sahsanu
September 17, 2017, 11:12am
21
And you did it, now www.99anchors.dev.new.citykites.com
is pointing to 160.153.71.135
BUT I don't know what you did but you have removed the A record for 99anchors.dev.new.citykites.com
Please, create an A record for 99anchors.dev.new.citykites.com
the same way you did it for www.99anchors.dev.new.citykites.com
Once you create the A record for 99anchors.dev.new.citykites.com
(please please, don't remove the A record for www.99anchors.dev.new.citykites.com
) you should try to issue a certificate for your domains.
Good luck,
sahsanu
Is this step OK? I am now in zone file of dev.new.citykites.com
sahsanu
September 17, 2017, 11:59am
23
If you are in zone dev.new.citykites.com
then the host should be 99anchors
not 99anchors.dev.new
Note: I'm leaving now so I could not be able to answer you in a timely manner.
Thanks!!! I hope to solve the issue
I solved the issue finally! but now this new problem
The website 99anchors.com is secure but www.99anchors.com is not
What do I do? rename the folder in public_html from 99anchors.com to www.99anchors.com ?
sahsanu
September 17, 2017, 2:33pm
27
The certificate you have issued only covers 99anchors.com
but no www.99anchors.com
. When you run the acme.sh
you need to specify both domains.
No.
Cheers,
sahsanu
I got the error below
acme.sh --issue -d www.99anchors.com -w public_html/99anchors
[Wed Oct 4 09:29:12 MST 2017] Creating domain key
[Wed Oct 4 09:29:13 MST 2017] The domain key is here: /home/sachinmandalia/.acme.sh/www.99anchors.com/www.99anchors.com.key
[Wed Oct 4 09:29:13 MST 2017] Single domain=‘www.99anchors.com ’
[Wed Oct 4 09:29:13 MST 2017] Getting domain auth token for each domain
[Wed Oct 4 09:29:13 MST 2017] Getting webroot for domain=‘www.99anchors.com ’
[Wed Oct 4 09:29:13 MST 2017] Getting new-authz for domain=‘www.99anchors.com ’
[Wed Oct 4 09:29:14 MST 2017] The new-authz request is ok.
[Wed Oct 4 09:29:14 MST 2017] Verifying:www.99anchors.com
[Wed Oct 4 09:29:18 MST 2017] Pending
[Wed Oct 4 09:29:20 MST 2017] www.99anchors.com :Verify error:Fetching https://www.99anchors.com/.well-known/acme-challenge/DWb_X-LP-CVInx4V1GzeRZHn47vT5pW8Onz5v4fWMEE: Error getting validation data
[Wed Oct 4 09:29:20 MST 2017] Please add ‘–debug’ or ‘–log’ to check more details.
[Wed Oct 4 09:29:20 MST 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
acme.sh --issue -d www.99anchors.com -w public_html/99anchors --debug
[Wed Oct 4 09:36:06 MST 2017] Lets find script dir.
[Wed Oct 4 09:36:06 MST 2017] _SCRIPT_='/home/sachinmandalia/.acme.sh/acme.sh'
[Wed Oct 4 09:36:06 MST 2017] _script='/home/sachinmandalia/.acme.sh/acme.sh'
[Wed Oct 4 09:36:06 MST 2017] _script_home='/home/sachinmandalia/.acme.sh'
[Wed Oct 4 09:36:06 MST 2017] Using config home:/home/sachinmandalia/.acme.sh
https://github.com/Neilpang/acme.sh
v2.7.4
[Wed Oct 4 09:36:06 MST 2017] Using config home:/home/sachinmandalia/.acme.sh
[Wed Oct 4 09:36:06 MST 2017] DOMAIN_PATH='/home/sachinmandalia/.acme.sh/www.99anchors.com'
[Wed Oct 4 09:36:06 MST 2017] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
[Wed Oct 4 09:36:06 MST 2017] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Wed Oct 4 09:36:06 MST 2017] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
[Wed Oct 4 09:36:06 MST 2017] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Wed Oct 4 09:36:06 MST 2017] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
[Wed Oct 4 09:36:06 MST 2017] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
[Wed Oct 4 09:36:06 MST 2017] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
[Wed Oct 4 09:36:06 MST 2017] Le_NextRenewTime
[Wed Oct 4 09:36:07 MST 2017] _on_before_issue
[Wed Oct 4 09:36:07 MST 2017] Le_LocalAddress
[Wed Oct 4 09:36:07 MST 2017] Check for domain='www.99anchors.com'
[Wed Oct 4 09:36:07 MST 2017] _currentRoot='public_html/99anchors'
[Wed Oct 4 09:36:07 MST 2017] _saved_account_key_hash is not changed, skip register account.
