acme注册ZEROSSL通配失败

灌水王

咋会事鸭   广州轻量
root@debian:~# acme.sh  --dns dns_dp --issue -d xxx.com -d *.xxx.com
[Mon 11 Apr 2022 10:38:00 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:38:12 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:38:24 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:38:51 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:39:04 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:39:16 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:39:28 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:39:40 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:39:53 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:40:25 PM HKT] Sleep 10 and retry.
[Mon 11 Apr 2022 10:40:36 PM HKT] Can not init api, for https://acme.zerossl.com/v2/DV90

灌水王

invalid domain
Error add txt for domain:_acme-challenge.xxxx.com
Please add '--debug' or '--log' to check more details.

灌水王

甚至还有新报错 Mon 11 Apr 2022 10:43:05 PM HKT] invalid domain
[Mon 11 Apr 2022 10:43:05 PM HKT] Error add txt for domain:_acme-challenge.xxxx.com
[Mon 11 Apr 2022 10:43:05 PM HKT] Please add '--debug' or '--log' to check more details.
[Mon 11 Apr 2022 10:43:05 PM HKT] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

情伴花香

:time:

ASQrgtahggel

换成letsencrypt

灌水王

这明显是网络链接故障

灌水王

zerossl本来就容易出问题，不如LE稳，再加境内的鸡更加不稳

灌水王

换成hk小鸡了 还是这样

1. root@debian:~/.acme.sh# acme.sh   --issue   --dns dns_dp   -d xxx.com  -d *.xxx.com --debug[Tue 12 Apr 2022 12:36:43 AM EDT] Lets find script dir.[Tue 12 Apr 2022 12:36:43 AM EDT] _SCRIPT_='/root/.acme.sh/acme.sh'[Tue 12 Apr 2022 12:36:43 AM EDT] _script='/root/.acme.sh/acme.sh'[Tue 12 Apr 2022 12:36:43 AM EDT] _script_home='/root/.acme.sh'[Tue 12 Apr 2022 12:36:43 AM EDT] Using config home:/root/.acme.shhttps://github.com/acmesh-official/acme.shv3.0.3[Tue 12 Apr 2022 12:36:43 AM EDT] Running cmd: issue[Tue 12 Apr 2022 12:36:43 AM EDT] _main_domain='xxx.com'[Tue 12 Apr 2022 12:36:43 AM EDT] _alt_domains='*.xxx.com'[Tue 12 Apr 2022 12:36:43 AM EDT] Using config home:/root/.acme.sh[Tue 12 Apr 2022 12:36:43 AM EDT] default_acme_server='https://acme.zerossl.com/v2/DV90'[Tue 12 Apr 2022 12:36:43 AM EDT] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'[Tue 12 Apr 2022 12:36:43 AM EDT] DOMAIN_PATH='/root/.acme.sh/xxx.com'[Tue 12 Apr 2022 12:36:43 AM EDT] Le_NextRenewTime[Tue 12 Apr 2022 12:36:43 AM EDT] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90[Tue 12 Apr 2022 12:36:43 AM EDT] _init api for server: https://acme.zerossl.com/v2/DV90[Tue 12 Apr 2022 12:36:43 AM EDT] GET[Tue 12 Apr 2022 12:36:43 AM EDT] url='https://acme.zerossl.com/v2/DV90'[Tue 12 Apr 2022 12:36:43 AM EDT] timeout=[Tue 12 Apr 2022 12:36:43 AM EDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L '[Tue 12 Apr 2022 12:36:47 AM EDT] ret='0'[Tue 12 Apr 2022 12:36:47 AM EDT] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'[Tue 12 Apr 2022 12:36:47 AM EDT] ACME_NEW_AUTHZ[Tue 12 Apr 2022 12:36:47 AM EDT] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'[Tue 12 Apr 2022 12:36:47 AM EDT] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'[Tue 12 Apr 2022 12:36:47 AM EDT] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'[Tue 12 Apr 2022 12:36:47 AM EDT] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf'[Tue 12 Apr 2022 12:36:47 AM EDT] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'[Tue 12 Apr 2022 12:36:47 AM EDT] Using CA: https://acme.zerossl.com/v2/DV90[Tue 12 Apr 2022 12:36:47 AM EDT] _saved_account_key_hash is not changed, skip register account.