Acme.sh: invalid domain

Created on 16 Nov 2016 · 23Comments · Source: acmesh-official/acme.sh

acme.sh --issue  -d triton.imperialus.house --dns dns_cf --certpath /usr/syno/etc/ssl/ssl.crt/server.crt --keypath /usr/syno/etc/ssl/ssl.key/server.key --fullchainpath 
/usr/syno/etc/ssl/ssl.intercrt/server-ca.crt --debug 3
[Wed Nov 16 15:45:47 GMT 2016] readlink exists=0
[Wed Nov 16 15:45:47 GMT 2016] dirname exists=0
[Wed Nov 16 15:45:47 GMT 2016] Lets find script dir.
[Wed Nov 16 15:45:47 GMT 2016] _SCRIPT_='./acme.sh'
[Wed Nov 16 15:45:47 GMT 2016] _script='/root/.acme.sh/acme.sh'
[Wed Nov 16 15:45:47 GMT 2016] _script_home='/root/.acme.sh'
[Wed Nov 16 15:45:47 GMT 2016] It seems that acme.sh is already installed in /root/.acme.sh
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 5:ACCOUNT_EMAIL='[email protected]'
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 14:AUTO_UPGRADE='1'
[Wed Nov 16 15:45:47 GMT 2016] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/Neilpang/acme.sh
v2.6.5
[Wed Nov 16 15:45:47 GMT 2016] Using api: 
[Wed Nov 16 15:45:47 GMT 2016] DOMAIN_PATH='/root/.acme.sh/triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] Le_NextRenewTime
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 1:Le_Domain='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 2:Le_Alt='no'
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 3:Le_Webroot='dns_cf'
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 4:Le_PreHook=''
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 5:Le_PostHook=''
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 6:Le_RenewHook=''
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 7:Le_API='https://acme-v01.api.letsencrypt.org'
[Wed Nov 16 15:45:47 GMT 2016] _on_before_issue
[Wed Nov 16 15:45:47 GMT 2016] 'dns_cf' does not contain 'no'
[Wed Nov 16 15:45:47 GMT 2016] Le_LocalAddress
[Wed Nov 16 15:45:47 GMT 2016] Check for domain='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] _currentRoot='dns_cf'
[Wed Nov 16 15:45:47 GMT 2016] 'dns_cf' does not contain 'apache'
[Wed Nov 16 15:45:47 GMT 2016] _saved_account_key_hash='yJJ1fg9YQQjteQFrKw47aeomckHdvKu0ntXspP+h7EA='
[Wed Nov 16 15:45:47 GMT 2016] _saved_account_key_hash is not changed, skip register account.
[Wed Nov 16 15:45:47 GMT 2016] Read key length:
[Wed Nov 16 15:45:47 GMT 2016] _createcsr
[Wed Nov 16 15:45:47 GMT 2016] domain='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] domainlist
[Wed Nov 16 15:45:47 GMT 2016] csrkey='/root/.acme.sh/triton.imperialus.house/triton.imperialus.house.key'
[Wed Nov 16 15:45:47 GMT 2016] csr='/root/.acme.sh/triton.imperialus.house/triton.imperialus.house.csr'
[Wed Nov 16 15:45:47 GMT 2016] csrconf='/root/.acme.sh/triton.imperialus.house/triton.imperialus.house.csr.conf'
[Wed Nov 16 15:45:47 GMT 2016] Single domain='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] _is_idn_d='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] _idn_temp
[Wed Nov 16 15:45:47 GMT 2016] _csr_cn='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] OK
[Wed Nov 16 15:45:47 GMT 2016] 8:Le_Keylength=''
[Wed Nov 16 15:45:47 GMT 2016] Getting domain auth token for each domain
[Wed Nov 16 15:45:47 GMT 2016] Getting webroot for domain='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] _w='dns_cf'
[Wed Nov 16 15:45:47 GMT 2016] _currentRoot='dns_cf'
[Wed Nov 16 15:45:47 GMT 2016] Getting new-authz for domain='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] Try new-authz for the 0 time.
[Wed Nov 16 15:45:47 GMT 2016] _is_idn_d='triton.imperialus.house'
[Wed Nov 16 15:45:47 GMT 2016] _idn_temp
[Wed Nov 16 15:45:47 GMT 2016] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Wed Nov 16 15:45:47 GMT 2016] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "triton.imperialus.house"}}'
[Wed Nov 16 15:45:47 GMT 2016] RSA key
[Wed Nov 16 15:45:47 GMT 2016] pub_exp='010001'
[Wed Nov 16 15:45:47 GMT 2016] _URGLY_PRINTF
[Wed Nov 16 15:45:47 GMT 2016] e='AQAB'
[Wed Nov 16 15:45:47 GMT 2016] modulus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
[Wed Nov 16 15:45:48 GMT 2016] _URGLY_PRINTF
[Wed Nov 16 15:45:50 GMT 2016] jwk='{"e": "AQAB", "kty": "RSA", "n": "uKsbfQEI9_gAtvxb3y8EXYeDQsZHPxSeT7xk_TlwSZffu_POX-W49bwCoZwotuUhqOzky531fan2b1kZ9kDXgXKGIbzvPJsTmiXQWspKSQRUFuLMinoT8ETxLO4iAiENXlcA4-yqYLxHKEVzHqMHEQGZUKK2nEl7Vdcst4_yo4qoNZDm2ha3aYoIMdFvbHJh5Cl7OwzN_6Wt-fkVyvSRMXQIVLhMIXkMzpe82Z2OXlD-ipekbp7O4MTTBQBUjLktxCSeUX5M1Kjq-cZj9eawhkQ2-fvTJsnoPh9EziuiRez2tXyWeHlR4619GupHnFNsvKb0cvGu_UUo749IjgHp5Q"}'
[Wed Nov 16 15:45:50 GMT 2016] JWK_HEADER='{"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "uKsbfQEI9_gAtvxb3y8EXYeDQsZHPxSeT7xk_TlwSZffu_POX-W49bwCoZwotuUhqOzky531fan2b1kZ9kDXgXKGIbzvPJsTmiXQWspKSQRUFuLMinoT8ETxLO4iAiENXlcA4-yqYLxHKEVzHqMHEQGZUKK2nEl7Vdcst4_yo4qoNZDm2ha3aYoIMdFvbHJh5Cl7OwzN_6Wt-fkVyvSRMXQIVLhMIXkMzpe82Z2OXlD-ipekbp7O4MTTBQBUjLktxCSeUX5M1Kjq-cZj9eawhkQ2-fvTJsnoPh9EziuiRez2tXyWeHlR4619GupHnFNsvKb0cvGu_UUo749IjgHp5Q"}}'
[Wed Nov 16 15:45:50 GMT 2016] payload64='eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAidHJpdG9uLmltcGVyaWFsdXMuaG91c2UifX0'
[Wed Nov 16 15:45:50 GMT 2016] Get nonce.
[Wed Nov 16 15:45:50 GMT 2016] GET
[Wed Nov 16 15:45:50 GMT 2016] url='https://acme-v01.api.letsencrypt.org/directory'
[Wed Nov 16 15:45:50 GMT 2016] timeout
[Wed Nov 16 15:45:50 GMT 2016] curl exists=0
[Wed Nov 16 15:45:50 GMT 2016] mktemp exists=0
[Wed Nov 16 15:45:50 GMT 2016] wget exists=0
[Wed Nov 16 15:45:50 GMT 2016] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/acme.shwefADf24sf.1479311150.tmp '