[Wed Oct 4 09:36:07 MST 2017] Read key length:
[Wed Oct 4 09:36:07 MST 2017] _createcsr
[Wed Oct 4 09:36:07 MST 2017] Single domain='www.99anchors.com'
[Wed Oct 4 09:36:07 MST 2017] Getting domain auth token for each domain
[Wed Oct 4 09:36:07 MST 2017] Getting webroot for domain='www.99anchors.com'
[Wed Oct 4 09:36:07 MST 2017] _w='public_html/99anchors'
[Wed Oct 4 09:36:07 MST 2017] _currentRoot='public_html/99anchors'
[Wed Oct 4 09:36:07 MST 2017] Getting new-authz for domain='www.99anchors.com'
[Wed Oct 4 09:36:07 MST 2017] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Wed Oct 4 09:36:07 MST 2017] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
[Wed Oct 4 09:36:07 MST 2017] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Wed Oct 4 09:36:07 MST 2017] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
[Wed Oct 4 09:36:07 MST 2017] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
[Wed Oct 4 09:36:07 MST 2017] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
[Wed Oct 4 09:36:07 MST 2017] Try new-authz for the 0 time.
[Wed Oct 4 09:36:07 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Wed Oct 4 09:36:07 MST 2017] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "www.99anchors.com"}}'
[Wed Oct 4 09:36:07 MST 2017] RSA key
[Wed Oct 4 09:36:07 MST 2017] GET
[Wed Oct 4 09:36:07 MST 2017] url='https://acme-v01.api.letsencrypt.org/directory'
[Wed Oct 4 09:36:07 MST 2017] timeout
[Wed Oct 4 09:36:07 MST 2017] _CURL='curl -L --silent --dump-header /home/sachinmandalia/.acme.sh/http.header '
[Wed Oct 4 09:36:07 MST 2017] ret='0'
[Wed Oct 4 09:36:07 MST 2017] POST
[Wed Oct 4 09:36:07 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Wed Oct 4 09:36:07 MST 2017] _CURL='curl -L --silent --dump-header /home/sachinmandalia/.acme.sh/http.header '
[Wed Oct 4 09:36:08 MST 2017] _ret='0'
[Wed Oct 4 09:36:08 MST 2017] code='201'
[Wed Oct 4 09:36:08 MST 2017] The new-authz request is ok.
[Wed Oct 4 09:36:08 MST 2017] entry='"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962","token":"fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0"'
[Wed Oct 4 09:36:08 MST 2017] token='fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0'
[Wed Oct 4 09:36:08 MST 2017] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:08 MST 2017] keyauthorization='fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0.JtUSbxw9uvJQDlLZ-zxP8bliwsMVNwQul_2xzYPCDbw'
[Wed Oct 4 09:36:08 MST 2017] dvlist='www.99anchors.com#fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0.JtUSbxw9uvJQDlLZ-zxP8bliwsMVNwQul_2xzYPCDbw#https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962#http-01#public_html/99anchors'
[Wed Oct 4 09:36:08 MST 2017] vlist='www.99anchors.com#fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0.JtUSbxw9uvJQDlLZ-zxP8bliwsMVNwQul_2xzYPCDbw#https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962#http-01#public_html/99anchors,'
[Wed Oct 4 09:36:08 MST 2017] ok, let's start to verify
[Wed Oct 4 09:36:08 MST 2017] Verifying:www.99anchors.com
[Wed Oct 4 09:36:08 MST 2017] d='www.99anchors.com'
[Wed Oct 4 09:36:08 MST 2017] keyauthorization='fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0.JtUSbxw9uvJQDlLZ-zxP8bliwsMVNwQul_2xzYPCDbw'
[Wed Oct 4 09:36:08 MST 2017] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:08 MST 2017] _currentRoot='public_html/99anchors'
[Wed Oct 4 09:36:08 MST 2017] wellknown_path='public_html/99anchors/.well-known/acme-challenge'
[Wed Oct 4 09:36:08 MST 2017] writing token:fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0 to public_html/99anchors/.well-known/acme-challenge/fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0
[Wed Oct 4 09:36:08 MST 2017] Changing owner/group of .well-known to sachinmandalia:nobody
