acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
39.3k stars 4.97k forks source link

dns_ali cannot work normally #4737

Closed RWh1te0 closed 1 month ago

RWh1te0 commented 1 year ago

I am using the Docker version of acme.sh, below is my startup command and error message. The domain name has been replaced with example.com, and other information is partially desensitized. From the error message, it seems to be the network problem of the docker container, but the relevant api of zerossl can be accessed normally, and the domain name of alidns can also be resolved normally, so I can't determine the problem, please advise, thank you!

export DOMAIN=exampel.com
docker run --rm \
-v "/volume1/docker/acme":/acme.sh \
-e TZ=Asia/Shanghai \
-e Ali_Key=*** \
-e Ali_Secret=*** \
--net=host \
neilpang/acme.sh:dev \
--issue --dns dns_ali --dnssleep 60 -d "${DOMAIN}" -d "*.${DOMAIN}" --server zerossl --debug 2
[Tue Aug 15 08:58:14 UTC 2023] _selectServer try snames='zerossl.com,zerossl'
[Tue Aug 15 08:58:14 UTC 2023] _selectServer match zerossl
[Tue Aug 15 08:58:14 UTC 2023] Selected server: https://acme.zerossl.com/v2/DV90
[Tue Aug 15 08:58:14 UTC 2023] Lets find script dir.
[Tue Aug 15 08:58:14 UTC 2023] _SCRIPT_='/root/.acme.sh/acme.sh'
[Tue Aug 15 08:58:14 UTC 2023] _script='/root/.acme.sh/acme.sh'
[Tue Aug 15 08:58:14 UTC 2023] _script_home='/root/.acme.sh'
[Tue Aug 15 08:58:14 UTC 2023] Using default home:/root/.acme.sh
[Tue Aug 15 08:58:14 UTC 2023] Using config home:/acme.sh
https://github.com/acmesh-official/acme.sh
v3.0.7
[Tue Aug 15 08:58:14 UTC 2023] LE_WORKING_DIR='/root/.acme.sh'
[Tue Aug 15 08:58:14 UTC 2023] Using server: https://acme.zerossl.com/v2/DV90
[Tue Aug 15 08:58:14 UTC 2023] Running cmd: issue
[Tue Aug 15 08:58:14 UTC 2023] _main_domain='example.com'
[Tue Aug 15 08:58:14 UTC 2023] _alt_domains='*.example.com'
[Tue Aug 15 08:58:14 UTC 2023] Using config home:/acme.sh
[Tue Aug 15 08:58:14 UTC 2023] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Tue Aug 15 08:58:14 UTC 2023] _ACME_SERVER_HOST='acme.zerossl.com'
[Tue Aug 15 08:58:14 UTC 2023] _ACME_SERVER_PATH='v2/DV90'
[Tue Aug 15 08:58:14 UTC 2023] DOMAIN_PATH='/acme.sh/example.com_ecc'
[Tue Aug 15 08:58:14 UTC 2023] 'dns_ali' does not contain 'dns'
[Tue Aug 15 08:58:14 UTC 2023] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Tue Aug 15 08:58:14 UTC 2023] _init api for server: https://acme.zerossl.com/v2/DV90
[Tue Aug 15 08:58:14 UTC 2023] GET
[Tue Aug 15 08:58:14 UTC 2023] url='https://acme.zerossl.com/v2/DV90'
[Tue Aug 15 08:58:14 UTC 2023] timeout=
[Tue Aug 15 08:58:14 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.xFijAJiNQp  -g '
[Tue Aug 15 08:58:15 UTC 2023] ret='0'
[Tue Aug 15 08:58:15 UTC 2023] response='{
  "newNonce": "https://acme.zerossl.com/v2/DV90/newNonce",
  "newAccount": "https://acme.zerossl.com/v2/DV90/newAccount",
  "newOrder": "https://acme.zerossl.com/v2/DV90/newOrder",
  "revokeCert": "https://acme.zerossl.com/v2/DV90/revokeCert",
  "keyChange": "https://acme.zerossl.com/v2/DV90/keyChange",
  "meta": {
    "termsOfService": "https://secure.trust-provider.com/repository/docs/Legacy/20230516_Certificate_Subscriber_Agreement_v_2_6_click.pdf",
    "website": "https://zerossl.com",
    "caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"],
    "externalAccountRequired": true
  }
}'
[Tue Aug 15 08:58:15 UTC 2023] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[Tue Aug 15 08:58:15 UTC 2023] ACME_NEW_AUTHZ
[Tue Aug 15 08:58:15 UTC 2023] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[Tue Aug 15 08:58:15 UTC 2023] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[Tue Aug 15 08:58:15 UTC 2023] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[Tue Aug 15 08:58:15 UTC 2023] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20230516_Certificate_Subscriber_Agreement_v_2_6_click.pdf'
[Tue Aug 15 08:58:15 UTC 2023] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Tue Aug 15 08:58:15 UTC 2023] Using CA: https://acme.zerossl.com/v2/DV90
[Tue Aug 15 08:58:15 UTC 2023] _on_before_issue
[Tue Aug 15 08:58:15 UTC 2023] _chk_main_domain='example.com'
[Tue Aug 15 08:58:15 UTC 2023] _chk_alt_domains='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] 'dns_ali' does not contain 'no'
[Tue Aug 15 08:58:15 UTC 2023] Le_LocalAddress
[Tue Aug 15 08:58:15 UTC 2023] d='example.com'
[Tue Aug 15 08:58:15 UTC 2023] Check for domain='example.com'
[Tue Aug 15 08:58:15 UTC 2023] _currentRoot='dns_ali'
[Tue Aug 15 08:58:15 UTC 2023] d='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] Check for domain='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] _currentRoot='dns_ali'
[Tue Aug 15 08:58:15 UTC 2023] d
[Tue Aug 15 08:58:15 UTC 2023] 'dns_ali' does not contain 'apache'
[Tue Aug 15 08:58:15 UTC 2023] _saved_account_key_hash='V9**mpM='
[Tue Aug 15 08:58:15 UTC 2023] _saved_account_key_hash is not changed, skip register account.
[Tue Aug 15 08:58:15 UTC 2023] Read key length:2048
[Tue Aug 15 08:58:15 UTC 2023] Creating domain key
[Tue Aug 15 08:58:15 UTC 2023] Using config home:/acme.sh
[Tue Aug 15 08:58:15 UTC 2023] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Tue Aug 15 08:58:15 UTC 2023] _ACME_SERVER_HOST='acme.zerossl.com'
[Tue Aug 15 08:58:15 UTC 2023] _ACME_SERVER_PATH='v2/DV90'
[Tue Aug 15 08:58:15 UTC 2023] _createkey for file:/acme.sh/example.com_ecc/example.com.key
[Tue Aug 15 08:58:15 UTC 2023] Use length 256