[Wed Nov 16 15:45:50 GMT 2016] ret='0'
[Wed Nov 16 15:45:50 GMT 2016] _headers='HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Content-Length: 280
Boulder-Request-Id: HIWYgEE6IwIhcTguN2wny6dfwxFg5EX49_5r6mf_J8g
Replay-Nonce: q39ZbLdx11Gd6Bbp5eNUnF7YgnlNLA_0HEehyrxWNR0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 16 Nov 2016 15:45:50 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 16 Nov 2016 15:45:50 GMT
Connection: keep-alive
'
[Wed Nov 16 15:45:50 GMT 2016] _CACHED_NONCE='q39ZbLdx11Gd6Bbp5eNUnF7YgnlNLA_0HEehyrxWNR0'
[Wed Nov 16 15:45:50 GMT 2016] nonce='q39ZbLdx11Gd6Bbp5eNUnF7YgnlNLA_0HEehyrxWNR0'
[Wed Nov 16 15:45:50 GMT 2016] protected='{"nonce": "q39ZbLdx11Gd6Bbp5eNUnF7YgnlNLA_0HEehyrxWNR0", "alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "uKsbfQEI9_gAtvxb3y8EXYeDQsZHPxSeT7xk_TlwSZffu_POX-W49bwCoZwotuUhqOzky531fan2b1kZ9kDXgXKGIbzvPJsTmiXQWspKSQRUFuLMinoT8ETxLO4iAiENXlcA4-yqYLxHKEVzHqMHEQGZUKK2nEl7Vdcst4_yo4qoNZDm2ha3aYoIMdFvbHJh5Cl7OwzN_6Wt-fkVyvSRMXQIVLhMIXkMzpe82Z2OXlD-ipekbp7O4MTTBQBUjLktxCSeUX5M1Kjq-cZj9eawhkQ2-fvTJsnoPh9EziuiRez2tXyWeHlR4619GupHnFNsvKb0cvGu_UUo749IjgHp5Q"}}'
[Wed Nov 16 15:45:50 GMT 2016] protected64='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'
[Wed Nov 16 15:45:50 GMT 2016] _sig_t='F80+dbZf0n3SIEFfWirPF1PpCxvNJqobyh6G1fgFZWomnAXtbAN3sTjaOteXFI8zwA1SaI9JiT0rE2v3DlJ0mNoV8OXAEz3rtgRmdsvftPbZ7niQZMEzV+T5cJew/4Y3ifE1nBrlRrxBZEEWvweJT3ifH+mPhdRhZCSKKjwzuRK2ujQvis6mav2xGomNidjGe9YfGuKVs3otHzl7jxHo9RykAPOAN2ZR30hJmCcbktB5lgohKcHn1jM4L4N1FO+K6eROZ0G1N5maHfWw9ShUqOnUUJoZln/DTbr3qMz/AhEIgeavzEx6sDtsu3ZjP/wTadxgeTgGwLZbMJqupxzsqg=='
[Wed Nov 16 15:45:50 GMT 2016] sig='F80-dbZf0n3SIEFfWirPF1PpCxvNJqobyh6G1fgFZWomnAXtbAN3sTjaOteXFI8zwA1SaI9JiT0rE2v3DlJ0mNoV8OXAEz3rtgRmdsvftPbZ7niQZMEzV-T5cJew_4Y3ifE1nBrlRrxBZEEWvweJT3ifH-mPhdRhZCSKKjwzuRK2ujQvis6mav2xGomNidjGe9YfGuKVs3otHzl7jxHo9RykAPOAN2ZR30hJmCcbktB5lgohKcHn1jM4L4N1FO-K6eROZ0G1N5maHfWw9ShUqOnUUJoZln_DTbr3qMz_AhEIgeavzEx6sDtsu3ZjP_wTadxgeTgGwLZbMJqupxzsqg'
[Wed Nov 16 15:45:50 GMT 2016] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "uKsbfQEI9_gAtvxb3y8EXYeDQsZHPxSeT7xk_TlwSZffu_POX-W49bwCoZwotuUhqOzky531fan2b1kZ9kDXgXKGIbzvPJsTmiXQWspKSQRUFuLMinoT8ETxLO4iAiENXlcA4-yqYLxHKEVzHqMHEQGZUKK2nEl7Vdcst4_yo4qoNZDm2ha3aYoIMdFvbHJh5Cl7OwzN_6Wt-fkVyvSRMXQIVLhMIXkMzpe82Z2OXlD-ipekbp7O4MTTBQBUjLktxCSeUX5M1Kjq-cZj9eawhkQ2-fvTJsnoPh9EziuiRez2tXyWeHlR4619GupHnFNsvKb0cvGu_UUo749IjgHp5Q"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAidHJpdG9uLmltcGVyaWFsdXMuaG91c2UifX0", "signature": "F80-dbZf0n3SIEFfWirPF1PpCxvNJqobyh6G1fgFZWomnAXtbAN3sTjaOteXFI8zwA1SaI9JiT0rE2v3DlJ0mNoV8OXAEz3rtgRmdsvftPbZ7niQZMEzV-T5cJew_4Y3ifE1nBrlRrxBZEEWvweJT3ifH-mPhdRhZCSKKjwzuRK2ujQvis6mav2xGomNidjGe9YfGuKVs3otHzl7jxHo9RykAPOAN2ZR30hJmCcbktB5lgohKcHn1jM4L4N1FO-K6eROZ0G1N5maHfWw9ShUqOnUUJoZln_DTbr3qMz_AhEIgeavzEx6sDtsu3ZjP_wTadxgeTgGwLZbMJqupxzsqg"}'
[Wed Nov 16 15:45:50 GMT 2016] POST
[Wed Nov 16 15:45:50 GMT 2016] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Wed Nov 16 15:45:50 GMT 2016] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "uKsbfQEI9_gAtvxb3y8EXYeDQsZHPxSeT7xk_TlwSZffu_POX-W49bwCoZwotuUhqOzky531fan2b1kZ9kDXgXKGIbzvPJsTmiXQWspKSQRUFuLMinoT8ETxLO4iAiENXlcA4-yqYLxHKEVzHqMHEQGZUKK2nEl7Vdcst4_yo4qoNZDm2ha3aYoIMdFvbHJh5Cl7OwzN_6Wt-fkVyvSRMXQIVLhMIXkMzpe82Z2OXlD-ipekbp7O4MTTBQBUjLktxCSeUX5M1Kjq-cZj9eawhkQ2-fvTJsnoPh9EziuiRez2tXyWeHlR4619GupHnFNsvKb0cvGu_UUo749IjgHp5Q"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAidHJpdG9uLmltcGVyaWFsdXMuaG91c2UifX0", "signature": "F80-dbZf0n3SIEFfWirPF1PpCxvNJqobyh6G1fgFZWomnAXtbAN3sTjaOteXFI8zwA1SaI9JiT0rE2v3DlJ0mNoV8OXAEz3rtgRmdsvftPbZ7niQZMEzV-T5cJew_4Y3ifE1nBrlRrxBZEEWvweJT3ifH-mPhdRhZCSKKjwzuRK2ujQvis6mav2xGomNidjGe9YfGuKVs3otHzl7jxHo9RykAPOAN2ZR30hJmCcbktB5lgohKcHn1jM4L4N1FO-K6eROZ0G1N5maHfWw9ShUqOnUUJoZln_DTbr3qMz_AhEIgeavzEx6sDtsu3ZjP_wTadxgeTgGwLZbMJqupxzsqg"}'
[Wed Nov 16 15:45:50 GMT 2016] curl exists=0
[Wed Nov 16 15:45:50 GMT 2016] mktemp exists=0
[Wed Nov 16 15:45:50 GMT 2016] wget exists=0
[Wed Nov 16 15:45:50 GMT 2016] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/acme.shwefADf24sf.1479311150.tmp '
[Wed Nov 16 15:45:51 GMT 2016] _ret='0'
[Wed Nov 16 15:45:51 GMT 2016] original='{
  "identifier": {
    "type": "dns",
    "value": "triton.imperialus.house"
  },
  "status": "pending",
  "expires": "2016-11-23T15:45:51.527050087Z",
  "challenges": [
    {
      "type": "tls-sni-01",
      "status": "pending",
      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752287",
      "token": "IcN9j7i-CDH9-cp2KQIuFZxXMjXbQjGi1LdxSAwwzc4"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752288",
      "token": "vrKZ_WmaYbzl_4pGXajYTpoaViiKTb7BubVmJks9pxA"
    },
    {
      "type": "http-01",
      "status": "pending",
      "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752289",
      "token": "bYte8fCDGaG8ZcQHOd8aYCn88af9epKudAD0ymFjWX4"
    }
  ],
  "combinations": [
    [
      2
    ],
    [
      0
    ],
    [
      1
    ]
  ]
}'
[Wed Nov 16 15:45:51 GMT 2016] responseHeaders='HTTP/1.1 100 Continue
Expires: Wed, 16 Nov 2016 15:45:51 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 201 Created
Server: nginx
Content-Type: application/json
Content-Length: 1008
Boulder-Request-Id: 5aZjmmf_FJ9FZk9B5UBmiQ2OcM5aimKTu3x1cv7WGRY
Boulder-Requester: 6254499
Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
Location: https://acme-v01.api.letsencrypt.org/acme/authz/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk
