Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
3.9k views
in Technique[技术] by (71.8m points)

使用acme.sh 申报SSL的时候一直报错

日志报错

 Last login: Fri Nov 27 09:30:03 2020 from 218.0.221.80
[root@iZ2zeav5im2fhbzfa4msuiZ ~]# acme.sh --issue --dns dns_ali -d wangjiankang.xin -d *.wangjiankang.xin --debug 2
[Fri Nov 27 09:40:30 CST 2020] Lets find script dir.
[Fri Nov 27 09:40:30 CST 2020] _SCRIPT_='/root/.acme.sh/acme.sh'
[Fri Nov 27 09:40:30 CST 2020] _script='/root/.acme.sh/acme.sh'
[Fri Nov 27 09:40:30 CST 2020] _script_home='/root/.acme.sh'
[Fri Nov 27 09:40:30 CST 2020] Using config home:/root/.acme.sh
[Fri Nov 27 09:40:30 CST 2020] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/acmesh-official/acme.sh
v2.8.8
[Fri Nov 27 09:40:30 CST 2020] Running cmd: issue
[Fri Nov 27 09:40:30 CST 2020] _main_domain='wangjiankang.xin'
[Fri Nov 27 09:40:30 CST 2020] _alt_domains='*.wangjiankang.xin'
[Fri Nov 27 09:40:30 CST 2020] Using config home:/root/.acme.sh
[Fri Nov 27 09:40:30 CST 2020] default_acme_server
[Fri Nov 27 09:40:30 CST 2020] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Fri Nov 27 09:40:30 CST 2020] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Fri Nov 27 09:40:30 CST 2020] DOMAIN_PATH='/root/.acme.sh/wangjiankang.xin'
[Fri Nov 27 09:40:30 CST 2020] 'dns_ali' does not contain 'dns'
[Fri Nov 27 09:40:30 CST 2020] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Fri Nov 27 09:40:30 CST 2020] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Fri Nov 27 09:40:30 CST 2020] GET
[Fri Nov 27 09:40:30 CST 2020] url='https://acme-v02.api.letsencrypt.org/directory'
[Fri Nov 27 09:40:30 CST 2020] timeout=
[Fri Nov 27 09:40:30 CST 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.4qdNkTE10f  -g '
[Fri Nov 27 09:40:31 CST 2020] ret='0'
[Fri Nov 27 09:40:31 CST 2020] response='{
  "RA2Yqyg5vQU": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}'
[Fri Nov 27 09:40:31 CST 2020] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Fri Nov 27 09:40:31 CST 2020] ACME_NEW_AUTHZ
[Fri Nov 27 09:40:31 CST 2020] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Fri Nov 27 09:40:31 CST 2020] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Fri Nov 27 09:40:31 CST 2020] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Fri Nov 27 09:40:31 CST 2020] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Fri Nov 27 09:40:31 CST 2020] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Fri Nov 27 09:40:31 CST 2020] ACME_VERSION='2'
[Fri Nov 27 09:40:31 CST 2020] Le_NextRenewTime
[Fri Nov 27 09:40:31 CST 2020] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Fri Nov 27 09:40:31 CST 2020] _on_before_issue
[Fri Nov 27 09:40:31 CST 2020] _chk_main_domain='wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _chk_alt_domains='*.wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] 'dns_ali' does not contain 'no'
[Fri Nov 27 09:40:31 CST 2020] Le_LocalAddress
[Fri Nov 27 09:40:31 CST 2020] d='wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] Check for domain='wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _currentRoot='dns_ali'
[Fri Nov 27 09:40:31 CST 2020] d='*.wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] Check for domain='*.wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _currentRoot='dns_ali'
[Fri Nov 27 09:40:31 CST 2020] d
[Fri Nov 27 09:40:31 CST 2020] 'dns_ali' does not contain 'apache'
[Fri Nov 27 09:40:31 CST 2020] _saved_account_key_hash='7HXKOXsxvSWhvTVbi1F41XaRvZtLr60SMUoEgsl7No0='
[Fri Nov 27 09:40:31 CST 2020] _saved_account_key_hash is not changed, skip register account.
