search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.67k stars 4.91k forks source link

dns_dyno.sh not working with error from the DYNU API: "401" "Authentication Exception" #3838

Open brunoceiia opened 2 years ago

brunoceiia commented 2 years ago

Latest version of acme.sh installed on a synology NAS bromolow 3615 linux 3.10.102 is giving me an "401" "Authentication Exception" error from the DYNU api! but when i test the API with CURL, everything seems working fine, no auth or whatsoever errors.

maybe somekind of timeout issue?

notice the garbled text on the keys, tokens and dummy domains (sub.domain.com) to insure privacy

-->

Steps to reproduce (notice the garbled text on the keys, tokens and domains to insure privacy)

installed as in this guide: https://github.com/acmesh-official/acme.sh/wiki/Synology-NAS-Guide

./acme.sh --issue --home . -d sub.domain.com --dns dns_dynu --debug 2

Debug log (notice the garbled text on the keys, tokens and domains to insure privacy)

ash-4.3# ./acme.sh --issue --home . -d sub.domain.com --dns dns_dynu --debug 2 [Tue Nov 30 16:12:13 GMT 2021] Lets find script dir. [Tue Nov 30 16:12:13 GMT 2021] SCRIPT='./acme.sh' [Tue Nov 30 16:12:13 GMT 2021] _script='/usr/local/share/acme.sh/acme.sh' [Tue Nov 30 16:12:13 GMT 2021] _script_home='/usr/local/share/acme.sh' [Tue Nov 30 16:12:13 GMT 2021] Using config home:. [Tue Nov 30 16:12:13 GMT 2021] LE_WORKING_DIR='.' [Tue Nov 30 16:12:13 GMT 2021] Running cmd: issue [Tue Nov 30 16:12:13 GMT 2021] _main_domain='sub.domain.com' [Tue Nov 30 16:12:13 GMT 2021] _alt_domains='no' [Tue Nov 30 16:12:13 GMT 2021] Using config home:. [Tue Nov 30 16:12:13 GMT 2021] default_acme_server [Tue Nov 30 16:12:13 GMT 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90' [Tue Nov 30 16:12:13 GMT 2021] _ACME_SERVER_HOST='acme.zerossl.com' [Tue Nov 30 16:12:13 GMT 2021] _ACME_SERVER_PATH='v2/DV90' [Tue Nov 30 16:12:13 GMT 2021] DOMAIN_PATH='./' [Tue Nov 30 16:12:13 GMT 2021] 'dns_dynu' does not contain 'dns' [Tue Nov 30 16:12:13 GMT 2021] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90 [Tue Nov 30 16:12:13 GMT 2021] _init api for server: https://acme.zerossl.com/v2/DV90 [Tue Nov 30 16:12:13 GMT 2021] Retrying GET [Tue Nov 30 16:12:13 GMT 2021] GET [Tue Nov 30 16:12:13 GMT 2021] url='https://acme.zerossl.com/v2/DV90' [Tue Nov 30 16:12:13 GMT 2021] timeout= [Tue Nov 30 16:12:13 GMT 2021] displayError='1' [Tue Nov 30 16:12:13 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.QaSo1oQ9zY -g ' [Tue Nov 30 16:12:15 GMT 2021] ret='0' [Tue Nov 30 16:12:15 GMT 2021] _hcode='0' [Tue Nov 30 16:12:15 GMT 2021] response='{ "newNonce": "https://acme.zerossl.com/v2/DV90/newNonce", "newAccount": "https://acme.zerossl.com/v2/DV90/newAccount", "newOrder": "https://acme.zerossl.com/v2/DV90/newOrder", "revokeCert": "https://acme.zerossl.com/v2/DV90/revokeCert", "keyChange": "https://acme.zerossl.com/v2/DV90/keyChange", "meta": { "termsOfService": "https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf", "website": "https://zerossl.com", "caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"], "externalAccountRequired": true } }' [Tue Nov 30 16:12:15 GMT 2021] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange' [Tue Nov 30 16:12:15 GMT 2021] ACME_NEW_AUTHZ [Tue Nov 30 16:12:15 GMT 2021] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder' [Tue Nov 30 16:12:15 GMT 2021] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount' [Tue Nov 30 16:12:15 GMT 2021] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert' [Tue Nov 30 16:12:15 GMT 2021] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf' [Tue Nov 30 16:12:15 GMT 2021] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce' [Tue Nov 30 16:12:15 GMT 2021] _on_before_issue [Tue Nov 30 16:12:15 GMT 2021] _chk_main_domain='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] _chk_alt_domains [Tue Nov 30 16:12:15 GMT 2021] 'dns_dynu' does not contain 'no' [Tue Nov 30 16:12:15 GMT 2021] Le_LocalAddress [Tue Nov 30 16:12:15 GMT 2021] d='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] Check for domain='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] _currentRoot='dns_dynu' [Tue Nov 30 16:12:15 GMT 2021] d [Tue Nov 30 16:12:15 GMT 2021] 'dns_dynu' does not contain 'apache' [Tue Nov 30 16:12:15 GMT 2021] _saved_account_key_hash='A7EV+Ezb32jQyMo9yIJmzdRrCAHD7U+wpNwd2dZqlYM=' [Tue Nov 30 16:12:15 GMT 2021] _saved_account_key_hash is not changed, skip register account. [Tue Nov 30 16:12:15 GMT 2021] Read key length: [Tue Nov 30 16:12:15 GMT 2021] Use DEFAULT_DOMAIN_KEY_LENGTH=2048 [Tue Nov 30 16:12:15 GMT 2021] Using config home:. [Tue Nov 30 16:12:15 GMT 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90' [Tue Nov 30 16:12:15 GMT 2021] _ACME_SERVER_HOST='acme.zerossl.com' [Tue Nov 30 16:12:15 GMT 2021] _ACME_SERVER_PATH='v2/DV90' [Tue Nov 30 16:12:15 GMT 2021] _createkey for file:./sub.domain.com/sub.domain.com.key [Tue Nov 30 16:12:15 GMT 2021] Use length 2048 [Tue Nov 30 16:12:15 GMT 2021] Using RSA: 2048 [Tue Nov 30 16:12:15 GMT 2021] _createcsr [Tue Nov 30 16:12:15 GMT 2021] domain='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] domainlist [Tue Nov 30 16:12:15 GMT 2021] csrkey='./sub.domain.com/sub.domain.com.key' [Tue Nov 30 16:12:15 GMT 2021] csr='./sub.domain.com/sub.domain.com.csr' [Tue Nov 30 16:12:15 GMT 2021] csrconf='./sub.domain.com/sub.domain.com.csr.conf' [Tue Nov 30 16:12:15 GMT 2021] _is_idn_d='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] _idn_temp [Tue Nov 30 16:12:15 GMT 2021] _is_idn_d='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] _idn_temp [Tue Nov 30 16:12:15 GMT 2021] _csr_cn='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] _is_idn_d='sub.domain.com' [Tue