VPS侦探论坛

标题: Let'sEncrypt证书不能自动续期~~ [打印本页]

---

作者: 每次醒来    时间: 2019-5-29 21:45
标题: Let'sEncrypt证书不能自动续期~~
[attach]5698[/attach]
第二条是自己添加的 ~~
请问是哪里姿势不对?

---

作者: licess    时间: 2019-5-30 09:06
需要按反馈必读提供acme.sh的日志信息

---

作者: 每次醒来    时间: 2019-5-30 19:19

licess 发表于 2019-5-30 09:06
需要按反馈必读提供acme.sh的日志信息

有一个域名是使用he的DNS 其它使用 cloudxns 难道是因为有一个是he的DNS导致的?
[Tue May 21 00:13:01 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:01 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:01 CST 2019] ===Starting cron===
[Tue May 21 00:13:01 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:01 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:01 CST 2019] _stopRenewOnError
[Tue May 21 00:13:02 CST 2019] di='/usr/local/nginx/conf/ssl/222.baidu.com/'
[Tue May 21 00:13:02 CST 2019] d='222.baidu.com'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] DOMAIN_PATH='/usr/local/nginx/conf/ssl/222.baidu.com'
[Tue May 21 00:13:02 CST 2019] Renew: '222.baidu.com'
[Tue May 21 00:13:02 CST 2019] Le_API='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] Skip, Next renewal time is: Tue Jun 18 16:13:10 UTC 2019
[Tue May 21 00:13:02 CST 2019] Add '--force' to force to renew.
[Tue May 21 00:13:02 CST 2019] Return code: 2
[Tue May 21 00:13:02 CST 2019] Skipped 222.baidu.com
[Tue May 21 00:13:02 CST 2019] di='/usr/local/nginx/conf/ssl/www.xxx.com/'
[Tue May 21 00:13:02 CST 2019] d='www.xxx.com'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.xxx.com'
[Tue May 21 00:13:02 CST 2019] Renew: 'www.xxx.com'
[Tue May 21 00:13:02 CST 2019] Le_API='https://acme-v02.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] Skip invalid cert for: www.xxx.com
[Tue May 21 00:13:02 CST 2019] Return code: 0
[Tue May 21 00:13:02 CST 2019] di='/usr/local/nginx/conf/ssl/www.1234.com/'
[Tue May 21 00:13:02 CST 2019] d='www.1234.com'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.1234.com'
[Tue May 21 00:13:02 CST 2019] Renew: 'www.1234.com'
[Tue May 21 00:13:02 CST 2019] Le_API='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] Skip, Next renewal time is: Thu May 23 16:13:10 UTC 2019
[Tue May 21 00:13:02 CST 2019] Add '--force' to force to renew.
[Tue May 21 00:13:02 CST 2019] Return code: 2
[Tue May 21 00:13:02 CST 2019] Skipped www.1234.com
[Tue May 21 00:13:02 CST 2019] di='/usr/local/nginx/conf/ssl/www.baidu.com/'
[Tue May 21 00:13:02 CST 2019] d='www.baidu.com'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.baidu.com'
[Tue May 21 00:13:02 CST 2019] Renew: 'www.baidu.com'
[Tue May 21 00:13:02 CST 2019] Le_API='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] Using config home:/usr/local/acme.sh
[Tue May 21 00:13:02 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] _main_domain='www.baidu.com'
[Tue May 21 00:13:02 CST 2019] _alt_domains='www.baidu.com'
[Tue May 21 00:13:02 CST 2019] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
[Tue May 21 00:13:02 CST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Tue May 21 00:13:02 CST 2019] GET
[Tue May 21 00:13:02 CST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:02 CST 2019] timeout=
[Tue May 21 00:13:02 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Tue May 21 00:13:03 CST 2019] ret='0'
[Tue May 21 00:13:03 CST 2019] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