[Fri Nov 27 09:40:31 CST 2020] Read key length:
[Fri Nov 27 09:40:31 CST 2020] _createcsr
[Fri Nov 27 09:40:31 CST 2020] domain='wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] domainlist='*.wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] csrkey='/root/.acme.sh/wangjiankang.xin/wangjiankang.xin.key'
[Fri Nov 27 09:40:31 CST 2020] csr='/root/.acme.sh/wangjiankang.xin/wangjiankang.xin.csr'
[Fri Nov 27 09:40:31 CST 2020] csrconf='/root/.acme.sh/wangjiankang.xin/wangjiankang.xin.csr.conf'
[Fri Nov 27 09:40:31 CST 2020] _is_idn_d='*.wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _idn_temp
[Fri Nov 27 09:40:31 CST 2020] domainlist='*.wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _is_idn_d='wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _idn_temp
[Fri Nov 27 09:40:31 CST 2020] Multi domain='DNS:wangjiankang.xin,DNS:*.wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _is_idn_d='wangjiankang.xin'
[Fri Nov 27 09:40:31 CST 2020] _idn_temp
[Fri Nov 27 09:40:31 CST 2020] _csr_cn='wangjiankang.xin'
[Fri Nov 27 09:40:32 CST 2020] Getting domain auth token for each domain
[Fri Nov 27 09:40:32 CST 2020] _is_idn_d='wangjiankang.xin'
[Fri Nov 27 09:40:32 CST 2020] _idn_temp
[Fri Nov 27 09:40:32 CST 2020] d='*.wangjiankang.xin'
[Fri Nov 27 09:40:32 CST 2020] _is_idn_d='*.wangjiankang.xin'
[Fri Nov 27 09:40:32 CST 2020] _idn_temp
[Fri Nov 27 09:40:32 CST 2020] d
[Fri Nov 27 09:40:32 CST 2020] _identifiers='{"type":"dns","value":"wangjiankang.xin"},{"type":"dns","value":"*.wangjiankang.xin"}'
[Fri Nov 27 09:40:32 CST 2020] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Fri Nov 27 09:40:32 CST 2020] payload='{"identifiers": [{"type":"dns","value":"wangjiankang.xin"},{"type":"dns","value":"*.wangjiankang.xin"}]}'
[Fri Nov 27 09:40:32 CST 2020] RSA key
[Fri Nov 27 09:40:32 CST 2020] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Fri Nov 27 09:40:32 CST 2020] HEAD
[Fri Nov 27 09:40:32 CST 2020] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Fri Nov 27 09:40:32 CST 2020] body
[Fri Nov 27 09:40:32 CST 2020] _postContentType='application/jose+json'
[Fri Nov 27 09:40:32 CST 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.xraz8c7vb6  -g  -I  '
[Fri Nov 27 09:40:32 CST 2020] _ret='0'
[Fri Nov 27 09:40:32 CST 2020] _headers='HTTP/2 200
server: nginx
date: Fri, 27 Nov 2020 01:40:32 GMT
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 00042PFSNmT3y1cXZBYKIMr6ZgoUq3m9oEk3b6rUSHifPtU
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Fri Nov 27 09:40:32 CST 2020] _CACHED_NONCE='00042PFSNmT3y1cXZBYKIMr6ZgoUq3m9oEk3b6rUSHifPtU'
[Fri Nov 27 09:40:32 CST 2020] nonce='00042PFSNmT3y1cXZBYKIMr6ZgoUq3m9oEk3b6rUSHifPtU'
[Fri Nov 27 09:40:33 CST 2020] POST
[Fri Nov 27 09:40:33 CST 2020] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Fri Nov 27 09:40:33 CST 2020] body='{"protected": "eyJub25jZSI6ICIwMDA0MlBGU05tVDN5MWNYWkJZS0lNcjZaZ29VcTNtOW9FazNiNnJVU0hpZlB0VSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xMDM2ODIyMDUifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6IndhbmdqaWFua2FuZy54aW4ifSx7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6Iioud2FuZ2ppYW5rYW5nLnhpbiJ9XX0", "signature": "H3S_ymZbDFm9M9DA8aVz8dZurQvKy6dJkqEzMNde7RIGB8mOx70w7942Vp7SAElBcin5KLigf3Bl0HF0iKZwX9tHD2kTiFhdKvS8EoNOMl_orQlRYDKOP9EUN-4LMlJrueStfEaMPopSyj_L4gje6Llt8ZDizdcaaks-PsJVo_9syuAN9U31wyT8Jup3TbVFSQXYdFqzjRVuBPM7bQHLeJwUTgcoPm1GwhGBW3KTVoMfBP7uAzswe8twfF7vLrGNbFgPlEJCo7CGQIltbJDL7fVykmmulZq6dfIYleMK6j1JskLdoRnUAYpCPQGd3eEdWT7gbZmNVEK1OIXfvLqjCQ"}'
[Fri Nov 27 09:40:33 CST 2020] _postContentType='application/jose+json'
