search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
39.44k stars 4.98k forks source link

getting validation data #4453

Open amirr1361 opened 1 year ago

amirr1361 commented 1 year ago

Hi there,

I'm keep getting the following error . any help would be appreciated

[root@server ~]# ~/.acme.sh/acme.sh --issue -d servername.com --standalone --debug [Wed Dec 28 00:23:26 AEDT 2022] Lets find script dir. [Wed Dec 28 00:23:26 AEDT 2022] SCRIPT='/root/.acme.sh/acme.sh' [Wed Dec 28 00:23:27 AEDT 2022] _script='/root/.acme.sh/acme.sh' [Wed Dec 28 00:23:27 AEDT 2022] _script_home='/root/.acme.sh' [Wed Dec 28 00:23:27 AEDT 2022] Using config home:/root/.acme.sh https://github.com/acmesh-official/acme.sh v3.0.5 [Wed Dec 28 00:23:27 AEDT 2022] Running cmd: issue [Wed Dec 28 00:23:27 AEDT 2022] _main_domain='servername.com' [Wed Dec 28 00:23:27 AEDT 2022] _alt_domains='no' [Wed Dec 28 00:23:27 AEDT 2022] Using config home:/root/.acme.sh [Wed Dec 28 00:23:27 AEDT 2022] default_acme_server='https://acme-v02.api.letsencrypt.org/directory' [Wed Dec 28 00:23:27 AEDT 2022] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory' [Wed Dec 28 00:23:27 AEDT 2022] DOMAIN_PATH='/root/.acme.sh/servername.com' [Wed Dec 28 00:23:27 AEDT 2022] Le_NextRenewTime [Wed Dec 28 00:23:27 AEDT 2022] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory [Wed Dec 28 00:23:27 AEDT 2022] _init api for server: https://acme-v02.api.letsencrypt.org/directory [Wed Dec 28 00:23:27 AEDT 2022] GET [Wed Dec 28 00:23:27 AEDT 2022] url='https://acme-v02.api.letsencrypt.org/directory' [Wed Dec 28 00:23:27 AEDT 2022] timeout= [Wed Dec 28 00:23:27 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g ' [Wed Dec 28 00:23:27 AEDT 2022] ret='0' [Wed Dec 28 00:23:27 AEDT 2022] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change' [Wed Dec 28 00:23:27 AEDT 2022] ACME_NEW_AUTHZ [Wed Dec 28 00:23:27 AEDT 2022] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order' [Wed Dec 28 00:23:27 AEDT 2022] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct' [Wed Dec 28 00:23:27 AEDT 2022] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert' [Wed Dec 28 00:23:27 AEDT 2022] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf' [Wed Dec 28 00:23:27 AEDT 2022] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce' [Wed Dec 28 00:23:27 AEDT 2022] Using CA: https://acme-v02.api.letsencrypt.org/directory [Wed Dec 28 00:23:27 AEDT 2022] _on_before_issue [Wed Dec 28 00:23:27 AEDT 2022] _chk_main_domain='servername.com' [Wed Dec 28 00:23:27 AEDT 2022] _chk_alt_domains [Wed Dec 28 00:23:27 AEDT 2022] Le_LocalAddress [Wed Dec 28 00:23:27 AEDT 2022] d='servername.com' [Wed Dec 28 00:23:27 AEDT 2022] Check for domain='servername.com' [Wed Dec 28 00:23:27 AEDT 2022] _currentRoot='no' [Wed Dec 28 00:23:27 AEDT 2022] Standalone mode. [Wed Dec 28 00:23:27 AEDT 2022] _checkport='80' [Wed Dec 28 00:23:27 AEDT 2022] _checkaddr [Wed Dec 28 00:23:28 AEDT 2022] Using: ss [Wed Dec 28 00:23:28 AEDT 2022] d [Wed Dec 28 00:23:28 AEDT 2022] _saved_account_key_hash is not changed, skip register account. [Wed Dec 28 00:23:28 AEDT 2022] Read key length:2048 [Wed Dec 28 00:23:28 AEDT 2022] _createcsr [Wed Dec 28 00:23:28 AEDT 2022] Single domain='servername.com' [Wed Dec 28 00:23:28 AEDT 2022] Getting domain auth token for each domain [Wed Dec 28 00:23:28 AEDT 2022] d [Wed Dec 28 00:23:28 AEDT 2022] url='https://acme-v02.api.letsencrypt.org/acme/new-order' [Wed Dec 28 00:23:28 AEDT 2022] payload='{"identifiers": [{"type":"dns","value":"servername.com"}]}' [Wed Dec 28 00:23:28 AEDT 2022] RSA key [Wed Dec 28 00:23:28 AEDT 2022] HEAD [Wed Dec 28 00:23:28 AEDT 