[Tue Aug 15 08:58:15 UTC 2023] Using ec name: prime256v1
[Tue Aug 15 08:58:15 UTC 2023] The domain key is here: /acme.sh/example.com_ecc/example.com.key
[Tue Aug 15 08:58:15 UTC 2023] _createcsr
[Tue Aug 15 08:58:15 UTC 2023] domain='example.com'
[Tue Aug 15 08:58:15 UTC 2023] domainlist='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] csrkey='/acme.sh/example.com_ecc/example.com.key'
[Tue Aug 15 08:58:15 UTC 2023] csr='/acme.sh/example.com_ecc/example.com.csr'
[Tue Aug 15 08:58:15 UTC 2023] csrconf='/acme.sh/example.com_ecc/example.com.csr.conf'
[Tue Aug 15 08:58:15 UTC 2023] _is_idn_d='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] _idn_temp
[Tue Aug 15 08:58:15 UTC 2023] domainlist='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] seg='example'
[Tue Aug 15 08:58:15 UTC 2023] _is_idn_d='example.com'
[Tue Aug 15 08:58:15 UTC 2023] _idn_temp
[Tue Aug 15 08:58:15 UTC 2023] seg='acme.sh'
[Tue Aug 15 08:58:15 UTC 2023] Multi domain='DNS:example.com,DNS:*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] _is_idn_d='example.com'
[Tue Aug 15 08:58:15 UTC 2023] _idn_temp
[Tue Aug 15 08:58:15 UTC 2023] _csr_cn='example.com'
[Tue Aug 15 08:58:15 UTC 2023] seg='example'
[Tue Aug 15 08:58:15 UTC 2023] Getting domain auth token for each domain
[Tue Aug 15 08:58:15 UTC 2023] seg='example'
[Tue Aug 15 08:58:15 UTC 2023] _is_idn_d='example.com'
[Tue Aug 15 08:58:15 UTC 2023] _idn_temp
[Tue Aug 15 08:58:15 UTC 2023] d='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] seg='acme.sh'
[Tue Aug 15 08:58:15 UTC 2023] _is_idn_d='*.example.com'
[Tue Aug 15 08:58:15 UTC 2023] _idn_temp
[Tue Aug 15 08:58:15 UTC 2023] d
[Tue Aug 15 08:58:15 UTC 2023] _identifiers='{"type":"dns","value":"example.com"},{"type":"dns","value":"*.example.com"}'
[Tue Aug 15 08:58:15 UTC 2023] _notBefore
[Tue Aug 15 08:58:15 UTC 2023] _notAfter
[Tue Aug 15 08:58:15 UTC 2023] =======Begin Send Signed Request=======
[Tue Aug 15 08:58:15 UTC 2023] url='https://acme.zerossl.com/v2/DV90/newOrder'
[Tue Aug 15 08:58:15 UTC 2023] payload='{"identifiers": [{"type":"dns","value":"example.com"},{"type":"dns","value":"*.example.com"}]}'
[Tue Aug 15 08:58:15 UTC 2023] EC key
[Tue Aug 15 08:58:15 UTC 2023] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Tue Aug 15 08:58:15 UTC 2023] HEAD
[Tue Aug 15 08:58:15 UTC 2023] _post_url='https://acme.zerossl.com/v2/DV90/newNonce'
[Tue Aug 15 08:58:15 UTC 2023] body
[Tue Aug 15 08:58:15 UTC 2023] _postContentType='application/jose+json'
[Tue Aug 15 08:58:15 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g  -I  '
[Tue Aug 15 08:58:18 UTC 2023] _ret='0'
[Tue Aug 15 08:58:18 UTC 2023] _headers='HTTP/2 200 
server: nginx
date: Tue, 15 Aug 2023 08:58:18 GMT
content-type: application/octet-stream
replay-nonce: JW4PXLhpbJRf4DkjyWVRF5AsfHJZHkDmzDwzQtZEn0Q
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue Aug 15 08:58:18 UTC 2023] _CACHED_NONCE='JW4PXL**QtZEn0Q'
[Tue Aug 15 08:58:18 UTC 2023] nonce='JW4PXLh**QtZEn0Q'
[Tue Aug 15 08:58:18 UTC 2023] POST
[Tue Aug 15 08:58:18 UTC 2023] _post_url='https://acme.zerossl.com/v2/DV90/newOrder'
[Tue Aug 15 08:58:18 UTC 2023] body='{"protected": "eyJub25jZSI6IC**nVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9uZXdPcmRlciIsICJhbGciOiAiRVMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS56ZXJvc3NsLmNvbS92Mi9EVjkwL2FjY291bnQvbEd5TktLZHZkSXQyeEw4SEN0ejE5ZyJ9", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InJ5YW5ob21lLmdkLmNuIn0seyJ0eXBlIjoiZG5zIiwidmFsdWUiOiIqLnJ5YW5ob21lLmdkLmNuIn1dfQ", "signature": "VVmR78i5b-0DFFlDwd6PX1incjPSEdMSYhje9X1cXubiJD9iZTbEQmfc80fBaYF6xurhi4e_oSTIAHTYceLlJw"}'
[Tue Aug 15 08:58:18 UTC 2023] _postContentType='application/jose+json'
[Tue Aug 15 08:58:18 UTC 2023] Http already initialized.
[Tue Aug 15 08:58:18 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g '
[Tue Aug 15 08:58:21 UTC 2023] _ret='0'
[Tue Aug 15 08:58:21 UTC 2023] responseHeaders='HTTP/2 201 
server: nginx
date: Tue, 15 Aug 2023 08:58:21 GMT
content-type: application/json
content-length: 382
replay-nonce: VH8yEQ0RYt2WVT--AvAbivyYUqjK8TS_UYEgVyw5CNg
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
location: https://acme.zerossl.com/v2/DV90/order/fFR9d1KuXlWUz7buqmUHKQ
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue Aug 15 08:58:21 UTC 2023] code='201'
[Tue Aug 15 08:58:21 UTC 2023] original='{"status":"pending","expires":"2023-11-13T08:58:21Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.example.com"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg","https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw"],"finalize":"https://acme.zerossl.com/v2/DV90/order/fFR9d1KuXlWUz7buqmUHKQ/finalize"}'
[Tue Aug 15 08:58:21 UTC 2023] response='{"status":"pending","expires":"2023-11-13T08:58:21Z","identifiers":[{"type":"dns","value":"example.com"},{"type":"dns","value":"*.example.com"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg","https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw"],"finalize":"https://acme.zerossl.com/v2/DV90/order/fFR9d1KuXlWUz7buqmUHKQ/finalize"}'
[Tue Aug 15 08:58:21 UTC 2023] Le_LinkOrder='https://acme.zerossl.com/v2/DV90/order/fFR9d1KuXlWUz7buqmUHKQ'
[Tue Aug 15 08:58:21 UTC 2023] Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/fFR9d1KuXlWUz7buqmUHKQ/finalize'
[Tue Aug 15 08:58:21 UTC 2023] _authorizations_seg='https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg,https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:21 UTC 2023] _authz_url='https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg'