Nov 30 16:12:15 GMT 2021] _idn_temp [Tue Nov 30 16:12:15 GMT 2021] d [Tue Nov 30 16:12:15 GMT 2021] _identifiers='{"type":"dns","value":"sub.domain.com"}' [Tue Nov 30 16:12:15 GMT 2021] url='https://acme.zerossl.com/v2/DV90/newOrder' [Tue Nov 30 16:12:15 GMT 2021] payload='{"identifiers": [{"type":"dns","value":"sub.domain.com"}]}' [Tue Nov 30 16:12:15 GMT 2021] RSA key [Tue Nov 30 16:12:15 GMT 2021] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce' [Tue Nov 30 16:12:15 GMT 2021] Retrying post [Tue Nov 30 16:12:15 GMT 2021] HEAD [Tue Nov 30 16:12:15 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/newNonce' [Tue Nov 30 16:12:15 GMT 2021] body [Tue Nov 30 16:12:15 GMT 2021] _postContentType='application/jose+json' [Tue Nov 30 16:12:15 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.ZuVD17K7nv -g -I ' [Tue Nov 30 16:12:17 GMT 2021] _ret='0' [Tue Nov 30 16:12:17 GMT 2021] _hcode='0' [Tue Nov 30 16:12:17 GMT 2021] _headers='HTTP/1.1 200 OK Server: nginx Date: Tue, 30 Nov 2021 16:12:17 GMT Content-Type: application/octet-stream Connection: keep-alive Replay-Nonce: Lol9gKHwrP7OyU6_KBFrNPD1yPrv9vDdVau3P0gGzjk Cache-Control: max-age=-1 Access-Control-Allow-Origin: Link: https://acme.zerossl.com/v2/DV90;rel="index" Strict-Transport-Security: max-age=15552000 ' [Tue Nov 30 16:12:17 GMT 2021] _CACHED_NONCE='Lol9gKHwrP7OyU6_KBFfgdfgyPrv9vDdVau3P0gG' [Tue Nov 30 16:12:17 GMT 2021] nonce='Lol9gKHwrP7OyU6_KBFrNPD1yPrv9sfsdau3P0gGzjk' [Tue Nov 30 16:12:17 GMT 2021] Retrying post [Tue Nov 30 16:12:17 GMT 2021] POST [Tue Nov 30 16:12:17 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/newOrder' [Tue Nov 30 16:12:17 GMT 2021] body='{"protected": "eyJub25jZSI6ICJMb2w5Z0tId3JQN095VTZfS0JGck5QRDFsdffghdTNQMGdHemprIiwgInVybCI6ICJodHsfovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9uZgdfdsfICJhbGciOiAiUlMyNTYgsdf2lkIjogImh0dHBzOi8vYWNtZS56ZXJvc3NsLmNvbS92Mi9EVjkwL2FjY291bnQvWV92T1U4OTRfZ3dSRHV3bGtlcDdLZyJ9", "payload": "eyJpZGVudsdgaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWxsdfgsdVub2Zvc2kuY29tIsf1dfQ", "signature": "BmKUB7iE3Ish4zzfdkCoSBm4X_kr3ZgqMfpd1LnduSuFSsdfgsdfgsH3k8P-pqQRODX2EuAXVhlUnfNPzE5sNDVNEbxcvbZpErd5BCeaOILfetethsgsJtt1VinpcgxJTya3CoOo0HYspb5Pzzgf2FXyUR-df0NwVEvZDB-GpODO5uEjHmPzYzA7Z_vAxPzJwOsYEnkS3KHQfYnSsjufX-85zaD0_Qz_izp4eVyKRLqd4LOdJB0M-X2hbTXDyI8pvJ118DVm_lkKVE-u2sMA93wySUFWNXSoCQsUUZow10jo3l8bc_u1nj0uAw"}' [Tue Nov 30 16:12:17 GMT 2021] _postContentType='application/jose+json' [Tue Nov 30 16:12:17 GMT 2021] Http already initialized. [Tue Nov 30 16:12:17 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.ZuVD17K7nv -g ' [Tue Nov 30 16:12:18 GMT 2021] _ret='0' [Tue Nov 30 16:12:18 GMT 2021] _hcode='0' [Tue Nov 30 16:12:18 GMT 2021] responseHeaders='HTTP/1.1 201 Created Server: nginx Date: Tue, 30 Nov 2021 16:12:18 GMT Content-Type: application/json Content-Length: 282 Connection: keep-alive