Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
My domain is: lazygranch.com and inplanesight.org
I ran this command: ./acme.sh --debug --renew -d lazygranch.com
It produced this output: [Mon Aug 30 23:48:31 UTC 2021] GET
[Mon Aug 30 23:48:31 UTC 2021] url='https://acme-v01.api.letsencrypt.org/directory'
[Mon Aug 30 23:48:31 UTC 2021] timeout=
[Mon Aug 30 23:48:31 UTC 2021] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g '
[Mon Aug 30 23:48:31 UTC 2021] ret='0'
[Mon Aug 30 23:48:31 UTC 2021] Could not get nonce, let's try again.
I have already debugged this. The problem is related to:
{
"type": "urn:acme:error:serverInternal",
"detail": "ACMEv1 is deprecated and you can no longer get certificates from this endpoint. Please use the ACMEv2 endpoint, you may need to update your ACME client software to do so. Visit End of Life Plan for ACMEv1 - #27 by jillian for more information."
}
My web server is (include version):
nginx -v
nginx version: nginx/1.20.1
The operating system my web server runs on is (include version):
Centos 7
Linux lazygranch.com 3.10.0-1160.36.2.el7.x86_64 #1 SMP Wed Jul 21 11:57:15 UTC 2021 x86_64 x86_64 x86_64 GNU/Linux
My hosting provider, if applicable, is: Digital Ocean
I can login to a root shell on my machine (yes or no, or I don't know):yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):no
The version of my client is (e.g. output of certbot --version
or certbot-auto --version
if you're using Certbot): ./acme.sh -v
I found the post with the test command:
./acme.sh --server https://acme-staging-v02.api.letsencrypt.org/directory --issue -d test.acme.sh --standalone --debug
Before my comments get lost in the long debug output, should I use the -b option when upgrading acme.sh, perhaps taking me to version 3?
FWIW I didn't get an email regarding changes in Lets Encrypt so I there some place to sign up?
Here is the debug output:
My rather long debug output follow:
sh-4.2# ./acme.sh --server https://acme-staging-v02.api.letsencrypt.org/directory --issue -d test.acme.sh --standalone --debug
[Mon Aug 30 23:34:40 UTC 2021] Lets find script dir.
[Mon Aug 30 23:34:40 UTC 2021] _SCRIPT_='./acme.sh'
[Mon Aug 30 23:34:40 UTC 2021] _script='/usr/local/src/acme.sh/acme.sh'
[Mon Aug 30 23:34:40 UTC 2021] _script_home='/usr/local/src/acme.sh'
[Mon Aug 30 23:34:40 UTC 2021] Using default home:/root/.acme.sh
[Mon Aug 30 23:34:40 UTC 2021] Using config home:/root/.acme.sh
https://github.com/Neilpang/acme.sh
v2.8.0
[Mon Aug 30 23:34:40 UTC 2021] Using server: https://acme-staging-v02.api.letsencrypt.org/directory
[Mon Aug 30 23:34:40 UTC 2021] _main_domain='test.acme.sh'
[Mon Aug 30 23:34:40 UTC 2021] _alt_domains='no'
[Mon Aug 30 23:34:40 UTC 2021] Using config home:/root/.acme.sh
[Mon Aug 30 23:34:40 UTC 2021] ACME_DIRECTORY='https://acme-staging-v02.api.letsencrypt.org/directory'
