Thanks.
Now using the DNS-01 method, the following error occurs again:
zenops@hwsafe03:~$ sudo .acme.sh/acme.sh --issue --dns dns_cx -d zen02.newnet.cf --debug
[Sun Sep 23 17:03:17 CST 2018] Lets find script dir.
[Sun Sep 23 17:03:17 CST 2018] SCRIPT=’.acme.sh/acme.sh’
[Sun Sep 23 17:03:17 CST 2018] _script=’/home/zenops/.acme.sh/acme.sh’
[Sun Sep 23 17:03:17 CST 2018] _script_home=’/home/zenops/.acme.sh’
[Sun Sep 23 17:03:17 CST 2018] Using default home:/home/zenops/.acme.sh
[Sun Sep 23 17:03:17 CST 2018] Using config home:/home/zenops/.acme.sh
v2.8.0
[Sun Sep 23 17:03:17 CST 2018] _main_domain=‘zen02.newnet.cf’
[Sun Sep 23 17:03:17 CST 2018] _alt_domains=‘no’
[Sun Sep 23 17:03:17 CST 2018] Using config home:/home/zenops/.acme.sh
[Sun Sep 23 17:03:17 CST 2018] ACME_DIRECTORY=‘https://acme-v01.api.letsencrypt.org/directory’
[Sun Sep 23 17:03:17 CST 2018] DOMAIN_PATH=’/home/zenops/.acme.sh/zen02.newnet.cf’
[Sun Sep 23 17:03:17 CST 2018] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
[Sun Sep 23 17:03:17 CST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Sun Sep 23 17:03:17 CST 2018] GET
[Sun Sep 23 17:03:17 CST 2018] url=‘https://acme-v01.api.letsencrypt.org/directory’
[Sun Sep 23 17:03:17 CST 2018] timeout=
[Sun Sep 23 17:03:17 CST 2018] _CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’
[Sun Sep 23 17:03:18 CST 2018] ret=‘0’
[Sun Sep 23 17:03:18 CST 2018] ACME_KEY_CHANGE=‘https://acme-v01.api.letsencrypt.org/acme/key-change’
[Sun Sep 23 17:03:18 CST 2018] ACME_NEW_AUTHZ=‘https://acme-v01.api.letsencrypt.org/acme/new-authz’
[Sun Sep 23 17:03:18 CST 2018] ACME_NEW_ORDER=‘https://acme-v01.api.letsencrypt.org/acme/new-cert’
[Sun Sep 23 17:03:18 CST 2018] ACME_NEW_ACCOUNT=‘https://acme-v01.api.letsencrypt.org/acme/new-reg’
[Sun Sep 23 17:03:18 CST 2018] ACME_REVOKE_CERT=‘https://acme-v01.api.letsencrypt.org/acme/revoke-cert’
[Sun Sep 23 17:03:18 CST 2018] ACME_AGREEMENT=‘https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf’
[Sun Sep 23 17:03:18 CST 2018] ACME_NEW_NONCE
[Sun Sep 23 17:03:18 CST 2018] ACME_VERSION
[Sun Sep 23 17:03:18 CST 2018] _on_before_issue
[Sun Sep 23 17:03:18 CST 2018] _chk_main_domain=‘zen02.newnet.cf’
[Sun Sep 23 17:03:18 CST 2018] _chk_alt_domains
[Sun Sep 23 17:03:18 CST 2018] Le_LocalAddress
[Sun Sep 23 17:03:18 CST 2018] d=‘zen02.newnet.cf’
[Sun Sep 23 17:03:18 CST 2018] Check for domain=‘zen02.newnet.cf’
[Sun Sep 23 17:03:18 CST 2018] _currentRoot=‘dns_cx’
[Sun Sep 23 17:03:18 CST 2018] d
[Sun Sep 23 17:03:18 CST 2018] config file is empty, can not read CA_KEY_HASH
[Sun Sep 23 17:03:18 CST 2018] Using config home:/home/zenops/.acme.sh
[Sun Sep 23 17:03:18 CST 2018] ACME_DIRECTORY=‘https://acme-v01.api.letsencrypt.org/directory’
[Sun Sep 23 17:03:18 CST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Sun Sep 23 17:03:18 CST 2018] Use default length 2048
[Sun Sep 23 17:03:18 CST 2018] length=‘2048’
[Sun Sep 23 17:03:18 CST 2018] Using config home:/home/zenops/.acme.sh
[Sun Sep 23 17:03:18 CST 2018] ACME_DIRECTORY=‘https://acme-v01.api.letsencrypt.org/directory’
[Sun Sep 23 17:03:18 CST 2018] Use length 2048
[Sun Sep 23 17:03:18 CST 2018] Using RSA: 2048
[Sun Sep 23 17:03:19 CST 2018] RSA key
[Sun Sep 23 17:03:19 CST 2018] Registering account
[Sun Sep 23 17:03:19 CST 2018] url=‘https://acme-v01.api.letsencrypt.org/acme/new-reg’
[Sun Sep 23 17:03:19 CST 2018] payload=’{“resource”: “new-reg”, “terms-of-service-agreed”: true, “agreement”: “https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf”}’
[Sun Sep 23 17:03:19 CST 2018] GET
[Sun Sep 23 17:03:19 CST 2018] url=‘https://acme-v01.api.letsencrypt.org/directory’
[Sun Sep 23 17:03:19 CST 2018] timeout=
[Sun Sep 23 17:03:19 CST 2018] _CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’
[Sun Sep 23 17:03:19 CST 2018] ret=‘0’
