Fail to auto-renew with acme.sh

Help
1

Hi, I was using acme.sh to deploy certificate but today my site’s cert is expired. So I tried to renew it manually but failed. Part of the debug output with errors is like this:

[Fri Jan 19 14:48:11 CST 2018] error='"error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http://moonshinefly.com/.well-known/acme-challenge/is91IDqWHeKPRmlnCrxl6BlDvbupL7nygD_nolTKU_M: '
[Fri Jan 19 14:48:11 CST 2018] errordetail='Invalid response from http://moonshinefly.com/.well-known/acme-challenge/is91IDqWHeKPRmlnCrxl6BlDvbupL7nygD_nolTKU_M: '
[Fri Jan 19 14:48:11 CST 2018] moonshinefly.com:Verify error:Invalid response from http://moonshinefly.com/.well-known/acme-challenge/is91IDqWHeKPRmlnCrxl6BlDvbupL7nygD_nolTKU_M: 
[Fri Jan 19 14:48:11 CST 2018] Debug: get token url.
[Fri Jan 19 14:48:11 CST 2018] GET
[Fri Jan 19 14:48:11 CST 2018] url='http://moonshinefly.com/.well-known/acme-challenge/is91IDqWHeKPRmlnCrxl6BlDvbupL7nygD_nolTKU_M'
[Fri Jan 19 14:48:11 CST 2018] timeout='1'
[Fri Jan 19 14:48:11 CST 2018] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header  --trace-ascii /tmp/tmp.phrk87OQtQ  --connect-timeout 1'
[Fri Jan 19 14:48:12 CST 2018] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 28
[Fri Jan 19 14:48:12 CST 2018] Here is the curl dump log:
[Fri Jan 19 14:48:12 CST 2018] == Info: Resolving timed out after 1511 milliseconds
== Info: Closing connection 0

It seems /.well-known/acme-challenge/is91IDqWHeKPRmlnCrxl6BlDvbupL7nygD_nolTKU_M is missing.

I’m using nginx and after I checked the /wwwroot/moonshinefly.com, there is /.well-known/acme-challenge dir, but I don’t know why it can’t be reached.

2

https://www.moonshinefly.com/.well-known/acme-challenge/ pretty clearly gives a 404, so your nginx configuration is not correctly routing requests to that directory.

Can you show your nginx configuration?

Perhaps you need

location /.well-known/acme-challenge {
  root /wwwroot/moonshinefly.com;
}

Ensure that acme.sh is also configured to use that webroot, -w /wwwroot/moonshinefly.com.

3

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.