[Mon Aug 30 23:34:40 UTC 2021] DOMAIN_PATH='/root/.acme.sh/test.acme.sh'
[Mon Aug 30 23:34:40 UTC 2021] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
[Mon Aug 30 23:34:40 UTC 2021] _init api for server: https://acme-staging-v02.api.letsencrypt.org/directory
[Mon Aug 30 23:34:40 UTC 2021] GET
[Mon Aug 30 23:34:40 UTC 2021] url='https://acme-staging-v02.api.letsencrypt.org/directory'
[Mon Aug 30 23:34:40 UTC 2021] timeout=
[Mon Aug 30 23:34:40 UTC 2021] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g '
[Mon Aug 30 23:34:40 UTC 2021] ret='0'
[Mon Aug 30 23:34:40 UTC 2021] ACME_KEY_CHANGE='https://acme-staging-v02.api.letsencrypt.org/acme/key-change'
[Mon Aug 30 23:34:40 UTC 2021] ACME_NEW_AUTHZ
[Mon Aug 30 23:34:40 UTC 2021] ACME_NEW_ORDER='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Mon Aug 30 23:34:40 UTC 2021] ACME_NEW_ACCOUNT='https://acme-staging-v02.api.letsencrypt.org/acme/new-acct'
[Mon Aug 30 23:34:40 UTC 2021] ACME_REVOKE_CERT='https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert'
[Mon Aug 30 23:34:40 UTC 2021] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Mon Aug 30 23:34:40 UTC 2021] ACME_NEW_NONCE='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Mon Aug 30 23:34:40 UTC 2021] ACME_VERSION='2'
[Mon Aug 30 23:34:40 UTC 2021] Le_NextRenewTime
[Mon Aug 30 23:34:41 UTC 2021] _on_before_issue
[Mon Aug 30 23:34:41 UTC 2021] _chk_main_domain='test.acme.sh'
[Mon Aug 30 23:34:41 UTC 2021] _chk_alt_domains
[Mon Aug 30 23:34:41 UTC 2021] Le_LocalAddress
[Mon Aug 30 23:34:41 UTC 2021] d='test.acme.sh'
[Mon Aug 30 23:34:41 UTC 2021] Check for domain='test.acme.sh'
[Mon Aug 30 23:34:41 UTC 2021] _currentRoot='no'
[Mon Aug 30 23:34:41 UTC 2021] Standalone mode.
[Mon Aug 30 23:34:41 UTC 2021] _checkport='80'
[Mon Aug 30 23:34:41 UTC 2021] _checkaddr
[Mon Aug 30 23:34:41 UTC 2021] Using: ss
[Mon Aug 30 23:34:41 UTC 2021] d
[Mon Aug 30 23:34:41 UTC 2021] config file is empty, can not read CA_KEY_HASH
[Mon Aug 30 23:34:41 UTC 2021] Using config home:/root/.acme.sh
[Mon Aug 30 23:34:41 UTC 2021] ACME_DIRECTORY='https://acme-staging-v02.api.letsencrypt.org/directory'
[Mon Aug 30 23:34:41 UTC 2021] _init api for server: https://acme-staging-v02.api.letsencrypt.org/directory
[Mon Aug 30 23:34:41 UTC 2021] RSA key
[Mon Aug 30 23:34:41 UTC 2021] Registering account
[Mon Aug 30 23:34:41 UTC 2021] url='https://acme-staging-v02.api.letsencrypt.org/acme/new-acct'
[Mon Aug 30 23:34:41 UTC 2021] payload='{"termsOfServiceAgreed": true}'
[Mon Aug 30 23:34:41 UTC 2021] HEAD
[Mon Aug 30 23:34:41 UTC 2021] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Mon Aug 30 23:34:41 UTC 2021] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g '
[Mon Aug 30 23:39:39 UTC 2021] _ret='0'
[Mon Aug 30 23:39:39 UTC 2021] POST
[Mon Aug 30 23:39:39 UTC 2021] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-acct'