Status: Replay-Nonce: Zsdfdf_rUdgsdsaFy_idghmu-YHMdgfhsAZLfPeiaMJi-ZBfsdfM Cache-Control: max-age=0, no-cache, no-store Access-Control-Allow-Origin: Location: https://acme.zerossl.com/v2/DV90/order/CshkFaY83LKbhwXwPMUcpA Cache-Control: max-age=-1 Strict-Transport-Security: max-age=15552000 ' [Tue Nov 30 16:12:18 GMT 2021] code='201' [Tue Nov 30 16:12:18 GMT 2021] original='{"status":"pending","expires":"2022-02-28T16:12:18Z","identifiers":[{"type":"dns","value":"sub.domain.com"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/b6iAmiYhwImfzmCeVVGbTw"],"finalize":"https://acme.zerossl.com/v2/DV90/order/CshkFaY83LKbhwXwPMUcpA/finalize"}' [Tue Nov 30 16:12:18 GMT 2021] response='{"status":"pending","expires":"2022-02-28T16:12:18Z","identifiers":[{"type":"dns","value":"sub.domain.com"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/b6iAmiYhwImfzmCeVVGbTw"],"finalize":"https://acme.zerossl.com/v2/DV90/order/CshkFaY83LKbhwXwPMUcpA/finalize"}' [Tue Nov 30 16:12:18 GMT 2021] Le_LinkOrder='https://acme.zerossl.com/v2/DV90/order/CdfgFaY83gdzfgUcpA' [Tue Nov 30 16:12:18 GMT 2021] Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/CsdgdgfmhwXwPMUcpA/finalize' [Tue Nov 30 16:12:18 GMT 2021] _authorizations_seg='https://acme.zerossl.com/v2/DV90/authz/b6iAmicvbwIdsgexcVGbTw' [Tue Nov 30 16:12:18 GMT 2021] _authz_url='https://acme.zerossl.com/v2/DV90/authz/b6xcviYhwImfzdxvcvcGbTw' [Tue Nov 30 16:12:18 GMT 2021] url='https://acme.zerossl.com/v2/DV90/authz/vxcmixcvImfzsdfgxcvw' [Tue Nov 30 16:12:18 GMT 2021] payload [Tue Nov 30 16:12:18 GMT 2021] Use cached jwk for file: ./ca/acme.zerossl.com/v2/DV90/account.key [Tue Nov 30 16:12:18 GMT 2021] Use _CACHED_NONCE='ZZsdfsdf_rUsdfaFy_isdfu-YHMQsdffPeiaMJi-ZsdfupM' [Tue Nov 30 16:12:18 GMT 2021] nonce='Zsdfsdf_rUNwsdfsy_iWmu-sdfssdffPeiaMJi-ZsdfpM' [Tue Nov 30 16:12:18 GMT 2021] Retrying post [Tue Nov 30 16:12:18 GMT 2021] POST [Tue Nov 30 16:12:18 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/authz/b6iAmiYhwImfzmCeVVGbTw' [Tue Nov 30 16:12:18 GMT 2021] body='{"protected": "eyJub25jZSI6ICJaWml9yVU53c2FGeV9pV211LVlITVFzQVpMZSmktWkJudXBNIiwgInVybCI6IzovL2FjbWUuemVyb3NzbC5jb20vdjIvRhdXRoei9iaH6bUNlVlZHgImFsZyI6ICJsdfsdiOiAiaHR0HM6Ly9hY21lLnplcm9zc2wuY29tLL0RWOTAvYWNjb3VudC9ZX3ZPVTg5NF9nd1JEdXdsa2VwN0tnIn0", "payload": "", "signature": "mPCUHTA9FOfVGHsdfsd3uGj6FS-o2JduaK-pM744sdfsdfiOFmHndCHQ2n5bobWHyT-0C91M9D67sdfGMR-GNH7t-xHd_HsdfZRpIAN6Wz5Mniy7-xQEfsIksdfdTjdFhFNB8wMRQxOrtsdfsd2O7MSrEHMtOBSNiF6M_L5OFYLPY673XGh2acRicWHvNXMSXuYIU3PEhl4n_6YeS0qzW6AhTVXGwpTX1AAqsS8-E_ex-dIzNrhkkGeLU53gE1R9K3L8kmzgts71g4q-cNjm8sV5I43qVwyeNqSx18yhnkOf5U7-cxbTA"}' [Tue Nov 30 16:12:18 GMT 2021] _postContentType='application/jose+json' [Tue Nov 30 16:12:18 GMT 2021] Http already initialized. [Tue Nov 30 16:12:18 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.ZuVD17K7nv -g ' [Tue Nov 30 16:12:19 GMT 