Replay-Nonce: WmlYG6uSCJtF14WLQYX0DTiHcBQiueE1x1KXXlHLTYc
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 16 Nov 2016 15:45:51 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 16 Nov 2016 15:45:51 GMT
Connection: keep-alive
'
[Wed Nov 16 15:45:51 GMT 2016] response='{"identifier":{"type":"dns","value":"triton.imperialus.house"},"status":"pending","expires":"2016-11-23T15:45:51.527050087Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752287","token":"IcN9j7i-CDH9-cp2KQIuFZxXMjXbQjGi1LdxSAwwzc4"},{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752288","token":"vrKZ_WmaYbzl_4pGXajYTpoaViiKTb7BubVmJks9pxA"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752289","token":"bYte8fCDGaG8ZcQHOd8aYCn88af9epKudAD0ymFjWX4"}],"combinations":[[2],[0],[1]]}'
[Wed Nov 16 15:45:51 GMT 2016] code='201'
[Wed Nov 16 15:45:51 GMT 2016] The new-authz request is ok.
[Wed Nov 16 15:45:51 GMT 2016] entry='"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752288","token":"vrKZ_WmaYbzl_4pGXajYTpoaViiKTb7BubVmJks9pxA"'
[Wed Nov 16 15:45:51 GMT 2016] token='vrKZ_WmaYbzl_4pGXajYTpoaViiKTb7BubVmJks9pxA'
[Wed Nov 16 15:45:51 GMT 2016] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752288'
[Wed Nov 16 15:45:51 GMT 2016] keyauthorization='vrKZ_WmaYbzl_4pGXajYTpoaViiKTb7BubVmJks9pxA.2PRVd7IGYWHbfZWpc0tpAQ_waS-eD3sMHGnlXDLQITo'
[Wed Nov 16 15:45:51 GMT 2016] dvlist='triton.imperialus.house#vrKZ_WmaYbzl_4pGXajYTpoaViiKTb7BubVmJks9pxA.2PRVd7IGYWHbfZWpc0tpAQ_waS-eD3sMHGnlXDLQITo#https://acme-v01.api.letsencrypt.org/acme/challenge/1TaQzYMTrFY5Xr3y_xbwVAK60eDpFvYZEmqOI2H2hVk/346752288#dns-01#dns_cf'
[Wed Nov 16 15:45:51 GMT 2016] txtdomain='_acme-challenge.triton.imperialus.house'
[Wed Nov 16 15:45:51 GMT 2016] txt='OIKcXOmiokA0p6nZkA8sOXTVfXnUVD1DbtHOzcHH9eQ'
[Wed Nov 16 15:45:51 GMT 2016] d_api='/root/.acme.sh/dnsapi/dns_cf.sh'
[Wed Nov 16 15:45:51 GMT 2016] Found domain api file: /root/.acme.sh/dnsapi/dns_cf.sh
[Wed Nov 16 15:45:51 GMT 2016] dns_cf_add exists=0
[Wed Nov 16 15:45:51 GMT 2016] OK
[Wed Nov 16 15:45:51 GMT 2016] 29:CF_Key='[email protected]'
[Wed Nov 16 15:45:51 GMT 2016] OK
[Wed Nov 16 15:45:51 GMT 2016] 31:CF_Email='91a6b5712b8c32cc706e355cba58e7b885a80'
[Wed Nov 16 15:45:51 GMT 2016] First detect the root zone
[Wed Nov 16 15:45:52 GMT 2016] zones?name=triton.imperialus.house
[Wed Nov 16 15:45:52 GMT 2016] GET
[Wed Nov 16 15:45:52 GMT 2016] url='https://api.cloudflare.com/client/v4/zones?name=triton.imperialus.house'
[Wed Nov 16 15:45:52 GMT 2016] timeout
[Wed Nov 16 15:45:52 GMT 2016] curl exists=0
[Wed Nov 16 15:45:52 GMT 2016] mktemp exists=0
[Wed Nov 16 15:45:52 GMT 2016] wget exists=0
[Wed Nov 16 15:45:52 GMT 2016] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/acme.shwefADf24sf.1479311152.tmp '
[Wed Nov 16 15:45:52 GMT 2016] ret='0'
[Wed Nov 16 15:45:52 GMT 2016] response='{"success":false,"errors":[{"code":6003,"message":"Invalid request headers","error_chain":[{"code":6102,"message":"Invalid format for X-Auth-Email header"},{"code":6103,"message":"Invalid format for X-Auth-Key header"}]}],"messages":[],"result":null}'
[Wed Nov 16 15:45:52 GMT 2016] zones?name=imperialus.house
[Wed Nov 16 15:45:52 GMT 2016] GET
[Wed Nov 16 15:45:52 GMT 2016] url='https://api.cloudflare.com/client/v4/zones?name=imperialus.house'
[Wed Nov 16 15:45:52 GMT 2016] timeout
[Wed Nov 16 15:45:52 GMT 2016] curl exists=0
[Wed Nov 16 15:45:52 GMT 2016] mktemp exists=0
[Wed Nov 16 15:45:52 GMT 2016] wget exists=0
[Wed Nov 16 15:45:52 GMT 2016] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/acme.shwefADf24sf.1479311152.tmp '
[Wed Nov 16 15:45:52 GMT 2016] ret='0'
[Wed Nov 16 15:45:52 GMT 2016] response='{"success":false,"errors":[{"code":6003,"message":"Invalid request headers","error_chain":[{"code":6102,"message":"Invalid format for X-Auth-Email header"},{"code":6103,"message":"Invalid format for X-Auth-Key header"}]}],"messages":[],"result":null}'
[Wed Nov 16 15:45:52 GMT 2016] zones?name=house
[Wed Nov 16 15:45:52 GMT 2016] GET
[Wed Nov 16 15:45:52 GMT 2016] url='https://api.cloudflare.com/client/v4/zones?name=house'
[Wed Nov 16 15:45:52 GMT 2016] timeout
[Wed Nov 16 15:45:52 GMT 2016] curl exists=0
[Wed Nov 16 15:45:52 GMT 2016] mktemp exists=0
[Wed Nov 16 15:45:52 GMT 2016] wget exists=0
[Wed Nov 16 15:45:52 GMT 2016] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/acme.shwefADf24sf.1479311152.tmp '
[Wed Nov 16 15:45:53 GMT 2016] ret='0'
[Wed Nov 16 15:45:53 GMT 2016] response='{"success":false,"errors":[{"code":6003,"message":"Invalid request headers","error_chain":[{"code":6102,"message":"Invalid format for X-Auth-Email header"},{"code":6103,"message":"Invalid format for X-Auth-Key header"}]}],"messages":[],"result":null}'
**[Wed Nov 16 15:45:53 GMT 2016] invalid domain
[Wed Nov 16 15:45:53 GMT 2016] Error add txt for domain:_acme-challenge.triton.imperialus.house**
[Wed Nov 16 15:45:53 GMT 2016] pid
[Wed Nov 16 15:45:53 GMT 2016] _clearupdns
[Wed Nov 16 15:45:53 GMT 2016] Dns not added, skip.
[Wed Nov 16 15:45:53 GMT 2016] _on_issue_err
[Wed Nov 16 15:45:53 GMT 2016] Please add '--debug' or '--log' to check more details.
[Wed Nov 16 15:45:53 GMT 2016] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
[Wed Nov 16 15:45:53 GMT 2016] openssl exists=0
[Wed Nov 16 15:45:53 GMT 2016] nc exists=0
[Wed Nov 16 15:45:53 GMT 2016] Diagnosis versions: 
openssl:
OpenSSL 1.0.2j-fips  26 Sep 2016
apache:
apache doesn't exists.
nc:
./acme.sh: line 2: nc: not found

