duanzheng 发表于 2018-7-31 11:15:34

Verify error:DNS problem: SERVFAIL looking up A for www.duanzheng.net

_main_domain='www.duanzheng.net'
_alt_domains='duanzheng.net'
Using config home:/usr/local/acme.sh
ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.duanzheng.net'
Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
_init api for server: https://acme-v01.api.letsencrypt.org/directory
GET
url='https://acme-v01.api.letsencrypt.org/directory'
timeout=
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
ret='0'
ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
ACME_NEW_NONCE
ACME_VERSION
_on_before_issue
_chk_main_domain='www.duanzheng.net'
_chk_alt_domains='duanzheng.net'
Le_LocalAddress
d='www.duanzheng.net'
Check for domain='www.duanzheng.net'
_currentRoot='/home/wwwroot/www.duanzheng.net'
d='duanzheng.net'
Check for domain='duanzheng.net'
_currentRoot='/home/wwwroot/www.duanzheng.net'
d

duanzheng 发表于 2018-7-31 11:17:16

config file is empty, can not read CA_KEY_HASH
Using config home:/usr/local/acme.sh
ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
_init api for server: https://acme-v01.api.letsencrypt.org/directory
Use default length 2048
length='2048'
Using config home:/usr/local/acme.sh
ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
Use length 2048
Using RSA: 2048
RSA key
Registering account
url='https://acme-v01.api.letsencrypt.org/acme/new-reg'
payload='{"resource": "new-reg", "terms-of-service-agreed": true, "agreement": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf"}'
GET
url='https://acme-v01.api.letsencrypt.org/directory'
timeout=
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
ret='0'
POST
_post_url='https://acme-v01.api.letsencrypt.org/acme/new-reg'
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
_ret='0'
code='201'
Registered
_accUri='https://acme-v01.api.letsencrypt.org/acme/reg/39319270'
Calc CA_KEY_HASH='Q2ef6nr7Ptqa12+3cQwohQ4FPxMcep6qaznFMqFQi50='
ACCOUNT_THUMBPRINT='TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo'
Read key length:
Creating domain key
Use DEFAULT_DOMAIN_KEY_LENGTH=2048
Using config home:/usr/local/acme.sh
ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
Use length 2048
Using RSA: 2048
The domain key is here: /usr/local/nginx/conf/ssl/www.duanzheng.net/www.duanzheng.net.key
_createcsr
Multi domain='DNS:www.duanzheng.net,DNS:duanzheng.net'
Getting domain auth token for each domain
d='www.duanzheng.net'
Getting webroot for domain='www.duanzheng.net'
_w='/home/wwwroot/www.duanzheng.net'
_currentRoot='/home/wwwroot/www.duanzheng.net'
Getting new-authz for domain='www.duanzheng.net'
_init api for server: https://acme-v01.api.letsencrypt.org/directory
Try new-authz for the 0 time.
url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "www.duanzheng.net"}}'
POST
_post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
_ret='0'
code='201'
The new-authz request is ok.
entry='"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080","token":"6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY"'
token='6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY'
uri='https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080'
keyauthorization='6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo'
dvlist='www.duanzheng.net#6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo#https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080#http-01#/home/wwwroot/www.duanzheng.net'
d='duanzheng.net'
Getting webroot for domain='duanzheng.net'
_w='/home/wwwroot/www.duanzheng.net'
_currentRoot='/home/wwwroot/www.duanzheng.net'
Getting new-authz for domain='duanzheng.net'
_init api for server: https://acme-v01.api.letsencrypt.org/directory
Try new-authz for the 0 time.
url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "duanzheng.net"}}'
POST
_post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
_ret='0'
code='201'
The new-authz request is ok.
entry='"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/fvy7hBxt7iiEL9hGloMqXwifPCGwD66FcaeJz_IvqYQ/6063677390","token":"lqZ8nAA72_BJ6iYsRxqp2xOd-71rxasjafWo3DnBFbc"'
token='lqZ8nAA72_BJ6iYsRxqp2xOd-71rxasjafWo3DnBFbc'
uri='https://acme-v01.api.letsencrypt.org/acme/challenge/fvy7hBxt7iiEL9hGloMqXwifPCGwD66FcaeJz_IvqYQ/6063677390'
keyauthorization='lqZ8nAA72_BJ6iYsRxqp2xOd-71rxasjafWo3DnBFbc.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo'
dvlist='duanzheng.net#lqZ8nAA72_BJ6iYsRxqp2xOd-71rxasjafWo3DnBFbc.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo#https://acme-v01.api.letsencrypt.org/acme/challenge/fvy7hBxt7iiEL9hGloMqXwifPCGwD66FcaeJz_IvqYQ/6063677390#http-01#/home/wwwroot/www.duanzheng.net'
d

duanzheng 发表于 2018-7-31 11:17:38

vlist='www.duanzheng.net#6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo#https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080#http-01#/home/wwwroot/www.duanzheng.net,duanzheng.net#lqZ8nAA72_BJ6iYsRxqp2xOd-71rxasjafWo3DnBFbc.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo#https://acme-v01.api.letsencrypt.org/acme/challenge/fvy7hBxt7iiEL9hGloMqXwifPCGwD66FcaeJz_IvqYQ/6063677390#http-01#/home/wwwroot/www.duanzheng.net,'
d='www.duanzheng.net'
d='duanzheng.net'
ok, let's start to verify
Verifying:www.duanzheng.net
d='www.duanzheng.net'
keyauthorization='6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo'
uri='https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080'
_currentRoot='/home/wwwroot/www.duanzheng.net'
wellknown_path='/home/wwwroot/www.duanzheng.net/.well-known/acme-challenge'
writing token:6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY to /home/wwwroot/www.duanzheng.net/.well-known/acme-challenge/6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY
Changing owner/group of .well-known to www:www
url='https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080'
payload='{"resource": "challenge", "keyAuthorization": "6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo"}'
POST
_post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080'
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
_ret='0'
code='202'
sleep 2 secs to verify
checking
GET
url='https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080'
timeout=
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
ret='0'
www.duanzheng.net:Verify error:DNS problem: SERVFAIL looking up A for www.duanzheng.net
pid
No need to restore nginx, skip.
_clearupdns
skip dns.
_on_issue_err
Please check log file for more details: /usr/local/acme.sh/acme.sh.log
url='https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080'
payload='{"resource": "challenge", "keyAuthorization": "6ejttMajs2sCkbK7azW0p0Sbz9IfhhXbhdhXHc3zGmY.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo"}'
POST
_post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/zuxUSyLybA_0OIUaY0LQ2MHX_LbvTo-9TD_X--7cLXg/6063677080'
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
_ret='0'
code='400'
url='https://acme-v01.api.letsencrypt.org/acme/challenge/fvy7hBxt7iiEL9hGloMqXwifPCGwD66FcaeJz_IvqYQ/6063677390'
payload='{"resource": "challenge", "keyAuthorization": "lqZ8nAA72_BJ6iYsRxqp2xOd-71rxasjafWo3DnBFbc.TKfA5liCYv7Xw9PjDGYQAIQMb2QRS1QnV8NFjBkJTWo"}'
POST
_post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/fvy7hBxt7iiEL9hGloMqXwifPCGwD66FcaeJz_IvqYQ/6063677390'
_CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header-g '
_ret='0'
code='202'

licess 发表于 2018-7-31 14:20:07

你域名A记录都没解析到你vps上，上哪去验证文件生成证书
页: [1]
查看完整版本: Verify error:DNS problem: SERVFAIL looking up A for www.duanzheng.net