search

acmesh-official / acme.sh

A pure Unix shell script implementing ACME client protocol
https://acme.sh
GNU General Public License v3.0
38.8k stars 4.92k forks source link

crap in my cer file. #5089

Open f1-outsourcing opened 5 months ago

f1-outsourcing commented 5 months ago

My apache was down today because this was in a cer file.

<html>
<head><title>504 Gateway Time-out</title></head>
<body>
<center><h1>504 Gateway Time-out</h1></center>
<hr><center>nginx</center>
</body>
</html>

I do hope you do something like exception handling and verifying if you actually did receive a certificate?

v3.0.7

f1-outsourcing commented 5 months ago

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

cool !!! auto response. :) But I prefer if someone checks this in the code.

Neilpang commented 5 months ago

yes, I will added check. so can you give me more info? are you using Zerossl cert?

f1-outsourcing commented 5 months ago

Yes is zero ssl

Neilpang commented 5 months ago

I will check it. if you could provide log or more info, that would help.

f1-outsourcing commented 5 months ago

I will check it. if you could provide log or more info, that would help.

Can I send on email? Looks like quite a bit of work to anonymize the log.

Neilpang commented 5 months ago

sure

f1-outsourcing commented 5 months ago

sure

I send to email address I found on your website.

I think something is wrong at zerossl, it takes currently 10+ minutes to get a cert.

Neilpang commented 5 months ago

change default ca to letsencrypt:

https://github.com/acmesh-official/acme.sh/wiki/Server

f1-outsourcing commented 5 months ago

I don't like letsencrypt, they blocked me on their forum for asking difficult questions. These guys from zerossl are using their brains more, and make changes to their environment which are logical.