[Tue 12 Apr 2022 12:36:47 AM EDT] Read key length:[Tue 12 Apr 2022 12:36:47 AM EDT] _createcsr[Tue 12 Apr 2022 12:36:47 AM EDT] Multi domain='DNS:xxx.com,DNS:*.xxx.com'[Tue 12 Apr 2022 12:36:47 AM EDT] Getting domain auth token for each domain[Tue 12 Apr 2022 12:36:47 AM EDT] d='*.xxx.com'[Tue 12 Apr 2022 12:36:47 AM EDT] d[Tue 12 Apr 2022 12:36:47 AM EDT] url='https://acme.zerossl.com/v2/DV90/newOrder'[Tue 12 Apr 2022 12:36:47 AM EDT] payload='{"identifiers": [{"type":"dns","value":"xxx.com"},{"type":"dns","value":"*.xxx.com"}]}'[Tue 12 Apr 2022 12:36:47 AM EDT] RSA key[Tue 12 Apr 2022 12:36:47 AM EDT] HEAD[Tue 12 Apr 2022 12:37:07 AM EDT] d='xxx.com'[Tue 12 Apr 2022 12:37:07 AM EDT] Getting webroot for domain='xxx.com'[Tue 12 Apr 2022 12:37:07 AM EDT] _w='dns_dp'[Tue 12 Apr 2022 12:37:07 AM EDT] _currentRoot='dns_dp'[Tue 12 Apr 2022 12:37:07 AM EDT] entry='"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/UhFOXoP-4IFVowaDYPpJFw","status":"pending","token":"6EZHMs25EGJZFfRIkxhW-PBBmmbKZ_6FKFAOpGNJ93g"'[Tue 12 Apr 2022 12:37:07 AM EDT] token='6EZHMs25EGJZFfRIkxhW-PBBmmbKZ_6FKFAOpGNJ93g'[Tue 12 Apr 2022 12:37:07 AM EDT] uri='https://acme.zerossl.com/v2/DV90/chall/UhFOXoP-4IFVowaDYPpJFw'[Tue 12 Apr 2022 12:37:07 AM EDT] keyauthorization='6EZHMs25EGJZFfRIkxhW-PBBmmbKZ_6FKFAOpGNJ93g.R85NxyqFvnBnaKCcHtZsnLWNTnu9LbRVzwpGwGwsGv8'[Tue 12 Apr 2022 12:37:07 AM EDT] dvlist='xxx.com#6EZHMs25EGJZFfRIkxhW-PBBmmbKZ_6FKFAOpGNJ93g.R85NxyqFvnBnaKCcHtZsnLWNTnu9LbRVzwpGwGwsGv8#https://acme.zerossl.com/v2/DV90/chall/UhFOXoP-4IFVowaDYPpJFw#dns-01#dns_dp'[Tue 12 Apr 2022 12:37:07 AM EDT] d='*.xxx.com'[Tue 12 Apr 2022 12:37:07 AM EDT] Getting webroot for domain='*.xxx.com'[Tue 12 Apr 2022 12:37:07 AM EDT] _w='dns_dp'[Tue 12 Apr 2022 12:37:07 AM EDT] _currentRoot='dns_dp'[Tue 12 Apr 2022 12:37:07 AM EDT] entry='"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/fCiDb3Xz2YHFlP8466-9ig","status":"pending","token":"OgDYpvylpwWWR3Rmtegd6yl-U-gfgyGWfVuUJGSG3uU"'[Tue 12 Apr 2022 12:37:07 AM EDT] token='OgDYpvylpwWWR3Rmtegd6yl-U-gfgyGWfVuUJGSG3uU'[Tue 12 Apr 2022 12:37:07 AM EDT] uri='https://acme.zerossl.com/v2/DV90/chall/fCiDb3Xz2YHFlP8466-9ig'[Tue 12 Apr 2022 12:37:07 AM EDT] keyauthorization='OgDYpvylpwWWR3Rmtegd6yl-U-gfgyGWfVuUJGSG3uU.R85NxyqFvnBnaKCcHtZsnLWNTnu9LbRVzwpGwGwsGv8'[Tue 12 Apr 2022 12:37:07 AM EDT] dvlist='*.xxx.com#OgDYpvylpwWWR3Rmtegd6yl-U-gfgyGWfVuUJGSG3uU.R85NxyqFvnBnaKCcHtZsnLWNTnu9LbRVzwpGwGwsGv8#https://acme.zerossl.com/v2/DV90/chall/fCiDb3Xz2YHFlP8466-9ig#dns-01#dns_dp'[Tue 12 Apr 2022 12:37:07 AM EDT] d[Tue 12 Apr 2022 12:37:07 AM EDT] vlist='xxx.com#6EZHMs25EGJZFfRIkxhW-PBBmmbKZ_6FKFAOpGNJ93g.R85NxyqFvnBnaKCcHtZsnLWNTnu9LbRVzwpGwGwsGv8#https://acme.zerossl.com/v2/DV90/chall/UhFOXoP-4IFVowaDYPpJFw#dns-01#dns_dp,*.xxx.com#OgDYpvylpwWWR3Rmtegd6yl-U-gfgyGWfVuUJGSG3uU.R85NxyqFvnBnaKCcHtZsnLWNTnu9LbRVzwpGwGwsGv8#https://acme.zerossl.com/v2/DV90/chall/fCiDb3Xz2YHFlP8466-9ig#dns-01#dns_dp,'[Tue 12 Apr 2022 12:37:07 AM EDT] d='xxx.com'[Tue 12 Apr 2022 12:37:07 AM EDT] _d_alias[Tue 12 Apr 2022 12:37:07 AM EDT] txtdomain='_acme-challenge.xxx.com'[Tue 12 Apr 2022 12:37:07 AM EDT] txt='cuOYX1XdaXWVbANXST385-ZVx14EHicNxo25Jkb93L4'[Tue 12 Apr 2022 12:37:07 AM EDT] d_api='/root/.acme.sh/dnsapi/dns_dp.sh'[Tue 12 Apr 2022 12:37:07 AM EDT] Found domain api file: /root/.acme.sh/dnsapi/dns_dp.sh[Tue 12 