[Tue Aug 15 08:58:21 UTC 2023] =======Begin Send Signed Request=======
[Tue Aug 15 08:58:21 UTC 2023] url='https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg'
[Tue Aug 15 08:58:21 UTC 2023] payload
[Tue Aug 15 08:58:21 UTC 2023] Use cached jwk for file: /acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Tue Aug 15 08:58:21 UTC 2023] Use _CACHED_NONCE='VH8yEQ0RYt2WVT--AvAbivyYUqjK8TS_UYEgVyw5CNg'
[Tue Aug 15 08:58:21 UTC 2023] nonce='VH8yEQ0RYt2WVT--AvAbivyYUqjK8TS_UYEgVyw5CNg'
[Tue Aug 15 08:58:21 UTC 2023] POST
[Tue Aug 15 08:58:21 UTC 2023] _post_url='https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg'
[Tue Aug 15 08:58:21 UTC 2023] body='{"protected": "eyJub25jZSI6ICJWSDh5RVEwUll0MldWVC0tQXZBYml2eVlVcWpLOFRTX1VZRWdWeXc1Q05nIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9hdXRoei9HNTkwZmR6dHZ3YXgwZ0RleGFrc2RnIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9sR3lOS0tkdmRJdDJ4TDhIQ3R6MTlnIn0", "payload": "", "signature": "0YZS5VvjYOqRl8V0R_qpHipDFLPtKdiMfgXp3ERxxOo_eX_A26LZe0tNejw3nAzsPFlK-fAlLEyUXcZSNJoGpQ"}'
[Tue Aug 15 08:58:21 UTC 2023] _postContentType='application/jose+json'
[Tue Aug 15 08:58:21 UTC 2023] Http already initialized.
[Tue Aug 15 08:58:21 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g '
[Tue Aug 15 08:58:24 UTC 2023] _ret='0'
[Tue Aug 15 08:58:24 UTC 2023] responseHeaders='HTTP/2 200 
server: nginx
date: Tue, 15 Aug 2023 08:58:24 GMT
content-type: application/json
content-length: 444
replay-nonce: fkoNAHZJ1y9YPTbgiqvwBq0wVqfoV4njXWNMcnDRmu0
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
retry-after: 5
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue Aug 15 08:58:24 UTC 2023] code='200'
[Tue Aug 15 08:58:24 UTC 2023] original='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/qDSetRoXs3SIZNad1wKwew","status":"pending","token":"iT3kCMEBJBbOtEtdWsi-1mIUGcfyAFesEomdbuNZkTU"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"pending","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}]}'
[Tue Aug 15 08:58:24 UTC 2023] response='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/qDSetRoXs3SIZNad1wKwew","status":"pending","token":"iT3kCMEBJBbOtEtdWsi-1mIUGcfyAFesEomdbuNZkTU"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"pending","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}]}'
[Tue Aug 15 08:58:24 UTC 2023] response='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/qDSetRoXs3SIZNad1wKwew","status":"pending","token":"iT3kCMEBJBbOtEtdWsi-1mIUGcfyAFesEomdbuNZkTU"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"pending","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}]}'
[Tue Aug 15 08:58:24 UTC 2023] _d='example.com'
[Tue Aug 15 08:58:24 UTC 2023] _authz_url='https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:24 UTC 2023] =======Begin Send Signed Request=======
[Tue Aug 15 08:58:24 UTC 2023] url='https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:24 UTC 2023] payload
[Tue Aug 15 08:58:24 UTC 2023] Use cached jwk for file: /acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Tue Aug 15 08:58:24 UTC 2023] Use _CACHED_NONCE='fkoNAHZJ1y9YPTbgiqvwBq0wVqfoV4njXWNMcnDRmu0'
[Tue Aug 15 08:58:24 UTC 2023] nonce='fkoNAHZJ1y9YPTbgiqvwBq0wVqfoV4njXWNMcnDRmu0'
[Tue Aug 15 08:58:24 UTC 2023] POST
[Tue Aug 15 08:58:24 UTC 2023] _post_url='https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:24 UTC 2023] body='{"protected": "eyJub25jZSI6ICJma29OQUhaSjF5OVlQVGJnaXF2d0JxMHdWcWZvVjRualhXTk1jbkRSbXUwIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9hdXRoei96dXhZVzlhMmc2UUVDZWVTQmhwR093IiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9sR3lOS0tkdmRJdDJ4TDhIQ3R6MTlnIn0", "payload": "", "signature": "x35YrvE5gVWp8_Be37J4fatKU4Tv1gabOS5nQrXZbDCuvT-QOalWSA8lyRHxC96zrJVjgFGXSqnsRDXIc07gmA"}'
[Tue Aug 15 08:58:24 UTC 2023] _postContentType='application/jose+json'
[Tue Aug 15 08:58:24 UTC 2023] Http already initialized.
[Tue Aug 15 08:58:24 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g '
[Tue Aug 15 08:58:27 UTC 2023] _ret='0'
[Tue Aug 15 08:58:27 UTC 2023] responseHeaders='HTTP/2 200 
server: nginx
date: Tue, 15 Aug 2023 08:58:27 GMT
content-type: application/json
content-length: 298
replay-nonce: lWt8B8imQK950XrfWL9lCTKZAwE1SqBsOJ1JRmiDbSQ
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
retry-after: 5
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue Aug 15 08:58:27 UTC 2023] code='200'
[Tue Aug 15 08:58:27 UTC 2023] original='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"pending","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}],"wildcard":true}'
[Tue Aug 15 08:58:27 UTC 2023] response='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"pending","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}],"wildcard":true}'
[Tue Aug 15 08:58:27 UTC 2023] response='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"pending","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}],"wildcard":true}'
[Tue Aug 15 08:58:27 UTC 2023] _d='*.example.com'
[Tue Aug 15 08:58:27 UTC 2023] _authorizations_map='*.example.com,{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"pending","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}],"wildcard":true}#https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw
example.com,{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/qDSetRoXs3SIZNad1wKwew","status":"pending","token":"iT3kCMEBJBbOtEtdWsi-1mIUGcfyAFesEomdbuNZkTU"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"pending","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}]}#https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg
'
[Tue Aug 15 08:58:27 UTC 2023] d='example.com'
[Tue Aug 15 08:58:27 UTC 2023] Getting webroot for domain='example.com'
[Tue Aug 15 08:58:27 UTC 2023] _w='dns_ali'
[Tue Aug 15 08:58:27 UTC 2023] _currentRoot='dns_ali'
[Tue Aug 15 08:58:27 UTC 2023] _is_idn_d='example.com'
[Tue Aug 15 08:58:27 UTC 2023] _idn_temp
[Tue Aug 15 08:58:27 UTC 2023] _candidates='example.com,{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/qDSetRoXs3SIZNad1wKwew","status":"pending","token":"iT3kCMEBJBbOtEtdWsi-1mIUGcfyAFesEomdbuNZkTU"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"pending","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}]}#https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg'
[Tue Aug 15 08:58:27 UTC 2023] response='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/qDSetRoXs3SIZNad1wKwew","status":"pending","token":"iT3kCMEBJBbOtEtdWsi-1mIUGcfyAFesEomdbuNZkTU"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"pending","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}]}#https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg'
[Tue Aug 15 08:58:27 UTC 2023] _authz_url='https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg'
[Tue Aug 15 08:58:27 UTC 2023] entry='"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"pending","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"'
[Tue Aug 15 08:58:27 UTC 2023] token='K5JHxP***YqeXIU1fz4ISA'
[Tue Aug 15 08:58:27 UTC 2023] uri='https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw'
[Tue Aug 15 08:58:27 UTC 2023] keyauthorization='K5JHxPXZTHjqpPke***YqeXIU1fz4ISA.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic'
[Tue Aug 15 08:58:27 UTC 2023] dvlist='example.com#K5JHxPXZTHjqpPkeqgknUDc4tJ***dZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic#https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw#dns-01#dns_ali#https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg'
[Tue Aug 15 08:58:27 UTC 2023] d='*.example.com'
[Tue Aug 15 08:58:27 UTC 2023] Getting webroot for domain='*.example.com'
[Tue Aug 15 08:58:27 UTC 2023] _w='dns_ali'
[Tue Aug 15 08:58:27 UTC 2023] _currentRoot='dns_ali'
[Tue Aug 15 08:58:27 UTC 2023] _is_idn_d='*.example.com'
[Tue Aug 15 08:58:27 UTC 2023] _idn_temp
[Tue Aug 15 08:58:27 UTC 2023] _candidates='*.example.com,{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"pending","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}],"wildcard":true}#https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:27 UTC 2023] response='{"identifier":{"type":"dns","value":"example.com"},"status":"pending","expires":"2023-09-14T08:58:21Z","challenges":[{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"pending","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}],"wildcard":true}#https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:27 UTC 2023] _authz_url='https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:27 UTC 2023] entry='"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"pending","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"'
[Tue Aug 15 08:58:27 UTC 2023] token='0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0'
[Tue Aug 15 08:58:27 UTC 2023] uri='https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ'
[Tue Aug 15 08:58:27 UTC 2023] keyauthorization='0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic'
[Tue Aug 15 08:58:27 UTC 2023] dvlist='*.example.com#0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic#https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ#dns-01#dns_ali#https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw'
[Tue Aug 15 08:58:27 UTC 2023] d
[Tue Aug 15 08:58:27 UTC 2023] vlist='example.com#K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic#https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw#dns-01#dns_ali#https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg,*.example.com#0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic#https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ#dns-01#dns_ali#https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw,'
[Tue Aug 15 08:58:27 UTC 2023] d='example.com'
[Tue Aug 15 08:58:27 UTC 2023] _d_alias
[Tue Aug 15 08:58:27 UTC 2023] txtdomain='_acme-challenge.example.com'
[Tue Aug 15 08:58:27 UTC 2023] txt='U_BRq6ZBAkO2ft0cfQtPDbqsdqrITKLHe_JVXYYy4dE'
[Tue Aug 15 08:58:27 UTC 2023] d_api='/root/.acme.sh/dnsapi/dns_ali.sh'
[Tue Aug 15 08:58:27 UTC 2023] dns_entry='example.com,_acme-challenge.example.com,,dns_ali,U_BRq6ZBAkO2ft0cfQtPDbqsdqrITKLHe_JVXYYy4dE,/root/.acme.sh/dnsapi/dns_ali.sh'
[Tue Aug 15 08:58:27 UTC 2023] Found domain api file: /root/.acme.sh/dnsapi/dns_ali.sh
[Tue Aug 15 08:58:27 UTC 2023] Adding txt value: U_BRq6ZBAkO2ft0cfQtPDbqsdqrITKLHe_JVXYYy4dE for domain:  _acme-challenge.example.com
[Tue Aug 15 08:58:27 UTC 2023] First detect the root zone
[Tue Aug 15 08:58:27 UTC 2023] GET
[Tue Aug 15 08:58:27 UTC 2023] url='https://alidns.aliyuncs.com/?AccessKeyId=LTAI5tPc***ydpBH&Action=DescribeDomainRecords&DomainName=example.com&Format=json&SignatureMethod=HMAC-SHA1&SignatureNonce=1692089907446256877&SignatureVersion=1.0&Timestamp=2023-08-15T08%3A58%3A27Z&Version=2015-01-09&Signature=blySP2FHaU6pVsMxkWdKwJypuKY%3D'
