "alg": "RS256", "kid": "https://acme-v02.api.letsencrypt.org/acme/acct/104554314"}', the url is null string 3.Please tell me the exact reason for the failure, thank you. Debug log

[root@ensbrain logs]# cat certificate-202012071025.log [Mon Dec 7 10:25:39 CST 2020] /home/enlink/acme.sh/acme.sh:_exists:514 readlink exists=0 [Mon Dec 7 10:25:39 CST 2020] /home/enlink/acme.sh/acme.sh:_exists:514 dirname exists=0 [Mon Dec 7 10:25:39 CST 2020] /home/enlink/acme.sh/acme.sh:initHome:2446 Lets find script dir. [Mon Dec 7 10:25:39 CST 2020] /home/enlink/acme.sh/acme.sh:initHome:2447 SCRIPT='/home/enlink/acme.sh/acme.sh' [Mon Dec 7 10:25:39 CST 2020] /home/enlink/acme.sh/acme.sh:initHome:2449 _script='/home/enlink/acme.sh/acme.sh' [Mon Dec 7 10:25:39 CST 2020] acme.sh:initHome:2451 _script_home='/home/enlink/acme.sh' [Mon Dec 7 10:25:39 CST 2020] acme.sh:initHome:2478 Using config home:/home/enlink/.acme.sh [Mon Dec 7 10:25:39 CST 2020] acme.sh:initHome:2492 ACCOUNT_CONF_PATH='/home/enlink/.acme.sh/account.conf' [Mon Dec 7 10:25:39 CST 2020] acme.sh:_process:7458 LE_WORKING_DIR='/home/enlink/.acme.sh' https://github.com/acmesh-official/acme.sh v2.8.8 [Mon Dec 7 10:25:39 CST 2020] acme.sh:_process:7466 Running cmd: issue [Mon Dec 7 10:25:39 CST 2020] acme.sh:issue:4085 _main_domain='niubi.enlink.top' [Mon Dec 7 10:25:39 CST 2020] acme.sh:issue:4086 _alt_domains='no' [Mon Dec 7 10:25:39 CST 2020] acme.sh:initHome:2478 Using config home:/home/enlink/.acme.sh [Mon Dec 7 10:25:39 CST 2020] acme.sh:__initHome:2492 ACCOUNT_CONF_PATH='/home/enlink/.acme.sh/account.conf' [Mon Dec 7 10:25:39 CST 2020] acme.sh:_initpath:2614 default_acme_server [Mon Dec 7 10:25:39 CST 2020] acme.sh:_initpath:2623 ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory' [Mon Dec 7 10:25:39 CST 2020] acme.sh:_initpath:2625 _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org' [Mon Dec 7 10:25:39 CST 2020] acme.sh:_initpath:2634 CA_CONF='/home/enlink/.acme.sh/ca/acme-v02.api.letsencrypt.org/ca.conf' [Mon Dec 7 10:25:39 CST 2020] acme.sh:_initpath:2695 DOMAIN_PATH='/home/enlink/.acme.sh/niubi.enlink.top' [Mon Dec 7 10:25:39 CST 2020] acme.sh:_hasfield:466 'dns_ali' does not contain 'dns' [Mon Dec 7 10:25:39 CST 2020] acme.sh:issue:4111 Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory [Mon Dec 7 10:25:39 CST 2020] acme.sh:_initAPI:2505 _init api for server: https://acme-v02.api.letsencrypt.org/directory [Mon Dec 7 10:25:39 CST 2020] acme.sh:_get:1906 GET [Mon Dec 7 10:25:39 CST 2020] acme.sh:_get:1910 url='https://acme-v02.api.letsencrypt.org/directory' [Mon Dec 7 10:25:39 CST 2020] acme.sh:_get:1911 timeout= [Mon Dec 7 10:25:39 CST 2020] acme.sh:_exists:514 curl exists=0 [Mon Dec 7 10:25:39 CST 2020] acme.sh:_exists:514 mktemp exists=0 [Mon Dec 7 10:25:39 CST 2020] acme.sh:_exists:514 wget exists=0 [Mon Dec 7 10:25:39 CST 2020] acme.sh:_get:1923 _CURL='curl -L --silent --dump-header /home/enlink/.acme.sh/http.header --trace-ascii /tmp/tmp.4SihcPUKQ8 -g ' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_get:1929 full request= acme.sh/2.8.8 (https://github.com/acmesh-official/acme.sh) https://acme-v02.api.letsencrypt.org/directory [Mon Dec 7 10:25:40 CST 2020] acme.sh:_get:1965 ret='0' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_json_decode:874 _json_decode [Mon Dec 7 10:25:40 CST 2020] acme.sh:_json_decode:875 _j_str [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2515 response [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2574 ACME_KEY_CHANGE [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2575 ACME_NEW_AUTHZ [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2576 ACME_NEW_ORDER [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2577 ACME_NEW_ACCOUNT [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2578 ACME_REVOKE_CERT [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2579 ACME_AGREEMENT [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2580 ACME_NEW_NONCE [Mon Dec 7 10:25:40 CST 2020] acme.sh:_initAPI:2581 ACME_VERSION [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2158 1:Le_Domain='niubi.enlink.top' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2158 2:Le_Alt='no' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2158 3:Le_Webroot='dns_ali' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2158 4:Le_PreHook='' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2158 5:Le_PostHook='' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2158 6:Le_RenewHook='' [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:40 CST 2020] acme.sh:_setopt:2158 7:Le_API='https://acme-v02.api.letsencrypt.org/directory' [Mon Dec 7 10:25:40 CST 2020] Using CA: https://acme-v02.api.letsencrypt.org/directory [Mon Dec 7 10:25:40 CST 2020] acme.sh:_on_before_issue:3309 _on_before_issue [Mon Dec 7 10:25:41 CST 2020] acme.sh:_on_before_issue:3310 _chk_main_domain='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_on_before_issue:3311 _chk_alt_domains [Mon Dec 7 10:25:41 CST 2020] acme.sh:_hasfield:466 'dns_ali' does not contain 'no' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_on_before_issue:3330 Le_LocalAddress [Mon Dec 7 10:25:41 CST 2020] acme.sh:_on_before_issue:3339 d='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_on_before_issue:3343 Check for domain='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_on_before_issue:3345 _currentRoot='dns_ali' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_on_before_issue:3339 d [Mon Dec 7 10:25:41 CST 2020] acme.sh:_hasfield:466 'dns_ali' does not contain 'apache' [Mon Dec 7 10:25:41 CST 2020] acme.sh:issue:4176 _saved_account_key_hash='iaVoXD2Cj8GxU//AIA0dhOPB8ZMJX4XqMdORrOMnpBE=' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_base64:941 base64 single line. [Mon Dec 7 10:25:41 CST 2020] acme.sh:issue:4184 _saved_account_key_hash is not changed, skip register account. [Mon Dec 7 10:25:41 CST 2020] acme.sh:issue:4191 Read key length: [Mon Dec 7 10:25:41 CST 2020] Creating domain key [Mon Dec 7 10:25:41 CST 2020] acme.sh:createDomainKey:1470 Use DEFAULT_DOMAIN_KEY_LENGTH=2048 [Mon Dec 7 10:25:41 CST 2020] acme.sh:initHome:2478 Using config home:/home/enlink/.acme.sh [Mon Dec 7 10:25:41 CST 2020] acme.sh:__initHome:2492 ACCOUNT_CONF_PATH='/home/enlink/.acme.sh/account.conf' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_initpath:2623 ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_initpath:2625 _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_initpath:2634 CA_CONF='/home/enlink/.acme.sh/ca/acme-v02.api.letsencrypt.org/ca.conf' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createkey:1091 _createkey for file:/home/enlink/.acme.sh/niubi.enlink.top/niubi.enlink.top.key [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createkey:1112 