[Tue May 21 00:13:03 CST 2019] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Tue May 21 00:13:03 CST 2019] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
[Tue May 21 00:13:03 CST 2019] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
[Tue May 21 00:13:03 CST 2019] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
[Tue May 21 00:13:03 CST 2019] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Tue May 21 00:13:03 CST 2019] ACME_NEW_NONCE
[Tue May 21 00:13:03 CST 2019] ACME_VERSION
[Tue May 21 00:13:03 CST 2019] Le_NextRenewTime='1555949587'
[Tue May 21 00:13:03 CST 2019] _on_before_issue
[Tue May 21 00:13:03 CST 2019] _chk_main_domain='www.baidu.com'
[Tue May 21 00:13:03 CST 2019] _chk_alt_domains='www.baidu.com'
[Tue May 21 00:13:03 CST 2019] Le_LocalAddress
[Tue May 21 00:13:03 CST 2019] d='www.baidu.com'
[Tue May 21 00:13:03 CST 2019] Check for domain='www.baidu.com'
[Tue May 21 00:13:03 CST 2019] _currentRoot='dns_he'
[Tue May 21 00:13:03 CST 2019] d='www.baidu.com'
[Tue May 21 00:13:03 CST 2019] Check for domain='www.baidu.com'
[Tue May 21 00:13:03 CST 2019] _currentRoot='dns_he'
[Tue May 21 00:13:03 CST 2019] d
[Tue May 21 00:13:03 CST 2019] _saved_account_key_hash is not changed, skip register account.
[Tue May 21 00:13:03 CST 2019] Read key length:
[Tue May 21 00:13:03 CST 2019] _createcsr
[Tue May 21 00:13:04 CST 2019] Multi domain='DNS:www.baidu.com,DNS:www.baidu.com'
[Tue May 21 00:13:04 CST 2019] Getting domain auth token for each domain
[Tue May 21 00:13:04 CST 2019] d='www.baidu.com'
[Tue May 21 00:13:04 CST 2019] Getting webroot for domain='www.baidu.com'
[Tue May 21 00:13:04 CST 2019] _w='dns_he'
[Tue May 21 00:13:04 CST 2019] _currentRoot='dns_he'
[Tue May 21 00:13:04 CST 2019] Getting new-authz for domain='www.baidu.com'
[Tue May 21 00:13:04 CST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Tue May 21 00:13:04 CST 2019] Try new-authz for the 0 time.
[Tue May 21 00:13:04 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Tue May 21 00:13:04 CST 2019] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "www.baidu.com"}}'
[Tue May 21 00:13:04 CST 2019] RSA key
[Tue May 21 00:13:04 CST 2019] GET
[Tue May 21 00:13:04 CST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Tue May 21 00:13:04 CST 2019] timeout=
[Tue May 21 00:13:04 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Tue May 21 00:13:05 CST 2019] ret='0'
[Tue May 21 00:13:05 CST 2019] POST
[Tue May 21 00:13:05 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Tue May 21 00:13:05 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Tue May 21 00:13:06 CST 2019] _ret='0'
[Tue May 21 00:13:06 CST 2019] code='201'
[Tue May 21 00:13:06 CST 2019] The new-authz request is ok.
[Tue May 21 00:13:06 CST 2019] entry='"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370","token":"CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY"'
[Tue May 21 00:13:06 CST 2019] token='CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY'
[Tue May 21 00:13:06 CST 2019] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370'
[Tue May 21 00:13:06 CST 2019] keyauthorization='CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0'
[Tue May 21 00:13:06 CST 2019] dvlist='www.baidu.com#CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0#https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370#dns-01#dns_he'