[Tue Aug 15 08:58:27 UTC 2023] timeout=
[Tue Aug 15 08:58:27 UTC 2023] Http already initialized.
[Tue Aug 15 08:58:27 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g '
[Tue Aug 15 08:58:27 UTC 2023] ret='0'
[Tue Aug 15 08:58:27 UTC 2023] response='{"TotalCount":21,"RequestId":"8C678D65-101E-5322-8E71-84CE1AC9D0FA","PageSize":20,"DomainRecords":{"Record":[{"RR":"speedtest6","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"homeubuntudocker6.example.com","RecordId":"831950295613815808","TTL":600,"Weight":1},{"RR":"homeubuntudocker6","Line":"default","Status":"ENABLE","Locked":false,"Type":"AAAA","DomainName":"example.com","Value":"240e:3b2:8219:62d1::fe1","RecordId":"831950073900836864","TTL":600,"Weight":1},{"RR":"npm6","Line":"default","Status":"ENABLE","Locked":false,"Type":"AAAA","DomainName":"example.com","Value":"240e:3b2:8219:62d1::b45","RecordId":"831946512011887616","TTL":600,"Weight":1},{"RR":"ipapi6","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"homeubuntudocker.example.com","RecordId":"831946140774024192","TTL":600,"Weight":1},{"RR":"ipapi","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"npm.example.com","RecordId":"831863782129540096","TTL":600,"Weight":1},{"RR":"speedtest","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"homeubuntudocker.example.com","RecordId":"831863480101874688","TTL":600,"Weight":1},{"RR":"homeubuntudocker","Line":"default","Status":"ENABLE","Locked":false,"Type":"AAAA","DomainName":"example.com","Value":"240e:3b2:8219:62d1::fe1","RecordId":"831862984144336896","TTL":600,"Weight":1},{"RR":"homeubuntudocker","Line":"default","Status":"ENABLE","Locked":false,"Type":"A","DomainName":"example.com","Value":"125.90.228.67","RecordId":"831862932688619520","TTL":600,"Weight":1},{"RR":"npm","Line":"default","Status":"DISABLE","Locked":false,"Type":"AAAA","DomainName":"example.com","Value":"240e:3b2:8219:62d1::b45","RecordId":"831860437174173696","TTL":600,"Weight":1},{"RR":"npm","Line":"default","Status":"ENABLE","Locked":false,"Type":"A","DomainName":"example.com","Value":"125.90.228.67","RecordId":"831860200944703488","TTL":600,"Weight":1},{"RR":"*.gdut2","Line":"default","Status":"ENABLE","Locked":false,"Type":"A","DomainName":"example.com","Value":"10.200.21.198","RecordId":"825069187695595520","TTL":600,"Weight":1},{"RR":"*.gdut","Line":"default","Status":"ENABLE","Locked":false,"Type":"A","DomainName":"example.com","Value":"10.200.26.81","RecordId":"825069126167259136","TTL":600,"Weight":1},{"RR":"*.cm","Line":"default","Status":"ENABLE","Locked":false,"Type":"A","DomainName":"example.com","Value":"120.231.81.101","RecordId":"821224263107514368","TTL":600,"Weight":1},{"RR":"nas2","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"telecom2.cnzq.example.com","RecordId":"817039152373653504","TTL":600,"Weight":1},{"RR":"ddns.tr069","Line":"default","Status":"ENABLE","Locked":false,"Type":"A","DomainName":"example.com","Value":"11.235.124.72","RecordId":"816017011075206144","TTL":600,"Weight":1},{"RR":"*.069","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"ddns.069.wh1te0.tk","RecordId":"816015116722002944","TTL":600,"Weight":1},{"RR":"nas-frp","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"cn-cd-dx-7.natfrp.cloud","RecordId":"780452878954171392","TTL":600,"Weight":1},{"RR":"*.zb","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"telecom2.cnzq.example.com","RecordId":"774490210938017792","TTL":600,"Weight":1},{"RR":"*","Line":"default","Status":"ENABLE","Locked":false,"Type":"CNAME","DomainName":"example.com","Value":"telecom1.cnzq.example.com","RecordId":"774490124480905216","TTL":600,"Weight":1},{"RR":"telecom2.cnzq","Line":"default","Status":"ENABLE","Locked":false,"Type":"A","DomainName":"example.com","Value":"125.90.228.222","RecordId":"774355493976768512","TTL":600,"Weight":1}]},"PageNumber":1}'
[Tue Aug 15 08:58:27 UTC 2023] _sub_domain='_acme-challenge'
[Tue Aug 15 08:58:27 UTC 2023] _domain='example.com'
[Tue Aug 15 08:58:27 UTC 2023] Add record
[Tue Aug 15 08:58:28 UTC 2023] GET
[Tue Aug 15 08:58:28 UTC 2023] url='https://alidns.aliyuncs.com/?AccessKeyId=LTA***trMW7qXxydpBH&Action=AddDomainRecord&DomainName=example.com&Format=json&RR=_acme-challenge&SignatureMethod=HMAC-SHA1&SignatureNonce=1692089907875619140&SignatureVersion=1.0&Timestamp=2023-08-15T08%3A58%3A27Z&Type=TXT&Value=U_BRq6ZBAkO2ft0cfQtPDbqsdqrITKLHe_JVXYYy4dE&Version=2015-01-09&Signature=Wpl8GoPb3uc2ZkIcZFulT7XsoSo%3D'
[Tue Aug 15 08:58:28 UTC 2023] timeout=
[Tue Aug 15 08:58:28 UTC 2023] Http already initialized.
[Tue Aug 15 08:58:28 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g '
[Tue Aug 15 09:00:35 UTC 2023] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 28
[Tue Aug 15 09:00:35 UTC 2023] Here is the curl dump log:
[Tue Aug 15 09:00:35 UTC 2023] == Info: processing: https://alidns.aliyuncs.com/?AccessKeyId=LTAI5t***pBH&Action=AddDomainRecord&DomainName=example.com&Format=json&RR=_acme-challenge&SignatureMethod=HMAC-SHA1&SignatureNonce=1692089907875619140&SignatureVersion=1.0&Timestamp=2023-08-15T08%3A58%3A27Z&Type=TXT&Value=U_BRq6ZBAkO2ft0cfQtPDbqsdqrITKLHe_JVXYYy4dE&Version=2015-01-09&Signature=Wpl8GoPb3uc2ZkIcZFulT7XsoSo%3D
== Info:   Trying 106.11.61.112:443...
== Info: connect to 106.11.61.112 port 443 failed: Operation timed out
== Info: Failed to connect to alidns.aliyuncs.com port 443 after 127297 ms: Couldn't connect to server