Source

FernandoMiguel

All 23 comments

Does this error happen today ?

Did it work before ?

Neilpang on 16 Nov 2016

yep, worked before.

with the update version i'm getting a diff error

[Wed Nov 16 16:04:22 GMT 2016] It seems that your api file is not correct, it must have a function named: dns_cf_add

i'm checking the details again

FernandoMiguel on 16 Nov 2016

@FernandoMiguel

Just try with the latest fixed version

Neilpang on 16 Nov 2016

upgraded and reentered the API details in account.conf

same error

FernandoMiguel on 16 Nov 2016

I just tried with one of my domain with dns_cf, it works for me. I'm checking more.

Neilpang on 16 Nov 2016

Your email and key are wrong.

[Wed Nov 16 15:45:51 GMT 2016] 29:CF_Key='[email protected]'
[Wed Nov 16 15:45:51 GMT 2016] OK
[Wed Nov 16 15:45:51 GMT 2016] 31:CF_Email='91a6b5712b8c32cc706e355cba58e7b885a80'

Neilpang on 16 Nov 2016

👍1

I didnt change anything in /root/.acme.sh/dnsapi/dns_cf.sh
just account.conf, as i always do.
not sure it makes any diff

FernandoMiguel on 16 Nov 2016

@FernandoMiguel

Your email and key are wrong.

Do you need me to hide the email and key values from this post ?