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce' [Wed Dec 28 00:23:28 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g -I ' [Wed Dec 28 00:23:28 AEDT 2022] _ret='0' [Wed Dec 28 00:23:29 AEDT 2022] POST [Wed Dec 28 00:23:29 AEDT 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order' [Wed Dec 28 00:23:29 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g ' [Wed Dec 28 00:23:29 AEDT 2022] _ret='0' [Wed Dec 28 00:23:29 AEDT 2022] code='201' [Wed Dec 28 00:23:29 AEDT 2022] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/888643737/155250946557' [Wed Dec 28 00:23:29 AEDT 2022] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/888643737/155250946557' [Wed Dec 28 00:23:29 AEDT 2022] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/190370985817' [Wed Dec 28 00:23:29 AEDT 2022] payload [Wed Dec 28 00:23:29 AEDT 2022] POST [Wed Dec 28 00:23:29 AEDT 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/190370985817' [Wed Dec 28 00:23:29 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g ' [Wed Dec 28 00:23:30 AEDT 2022] _ret='0' [Wed Dec 28 00:23:30 AEDT 2022] code='200' [Wed Dec 28 00:23:30 AEDT 2022] d='servername.com' [Wed Dec 28 00:23:30 AEDT 2022] Getting webroot for domain='servername.com' [Wed Dec 28 00:23:30 AEDT 2022] _w='no' [Wed Dec 28 00:23:30 AEDT 2022] _currentRoot='no' [Wed Dec 28 00:23:30 AEDT 2022] entry='"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA","token":"f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg"' [Wed Dec 28 00:23:30 AEDT 2022] token='f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg' [Wed Dec 28 00:23:30 AEDT 2022] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:30 AEDT 2022] keyauthorization='f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg.lzT6uZjPwvf3nnSE6OXE2l1CpDz-1fsrg3EaghgZnsE' [Wed Dec 28 00:23:30 AEDT 2022] dvlist='servername.com#f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg.lzT6uZjPwvf3nnSE6OXE2l1CpDz-1fsrg3EaghgZnsE#https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA#http-01#no' [Wed Dec 28 00:23:30 AEDT 2022] d [Wed Dec 28 00:23:30 AEDT 2022] vlist='servername.com#f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg.lzT6uZjPwvf3nnSE6OXE2l1CpDz-1fsrg3EaghgZnsE#https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA#http-01#no,' [Wed Dec 28 00:23:30 AEDT 2022] d='servername.com' [Wed Dec 28 00:23:30 AEDT 2022] ok, let's start to verify [Wed Dec 28 00:23:30 AEDT 2022] Verifying: servername.com [Wed Dec 28 00:23:30 AEDT 2022] d='servername.com' [Wed Dec 28 00:23:30 AEDT 2022] keyauthorization='f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg.lzT6uZjPwvf3nnSE6OXE2l1CpDz-1fsrg3EaghgZnsE' [Wed Dec 28 00:23:30 AEDT 2022] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:30 AEDT 2022] _currentRoot='no' [Wed Dec 28 00:23:30 AEDT 2022] Standalone mode server [Wed Dec 28 00:23:30 AEDT 2022] content='f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg.lzT6uZjPwvf3nnSE6OXE2l1CpDz-1fsrg3EaghgZnsE' [Wed Dec 28 00:23:30 AEDT 2022] ncaddr [Wed Dec 28 00:23:30 AEDT 2022] startserver: 32702 [Wed Dec 28 00:23:30 AEDT 2022] Le_HTTPPort='80' [Wed Dec 28 00:23:30 AEDT 2022] Le_Listen_V4 [Wed Dec 28 00:23:30 AEDT 2022] Le_Listen_V6 [Wed Dec 28 00:23:30 AEDT 2022] _content_len='87' [Wed Dec 28 00:23:30 AEDT 2022] _NC='socat TCP-LISTEN:80,crlf,reuseaddr,fork' [Wed Dec 28 00:23:31 AEDT 2022] serverproc='1105' [Wed Dec 28 00:23:31 AEDT 2022] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:31 AEDT 2022] payload='{}' [Wed Dec 28 00:23:31 AEDT 2022] POST [Wed Dec 28 00:23:31 AEDT 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:31 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g ' [Wed Dec 28 00:23:32 AEDT 2022] _ret='0' [Wed Dec 28 00:23:32 AEDT 2022] code='200' [Wed Dec 28 00:23:32 AEDT 2022] trigger validation code: 200 [Wed Dec 28 00:23:32 AEDT 2022] Pending, The CA is processing your order, please just wait. (1/30) [Wed Dec 28 00:23:32 AEDT 2022] sleep 2 secs to verify again [Wed Dec 28 00:23:35 AEDT 2022] checking [Wed Dec 28 00:23:35 AEDT 2022] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:35 AEDT 2022] payload [Wed Dec 28 00:23:35 AEDT 2022] POST [Wed Dec 28 00:23:35 AEDT 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:35 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g ' [Wed Dec 28 00:23:36 AEDT 2022] _ret='0' [Wed Dec 28 00:23:36 AEDT 2022] code='200' [Wed Dec 28 00:23:36 AEDT 2022] servername.com:Verify error:...*: Fetching http://servername.com/.well-known/acme-challenge/f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg: Error getting validation data [Wed Dec 28 00:23:36 AEDT 2022] Debug: get token url. [Wed Dec 28 00:23:36 AEDT 2022] GET [Wed Dec 28 00:23:36 AEDT 2022] url='http://servername.com/.well-known/acme-challenge/f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg' [Wed Dec 28 00:23:36 AEDT 2022] timeout=1 [Wed Dec 28 00:23:36 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g --connect-timeout 1' f8m0EOhNdkXhcCmS_3GCM_XsGqPQsxRbQG3q1ZlyWkg.lzT6uZjPwvf3nnSE6OXE2l1CpDz-1fsrg3EaghgZnsE[Wed Dec 28 00:23:37 AEDT 2022] ret='0' [Wed Dec 28 00:23:37 AEDT 2022] Skip for removelevel: [Wed Dec 28 00:23:37 AEDT 2022] pid='1105' [Wed Dec 28 00:23:37 AEDT 2022] No need to restore nginx, skip. [Wed Dec 28 00:23:37 AEDT 2022] _clearupdns [Wed Dec 28 00:23:37 AEDT 2022] dns_entries [Wed Dec 28 00:23:37 AEDT 2022] skip dns. [Wed Dec 28 00:23:37 AEDT 2022] _on_issue_err [Wed Dec 28 00:23:37 AEDT 2022] Please add '--debug' or '--log' to check more details. [Wed Dec 28 00:23:37 AEDT 2022] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh [Wed Dec 28 00:23:37 AEDT 2022] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:37 AEDT 2022] payload='{}' [Wed Dec 28 00:23:37 AEDT 2022] POST [Wed Dec 28 00:23:37 AEDT 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/190370985817/uzV5fA' [Wed Dec 28 00:23:37 AEDT 2022] _CURL='curl --silent --dump-header /root/.acme.sh/http.header -L -g ' [Wed Dec 28 00:23:38 AEDT 2022] _ret='0' [Wed Dec 28 00:23:38 AEDT 2022] code='400' [Wed Dec 28 00:23:38 AEDT 2022] Diagnosis versions: openssl:openssl OpenSSL 1.1.1c 28 May 2019 apache: apache doesn't exist. nginx: nginx doesn't exist. socat: socat by Gerhard Rieger and contributors - see www.dest-unreach.org socat version 1.7.3.2 on Aug 4 2017 04:57:10 running on Linux version #1 SMP Wed Oct 13 17:20:51 UTC 2021, release 3.10.0-1160.45.1.el7.x86_64, machine x86_64 features:

define WITH_STDIO 1

define WITH_FDNUM 1

define WITH_FILE 1

define WITH_CREAT 1

define WITH_GOPEN 1

define WITH_TERMIOS 1

define WITH_PIPE 1

define WITH_UNIX 1

define WITH_ABSTRACT_UNIXSOCKET 1

define WITH_IP4 1

define WITH_IP6 1

define WITH_RAWIP 1

define WITH_GENERICSOCKET 1

define WITH_INTERFACE 1

define WITH_TCP 1

define WITH_UDP 1

define WITH_SCTP 1

define WITH_LISTEN 1

define WITH_SOCKS4 1

define WITH_SOCKS4A 1

define WITH_PROXY 1

define WITH_SYSTEM 1

define WITH_EXEC 1

define WITH_READLINE 1

define WITH_TUN 1

define WITH_PTY 1

define WITH_OPENSSL 1

undef WITH_FIPS

define WITH_LIBWRAP 1

define WITH_SYCLS 1

define WITH_FILAN 1

define WITH_RETRY 1

define WITH_MSGLEVEL 0 /debug/

github-actions[bot] commented 1 year ago

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

amirr1361 commented 1 year ago

I have already updated the acme.sh