---

作者: 每次醒来    时间: 2019-5-30 19:19
[Tue May 21 00:13:06 CST 2019] d='www.baidu.com'

[Tue May 21 00:13:06 CST 2019] Getting webroot for domain='www.baidu.com'

[Tue May 21 00:13:06 CST 2019] _w='dns_he'

[Tue May 21 00:13:06 CST 2019] _currentRoot='dns_he'

[Tue May 21 00:13:06 CST 2019] Getting new-authz for domain='www.baidu.com'

[Tue May 21 00:13:06 CST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory

[Tue May 21 00:13:06 CST 2019] Try new-authz for the 0 time.

[Tue May 21 00:13:06 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'

[Tue May 21 00:13:06 CST 2019] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "www.baidu.com"}}'

[Tue May 21 00:13:06 CST 2019] POST

[Tue May 21 00:13:06 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'

[Tue May 21 00:13:06 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '

[Tue May 21 00:13:07 CST 2019] _ret='0'

[Tue May 21 00:13:07 CST 2019] code='201'

[Tue May 21 00:13:07 CST 2019] The new-authz request is ok.

[Tue May 21 00:13:07 CST 2019] entry='"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370","token":"CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY"'

[Tue May 21 00:13:07 CST 2019] token='CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY'

[Tue May 21 00:13:07 CST 2019] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370'

[Tue May 21 00:13:07 CST 2019] keyauthorization='CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0'

[Tue May 21 00:13:07 CST 2019] dvlist='www.baidu.com#CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0#https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370#dns-01#dns_he'

[Tue May 21 00:13:07 CST 2019] d

[Tue May 21 00:13:07 CST 2019] vlist='www.baidu.com#CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0#https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370#dns-01#dns_he,www.baidu.com#CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0#https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370#dns-01#dns_he,'

[Tue May 21 00:13:07 CST 2019] d='www.baidu.com'

[Tue May 21 00:13:07 CST 2019] _d_alias

[Tue May 21 00:13:07 CST 2019] txtdomain='_acme-challenge.www.baidu.com'

[Tue May 21 00:13:07 CST 2019] txt='nDCQDHKHOwwhRcpETIUj0CWdZNcZE4Et8wfyL_dNolU'

[Tue May 21 00:13:07 CST 2019] d_api='/usr/local/acme.sh/dnsapi/dns_he.sh'

[Tue May 21 00:13:07 CST 2019] Found domain api file: /usr/local/acme.sh/dnsapi/dns_he.sh

[Tue May 21 00:13:07 CST 2019] Using DNS-01 Hurricane Electric hook

[Tue May 21 00:13:07 CST 2019] No auth details provided. Please set user credentials using the $HE_Username and $HE_Password envoronment variables.

[Tue May 21 00:13:07 CST 2019] Error add txt for domain:_acme-challenge.www.baidu.com

[Tue May 21 00:13:07 CST 2019] pid

[Tue May 21 00:13:07 CST 2019] No need to restore nginx, skip.

[Tue May 21 00:13:07 CST 2019] _clearupdns

[Tue May 21 00:13:07 CST 2019] skip dns.

[Tue May 21 00:13:07 CST 2019] _on_issue_err

[Tue May 21 00:13:07 CST 2019] Please check log file for more details: /usr/local/acme.sh/acme.sh.log

[Tue May 21 00:13:07 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370'

[Tue May 21 00:13:07 CST 2019] payload='{"resource": "challenge", "keyAuthorization": "CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0"}'

[Tue May 21 00:13:07 CST 2019] POST

[Tue May 21 00:13:07 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370'

[Tue May 21 00:13:07 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '

[Tue May 21 00:13:08 CST 2019] _ret='0'

[Tue May 21 00:13:08 CST 2019] code='202'

[Tue May 21 00:13:08 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370'

[Tue May 21 00:13:08 CST 2019] payload='{"resource": "challenge", "keyAuthorization": "CNtK-8UIc000XdNXHpz963CeuKnXRt6FQ4KfrY.WJPGl5eUVMprvopivNaXjAzYJao8XAAmNo99zCuI6Q0"}'

[Tue May 21 00:13:08 CST 2019] POST

[Tue May 21 00:13:08 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/BpvTK7ps85heCez9H3bZysKyWaFY0yo3RnO7xUlRtRE/16082636370'

[Tue May 21 00:13:08 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '

[Tue May 21 00:13:09 CST 2019] _ret='0'

[Tue May 21 00:13:09 CST 2019] code='400'

[Tue May 21 00:13:09 CST 2019] Return code: 1

[Tue May 21 00:13:09 CST 2019] Error renew www.baidu.com.

[Tue May 21 00:13:09 CST 2019] ===End cron===

---

作者: licess    时间: 2019-5-31 09:25
[Tue May 21 00:13:07 CST 2019] No auth details provided. Please set user credentials using the $HE_Username and $HE_Password envoronment variables.

你没export he要求的账号密码信息

---

欢迎光临 VPS侦探论坛 (https://bbs.lnmp.com/)

Powered by Discuz! X3.4