Use length 2048 [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createkey:1132 Using RSA: 2048 [Mon Dec 7 10:25:41 CST 2020] acme.sh:_setopt:2155 APP [Mon Dec 7 10:25:41 CST 2020] acme.sh:_setopt:2158 8:Le_Keylength='2048' [Mon Dec 7 10:25:41 CST 2020] The domain key is here: /home/enlink/.acme.sh/niubi.enlink.top/niubi.enlink.top.key [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createcsr:1187 _createcsr [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createcsr:1194 domain='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createcsr:1195 domainlist [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createcsr:1196 csrkey='/home/enlink/.acme.sh/niubi.enlink.top/niubi.enlink.top.key' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createcsr:1197 csr='/home/enlink/.acme.sh/niubi.enlink.top/niubi.enlink.top.csr' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createcsr:1198 csrconf='/home/enlink/.acme.sh/niubi.enlink.top/niubi.enlink.top.csr.conf' [Mon Dec 7 10:25:41 CST 2020] Single domain='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_is_idn:1150 _is_idn_d='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_is_idn:1152 _idn_temp [Mon Dec 7 10:25:41 CST 2020] acme.sh:_is_idn:1150 _is_idn_d='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_is_idn:1152 _idn_temp [Mon Dec 7 10:25:41 CST 2020] acme.sh:_createcsr:1231 _csr_cn='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_setopt:2140 OK [Mon Dec 7 10:25:41 CST 2020] acme.sh:_setopt:2158 8:Le_Keylength='' [Mon Dec 7 10:25:41 CST 2020] Getting domain auth token for each domain [Mon Dec 7 10:25:41 CST 2020] acme.sh:issue:4297 d='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] Getting webroot for domain='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:issue:4304 _w='dns_ali' [Mon Dec 7 10:25:41 CST 2020] acme.sh:issue:4308 _currentRoot='dns_ali' [Mon Dec 7 10:25:41 CST 2020] Getting new-authz for domain='niubi.enlink.top' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_initAPI:2505 _init api for server: https://acme-v02.api.letsencrypt.org/directory [Mon Dec 7 10:25:41 CST 2020] acme.sh:_get:1906 GET [Mon Dec 7 10:25:41 CST 2020] acme.sh:_get:1910 url='https://acme-v02.api.letsencrypt.org/directory' [Mon Dec 7 10:25:41 CST 2020] acme.sh:_get:1911 timeout= [Mon Dec 7 10:25:41 CST 2020] acme.sh:_exists:514 curl exists=0 [Mon Dec 7 10:25:41 CST 2020] acme.sh:_exists:514 mktemp exists=0 [Mon Dec 7 10:25:41 CST 2020] acme.sh:_exists:514 wget exists=0 [Mon Dec 7 10:25:41 CST 2020] acme.sh:_get:1923 _CURL='curl -L --silent --dump-header /home/enlink/.acme.sh/http.header --trace-ascii /tmp/tmp.rZ8lf10ks4 -g ' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_get:1929 full request= acme.sh/2.8.8 (https://github.com/acmesh-official/acme.sh) https://acme-v02.api.letsencrypt.org/directory [Mon Dec 7 10:25:43 CST 2020] acme.sh:_get:1965 ret='0' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_json_decode:874 _json_decode [Mon Dec 7 10:25:43 CST 2020] acme.sh:_json_decode:875 _j_str='{ "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert", "sL_AQE8D-Xs": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417" }' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2515 response='{ "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert", "sL_AQE8D-Xs": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417" }' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2574 ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2575 ACME_NEW_AUTHZ [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2576 ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2577 ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2578 ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2579 ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2580 ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_initAPI:2581 ACME_VERSION='2' [Mon Dec 7 10:25:43 CST 2020] acme.sh:__get_domain_new_authz:3839 Try new-authz for the 0 time. [Mon Dec 7 10:25:43 CST 2020] acme.sh:_is_idn:1150 _is_idn_d='niubi.enlink.top' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_is_idn:1152 _idn_temp [Mon Dec 7 10:25:43 CST 2020] acme.sh:_send_signed_request:1989 url [Mon Dec 7 10:25:43 CST 2020] acme.sh:_send_signed_request:1990 payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "niubi.enlink.top"}}' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_calcjwk:1598 RSA key [Mon Dec 7 10:25:43 CST 2020] acme.sh:_calcjwk:1603 pub_exp='010001' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_exists:514 xxd exists=0 [Mon Dec 7 10:25:43 CST 2020] acme.sh:_base64:941 base64 single line. [Mon Dec 7 10:25:43 CST 2020] acme.sh:_calcjwk:1606 e='AQAB' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_calcjwk:1609 modulus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on Dec 7 10:25:43 CST 2020] acme.sh:_base64:941 base64 single line. [Mon Dec 7 10:25:43 CST 2020] acme.sh:_exists:514 xxd exists=0 [Mon Dec 7 10:25:43 CST 2020] acme.sh:_calcjwk:1611 n='sfC3oMbqLC0JqkDMFQpDGcdUXQ1PcG7TOkPmr2XnRDyubdvDBEUk1-DA1X1ARRyYIQt-_LTEWQaza7ENDsiDyBOjWkmOHfFFib2wk804y6VBtckddcUHrFKCaWMBmmgMCDHpnkoYLhTxc520JdETUGQtnYRlOPUaadENVBDiQ_U7jFTlsyDBNa19hyV0Q3qs0aVdCCERC9bsKHMcQ7u3QlM6VEBYi_8L6kMaXtFE8cpeV9imqkoLJozBbjNvOvz8-OBmv4MvEyhykf43woEptgkA6GJNEZAJOI8ToFkMPwV0SZHjcqGyqHz5pmzi-bOGc7cmeDOY-FvvGy2P_13GJw' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_calcjwk:1614 jwk='{"e": "AQAB", "kty": "RSA", "n": "sfC3oMbqLC0JqkDMFQpDGcdUXQ1PcG7TOkPmr2XnRDyubdvDBEUk1-DA1X1ARRyYIQt-_LTEWQaza7ENDsiDyBOjWkmOHfFFib2wk804y6VBtckddcUHrFKCaWMBmmgMCDHpnkoYLhTxc520JdETUGQtnYRlOPUaadENVBDiQ_U7jFTlsyDBNa19hyV0Q3qs0aVdCCERC9bsKHMcQ7u3QlM6VEBYi_8L6kMaXtFE8cpeV9imqkoLJozBbjNvOvz8-OBmv4MvEyhykf43woEptgkA6GJNEZAJOI8ToFkMPwV0SZHjcqGyqHz5pmzi-bOGc7cmeDOY-FvvGy2P_13GJw"}' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_calcjwk:1694 JWK_HEADER='{"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "sfC3oMbqLC0JqkDMFQpDGcdUXQ1PcG7TOkPmr2XnRDyubdvDBEUk1-DA1X1ARRyYIQt-_LTEWQaza7ENDsiDyBOjWkmOHfFFib2wk804y6VBtckddcUHrFKCaWMBmmgMCDHpnkoYLhTxc520JdETUGQtnYRlOPUaadENVBDiQ_U7jFTlsyDBNa19hyV0Q3qs0aVdCCERC9bsKHMcQ7u3QlM6VEBYi_8L6kMaXtFE8cpeV9imqkoLJozBbjNvOvz8-OBmv4MvEyhykf43woEptgkA6GJNEZAJOI8ToFkMPwV0SZHjcqGyqHz5pmzi-bOGc7cmeDOY-FvvGy2P_13GJw"}}' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_base64:941 base64 single line. [Mon Dec 7 10:25:43 CST 2020] acme.sh:_send_signed_request:1999 payload64='eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAibml1YmkuZW5saW5rLnRvcCJ9fQ' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_send_signed_request:2006 _request_retry_times='1' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_send_signed_request:2011 Get nonce with HEAD. ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_post:1789 HEAD [Mon Dec 7 10:25:43 CST 2020] acme.sh:_post:1790 _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_post:1791 body [Mon Dec 7 10:25:43 CST 2020] acme.sh:_post:1792 _postContentType='application/jose+json' [Mon Dec 7 10:25:43 CST 2020] acme.sh:_exists:514 curl exists=0 [Mon Dec 7 10:25:43 CST 2020] acme.sh:_exists:514 mktemp exists=0 [Mon Dec 7 10:25:43 CST 2020] acme.sh:_exists:514 wget exists=0 [Mon Dec 7 10:25:43 CST 2020] acme.sh:_post:1804 _CURL='curl -L --silent --dump-header /home/enlink/.acme.sh/http.header --trace-ascii /tmp/tmp.TYGUuZ0vxm -g -I ' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_post:1899 _ret='0' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2015 _headers='HTTP/1.1 200 OK Server: nginx Date: Mon, 07 Dec 2020 02:25:48 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: https://acme-v02.api.letsencrypt.org/directory;rel="index" Replay-Nonce: 0004BPAPOBQEeP3CUaCp2D53nTwx9PkrSbBzJNuDaPfiQF8 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 ' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2034 _CACHED_NONCE='0004BPAPOBQEeP3CUaCp2D53nTwx9PkrSbBzJNuDaPfiQF8' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2043 nonce='0004BPAPOBQEeP3CUaCp2D53nTwx9PkrSbBzJNuDaPfiQF8' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2060 protected='{"nonce": "0004BPAPOBQEeP3CUaCp2D53nTwx9PkrSbBzJNuDaPfiQF8", "url": "", "alg": "RS256", "kid": "https://acme-v02.api.letsencrypt.org/acme/acct/104554314"}' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_base64:941 base64 single line. [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2063 protected64='eyJub25jZSI6ICIwMDA0QlBBUE9CUUVlUDNDVWFDcDJENTNuVHd4OVBrclNiQnpKTnVEYVBmaVFGOCIsICJ1cmwiOiAiIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xMDQ1NTQzMTQifQ' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_base64:941 base64 single line. [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2070 _sig_t='WG6lBpuWWzJUshs5IdzvU7lCF9WPvnPUbf58H5U+/DP3DkIJQJftOoPa3CXff1KSEYK7kQUImkktFzqaUVYe0KI9MM9TX6/bJwXie5AeyXgutaJ9cvf3XOO5LvBCCAVxoo5600JPqeyFojJ6tE8YNJBxNM3kZyH69KAvvEXNa+O4uY1oBiZ65eImzZxbDEfk7Hk+xD87M9KkC0+mbUFIzD3TrQ0RJ8YKrEqxoPmRrtiwXexpjXhxz19VOgCsd8oWyt3SxLowzszxrSq2H/bqtm28vZp07cIZkRQ6GbR45JRqtEVtotnUdND1WD4ao1u1UBjAFxAa89hVkgWOMP0PXw==' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2073 sig='WG6lBpuWWzJUshs5IdzvU7lCF9WPvnPUbf58H5U-_DP3DkIJQJftOoPa3CXff1KSEYK7kQUImkktFzqaUVYe0KI9MM9TX6_bJwXie5AeyXgutaJ9cvf3XOO5LvBCCAVxoo5600JPqeyFojJ6tE8YNJBxNM3kZyH69KAvvEXNa-O4uY1oBiZ65eImzZxbDEfk7Hk-xD87M9KkC0-mbUFIzD3TrQ0RJ8YKrEqxoPmRrtiwXexpjXhxz19VOgCsd8oWyt3SxLowzszxrSq2H_bqtm28vZp07cIZkRQ6GbR45JRqtEVtotnUdND1WD4ao1u1UBjAFxAa89hVkgWOMP0PXw' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2077 body='{"protected": "eyJub25jZSI6ICIwMDA0QlBBUE9CUUVlUDNDVWFDcDJENTNuVHd4OVBrclNiQnpKTnVEYVBmaVFGOCIsICJ1cmwiOiAiIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xMDQ1NTQzMTQifQ", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAibml1YmkuZW5saW5rLnRvcCJ9fQ", "signature": "WG6lBpuWWzJUshs5IdzvU7lCF9WPvnPUbf58H5U-_DP3DkIJQJftOoPa3CXff1KSEYK7kQUImkktFzqaUVYe0KI9MM9TX6_bJwXie5AeyXgutaJ9cvf3XOO5LvBCCAVxoo5600JPqeyFojJ6tE8YNJBxNM3kZyH69KAvvEXNa-O4uY1oBiZ65eImzZxbDEfk7Hk-xD87M9KkC0-mbUFIzD3TrQ0RJ8YKrEqxoPmRrtiwXexpjXhxz19VOgCsd8oWyt3SxLowzszxrSq2H_bqtm28vZp07cIZkRQ6GbR45JRqtEVtotnUdND1WD4ao1u1UBjAFxAa89hVkgWOMP0PXw"}' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_post:1789 