[Wed Oct 4 09:36:08 MST 2017] chown: changing ownership of `public_html/99anchors/.well-known/acme-challenge/cwMj4iS3ugNcWf4rjJILz422MZRUoaTLd__cslI0bu4': Operation not permitted
chown: changing ownership of `public_html/99anchors/.well-known/acme-challenge/fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0': Operation not permitted
chown: changing ownership of `public_html/99anchors/.well-known/acme-challenge/1HvhLuD8vx3Acis-ILzw_RYvNeKrdas8AHkaAnYWmLA': Operation not permitted
chown: changing ownership of `public_html/99anchors/.well-known/acme-challenge': Operation not permitted
chown: changing ownership of `public_html/99anchors/.well-known': Operation not permitted
[Wed Oct 4 09:36:08 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:08 MST 2017] payload='{"resource": "challenge", "keyAuthorization": "fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0.JtUSbxw9uvJQDlLZ-zxP8bliwsMVNwQul_2xzYPCDbw"}'
[Wed Oct 4 09:36:08 MST 2017] POST
[Wed Oct 4 09:36:08 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:08 MST 2017] _CURL='curl -L --silent --dump-header /home/sachinmandalia/.acme.sh/http.header '
[Wed Oct 4 09:36:09 MST 2017] _ret='0'
[Wed Oct 4 09:36:09 MST 2017] code='202'
[Wed Oct 4 09:36:09 MST 2017] sleep 2 secs to verify
[Wed Oct 4 09:36:11 MST 2017] checking
[Wed Oct 4 09:36:11 MST 2017] GET
[Wed Oct 4 09:36:11 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:11 MST 2017] timeout
[Wed Oct 4 09:36:11 MST 2017] _CURL='curl -L --silent --dump-header /home/sachinmandalia/.acme.sh/http.header '
[Wed Oct 4 09:36:11 MST 2017] ret='0'
[Wed Oct 4 09:36:11 MST 2017] Pending
[Wed Oct 4 09:36:11 MST 2017] sleep 2 secs to verify
[Wed Oct 4 09:36:13 MST 2017] checking
[Wed Oct 4 09:36:13 MST 2017] GET
[Wed Oct 4 09:36:13 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:13 MST 2017] timeout
[Wed Oct 4 09:36:13 MST 2017] _CURL='curl -L --silent --dump-header /home/sachinmandalia/.acme.sh/http.header '
[Wed Oct 4 09:36:13 MST 2017] ret='0'
[Wed Oct 4 09:36:13 MST 2017] www.99anchors.com:Verify error:Fetching https://www.99anchors.com/.well-known/acme-challenge/fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0: Error getting validation data
[Wed Oct 4 09:36:13 MST 2017] Debug: get token url.
[Wed Oct 4 09:36:13 MST 2017] GET
[Wed Oct 4 09:36:13 MST 2017] url='http://www.99anchors.com/.well-known/acme-challenge/fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0'
[Wed Oct 4 09:36:13 MST 2017] timeout='1'
[Wed Oct 4 09:36:13 MST 2017] _CURL='curl -L --silent --dump-header /home/sachinmandalia/.acme.sh/http.header --connect-timeout 1'
[Wed Oct 4 09:36:14 MST 2017] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 51
[Wed Oct 4 09:36:14 MST 2017] ret='51'
[Wed Oct 4 09:36:14 MST 2017] Debugging, skip removing: public_html/99anchors/.well-known/acme-challenge/fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0
[Wed Oct 4 09:36:14 MST 2017] pid
[Wed Oct 4 09:36:14 MST 2017] No need to restore nginx, skip.
[Wed Oct 4 09:36:14 MST 2017] _clearupdns
[Wed Oct 4 09:36:14 MST 2017] skip dns.
[Wed Oct 4 09:36:14 MST 2017] _on_issue_err
[Wed Oct 4 09:36:14 MST 2017] Please add '--debug' or '--log' to check more details.
[Wed Oct 4 09:36:14 MST 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
[Wed Oct 4 09:36:14 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:14 MST 2017] payload='{"resource": "challenge", "keyAuthorization": "fhadst6Hr9DSgEtlLwGHPO_k-zeph6Fcm6ghGhX-0H0.JtUSbxw9uvJQDlLZ-zxP8bliwsMVNwQul_2xzYPCDbw"}'
[Wed Oct 4 09:36:14 MST 2017] POST
[Wed Oct 4 09:36:14 MST 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/2hMViconsbXM8wRvo1XtRZgW23kihOhdCQIFBKyiu7E/2129449962'
[Wed Oct 4 09:36:14 MST 2017] _CURL='curl -L --silent --dump-header /home/sachinmandalia/.acme.sh/http.header '
[Wed Oct 4 09:36:14 MST 2017] _ret='0'
[Wed Oct 4 09:36:14 MST 2017] code='400'
[Wed Oct 4 09:36:14 MST 2017] socat doesn't exists.
