创建证书 域名验证失败

nihulu

Verify error:no valid A records found for cn*****ck.com; no valid AAAA records found for cn******ck.com
[Tue Nov  7 15:17:20 CST 2023] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
Generate SSL Certificate failed!

1. [Tue Nov  7 15:17:14 CST 2023] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/281405093116/2jSwqw'
   
2. [Tue Nov  7 15:17:14 CST 2023] _currentRoot='/home/wwwroot/www.cndigitalclock.com'
   
3. [Tue Nov  7 15:17:14 CST 2023] wellknown_path='/home/wwwroot/www.cndigitalclock.com/.well-known/acme-challenge'
   
4. [Tue Nov  7 15:17:14 CST 2023] writing token:L9CpT2gISOUftq5kBEpodUi4BbN_CYqEXlfhgNznSkM to /home/wwwroot/www.cndigitalclock.com/.well-known/acme-challenge/L9CpT2gISOUftq5kBEpodUi4BbN_CYqEXlfhgNznSkM
   
5. [Tue Nov  7 15:17:14 CST 2023] Changing owner/group of .well-known to www:www
   
6. [Tue Nov  7 15:17:14 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/281405093116/2jSwqw'
   
7. [Tue Nov  7 15:17:14 CST 2023] payload='{}'
   
8. [Tue Nov  7 15:17:14 CST 2023] POST
   
9. [Tue Nov  7 15:17:14 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/281405093116/2jSwqw'
   
10. [Tue Nov  7 15:17:14 CST 2023] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
    
11. [Tue Nov  7 15:17:15 CST 2023] _ret='0'
    
12. [Tue Nov  7 15:17:15 CST 2023] code='200'
    
13. [Tue Nov  7 15:17:15 CST 2023] trigger validation code: 200
    
14. [Tue Nov  7 15:17:15 CST 2023] Pending, The CA is processing your order, please just wait. (1/30)
    
15. [Tue Nov  7 15:17:15 CST 2023] sleep 2 secs to verify again
    
16. [Tue Nov  7 15:17:18 CST 2023] checking
    
17. [Tue Nov  7 15:17:18 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/281405093116/2jSwqw'
    
18. [Tue Nov  7 15:17:18 CST 2023] payload
    
19. [Tue Nov  7 15:17:18 CST 2023] POST
    
20. [Tue Nov  7 15:17:18 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/281405093116/2jSwqw'
    
21. [Tue Nov  7 15:17:18 CST 2023] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
    
22. [Tue Nov  7 15:17:19 CST 2023] _ret='0'
    
23. [Tue Nov  7 15:17:19 CST 2023] code='200'
    
24. [Tue Nov  7 15:17:19 CST 2023] cndigitalclock.com:Verify error:no valid A records found for cndigitalclock.com; no valid AAAA records found for cndigitalclock.com
    
25. [Tue Nov  7 15:17:20 CST 2023] pid
    
26. [Tue Nov  7 15:17:20 CST 2023] No need to restore nginx, skip.
    
27. [Tue Nov  7 15:17:20 CST 2023] _clearupdns
    
28. [Tue Nov  7 15:17:20 CST 2023] dns_entries
    
29. [Tue Nov  7 15:17:20 CST 2023] skip dns.
    
30. [Tue Nov  7 15:17:20 CST 2023] _on_issue_err
    
31. [Tue Nov  7 15:17:20 CST 2023] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
    
32. [Tue Nov  7 15:17:20 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/279820107396/hgi12A'
    
33. [Tue Nov  7 15:17:20 CST 2023] payload='{}'
    
34. [Tue Nov  7 15:17:20 CST 2023] POST
    
35. [Tue Nov  7 15:17:20 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/279820107396/hgi12A'
    
36. [Tue Nov  7 15:17:20 CST 2023] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
    
37. [Tue Nov  7 15:17:21 CST 2023] _ret='0'
    
38. [Tue Nov  7 15:17:21 CST 2023] code='200'
    
39. [Tue Nov  7 15:17:21 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/281405093116/2jSwqw'
    
40. [Tue Nov  7 15:17:21 CST 2023] payload='{}'
    
41. [Tue Nov  7 15:17:21 CST 2023] POST
    
42. [Tue Nov  7 15:17:22 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/281405093116/2jSwqw'
    
43. [Tue Nov  7 15:17:22 CST 2023] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
    
44. [Tue Nov  7 15:17:22 CST 2023] _ret='0'
    
45. [Tue Nov  7 15:17:22 CST 2023] code='400'
    

复制代码

之前使用阿里云域名的api验证， 添加key信息通过，提示添加txt解析记录。 测试了2天 都没验证成功。

昨天晚上（11月6号）我把域名dns改成了cloudflare的dns，并做了A记录解析，关闭了cloudflare的解析代理模式，纯A记录解析。

现在添加SSL 域名验证 还是A记录失败。

licess

你不带www的域名没有A记录，没法验证肯定就没法生成SSL