[Fri Nov 27 09:40:33 CST 2020] Http already initialized.
[Fri Nov 27 09:40:33 CST 2020] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.xraz8c7vb6  -g '
[Fri Nov 27 09:40:34 CST 2020] _ret='0'
[Fri Nov 27 09:40:34 CST 2020] responseHeaders='HTTP/2 201
server: nginx
date: Fri, 27 Nov 2020 01:40:33 GMT
content-type: application/json
content-length: 486
boulder-requester: 103682205
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
location: https://acme-v02.api.letsencrypt.org/acme/order/103682205/6428109268
replay-nonce: 00030Wop2lm3D7ukHbQmqDik1i4lBLrGra0T7UtAMty_-GA
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Fri Nov 27 09:40:34 CST 2020] code='201'
[Fri Nov 27 09:40:34 CST 2020] original='{
  "status": "pending",
  "expires": "2020-12-04T01:40:33.973394106Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "*.wangjiankang.xin"
    },
    {
      "type": "dns",
      "value": "wangjiankang.xin"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069906",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069907"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/103682205/6428109268"
}'
[Fri Nov 27 09:40:34 CST 2020] response='{"status":"pending","expires":"2020-12-04T01:40:33.973394106Z","identifiers":[{"type":"dns","value":"*.wangjiankang.xin"},{"type":"dns","value":"wangjiankang.xin"}],"authorizations":["https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069906","https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069907"],"finalize":"https://acme-v02.api.letsencrypt.org/acme/finalize/103682205/6428109268"}'
[Fri Nov 27 09:40:34 CST 2020] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/103682205/6428109268'
[Fri Nov 27 09:40:34 CST 2020] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/103682205/6428109268'
[Fri Nov 27 09:40:34 CST 2020] _authorizations_seg='https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069906,https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069907'
[Fri Nov 27 09:40:34 CST 2020] _authz_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069906'
[Fri Nov 27 09:40:34 CST 2020] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069906'
[Fri Nov 27 09:40:34 CST 2020] payload
[Fri Nov 27 09:40:34 CST 2020] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key
[Fri Nov 27 09:40:34 CST 2020] Use _CACHED_NONCE='00030Wop2lm3D7ukHbQmqDik1i4lBLrGra0T7UtAMty_-GA'
[Fri Nov 27 09:40:34 CST 2020] nonce='00030Wop2lm3D7ukHbQmqDik1i4lBLrGra0T7UtAMty_-GA'
[Fri Nov 27 09:40:34 CST 2020] POST
[Fri Nov 27 09:40:34 CST 2020] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/8890069906'
[Fri Nov 27 09:40:34 CST 2020] body='{"protected": "eyJub25jZSI6ICIwMDAzMFdvcDJsbTNEN3VrSGJRbXFEaWsxaTRsQkxyR3JhMFQ3VXRBTXR5Xy1HQSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvODg5MDA2OTkwNiIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTAzNjgyMjA1In0", "payload": "", "signature": "h3ju4abXdd2K1zRCgntgk9hUB_a4ha5NhVwCNvqhWy_60K0cviEB9lIz1GCevgZfwCikGanCAvtmAKOVIS29TO4uI6csQReXJzxFmMwX0MK5JQdu_kCA0qSXFP3VD6LKxWwr65oghxvEPrVenFsNlCj842VTvdp0yvDJ4N3FndZl4JT0GHU9FOYBzRz8RtDLyigxxZw1oKifFqRk99GnX_YV4PinDNEDtigfs4kflHdxyuht0sdal-oMIMXPqA396egR6RCv5CchUgUCAMh_VeMZfEBz7ybNc2uK9xmalRZYeSubqwNO9k_SCr9sE2Cne_-64NiUqETQo-1QN_yLhQ"}'
[Fri Nov 27 09:40:34 CST 2020] _postContentType='application/jose+json'
[Fri Nov 27

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Answer

0 votes
by (71.8m points)
等待大神解答

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome to OStack Knowledge Sharing Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...