2021] _ret='0' [Tue Nov 30 16:12:19 GMT 2021] _hcode='0' [Tue Nov 30 16:12:19 GMT 2021] responseHeaders='HTTP/1.1 200 OK Server: nginx Date: Tue, 30 Nov 2021 16:12:19 GMT Content-Type: application/json Content-Length: 450 Connection: keep-alive Replay-Nonce: eJfhghBhgEjXgJstjtghfgwizpfuUrfghfg3_oKschgxfghdmhRTfFv0 Cache-Control: max-age=-1 Access-Control-Allow-Origin: * Link: https://acme.zerossl.com/v2/DV90;rel="index" Retry-After: 5 Strict-Transport-Security: max-age=15552000 ' [Tue Nov 30 16:12:19 GMT 2021] code='200' [Tue Nov 30 16:12:19 GMT 2021] original='{"identifier":{"type":"dns","value":"sub.domain.com"},"status":"pending","expires":"2021-12-30T16:12:18Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/j2WH7-Xt8g0_Ay_csZ5Ebg","status":"pending","token":"KsjNA_sKsAP5L8khmenSwIYz4J6BC7zpWVcL0zpTQM0"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"pending","token":"qzBaR1A0jKHg-Nb5-nz0b4FJDaxh8GbWdWqulfNXgEQ"}]}' [Tue Nov 30 16:12:19 GMT 2021] response='{"identifier":{"type":"dns","value":"sub.domain.com"},"status":"pending","expires":"2021-12-30T16:12:18Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/j2WH7-Xt8g0_Ay_csZ5Ebg","status":"pending","token":"KsjNA_sKsAP5L8khmenSwIYz4J6BC7zpWVcL0zpTQM0"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"pending","token":"qzBaR1A0jKHg-Nb5-nz0b4FJDaxh8GbWdWqulfNXgEQ"}]}' [Tue Nov 30 16:12:19 GMT 2021] response='{"identifier":{"type":"dns","value":"sub.domain.com"},"status":"pending","expires":"2021-12-30T16:12:18Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/j2WH7-Xt8g0_Ay_csZ5Ebg","status":"pending","token":"KsjNA_sKsAP5L8khmenSwIYz4J6BC7zpWVcL0zpTQM0"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"pending","token":"qzBaR1A0jKHg-Nb5-nz0b4FJDaxh8GbWdWqulfNXgEQ"}]}' [Tue Nov 30 16:12:19 GMT 2021] _d='sub.domain.com' [Tue Nov 30 16:12:19 GMT 2021] _authorizations_map='sub.domain.com,{"identifier":{"type":"dns","value":"sub.domain.com"},"status":"pending","expires":"2021-12-30T16:12:18Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/j2WH7-Xt8g0_Ay_csZ5Ebg","status":"pending","token":"KsjNA_sKsAP5L8khmenSwIYz4J6BC7zpWVcL0zpTQM0"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"pending","token":"qzBaR1A0jKHg-Nb5-nz0b4FJDaxh8GbWdWqulfNXgEQ"}]} ' [Tue Nov 30 16:12:19 GMT 2021] d='sub.domain.com' [Tue Nov 30 16:12:19 GMT 2021] _w='dns_dynu' [Tue Nov 30 16:12:19 GMT 2021] _currentRoot='dns_dynu' [Tue Nov 30 16:12:19 GMT 2021] _is_idn_d='sub.domain.com' [Tue Nov 30 16:12:19 GMT 2021] _idn_temp [Tue Nov 30 16:12:19 GMT 2021] _candidates='sub.domain.com,{"identifier":{"type":"dns","value":"sub.domain.com"},"status":"pending","expires":"2021-12-30T16:12:18Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/j2WH7-Xt8g0_Ay_csZ5Ebg","status":"pending","token":"KsjNA_sKsAP5L8khmenSwIYz4J6BC7zpWVcL0zpTQM0"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"pending","token":"qzBaR1A0jKHg-Nb5-nz0b4FJDaxh8GbWdWqulfNXgEQ"}]}' [Tue