POST [Mon Dec 7 10:25:48 CST 2020] acme.sh:_post:1790 _post_url [Mon Dec 7 10:25:48 CST 2020] acme.sh:_post:1791 body='{"protected": "eyJub25jZSI6ICIwMDA0QlBBUE9CUUVlUDNDVWFDcDJENTNuVHd4OVBrclNiQnpKTnVEYVBmaVFGOCIsICJ1cmwiOiAiIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xMDQ1NTQzMTQifQ", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAibml1YmkuZW5saW5rLnRvcCJ9fQ", "signature": "WG6lBpuWWzJUshs5IdzvU7lCF9WPvnPUbf58H5U-_DP3DkIJQJftOoPa3CXff1KSEYK7kQUImkktFzqaUVYe0KI9MM9TX6_bJwXie5AeyXgutaJ9cvf3XOO5LvBCCAVxoo5600JPqeyFojJ6tE8YNJBxNM3kZyH69KAvvEXNa-O4uY1oBiZ65eImzZxbDEfk7Hk-xD87M9KkC0-mbUFIzD3TrQ0RJ8YKrEqxoPmRrtiwXexpjXhxz19VOgCsd8oWyt3SxLowzszxrSq2H_bqtm28vZp07cIZkRQ6GbR45JRqtEVtotnUdND1WD4ao1u1UBjAFxAa89hVkgWOMP0PXw"}' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_post:1792 _postContentType='application/jose+json' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_inithttp:1734 Http already initialized. [Mon Dec 7 10:25:48 CST 2020] acme.sh:_post:1804 _CURL='curl -L --silent --dump-header /home/enlink/.acme.sh/http.header --trace-ascii /tmp/tmp.TYGUuZ0vxm -g ' [Mon Dec 7 10:25:48 CST 2020] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 3 [Mon Dec 7 10:25:48 CST 2020] Here is the curl dump log: [Mon Dec 7 10:25:48 CST 2020] == Info: malformed == Info: Closing connection -1 [Mon Dec 7 10:25:48 CST 2020] acme.sh:_post:1899 _ret='3' [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2090 responseHeaders [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2093 code [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2095 original [Mon Dec 7 10:25:48 CST 2020] acme.sh:_send_signed_request:2099 response [Mon Dec 7 10:25:48 CST 2020] The new-authz request is ok. [Mon Dec 7 10:25:48 CST 2020] acme.sh:_base64:941 base64 single line. [Mon Dec 7 10:25:48 CST 2020] acme.sh:issue:4354 entry [Mon Dec 7 10:25:49 CST 2020] acme.sh:issue:4358 Not a wildcard domain, lets check whether the validation is already valid. [Mon Dec 7 10:25:49 CST 2020] Error, can not get domain token entry niubi.enlink.top for dns-01 [Mon Dec 7 10:25:49 CST 2020] acme.sh:_stopserver:2333 pid [Mon Dec 7 10:25:49 CST 2020] acme.sh:_restoreNginx:3176 No need to restore nginx, skip. [Mon Dec 7 10:25:49 CST 2020] acme.sh:_clearupdns:3215 _clearupdns [Mon Dec 7 10:25:49 CST 2020] acme.sh:_clearupdns:3216 dns_entries [Mon Dec 7 10:25:49 CST 2020] acme.sh:_clearupdns:3219 skip dns. [Mon Dec 7 10:25:49 CST 2020] acme.sh:_on_issue_err:3402 _on_issue_err [Mon Dec 7 10:25:49 CST 2020] Please add '--debug' or '--log' to check more details. [Mon Dec 7 10:25:49 CST 2020] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh [Mon Dec 7 10:25:49 CST 2020] acme.sh:_on_issue_err:3423 _chk_vlist [Mon Dec 7 10:25:49 CST 2020] acme.sh:_exists:514 openssl exists=0 [Mon Dec 7 10:25:49 CST 2020] acme.sh:_exists:514 /home/enlink/bin/nginx.sh exists=0 [Mon Dec 7 10:25:49 CST 2020] acme.sh:_exists:514 socat exists=0 [Mon Dec 7 10:25:49 CST 2020] acme.sh:_on_issue_err:3444 Diagnosis versions: openssl:openssl OpenSSL 1.0.2k-fips 26 Jan 2017 apache: apache doesn't exist. nginx: nginx version: openresty/1.15.8.1 built by gcc 4.8.5 20150623 (Red Hat 4.8.5-39) (GCC) built with OpenSSL 1.1.1b Tassl 0.8 27 Nov 