== Info: Closing connection
[Tue Aug 15 09:00:35 UTC 2023] ret='28'
[Tue Aug 15 09:00:35 UTC 2023] Error <Add record>
[Tue Aug 15 09:00:35 UTC 2023] Error add txt for domain:_acme-challenge.example.com
[Tue Aug 15 09:00:35 UTC 2023] _on_issue_err
[Tue Aug 15 09:00:35 UTC 2023] Please add '--debug' or '--log' to check more details.
[Tue Aug 15 09:00:35 UTC 2023] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
[Tue Aug 15 09:00:35 UTC 2023] _chk_vlist='example.com#K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic#https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw#dns-01#dns_ali#https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg,*.example.com#0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic#https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ#dns-01#dns_ali#https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw,'
[Tue Aug 15 09:00:35 UTC 2023] start to deactivate authz
[Tue Aug 15 09:00:35 UTC 2023] Trigger domain validation.
[Tue Aug 15 09:00:35 UTC 2023] _t_url='https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw'
[Tue Aug 15 09:00:35 UTC 2023] _t_key_authz='K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic'
[Tue Aug 15 09:00:35 UTC 2023] _t_vtype
[Tue Aug 15 09:00:35 UTC 2023] =======Begin Send Signed Request=======
[Tue Aug 15 09:00:35 UTC 2023] url='https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw'
[Tue Aug 15 09:00:35 UTC 2023] payload='{}'
[Tue Aug 15 09:00:35 UTC 2023] Use cached jwk for file: /acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Tue Aug 15 09:00:35 UTC 2023] Use _CACHED_NONCE='lWt8B8imQK950XrfWL9lCTKZAwE1SqBsOJ1JRmiDbSQ'
[Tue Aug 15 09:00:35 UTC 2023] nonce='lWt8B8imQK950XrfWL9lCTKZAwE1SqBsOJ1JRmiDbSQ'
[Tue Aug 15 09:00:35 UTC 2023] POST
[Tue Aug 15 09:00:35 UTC 2023] _post_url='https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw'
[Tue Aug 15 09:00:35 UTC 2023] body='{"protected": "eyJub25jZSI6ICJsV3Q4QjhpbVFLOTUwWHJmV0w5bENUS1pBd0UxU3FCc09KMUpSbWlEYlNRIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC91V0RYRDA0NHFsZS1Fa3RnVGVvd1d3IiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9sR3lOS0tkdmRJdDJ4TDhIQ3R6MTlnIn0", "payload": "e30", "signature": "REwQ2gqkDzEKlD2SuQvDFycoFMvD750LS0EhbsiDQ5iBS7phRTFDbjEX7WnwI7Ogc3PwsGG4nm8VTrs8hKK04w"}'
[Tue Aug 15 09:00:35 UTC 2023] _postContentType='application/jose+json'
[Tue Aug 15 09:00:35 UTC 2023] Http already initialized.
[Tue Aug 15 09:00:35 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g '
[Tue Aug 15 09:00:37 UTC 2023] _ret='0'
[Tue Aug 15 09:00:37 UTC 2023] responseHeaders='HTTP/2 200 
server: nginx
date: Tue, 15 Aug 2023 09:00:37 GMT
content-type: application/json
content-length: 163
replay-nonce: e8C6sct-aMEE24S70WGakVZ2BQnLTxApY01k7h7HDzI
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90/authz/G590fdztvwax0gDexaksdg>;rel="up"
retry-after: 60
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue Aug 15 09:00:37 UTC 2023] code='200'
[Tue Aug 15 09:00:37 UTC 2023] original='{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"processing","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}'
[Tue Aug 15 09:00:37 UTC 2023] response='{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/uWDXD044qle-EktgTeowWw","status":"processing","token":"K5JHxPXZTHjqpPkeqgknUDc4tJCYMHYqeXIU1fz4ISA"}'
[Tue Aug 15 09:00:37 UTC 2023] Trigger domain validation.
[Tue Aug 15 09:00:37 UTC 2023] _t_url='https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ'
[Tue Aug 15 09:00:37 UTC 2023] _t_key_authz='0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0.JxNdZlCNOeVsn9Qx-PRq6OYHfDZmuvyGUCKeqnn6fic'
[Tue Aug 15 09:00:37 UTC 2023] _t_vtype
[Tue Aug 15 09:00:37 UTC 2023] =======Begin Send Signed Request=======
[Tue Aug 15 09:00:37 UTC 2023] url='https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ'
[Tue Aug 15 09:00:37 UTC 2023] payload='{}'
[Tue Aug 15 09:00:37 UTC 2023] Use cached jwk for file: /acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Tue Aug 15 09:00:37 UTC 2023] Use _CACHED_NONCE='e8C6sct-aMEE24S70WGakVZ2BQnLTxApY01k7h7HDzI'
[Tue Aug 15 09:00:37 UTC 2023] nonce='e8C6sct-aMEE24S70WGakVZ2BQnLTxApY01k7h7HDzI'
[Tue Aug 15 09:00:37 UTC 2023] POST
[Tue Aug 15 09:00:37 UTC 2023] _post_url='https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ'
[Tue Aug 15 09:00:37 UTC 2023] body='{"protected": "eyJub25jZSI6ICJlOEM2c2N0LWFNRUUyNFM3MFdHYWtWWjJCUW5MVHhBcFkwMWs3aDdIRHpJIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9JbFJvT21Zd0pPNklvYXN5aUNoSUJRIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9sR3lOS0tkdmRJdDJ4TDhIQ3R6MTlnIn0", "payload": "e30", "signature": "igot9XgYyCLn6c0Og3w3WHi8RfdoxZ0fcE8Ma1R7PnC7nYdgMj8EzZ8jHxfv6vlOz9AlmBQaf_I6Nb_Kn5io4Q"}'
[Tue Aug 15 09:00:37 UTC 2023] _postContentType='application/jose+json'
[Tue Aug 15 09:00:37 UTC 2023] Http already initialized.
[Tue Aug 15 09:00:37 UTC 2023] _CURL='curl --silent --dump-header /acme.sh/http.header  -L  --trace-ascii /tmp/tmp.DGK0EXLuOt  -g '
[Tue Aug 15 09:00:46 UTC 2023] _ret='0'
[Tue Aug 15 09:00:46 UTC 2023] responseHeaders='HTTP/2 200 
server: nginx
date: Tue, 15 Aug 2023 09:00:46 GMT
content-type: application/json
content-length: 163
replay-nonce: 6_WCVFzM_8-6UwC73UfKCzOSbRybaVtnVB5etLuC5GY
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90/authz/zuxYW9a2g6QECeeSBhpGOw>;rel="up"
retry-after: 60
strict-transport-security: max-age=15724800; includeSubDomains