[Wed Oct 4 09:36:14 MST 2017] Diagnosis versions:
openssl:openssl
OpenSSL 1.0.1e-fips 11 Feb 2013
apache:
apache doesn't exists.
nginx:
nginx doesn't exists.
socat:
rg305
October 4, 2017, 4:40pm
30
This should include both domains
-d www.99anchors.com -d 99anchors.com
And the path "public_html/99anchors"
should probably be something (more fully qualified) like:
/folder/public_html/99anchors
1 Like
acme.sh --issue -d www.99anchors.com -d 99anchors.com -w public_html/99anchors
[Wed Oct 4 10:19:44 MST 2017] Multi domain='DNS:99anchors.com'
[Wed Oct 4 10:19:44 MST 2017] Getting domain auth token for each domain
[Wed Oct 4 10:19:44 MST 2017] Getting webroot for domain='www.99anchors.com'
[Wed Oct 4 10:19:44 MST 2017] Getting new-authz for domain='www.99anchors.com'
[Wed Oct 4 10:19:45 MST 2017] The new-authz request is ok.
[Wed Oct 4 10:19:45 MST 2017] Getting webroot for domain='99anchors.com'
[Wed Oct 4 10:19:45 MST 2017] Getting new-authz for domain='99anchors.com'
[Wed Oct 4 10:19:46 MST 2017] The new-authz request is ok.
[Wed Oct 4 10:19:46 MST 2017] Verifying:www.99anchors.com
[Wed Oct 4 10:19:49 MST 2017] Pending
[Wed Oct 4 10:19:52 MST 2017] www.99anchors.com:Verify error:Fetching https://www.99anchors.com/.well-known/acme-challenge/hzg2D-tYSdRrQHkQKU-yHBW-O_IuGfyUaKilRFtq-4U: Error getting validation data
[Wed Oct 4 10:19:52 MST 2017] Please add '--debug' or '--log' to check more details.
[Wed Oct 4 10:19:52 MST 2017] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
rg305
October 4, 2017, 5:22pm
32
Did you miss that part?
What is the full path to the 99anchors folder?
I dont think so, i have verified the folder its public_html/99anchors
rg305
October 4, 2017, 5:26pm
34
That's highly unlikely.
Try it with a leading slash:
/public_html/99anchors
Or better yet, try finding the actual complete path:
cd /
find / -name 99anchors | grep 'public_html/99anchors'
schoen
October 4, 2017, 6:23pm
35
public_html/99anchors
might work relative to where you are when you run the command, but it’s not reliable to use in this context because it’s not an absolute path, and the command might not be run from the same working directory in the future.
You could try running realpath public_html/99anchors
to find out the absolute path to that directory.
schoen
October 4, 2017, 6:23pm
36
cd /
is redundant in this case before find /
rg305
October 4, 2017, 6:29pm
37
yes, but that was intentional as I’ve seen that in strange situations it can fail from other locations.
back to the problem at hand - the site fails while looping indefinitely:
wget http://99anchors.com/ --no-check-certificate
–2017-10-04 14:27:52-- http://99anchors.com/
Resolving 99anchors.com (99anchors.com )… 160.153.71.135
Connecting to 99anchors.com (99anchors.com )|160.153.71.135|:80… connected.
HTTP request sent, awaiting response… 301 Moved Permanently
Location: http://www.99anchors.com/ [following]
…
…
…
–2017-10-04 14:27:54-- https://www.99anchors.com/
Reusing existing connection to www.99anchors.com:443 .
HTTP request sent, awaiting response… 301 Moved Permanently
Location: https://www.99anchors.com/ [following]
20 redirections exceeded.
I am still stuck with the same problem here…
I got 99anchors.com verified but not www.99anchors.com
find / -name 99anchors | grep ‘public_html/99anchors’
gives me permission denied error.
tried full path like /public_html/99anchors but doesnt work
rg305
October 14, 2017, 9:58pm
39
add sudo
cd /
sudo find / -name 99anchors | grep ‘public_html/99anchors’
-bash: sudo: command not found