[Mon Aug 30 23:39:39 UTC 2021] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g '
[Mon Aug 30 23:39:39 UTC 2021] _ret='0'
[Mon Aug 30 23:39:39 UTC 2021] code='201'
[Mon Aug 30 23:39:39 UTC 2021] Registered
[Mon Aug 30 23:39:40 UTC 2021] _accUri='https://acme-staging-v02.api.letsencrypt.org/acme/acct/25100248'
[Mon Aug 30 23:39:40 UTC 2021] Calc CA_KEY_HASH='Qr/Q8kY+gzbweygstcA5fBO/4zL1U4Y2BAOPlBwBDWs='
[Mon Aug 30 23:39:40 UTC 2021] ACCOUNT_THUMBPRINT='EPt9fQYEIhP_iyUCmLYKTXtb3CBJNSGwU95cLFRo5zU'
[Mon Aug 30 23:39:40 UTC 2021] Read key length:
[Mon Aug 30 23:39:40 UTC 2021] Creating domain key
[Mon Aug 30 23:39:40 UTC 2021] Use DEFAULT_DOMAIN_KEY_LENGTH=2048
[Mon Aug 30 23:39:40 UTC 2021] Using config home:/root/.acme.sh
[Mon Aug 30 23:39:40 UTC 2021] ACME_DIRECTORY='https://acme-staging-v02.api.letsencrypt.org/directory'
[Mon Aug 30 23:39:40 UTC 2021] Use length 2048
[Mon Aug 30 23:39:40 UTC 2021] Using RSA: 2048
[Mon Aug 30 23:39:40 UTC 2021] The domain key is here: /root/.acme.sh/test.acme.sh/test.acme.sh.key
[Mon Aug 30 23:39:40 UTC 2021] _createcsr
[Mon Aug 30 23:39:40 UTC 2021] Single domain='test.acme.sh'
[Mon Aug 30 23:39:40 UTC 2021] Getting domain auth token for each domain
[Mon Aug 30 23:39:40 UTC 2021] d
[Mon Aug 30 23:39:40 UTC 2021] url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Mon Aug 30 23:39:40 UTC 2021] payload='{"identifiers": [{"type":"dns","value":"test.acme.sh"}]}'
[Mon Aug 30 23:39:40 UTC 2021] POST
[Mon Aug 30 23:39:40 UTC 2021] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Mon Aug 30 23:39:40 UTC 2021] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g '
[Mon Aug 30 23:39:40 UTC 2021] _ret='0'
[Mon Aug 30 23:39:40 UTC 2021] code='201'
[Mon Aug 30 23:39:40 UTC 2021] Le_OrderFinalize='https://acme-staging-v02.api.letsencrypt.org/acme/finalize/25100248/424278398'
[Mon Aug 30 23:39:40 UTC 2021] GET
[Mon Aug 30 23:39:40 UTC 2021] url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/392081458'
[Mon Aug 30 23:39:40 UTC 2021] timeout=
[Mon Aug 30 23:39:40 UTC 2021] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header -g '
[Mon Aug 30 23:39:41 UTC 2021] ret='0'
[Mon Aug 30 23:39:41 UTC 2021] d='test.acme.sh'
[Mon Aug 30 23:39:41 UTC 2021] Getting webroot for domain='test.acme.sh'
[Mon Aug 30 23:39:41 UTC 2021] _w='no'
[Mon Aug 30 23:39:41 UTC 2021] _currentRoot='no'
[Mon Aug 30 23:39:41 UTC 2021] get to authz error.
[Mon Aug 30 23:39:41 UTC 2021] _authorizations_map=',{"type":"urn:ietf:params:acme:error:malformed","detail":"Method not allowed","status": 405}
'
[Mon Aug 30 23:39:41 UTC 2021] pid
[Mon Aug 30 23:39:41 UTC 2021] No need to restore nginx, skip.
[Mon Aug 30 23:39:41 UTC 2021] _clearupdns
[Mon Aug 30 23:39:41 UTC 2021] skip dns.
[Mon Aug 30 23:39:41 UTC 2021] _on_issue_err
[Mon Aug 30 23:39:41 UTC 2021] Please add '--debug' or '--log' to check more details.