Nov 30 16:12:19 GMT 2021] response='{"identifier":{"type":"dns","value":"sub.domain.com"},"status":"pending","expires":"2021-12-30T16:12:18Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/j2WH7-Xt8g0_Ay_csZ5Ebg","status":"pending","token":"KsjNA_sKsAP5L8khmenSwIYz4J6BC7zpWVcL0zpTQM0"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"pending","token":"qzBaR1A0jKHg-Nb5-nz0b4FJDaxh8GbWdWqulfNXgEQ"}]}' [Tue Nov 30 16:12:19 GMT 2021] entry='"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/jdsdfdfwAsdfdasdghstrhw_idm-ew","status":"pending","token":"qzBaR1A0jKHg-Nb5-nz0b4FJDaxh8GbWdWqulfNXgEQ"' [Tue Nov 30 16:12:19 GMT 2021] token='aR1sdffsdfsjKHg-Nb5-nz0bdfgsdfjhjxhWdWjgfhjfsdafhd' [Tue Nov 30 16:12:19 GMT 2021] uri='https://acme.zerossl.com/v2/DV90/chall/j4zasdaYrh0O6EZ_idm-ew' [Tue Nov 30 16:12:19 GMT 2021] keyauthorization='qzBaR1A0jKHg-Nb5-fsddfDaxhasdfaslasdEQ.0asdfurMy5wdasddfCsdm-n4k5lsfdfasdgdf5VvsasdQ' [Tue Nov 30 16:12:19 GMT 2021] dvlist='sub.domain.com#qzBaR1A0jKHg-Nb5-fsddfDaxhasdfaslfNXasd.0wusdfdgasddfsm-dasdfsdfsdgdfgVvsdfDYWQ#https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew#dns-01#dns_dynu' [Tue Nov 30 16:12:19 GMT 2021] d [Tue Nov 30 16:12:19 GMT 2021] vlist='sub.domain.com#qzBaR1A0jKHg-Nb5-nzasdxhasdadWqulfNXgEQ.0wugdfgwdCvum-n4k5lLkXNTSMm03odfgasdWQ#https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew#dns-01#dns_dynu,' [Tue Nov 30 16:12:19 GMT 2021] d='sub.domain.com' [Tue Nov 30 16:12:19 GMT 2021] _d_alias [Tue Nov 30 16:12:19 GMT 2021] txtdomain='_acme-challenge.sub.domain.com' [Tue Nov 30 16:12:19 GMT 2021] txt='l1--sypG7asdasImZEPdasdRq0asdatOdMZasdgA' [Tue Nov 30 16:12:19 GMT 2021] d_api='/usr/local/share/acme.sh/dnsapi/dns_dynu.sh' [Tue Nov 30 16:12:19 GMT 2021] dns_entry='sub.domain.com,_acme-challenge.sub.domain.com,,dns_dynu,l1--sypG75asdasdasda6ZRq0KQsasdasdMasdA,/usr/local/share/acme.sh/dnsapi/dns_dynu.sh' [Tue Nov 30 16:12:19 GMT 2021] Found domain api file: /usr/local/share/acme.sh/dnsapi/dns_dynu.sh [Tue Nov 30 16:12:19 GMT 2021] Detect root zone [Tue Nov 30 16:12:19 GMT 2021] h='sub.domain.com' [Tue Nov 30 16:12:19 GMT 2021] dns/getroot/sub.domain.com [Tue Nov 30 16:12:19 GMT 2021] Retrying GET [Tue Nov 30 16:12:19 GMT 2021] GET [Tue Nov 30 16:12:19 GMT 2021] url='https://api.dynu.com/v2/dns/getroot/sub.domain.com' [Tue Nov 30 16:12:19 GMT 2021] timeout= [Tue Nov 30 16:12:19 GMT 2021] displayError='1' [Tue Nov 30 16:12:19 GMT 2021] Http already initialized. [Tue Nov 30 16:12:19 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.ZuVD17K7nv -g ' [Tue Nov 30 16:12:21 GMT 2021] ret='0' [Tue Nov 30 16:12:21 GMT 2021] _hcode='0' [Tue Nov 30 16:12:21 GMT 2021] response='{"statusCode":401,"type":"Authentication Exception","message":"Failed."