'
[Tue Aug 15 09:00:46 UTC 2023] code='200'
[Tue Aug 15 09:00:47 UTC 2023] original='{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"processing","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}'
[Tue Aug 15 09:00:47 UTC 2023] response='{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/IlRoOmYwJO6IoasyiChIBQ","status":"processing","token":"0_MWVr9JO-JxSkkc0wR0xrpNPnPZJtBXA7TI7Ijw2Q0"}'
[Tue Aug 15 09:00:47 UTC 2023] Diagnosis versions: 
openssl:openssl
OpenSSL 3.0.9 30 May 2023 (Library: OpenSSL 3.0.9 30 May 2023)
apache:
apache doesn't exist.
nginx:
nginx doesn't exist.
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.4.4 on 31 Oct 2022 04:42:14
   running on Linux version #64570 SMP Tue Jun 13 21:40:17 CST 2023, release 4.4.302+, machine x86_64
features:
  #define WITH_STDIO 1
  #define WITH_FDNUM 1
  #define WITH_FILE 1
  #define WITH_CREAT 1
  #define WITH_GOPEN 1
  #define WITH_TERMIOS 1
  #define WITH_PIPE 1
  #define WITH_UNIX 1
  #define WITH_ABSTRACT_UNIXSOCKET 1
  #define WITH_IP4 1
  #define WITH_IP6 1
  #define WITH_RAWIP 1
  #define WITH_GENERICSOCKET 1
  #define WITH_INTERFACE 1
  #define WITH_TCP 1
  #define WITH_UDP 1
  #define WITH_SCTP 1
  #define WITH_LISTEN 1
  #define WITH_SOCKS4 1
  #define WITH_SOCKS4A 1
  #define WITH_VSOCK 1
  #define WITH_PROXY 1
  #define WITH_SYSTEM 1
  #define WITH_EXEC 1
  #define WITH_READLINE 1
  #define WITH_TUN 1
  #define WITH_PTY 1
  #define WITH_OPENSSL 1
  #undef WITH_FIPS
  #undef WITH_LIBWRAP
  #define WITH_SYCLS 1
  #define WITH_FILAN 1
  #define WITH_RETRY 1
  #define WITH_MSGLEVEL 0 /*debug*/
[Tue Aug 15 09:00:47 UTC 2023] pid
[Tue Aug 15 09:00:47 UTC 2023] No need to restore nginx, skip.
[Tue Aug 15 09:00:47 UTC 2023] _clearupdns
[Tue Aug 15 09:00:47 UTC 2023] dns_entries
[Tue Aug 15 09:00:47 UTC 2023] skip dns.
[Tue Aug 15 09:00:52 UTC 2023] '-d' is not a valid domain for parameter '-d'
github-actions[bot] commented 1 year ago