Neilpang on 16 Nov 2016

DOH

and now i need to rotate the API key...
thank shouldnt leak :(

FernandoMiguel on 16 Nov 2016

Triton> ./acme.sh --issue -d triton.imperialus.house --dns dns_cf --certpath /usr/syno/etc/ssl/ssl.crt/server.crt --keypath /usr/syno/etc/ssl/ssl.key/server.key --fullchainpath
/usr/syno/etc/ssl/ssl.intercrt/server-ca.crt --debug 3 --test
[Wed Nov 16 16:15:58 GMT 2016] readlink exists=0
[Wed Nov 16 16:15:58 GMT 2016] dirname exists=0
[Wed Nov 16 16:15:58 GMT 2016] Lets find script dir.
[Wed Nov 16 16:15:58 GMT 2016] _SCRIPT_='./acme.sh'
[Wed Nov 16 16:15:58 GMT 2016] _script='/root/.acme.sh/acme.sh'
[Wed Nov 16 16:15:58 GMT 2016] _script_home='/root/.acme.sh'
[Wed Nov 16 16:15:58 GMT 2016] OK
[Wed Nov 16 16:15:58 GMT 2016] 5:ACCOUNT_EMAIL='[email protected]'
[Wed Nov 16 16:15:58 GMT 2016] OK
[Wed Nov 16 16:15:58 GMT 2016] 14:AUTO_UPGRADE='1'
[Wed Nov 16 16:15:58 GMT 2016] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/Neilpang/acme.sh
v2.6.5
[Wed Nov 16 16:15:58 GMT 2016] Using api:
[Wed Nov 16 16:15:58 GMT 2016] Using stage api:https://acme-staging.api.letsencrypt.org
[Wed Nov 16 16:15:59 GMT 2016] DOMAIN_PATH='/root/.acme.sh/triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] Le_NextRenewTime
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 1:Le_Domain='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 2:Le_Alt='no'
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 3:Le_Webroot='dns_cf'
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 4:Le_PreHook=''
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 5:Le_PostHook=''
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 6:Le_RenewHook=''
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 7:Le_API='https://acme-staging.api.letsencrypt.org'
[Wed Nov 16 16:15:59 GMT 2016] _on_before_issue
[Wed Nov 16 16:15:59 GMT 2016] 'dns_cf' does not contain 'no'
[Wed Nov 16 16:15:59 GMT 2016] Le_LocalAddress
[Wed Nov 16 16:15:59 GMT 2016] Check for domain='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] _currentRoot='dns_cf'
[Wed Nov 16 16:15:59 GMT 2016] 'dns_cf' does not contain 'apache'
[Wed Nov 16 16:15:59 GMT 2016] _saved_account_key_hash='xDMFZDvPds4FAP/ib+PCJ8IcyQ15rImdNok4D6TJet4='
[Wed Nov 16 16:15:59 GMT 2016] _saved_account_key_hash is not changed, skip register account.
[Wed Nov 16 16:15:59 GMT 2016] Read key length:
[Wed Nov 16 16:15:59 GMT 2016] _createcsr
[Wed Nov 16 16:15:59 GMT 2016] domain='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] domainlist
[Wed Nov 16 16:15:59 GMT 2016] csrkey='/root/.acme.sh/triton.imperialus.house/triton.imperialus.house.key'
[Wed Nov 16 16:15:59 GMT 2016] csr='/root/.acme.sh/triton.imperialus.house/triton.imperialus.house.csr'
[Wed Nov 16 16:15:59 GMT 2016] csrconf='/root/.acme.sh/triton.imperialus.house/triton.imperialus.house.csr.conf'
[Wed Nov 16 16:15:59 GMT 2016] Single domain='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] _is_idn_d='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] _idn_temp
[Wed Nov 16 16:15:59 GMT 2016] _csr_cn='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] OK
[Wed Nov 16 16:15:59 GMT 2016] 8:Le_Keylength=''
[Wed Nov 16 16:15:59 GMT 2016] Getting domain auth token for each domain
[Wed Nov 16 16:15:59 GMT 2016] Getting webroot for domain='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] _w='dns_cf'
[Wed Nov 16 16:15:59 GMT 2016] _currentRoot='dns_cf'
[Wed Nov 16 16:15:59 GMT 2016] Getting new-authz for domain='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] Try new-authz for the 0 time.
[Wed Nov 16 16:15:59 GMT 2016] _is_idn_d='triton.imperialus.house'
[Wed Nov 16 16:15:59 GMT 2016] _idn_temp
[Wed Nov 16 16:15:59 GMT 2016] url='https://acme-staging.api.letsencrypt.org/acme/new-authz'
[Wed Nov 16 16:15:59 GMT 2016] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "triton.imperialus.house"}}'
[Wed Nov 16 16:15:59 GMT 2016] RSA key
[Wed Nov 16 16:15:59 GMT 2016] pub_exp='010001'
[Wed Nov 16 16:15:59 GMT 2016] _URGLY_PRINTF
[Wed Nov 16 16:15:59 GMT 2016] e='AQAB'
[Wed Nov 16 16:15:59 GMT 2016] modulus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
[Wed Nov 16 16:15:59 GMT 2016] _URGLY_PRINTF
[Wed Nov 16 16:16:01 GMT 2016] jwk='{"e": "AQAB", "kty": "RSA", "n": "siLz6jupYtN7dPpgxr1hyx3EIuJlQCV1RRvVid0NExktVSOibbyGpbPQxjyoPPsD5FgwUWFr5vFZ1unk8BrLnnSTh6DvhyD-Gu8I4Cz4V3qIqlQV2UEuttWBs6xjaX1a-dJiv7JkW2M09VquZZiuxknZVta-awaB25mhGxmDuUIiGcWwMd48MqRLs0JSW4v7p8nWpRKoYiXM8nDVN_CtCaBzOwPcwopizeBrnXx0zJ1lUFPuDaRlmPJpQUEoHronEx3Mk956xBMtXLNOI8snjGoPvpPuqiTHfi7Cq-a96ur8Tbyxf9eDQ1NA69pxxrcS5Liglmqf5ntY9vfvAqF7Yw"}'