}' [Tue Nov 30 16:12:21 GMT 2021] h='domain.com' [Tue Nov 30 16:12:21 GMT 2021] dns/getroot/domain.com [Tue Nov 30 16:12:21 GMT 2021] Retrying GET [Tue Nov 30 16:12:21 GMT 2021] GET [Tue Nov 30 16:12:21 GMT 2021] url='https://api.dynu.com/v2/dns/getroot/domain.com' [Tue Nov 30 16:12:21 GMT 2021] timeout= [Tue Nov 30 16:12:21 GMT 2021] displayError='1' [Tue Nov 30 16:12:21 GMT 2021] Http already initialized. [Tue Nov 30 16:12:21 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.ZuVD17K7nv -g ' [Tue Nov 30 16:12:22 GMT 2021] ret='0' [Tue Nov 30 16:12:22 GMT 2021] _hcode='0' [Tue Nov 30 16:12:22 GMT 2021] response='{"statusCode":401,"type":"Authentication Exception","message":"Failed."}' [Tue Nov 30 16:12:22 GMT 2021] h='com' [Tue Nov 30 16:12:22 GMT 2021] dns/getroot/com [Tue Nov 30 16:12:22 GMT 2021] Retrying GET [Tue Nov 30 16:12:22 GMT 2021] GET [Tue Nov 30 16:12:22 GMT 2021] url='https://api.dynu.com/v2/dns/getroot/com' [Tue Nov 30 16:12:22 GMT 2021] timeout= [Tue Nov 30 16:12:22 GMT 2021] displayError='1' [Tue Nov 30 16:12:22 GMT 2021] Http already initialized. [Tue Nov 30 16:12:22 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.ZuVD17K7nv -g ' [Tue Nov 30 16:12:43 GMT 2021] ret='0' [Tue Nov 30 16:12:43 GMT 2021] _hcode='0' [Tue Nov 30 16:12:43 GMT 2021] response='{"statusCode":401,"type":"Authentication Exception","message":"Failed."}' [Tue Nov 30 16:12:43 GMT 2021] h [Tue Nov 30 16:12:43 GMT 2021] Invalid domain. [Tue Nov 30 16:12:43 GMT 2021] Error add txt for domain:_acme-challenge.sub.domain.com [Tue Nov 30 16:12:43 GMT 2021] _on_issue_err [Tue Nov 30 16:12:43 GMT 2021] Please add '--debug' or '--log' to check more details. [Tue Nov 30 16:12:43 GMT 2021] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh [Tue Nov 30 16:12:43 GMT 2021] _chk_vlist='sub.domain.com#qzBasdfgsddjKHg-Nb5-ndgsfsdfgsdWqulfNXgEQ.0wurMy5wdCvum-n4k5asdfasdfhsg3oLsghfgWQ#https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew#dns-01#dns_dynu,' [Tue Nov 30 16:12:43 GMT 2021] start to deactivate authz [Tue Nov 30 16:12:43 GMT 2021] Trigger domain validation. [Tue Nov 30 16:12:43 GMT 2021] _t_url='https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew' [Tue Nov 30 16:12:43 GMT 2021] _t_key_authz='qsfdgsgdfgKHg-Nb5-sdfgdfFJDaxh8sdfgsdqulfNXgEQ.0w__urMy5wdCvumsdfglLkXNTSMmsdfgsdalDYWQ' [Tue Nov 30 16:12:43 GMT 2021] _t_vtype [Tue Nov 30 16:12:43 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew' [Tue Nov 30 16:12:43 GMT 2021] payload='{}' [Tue Nov 30 16:12:43 GMT 2021] Use cached jwk for file: ./ca/acme.zerossl.com/v2/DV90/account.key [Tue Nov 30 16:12:43 GMT 2021] Use _CACHED_NONCE='eJ2kBafdsfsdfafgfuUrHwMt93_oKssdfgdfgRTfFv0' [Tue Nov 30 16:12:43 GMT 2021] nonce='efzsdfEjXfsdzzvzdfuUrHwMt93_osdffgsdfTfFsdfg' [Tue Nov 30 16:12:43 GMT 2021] Retrying post [Tue Nov 30 16:12:43 GMT 2021] POST [Tue Nov 30 16:12:43 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew' [Tue Nov 30 16:12:43 