Apr 2022 12:37:07 AM EDT] Adding txt value: cuOYX1XdaXWVbANXST385-ZVx14EHicNxo25Jkb93L4 for domain:  _acme-challenge.xxx.com[Tue 12 Apr 2022 12:37:07 AM EDT] First detect the root zone[Tue 12 Apr 2022 12:37:07 AM EDT] Domain.Info[Tue 12 Apr 2022 12:37:07 AM EDT] url='https://dnsapi.cn/Domain.Info'[Tue 12 Apr 2022 12:37:07 AM EDT] POST[Tue 12 Apr 2022 12:37:07 AM EDT] _post_url='https://dnsapi.cn/Domain.Info'[Tue 12 Apr 2022 12:37:07 AM EDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L '[Tue 12 Apr 2022 12:37:07 AM EDT] _ret='0'[Tue 12 Apr 2022 12:37:07 AM EDT] Domain.Info[Tue 12 Apr 2022 12:37:07 AM EDT] url='https://dnsapi.cn/Domain.Info'[Tue 12 Apr 2022 12:37:07 AM EDT] POST[Tue 12 Apr 2022 12:37:07 AM EDT] _post_url='https://dnsapi.cn/Domain.Info'[Tue 12 Apr 2022 12:37:07 AM EDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L '[Tue 12 Apr 2022 12:37:07 AM EDT] _ret='0'[Tue 12 Apr 2022 12:37:07 AM EDT] invalid domain[Tue 12 Apr 2022 12:37:07 AM EDT] Error add txt for domain:_acme-challenge.xxx.com[Tue 12 Apr 2022 12:37:07 AM EDT] _on_issue_err[Tue 12 Apr 2022 12:37:07 AM EDT] Please add '--debug' or '--log' to check more details.[Tue 12 Apr 2022 12:37:07 AM EDT] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh[Tue 12 Apr 2022 12:37:07 AM EDT] url='https://acme.zerossl.com/v2/DV90/chall/UhFOXoP-4IFVowaDYPpJFw'[Tue 12 Apr 2022 12:37:07 AM EDT] payload='{}'[Tue 12 Apr 2022 12:37:07 AM EDT] POST[Tue 12 Apr 2022 12:37:07 AM EDT] _post_url='https://acme.zerossl.com/v2/DV90/chall/UhFOXoP-4IFVowaDYPpJFw'[Tue 12 Apr 2022 12:37:07 AM EDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L '[Tue 12 Apr 2022 12:37:11 AM EDT] _ret='0'[Tue 12 Apr 2022 12:37:11 AM EDT] code='200'[Tue 12 Apr 2022 12:37:11 AM EDT] url='https://acme.zerossl.com/v2/DV90/chall/fCiDb3Xz2YHFlP8466-9ig'[Tue 12 Apr 2022 12:37:11 AM EDT] payload='{}'[Tue 12 Apr 2022 12:37:11 AM EDT] POST[Tue 12 Apr 2022 12:37:11 AM EDT] _post_url='https://acme.zerossl.com/v2/DV90/chall/fCiDb3Xz2YHFlP8466-9ig'[Tue 12 Apr 2022 12:37:11 AM EDT] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L '[Tue 12 Apr 2022 12:37:15 AM EDT] _ret='0'[Tue 12 Apr 2022 12:37:15 AM EDT] code='200'[Tue 12 Apr 2022 12:37:15 AM EDT] socat doesn't exist.[Tue 12 Apr 2022 12:37:15 AM EDT] Diagnosis versions: openssl:opensslOpenSSL 1.1.1n  15 Mar 2022apache:apache doesn't exist.nginx:nginx version: nginx/1.20.1built with OpenSSL 1.1.1l  24 Aug 2021TLS SNI support enabledconfigure arguments: --user=www --group=www --prefix=/www/server/nginx --add-module=srclib/ngx_devel_kit --add-module=srclib/lua_nginx_module --add-module=srclib/ngx_cache_purge --add-module=srclib/nginx-sticky-module --with-openssl=srclib/openssl --with-pcre=srclib/pcre-8.43 --with-http_v2_module --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-http_stub_status_module --with-http_ssl_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_gunzip_module --with-ipv6 --with-http_sub_module --with-http_flv_module --with-http_addition_module --with-http_realip_module --with-http_mp4_module --with-ld-opt=-Wl,-E --with-cc-opt=-Wno-error --with-http_dav_module --add-module=srclib/nginx-dav-ext-modulesocat:[Tue 12 Apr 2022 12:37:15 AM EDT] pid[Tue 12 Apr 2022 12:37:15 AM EDT] No need to restore nginx, skip.[Tue 12 Apr 2022 12:37:15 AM EDT] _clearupdns[Tue 12 Apr 2022 12:37:15 AM EDT] dns_entries[Tue 12 Apr 2022 12:37:15 AM EDT] skip dns.root@debian:~/.acme.sh#

复制代码

jeotonept

想用这个