[Wed Nov 16 16:16:01 GMT 2016] JWK_HEADER='{"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "siLz6jupYtN7dPpgxr1hyx3EIuJlQCV1RRvVid0NExktVSOibbyGpbPQxjyoPPsD5FgwUWFr5vFZ1unk8BrLnnSTh6DvhyD-Gu8I4Cz4V3qIqlQV2UEuttWBs6xjaX1a-dJiv7JkW2M09VquZZiuxknZVta-awaB25mhGxmDuUIiGcWwMd48MqRLs0JSW4v7p8nWpRKoYiXM8nDVN_CtCaBzOwPcwopizeBrnXx0zJ1lUFPuDaRlmPJpQUEoHronEx3Mk956xBMtXLNOI8snjGoPvpPuqiTHfi7Cq-a96ur8Tbyxf9eDQ1NA69pxxrcS5Liglmqf5ntY9vfvAqF7Yw"}}'
[Wed Nov 16 16:16:01 GMT 2016] payload64='eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAidHJpdG9uLmltcGVyaWFsdXMuaG91c2UifX0'
[Wed Nov 16 16:16:01 GMT 2016] Get nonce.
[Wed Nov 16 16:16:01 GMT 2016] GET
[Wed Nov 16 16:16:01 GMT 2016] url='https://acme-staging.api.letsencrypt.org/directory'
[Wed Nov 16 16:16:01 GMT 2016] timeout
[Wed Nov 16 16:16:01 GMT 2016] curl exists=0
[Wed Nov 16 16:16:01 GMT 2016] mktemp exists=1
[Wed Nov 16 16:16:01 GMT 2016] wget exists=0
[Wed Nov 16 16:16:01 GMT 2016] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1479312961.tmp '
[Wed Nov 16 16:16:01 GMT 2016] ret='0'
[Wed Nov 16 16:16:01 GMT 2016] _headers='HTTP/1.1 200 OK
Server: nginx
Content-Type: application/json
Content-Length: 296
Boulder-Request-Id: DoN439fWva0gxnKCH0-Wty6LYmB0gr-q69x2c5dbfyU
Replay-Nonce: CzexOAiQqP58wTZTiKGLSG5HfkJl2itx8LUwIUDwnao
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 16 Nov 2016 16:16:01 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 16 Nov 2016 16:16:01 GMT
Connection: keep-alive
'
[Wed Nov 16 16:16:02 GMT 2016] _CACHED_NONCE='CzexOAiQqP58wTZTiKGLSG5HfkJl2itx8LUwIUDwnao'
[Wed Nov 16 16:16:02 GMT 2016] nonce='CzexOAiQqP58wTZTiKGLSG5HfkJl2itx8LUwIUDwnao'
[Wed Nov 16 16:16:02 GMT 2016] protected='{"nonce": "CzexOAiQqP58wTZTiKGLSG5HfkJl2itx8LUwIUDwnao", "alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "siLz6jupYtN7dPpgxr1hyx3EIuJlQCV1RRvVid0NExktVSOibbyGpbPQxjyoPPsD5FgwUWFr5vFZ1unk8BrLnnSTh6DvhyD-Gu8I4Cz4V3qIqlQV2UEuttWBs6xjaX1a-dJiv7JkW2M09VquZZiuxknZVta-awaB25mhGxmDuUIiGcWwMd48MqRLs0JSW4v7p8nWpRKoYiXM8nDVN_CtCaBzOwPcwopizeBrnXx0zJ1lUFPuDaRlmPJpQUEoHronEx3Mk956xBMtXLNOI8snjGoPvpPuqiTHfi7Cq-a96ur8Tbyxf9eDQ1NA69pxxrcS5Liglmqf5ntY9vfvAqF7Yw"}}'
[Wed Nov 16 16:16:02 GMT 2016] protected64='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'
[Wed Nov 16 16:16:02 GMT 2016] _sig_t='OH72mgwkVANyG8nOBXqMrSzwjaH2FWsT/F8brz+UtnoZ7UCDYBCJdrmFkncfrOnU1bhlVILCZwdHD9s6rEKjOoUgg+yaQiHxjxS5mx+jsQtcfEyYRAId97PhNgn2xvhzSWxjy/KcBC0m00gE9yAa/zDsUhcnRdASWNUSIpT7UzlxVVGPlZR8s2lyfUQ03AG/OnnI/Q6HYJcbgrRu9jES76JtYrLjrij1L40MbVRzsFhyj9GYEsuC4SL2SPlIgebtgmepm+RUfsMExqtuVMMisdbhSPU55Q+sWNTWNyL4rSkgydsZWUp5UozGvTPKMY0WGgbOTpJYMLzbMowhmh/aiw=='
[Wed Nov 16 16:16:02 GMT 2016] sig='OH72mgwkVANyG8nOBXqMrSzwjaH2FWsT_F8brz-UtnoZ7UCDYBCJdrmFkncfrOnU1bhlVILCZwdHD9s6rEKjOoUgg-yaQiHxjxS5mx-jsQtcfEyYRAId97PhNgn2xvhzSWxjy_KcBC0m00gE9yAa_zDsUhcnRdASWNUSIpT7UzlxVVGPlZR8s2lyfUQ03AG_OnnI_Q6HYJcbgrRu9jES76JtYrLjrij1L40MbVRzsFhyj9GYEsuC4SL2SPlIgebtgmepm-RUfsMExqtuVMMisdbhSPU55Q-sWNTWNyL4rSkgydsZWUp5UozGvTPKMY0WGgbOTpJYMLzbMowhmh_aiw'
[Wed Nov 16 16:16:02 GMT 2016] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "siLz6jupYtN7dPpgxr1hyx3EIuJlQCV1RRvVid0NExktVSOibbyGpbPQxjyoPPsD5FgwUWFr5vFZ1unk8BrLnnSTh6DvhyD-Gu8I4Cz4V3qIqlQV2UEuttWBs6xjaX1a-dJiv7JkW2M09VquZZiuxknZVta-awaB25mhGxmDuUIiGcWwMd48MqRLs0JSW4v7p8nWpRKoYiXM8nDVN_CtCaBzOwPcwopizeBrnXx0zJ1lUFPuDaRlmPJpQUEoHronEx3Mk956xBMtXLNOI8snjGoPvpPuqiTHfi7Cq-a96ur8Tbyxf9eDQ1NA69pxxrcS5Liglmqf5ntY9vfvAqF7Yw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAidHJpdG9uLmltcGVyaWFsdXMuaG91c2UifX0", "signature": "OH72mgwkVANyG8nOBXqMrSzwjaH2FWsT_F8brz-UtnoZ7UCDYBCJdrmFkncfrOnU1bhlVILCZwdHD9s6rEKjOoUgg-yaQiHxjxS5mx-jsQtcfEyYRAId97PhNgn2xvhzSWxjy_KcBC0m00gE9yAa_zDsUhcnRdASWNUSIpT7UzlxVVGPlZR8s2lyfUQ03AG_OnnI_Q6HYJcbgrRu9jES76JtYrLjrij1L40MbVRzsFhyj9GYEsuC4SL2SPlIgebtgmepm-RUfsMExqtuVMMisdbhSPU55Q-sWNTWNyL4rSkgydsZWUp5UozGvTPKMY0WGgbOTpJYMLzbMowhmh_aiw"}'
[Wed Nov 16 16:16:02 GMT 2016] POST
[Wed Nov 16 16:16:02 GMT 2016] url='https://acme-staging.api.letsencrypt.org/acme/new-authz'
[Wed Nov 16 16:16:02 GMT 2016] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "siLz6jupYtN7dPpgxr1hyx3EIuJlQCV1RRvVid0NExktVSOibbyGpbPQxjyoPPsD5FgwUWFr5vFZ1unk8BrLnnSTh6DvhyD-Gu8I4Cz4V3qIqlQV2UEuttWBs6xjaX1a-dJiv7JkW2M09VquZZiuxknZVta-awaB25mhGxmDuUIiGcWwMd48MqRLs0JSW4v7p8nWpRKoYiXM8nDVN_CtCaBzOwPcwopizeBrnXx0zJ1lUFPuDaRlmPJpQUEoHronEx3Mk956xBMtXLNOI8snjGoPvpPuqiTHfi7Cq-a96ur8Tbyxf9eDQ1NA69pxxrcS5Liglmqf5ntY9vfvAqF7Yw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAidHJpdG9uLmltcGVyaWFsdXMuaG91c2UifX0", "signature": "OH72mgwkVANyG8nOBXqMrSzwjaH2FWsT_F8brz-UtnoZ7UCDYBCJdrmFkncfrOnU1bhlVILCZwdHD9s6rEKjOoUgg-yaQiHxjxS5mx-jsQtcfEyYRAId97PhNgn2xvhzSWxjy_KcBC0m00gE9yAa_zDsUhcnRdASWNUSIpT7UzlxVVGPlZR8s2lyfUQ03AG_OnnI_Q6HYJcbgrRu9jES76JtYrLjrij1L40MbVRzsFhyj9GYEsuC4SL2SPlIgebtgmepm-RUfsMExqtuVMMisdbhSPU55Q-sWNTWNyL4rSkgydsZWUp5UozGvTPKMY0WGgbOTpJYMLzbMowhmh_aiw"}'