GMT 2021] body='{"protected": "eyJub25asdfadmhnRWpYZ0o0d2l6sdfadb0tzQ29WU1dnUlRmRnYwIiwgInVDCdNzbC5jb20vdasdfsdGFsbC9qNdaSVF2RVpfaWRbsfdbg3IiwgImFshnxbgnsdfI6ICJSUzI1NiIsICJasdfasdfafahvdsf6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9ZX3ZPVTg5NF9nd1JEdXdsa2VwN0tnIn0", "payload": "e30", "signature": "GasdfvxELSuavfvbaj3VPqc-RsqP4N-uuadvdtgx9Z36_ea_6zkietDxjCafdbadCiTMh_C7_fgyohLxWRRafdvadfbk3WomyYAqkPlbejgCQafdvadfaba9HcEmtacvf3oK2nsaD531coTiS34ZWjbjzQ3c8OAJTbEM91NXaP7dDZ5QrNgywIdXWTUnUGbqvUN87olpg_UmXiwLRM23SVlC4ddbMAKdBDw9d5v9K2Z0bJBDVrDfC6tRAQVcibyG2U2E42mRbzcYnFFhUXq2yb3w9xhyWQkqmwBHG_jaET7lyqNpA"}' [Tue Nov 30 16:12:43 GMT 2021] _postContentType='application/jose+json' [Tue Nov 30 16:12:43 GMT 2021] Http already initialized. [Tue Nov 30 16:12:43 GMT 2021] _CURL='curl --silent --dump-header ./http.header -L --trace-ascii /tmp/tmp.ZuVD17K7nv -g ' [Tue Nov 30 16:12:44 GMT 2021] _ret='0' [Tue Nov 30 16:12:44 GMT 2021] _hcode='0' [Tue Nov 30 16:12:44 GMT 2021] responseHeaders='HTTP/1.1 200 OK Server: nginx Date: Tue, 30 Nov 2021 16:12:44 GMT Content-Type: application/json Content-Length: 163 Connection: keep-alive Replay-Nonce: 36KssdgafbhJG3asdgvfa9QPSiy_vksVasdfasd3P2ps Cache-Control: max-age=-1 Access-Control-Allow-Origin: * Link: https://acme.zerossl.com/v2/DV90;rel="index" Link: https://acme.zerossl.com/v2/DV90/authz/asdfiAmiYsadfasdghfzmCeVVGbTw;rel="up" Retry-After: 10 Strict-Transport-Security: max-age=15552000 ' [Tue Nov 30 16:12:44 GMT 2021] code='200' [Tue Nov 30 16:12:44 GMT 2021] original='{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"processing","token":"sadfvgadfb-Nb5-asfdasfdgafd"}' [Tue Nov 30 16:12:44 GMT 2021] response='{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/j4zwAAIYrh0O6EZ_idm-ew","status":"processing","token":"adsfsdfgasdf-Nb5-asdfgasdfgadf"}' [Tue Nov 30 16:12:44 GMT 2021] socat doesn't exist. [Tue Nov 30 16:12:44 GMT 2021] Diagnosis versions: openssl:openssl OpenSSL 1.0.2n-fips 7 Dec 2017 apache: apache doesn't exist. nginx: nginx version: nginx/1.12.1 TLS SNI support enabled socat: [Tue Nov 30 16:12:44 GMT 2021] pid [Tue Nov 30 16:12:44 GMT 2021] No need to restore nginx, skip. [Tue Nov 30 16:12:44 GMT 2021] _clearupdns [Tue Nov 30 16:12:44 GMT 2021] dns_entries [Tue Nov 30 16:12:44 GMT 2021] skip dns.

bammab commented 2 years ago

Is it possible, that you export Dyno_Token with an old value (in the shell starting acme.sh)?

If would expect an info statement "Getting Dyno token." between the following two lines of your log (see code).

[Tue Nov 30 16:12:19 GMT 2021] Found domain api file: /usr/local/share/acme.sh/dnsapi/dns_dynu.sh [Tue Nov 30 16:12:19 GMT 2021] Detect root zone

Please check var with printenv or simple echo "$Dynu_Token" before calling acme.sh. If there was an old token which was used, the error could be there, because of an expired token which was used...