2019 TLS SNI support enabled configure arguments: --prefix=/root/.jenkins/workspace/master-gateway-release/source/openresty/openresty-1.15.8.1-master/src/nginx --with-cc-opt='-O2 -DNGX_USE_GMSSL -I/root/.jenkins/workspace/master-gateway-release/source/openresty/lib_spa/include -I/root/.jenkins/workspace/master-gateway-release/source/openresty/hiredis-0.13.3 -I/root/.jenkins/workspace/master-gateway-release/source/openresty/json-c-0.12-20140410' --add-module=../ngx_devel_kit-0.3.1rc1 --add-module=../echo-nginx-module-0.61 --add-module=../xss-nginx-module-0.06 --add-module=../ngx_coolkit-0.2 --add-module=../set-misc-nginx-module-0.32 --add-module=../form-input-nginx-module-0.12 --add-module=../encrypted-session-nginx-module-0.08 --add-module=../srcache-nginx-module-0.31 --add-module=../ngx_lua-0.10.15 --add-module=../ngx_lua_upstream-0.07 --add-module=../headers-more-nginx-module-0.33 --add-module=../array-var-nginx-module-0.05 --add-module=../memc-nginx-module-0.19 --add-module=../redis2-nginx-module-0.15 --add-module=../redis-nginx-module-0.3.7 --add-module=../rds-json-nginx-module-0.15 --add-module=../rds-csv-nginx-module-0.09 --add-module=../ngx_stream_lua-0.0.7 --with-ld-opt='-Wl,-rpath,/root/.jenkins/workspace/master-gateway-release/source/openresty/openresty-1.15.8.1-master/src/luajit/lib -L/root/.jenkins/workspace/master-gateway-release/source/openresty/lib_spa/lib -Wl,-rpath=../../lib_spa/lib -L/root/.jenkins/workspace/master-gateway-release/source/openresty/hiredis-0.13.3 -Wl,-rpath=/root/.jenkins/workspace/master-gateway-release/source/openresty/hiredis-0.13.3 -L/root/.jenkins/workspace/master-gateway-release/source/openresty/json-c-0.12-20140410/.libs -Wl,-rpath=/root/.jenkins/workspace/master-gateway-release/source/openresty/json-c-0.12-20140410/.libs' --with-openssl=/root/.jenkins/workspace/master-gateway-release/source/openresty/tassl-1.1.1b-0.8 --add-module=/root/.jenkins/workspace/master-gateway-release/source/openresty/src/build/nginx-1.15.8/src/gated --add-module=/root/.jenkins/workspace/master-gateway-release/source/openresty/src/build/nginx-1.15.8/src/nat --add-module=/root/.jenkins/workspace/master-gateway-release/source/openresty/src/build/ip2region --with-http_realip_module --with-http_stub_status_module --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-http_ssl_module socat: socat by Gerhard Rieger and contributors - see www.dest-unreach.org socat version 1.7.3.2 on Aug 4 2017 04:57:10 running on Linux version #1 SMP Thu Nov 8 23:39:32 UTC 2018, release 3.10.0-957.el7.x86_64, machine x86_64 features:

define WITH_STDIO 1

define WITH_FDNUM 1

define WITH_FILE 1

define WITH_CREAT 1

define WITH_GOPEN 1

define WITH_TERMIOS 1

define WITH_PIPE 1

define WITH_UNIX 1

define WITH_ABSTRACT_UNIXSOCKET 1

define WITH_IP4 1

define WITH_IP6 1

define WITH_RAWIP 1

define WITH_GENERICSOCKET 1

define WITH_INTERFACE 1

define WITH_TCP 1

define WITH_UDP 1

define WITH_SCTP 1

define WITH_LISTEN 1

define WITH_SOCKS4 1

define WITH_SOCKS4A 1

define WITH_PROXY 1

define WITH_SYSTEM 1

define WITH_EXEC 1

define WITH_READLINE 1

define WITH_TUN 1

define WITH_PTY 1

define WITH_OPENSSL 1

undef WITH_FIPS

define WITH_LIBWRAP 1

define WITH_SYCLS 1

define WITH_FILAN 1

define WITH_RETRY 1

define WITH_MSGLEVEL 0 /debug/

acme.sh  --issue .....   --debug 2
Neilpang commented 3 years ago

多试几次