[Mon Aug 30 23:39:41 UTC 2021] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
[Mon Aug 30 23:39:41 UTC 2021] Diagnosis versions:
openssl:openssl
OpenSSL 1.0.2k-fips 26 Jan 2017
apache:
apache doesn't exists.
nginx:
nginx version: nginx/1.20.1
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC)
built with OpenSSL 1.1.1g FIPS 21 Apr 2020
TLS SNI support enabled
configure arguments: --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --user=nginx --group=nginx --with-compat --with-debug --with-file-aio --with-google_perftools_module --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_degradation_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module=dynamic --with-http_mp4_module --with-http_perl_module=dynamic --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_xslt_module=dynamic --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-stream_ssl_preread_module --with-threads --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -m64 -mtune=generic' --with-ld-opt='-Wl,-z,relro -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-E'
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
Usage:
socat [options] <bi-address> <bi-address>
options:
-V print version and feature information to stdout, and exit
-h|-? print a help text describing command line options and addresses
-hh like -h, plus a list of all common address option names
-hhh like -hh, plus a list of all available address option names
-d increase verbosity (use up to 4 times; 2 are recommended)
-D analyze file descriptors before loop
-ly[facility] log to syslog, using facility (default is daemon)
-lf<logfile> log to file
-ls log to stderr (default if no other log)
-lm[facility] mixed log mode (stderr during initialization, then syslog)
-lp<progname> set the program name used for logging
-lu use microseconds for logging timestamps
-lh add hostname to log messages
-v verbose data traffic, text
-x verbose data traffic, hexadecimal
-b<size_t> set data buffer size (8192)
-s sloppy (continue on error)
-t<timeout> wait seconds before closing second channel
-T<timeout> total inactivity timeout in seconds
-u unidirectional mode (left to right)
-U unidirectional mode (right to left)
-g do not check option groups
-L <lockfile> try to obtain lock, or fail
-W <lockfile> try to obtain lock, or wait
-4 prefer IPv4 if version is not explicitly specified
-6 prefer IPv6 if version is not explicitly specified
bi-address:
pipe[,<opts>] groups=FD,FIFO
<single-address>!!<single-address>
<single-address>
single-address:
<address-head>[,<opts>]
address-head:
abstract-client:<filename> groups=FD,SOCKET,RETRY,UNIX
abstract-connect:<filename> groups=FD,SOCKET,RETRY,UNIX
abstract-listen:<filename> groups=FD,SOCKET,LISTEN,CHILD,RETRY,UNIX
abstract-recv:<filename> groups=FD,SOCKET,RETRY,UNIX
abstract-recvfrom:<filename> groups=FD,SOCKET,CHILD,RETRY,UNIX
abstract-sendto:<filename> groups=FD,SOCKET,RETRY,UNIX
create:<filename> groups=FD,REG,NAMED
exec:<command-line> groups=FD,FIFO,SOCKET,EXEC,FORK,TERMIOS,PTY,PARENT,UNIX
fd:<num> groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP
gopen:<filename> groups=FD,FIFO,CHR,BLK,REG,SOCKET,NAMED,OPEN,TERMIOS,UNIX
interface:<interface> groups=FD,SOCKET
ip-datagram:<host>:<protocol> groups=FD,SOCKET,RANGE,IP4,IP6
ip-recv:<protocol> groups=FD,SOCKET,RANGE,IP4,IP6
ip-recvfrom:<protocol> groups=FD,SOCKET,CHILD,RANGE,IP4,IP6
ip-sendto:<host>:<protocol> groups=FD,SOCKET,IP4,IP6
ip4-datagram:<host>:<protocol> groups=FD,SOCKET,RANGE,IP4
ip4-recv:<protocol> groups=FD,SOCKET,RANGE,IP4
ip4-recvfrom:<protocol> groups=FD,SOCKET,CHILD,RANGE,IP4
ip4-sendto:<host>:<protocol> groups=FD,SOCKET,IP4
ip6-datagram:<host>:<protocol> groups=FD,SOCKET,RANGE,IP6
ip6-recv:<protocol> groups=FD,SOCKET,RANGE,IP6