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

hulichao commented 1 year ago

have you resolved it?, i have same problems

onekb commented 1 year ago

我也遇到这个问题,可以通过添加邮箱的方式解决。后面添加 I also encountered this problem, which can be solved by adding an email address.

-m "admin@yourdomain.xx"
RWh1te0 commented 1 year ago

经过几轮测试,目前看起来疑似是阿里云DNS API出现部分地区部分时间无法正常调用的问题,可以检查一下主机是否能正常解析访问alidns.aliyuncs.com这个域名,也可以尝试给acme命令加上--server letsencrypt来尝试使用lets来签署证书(虽然zerossl和lets差不多但有时候要相信玄学)。 After several rounds of testing, it seems that Alibaba Cloud DNS API cannot be called normally in some areas for some time. You can check whether the host can resolve and access the domain namealidns.aliyuncs.com normally. You can also try adding --server letsencrypt to the acme command to try to use lets to sign certificates (although zerossl and lets are similar, sometimes you have to believe metaphysics).

wyhgoodjob commented 8 months ago

经过几轮测试,目前看起来疑似是阿里云DNS API出现部分地区部分时间无法正常调用的问题,可以检查一下主机是否能正常解析访问alidns.aliyuncs.com这个域名,也可以尝试给acme命令加上--server letsencrypt来尝试使用lets来签署证书(虽然zerossl和lets差不多但有时候要相信玄学)。 After several rounds of testing, it seems that Alibaba Cloud DNS API cannot be called normally in some areas for some time. You can check whether the host can resolve and access the domain namealidns.aliyuncs.com normally. You can also try adding --server letsencrypt to the acme command to try to use lets to sign certificates (although zerossl and lets are similar, sometimes you have to believe metaphysics).

感谢,感觉还是墙的原因,换成letsencrypt解决了,在硅谷归属地的阿里云vm用默认值就完全没问题 works for me