[Wed Nov 16 16:16:02 GMT 2016] curl exists=0
[Wed Nov 16 16:16:02 GMT 2016] mktemp exists=1
[Wed Nov 16 16:16:02 GMT 2016] wget exists=0
[Wed Nov 16 16:16:02 GMT 2016] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/acme.shwefADf24sf.1479312962.tmp '
[Wed Nov 16 16:16:03 GMT 2016] _ret='0'
[Wed Nov 16 16:16:03 GMT 2016] original='{
"identifier": {
"type": "dns",
"value": "triton.imperialus.house"
},
"status": "pending",
"expires": "2016-11-23T16:16:02.984626167Z",
"challenges": [
{
"type": "tls-sni-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935959",
"token": "06KtH44mKrSt__o4ZIbR9xxmXWQ-b4omz5Q6KALO6D4"
},
{
"type": "http-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935960",
"token": "MPSS9wDC2QCH3lWB_H67UwB41jMUB2Pildo4W-ocjlw"
},
{
"type": "dns-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935961",
"token": "DaQmL6P86iF_-8GyhNzoSJq1yElYmMqG6mR85PmbVYg"
}
],
"combinations": [
[
1
],
[
2
],
[
0
]
]
}'
[Wed Nov 16 16:16:03 GMT 2016] responseHeaders='HTTP/1.1 100 Continue
Expires: Wed, 16 Nov 2016 16:16:02 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 201 Created
Server: nginx
Content-Type: application/json
Content-Length: 1017
Boulder-Request-Id: f0eW82l1xanKjn625_9KeclctcwaHJgmIARoWQb0wgg
Boulder-Requester: 498670
Link: https://acme-staging.api.letsencrypt.org/acme/new-cert;rel="next"
Location: https://acme-staging.api.letsencrypt.org/acme/authz/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU
Replay-Nonce: N-7Mkori-P__Gp1NlNjQaSLGK5eRcqS1z_ZjWDikzFo
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 16 Nov 2016 16:16:03 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 16 Nov 2016 16:16:03 GMT
Connection: keep-alive
'
[Wed Nov 16 16:16:03 GMT 2016] response='{"identifier":{"type":"dns","value":"triton.imperialus.house"},"status":"pending","expires":"2016-11-23T16:16:02.984626167Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935959","token":"06KtH44mKrSt__o4ZIbR9xxmXWQ-b4omz5Q6KALO6D4"},{"type":"http-01","status":"pending","uri":"https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935960","token":"MPSS9wDC2QCH3lWB_H67UwB41jMUB2Pildo4W-ocjlw"},{"type":"dns-01","status":"pending","uri":"https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935961","token":"DaQmL6P86iF_-8GyhNzoSJq1yElYmMqG6mR85PmbVYg"}],"combinations":[[1],[2],[0]]}'
[Wed Nov 16 16:16:03 GMT 2016] code='201'
[Wed Nov 16 16:16:03 GMT 2016] The new-authz request is ok.
[Wed Nov 16 16:16:03 GMT 2016] entry='"type":"dns-01","status":"pending","uri":"https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935961","token":"DaQmL6P86iF_-8GyhNzoSJq1yElYmMqG6mR85PmbVYg"'
[Wed Nov 16 16:16:03 GMT 2016] token='DaQmL6P86iF_-8GyhNzoSJq1yElYmMqG6mR85PmbVYg'
[Wed Nov 16 16:16:03 GMT 2016] uri='https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935961'
[Wed Nov 16 16:16:03 GMT 2016] keyauthorization='DaQmL6P86iF_-8GyhNzoSJq1yElYmMqG6mR85PmbVYg.78gfhZf36ciy3T7eh6uP8vMMOu8WOGAolf8OX6p3hvY'
[Wed Nov 16 16:16:03 GMT 2016] dvlist='triton.imperialus.house#DaQmL6P86iF_-8GyhNzoSJq1yElYmMqG6mR85PmbVYg.78gfhZf36ciy3T7eh6uP8vMMOu8WOGAolf8OX6p3hvY#https://acme-staging.api.letsencrypt.org/acme/challenge/OuTzEexYfvk7g7NAqQzRvvrdHx8liGnye4N6URDt9vU/16935961#dns-01#dns_cf'
[Wed Nov 16 16:16:03 GMT 2016] txtdomain='_acme-challenge.triton.imperialus.house'
[Wed Nov 16 16:16:03 GMT 2016] txt='V8Q0bBrkRvdcJBn0BpSHhOQhGAJHIVQkoMQSVq3X6FQ'
[Wed Nov 16 16:16:03 GMT 2016] d_api='/root/.acme.sh/dnsapi/dns_cf.sh'
[Wed Nov 16 16:16:03 GMT 2016] Found domain api file: /root/.acme.sh/dnsapi/dns_cf.sh
[Wed Nov 16 16:16:03 GMT 2016] dns_cf_add exists=1
[Wed Nov 16 16:16:03 GMT 2016] It seems that your api file is not correct, it must have a function named: dns_cf_add
[Wed Nov 16 16:16:03 GMT 2016] pid
[Wed Nov 16 16:16:03 GMT 2016] _clearupdns
[Wed Nov 16 16:16:03 GMT 2016] Dns not added, skip.
[Wed Nov 16 16:16:03 GMT 2016] _on_issue_err
[Wed Nov 16 16:16:03 GMT 2016] Please add '--debug' or '--log' to check more details.
[Wed Nov 16 16:16:03 GMT 2016] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
[Wed Nov 16 16:16:03 GMT 2016] openssl exists=0
[Wed Nov 16 16:16:03 GMT 2016] nc exists=1
[Wed Nov 16 16:16:03 GMT 2016] nc doesn't exists.
[Wed Nov 16 16:16:03 GMT 2016] Diagnosis versions:
openssl:
OpenSSL 1.0.2j-fips 26 Sep 2016
apache:
apache doesn't exists.
nc:

with the details correct now, still having issue

FernandoMiguel on 16 Nov 2016

try:

.  /root/.acme.sh/dnsapi/dns_cf.sh
which dns_cf_add  && echo ok || echo bad

Neilpang on 16 Nov 2016

Triton> . /root/.acme.sh/dnsapi/dns_cf.sh
Triton> which dns_cf_add && echo ok || echo bad
bad

FernandoMiguel on 16 Nov 2016

i notice account.conf add ' instead of ".
but replaced those with no change.

FernandoMiguel on 16 Nov 2016

@FernandoMiguel I know the reason now.

Neilpang on 16 Nov 2016

👍1

It's nothing to do with account.conf

Neilpang on 16 Nov 2016

@FernandoMiguel

In my recent fix, I use which dns_cf_add instead of type dns_cf_add to detect whether dns_cf_add function exists.

It's not working.

Neilpang on 16 Nov 2016

@FernandoMiguel

I have to sleep now, I will fix it in 24 hours. Please just hold on.

Thanks.

Neilpang on 16 Nov 2016

❤1

thank you! see you tomorrow.
enjoy your rest.

FernandoMiguel on 16 Nov 2016

@FernandoMiguel

Fixed at 82dc2244c00b9de6636eebff2a0ec3dce3bcb174

Please try again.

Neilpang on 17 Nov 2016

@FernandoMiguel
Please re-install or upgrade, and then try again.

Neilpang on 17 Nov 2016

[Thr Nov 17 09:01:34 GMT 2016] Upgrade success!
Triton> . /root/.acme.sh/dnsapi/dns_cf.sh
Triton> which dns_cf_add && echo ok || echo bad
bad

FernandoMiguel on 17 Nov 2016

@FernandoMiguel

Just issue a cert please.

Neilpang on 17 Nov 2016

Works :)

FernandoMiguel on 17 Nov 2016

Was this page helpful?

0 / 5 - 0 ratings

Related issues

DNS API password with special characters

noplanman · 4Comments

Could not get nonce, let's try again

haiopaii · 3Comments

Verify error:CAA record for *.example.comprevents issuance

extensionsapp · 4Comments

Add --config-home to crontab

extensionsapp · 3Comments

PKCS #12

FernandoMiguel · 5Comments