ip6-recvfrom:<protocol> groups=FD,SOCKET,CHILD,RANGE,IP6
ip6-sendto:<host>:<protocol> groups=FD,SOCKET,IP6
open:<filename> groups=FD,FIFO,CHR,BLK,REG,NAMED,OPEN,TERMIOS
openssl:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,OPENSSL
openssl-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,IP6,TCP,OPENSSL
pipe:<filename> groups=FD,FIFO,NAMED,OPEN
proxy:<proxy-server>:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,HTTP
pty groups=FD,NAMED,TERMIOS,PTY
readline groups=FD,READLINE,TERMIOS
sctp-connect:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,SCTP
sctp-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,IP6,SCTP
sctp4-connect:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,SCTP
sctp4-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,SCTP
sctp6-connect:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP6,SCTP
sctp6-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP6,SCTP
socket-connect:<domain>:<protocol>:<remote-address> groups=FD,SOCKET,CHILD,RETRY
socket-datagram:<domain>:<type>:<protocol>:<remote-address> groups=FD,SOCKET,RANGE
socket-listen:<domain>:<protocol>:<local-address> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE
socket-recv:<domain>:<type>:<protocol>:<local-address> groups=FD,SOCKET,RANGE
socket-recvfrom:<domain>:<type>:<protocol>:<local-address> groups=FD,SOCKET,CHILD,RANGE
socket-sendto:<domain>:<type>:<protocol>:<remote-address> groups=FD,SOCKET
socks4:<socks-server>:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,SOCKS4
socks4a:<socks-server>:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,SOCKS4
stderr groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP
stdin groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP
stdio groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP
stdout groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP
system:<shell-command> groups=FD,FIFO,SOCKET,EXEC,FORK,TERMIOS,PTY,PARENT,UNIX
tcp-connect:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP
tcp-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,IP6,TCP
tcp4-connect:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP4,TCP
tcp4-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,TCP
tcp6-connect:<host>:<port> groups=FD,SOCKET,CHILD,RETRY,IP6,TCP
tcp6-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP6,TCP
tun[:<ip-addr>/<bits>] groups=FD,CHR,NAMED,OPEN,INTERFACE
udp-connect:<host>:<port> groups=FD,SOCKET,IP4,IP6,UDP
udp-datagram:<host>:<port> groups=FD,SOCKET,RANGE,IP4,IP6,UDP
udp-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RANGE,IP4,IP6,UDP
udp-recv:<port> groups=FD,SOCKET,RANGE,IP4,IP6,UDP
udp-recvfrom:<port> groups=FD,SOCKET,CHILD,RANGE,IP4,IP6,UDP
udp-sendto:<host>:<port> groups=FD,SOCKET,IP4,IP6,UDP
udp4-connect:<host>:<port> groups=FD,SOCKET,IP4,UDP
udp4-datagram:<remote-address>:<port> groups=FD,SOCKET,RANGE,IP4,UDP
udp4-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RANGE,IP4,UDP
udp4-recv:<port> groups=FD,SOCKET,RANGE,IP4,UDP
udp4-recvfrom:<host>:<port> groups=FD,SOCKET,CHILD,RANGE,IP4,UDP
udp4-sendto:<host>:<port> groups=FD,SOCKET,IP4,UDP
udp6-connect:<host>:<port> groups=FD,SOCKET,IP6,UDP
udp6-datagram:<host>:<port> groups=FD,SOCKET,RANGE,IP6,UDP
udp6-listen:<port> groups=FD,SOCKET,LISTEN,CHILD,RANGE,IP6,UDP
udp6-recv:<port> groups=FD,SOCKET,RANGE,IP6,UDP
udp6-recvfrom:<port> groups=FD,SOCKET,CHILD,RANGE,IP6,UDP
udp6-sendto:<host>:<port> groups=FD,SOCKET,IP6,UDP
unix-client:<filename> groups=FD,SOCKET,NAMED,RETRY,UNIX
unix-connect:<filename> groups=FD,SOCKET,NAMED,RETRY,UNIX
unix-listen:<filename> groups=FD,SOCKET,NAMED,LISTEN,CHILD,RETRY,UNIX
unix-recv:<filename> groups=FD,SOCKET,NAMED,RETRY,UNIX
unix-recvfrom:<filename> groups=FD,SOCKET,NAMED,CHILD,RETRY,UNIX
unix-sendto:<filename> groups=FD,SOCKET,NAMED,RETRY,UNIX