[Sun Sep 23 17:03:19 CST 2018] POST
[Sun Sep 23 17:03:19 CST 2018] _post_url=‘https://acme-v01.api.letsencrypt.org/acme/new-reg’
[Sun Sep 23 17:03:19 CST 2018] _CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’
[Sun Sep 23 17:03:21 CST 2018] _ret=‘0’
[Sun Sep 23 17:03:21 CST 2018] code=‘201’
[Sun Sep 23 17:03:21 CST 2018] Registered
[Sun Sep 23 17:03:21 CST 2018] _accUri=‘https://acme-v01.api.letsencrypt.org/acme/reg/42608138’
[Sun Sep 23 17:03:21 CST 2018] Calc CA_KEY_HASH=‘CTrTJLe4fri71yZuIbE4zNkzc8qc2nLBeszAjEYR0H4=’
[Sun Sep 23 17:03:21 CST 2018] ACCOUNT_THUMBPRINT=‘3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg’
[Sun Sep 23 17:03:21 CST 2018] Read key length:
[Sun Sep 23 17:03:21 CST 2018] Creating domain key
[Sun Sep 23 17:03:21 CST 2018] Use DEFAULT_DOMAIN_KEY_LENGTH=2048
[Sun Sep 23 17:03:21 CST 2018] Using config home:/home/zenops/.acme.sh
[Sun Sep 23 17:03:21 CST 2018] ACME_DIRECTORY=‘https://acme-v01.api.letsencrypt.org/directory’
[Sun Sep 23 17:03:21 CST 2018] Use length 2048
[Sun Sep 23 17:03:21 CST 2018] Using RSA: 2048
[Sun Sep 23 17:03:21 CST 2018] The domain key is here: /home/zenops/.acme.sh/zen02.newnet.cf/zen02.newnet.cf.key
[Sun Sep 23 17:03:21 CST 2018] _createcsr
[Sun Sep 23 17:03:21 CST 2018] Single domain=‘zen02.newnet.cf’
[Sun Sep 23 17:03:21 CST 2018] Getting domain auth token for each domain
[Sun Sep 23 17:03:21 CST 2018] d=‘zen02.newnet.cf’
[Sun Sep 23 17:03:21 CST 2018] Getting webroot for domain=‘zen02.newnet.cf’
[Sun Sep 23 17:03:21 CST 2018] _w=‘dns_cx’
[Sun Sep 23 17:03:21 CST 2018] _currentRoot=‘dns_cx’
[Sun Sep 23 17:03:21 CST 2018] Getting new-authz for domain=‘zen02.newnet.cf’
[Sun Sep 23 17:03:21 CST 2018] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Sun Sep 23 17:03:21 CST 2018] Try new-authz for the 0 time.
[Sun Sep 23 17:03:21 CST 2018] url=‘https://acme-v01.api.letsencrypt.org/acme/new-authz’
[Sun Sep 23 17:03:21 CST 2018] payload=’{“resource”: “new-authz”, “identifier”: {“type”: “dns”, “value”: “zen02.newnet.cf”}}’
[Sun Sep 23 17:03:21 CST 2018] POST
[Sun Sep 23 17:03:21 CST 2018] _post_url=‘https://acme-v01.api.letsencrypt.org/acme/new-authz’
[Sun Sep 23 17:03:21 CST 2018] _CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’
[Sun Sep 23 17:03:22 CST 2018] _ret=‘0’
[Sun Sep 23 17:03:22 CST 2018] code=‘201’
[Sun Sep 23 17:03:22 CST 2018] The new-authz request is ok.
[Sun Sep 23 17:03:22 CST 2018] entry=’“type”:“dns-01”,“status”:“pending”,“uri”:“https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311",“token”:"NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo”’
[Sun Sep 23 17:03:22 CST 2018] token=‘NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo’
[Sun Sep 23 17:03:22 CST 2018] uri=‘https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311’
[Sun Sep 23 17:03:22 CST 2018] keyauthorization=‘NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg’
[Sun Sep 23 17:03:22 CST 2018] dvlist=‘zen02.newnet.cf#NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg#https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311#dns-01#dns_cx’
[Sun Sep 23 17:03:22 CST 2018] d
[Sun Sep 23 17:03:22 CST 2018] vlist=‘zen02.newnet.cf#NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg#https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311#dns-01#dns_cx,’
[Sun Sep 23 17:03:22 CST 2018] d=‘zen02.newnet.cf’
[Sun Sep 23 17:03:22 CST 2018] _d_alias
[Sun Sep 23 17:03:22 CST 2018] txtdomain=’_acme-challenge.zen02.newnet.cf’
[Sun Sep 23 17:03:22 CST 2018] txt=‘OSSJ6IqI3PqjsestIpyIWApGySirKQQbOJIeQK-4jSw’
[Sun Sep 23 17:03:22 CST 2018] d_api=’/home/zenops/.acme.sh/dnsapi/dns_cx.sh’
[Sun Sep 23 17:03:22 CST 2018] Found domain api file: /home/zenops/.acme.sh/dnsapi/dns_cx.sh
[Sun Sep 23 17:03:22 CST 2018] First detect the root zone
[Sun Sep 23 17:03:22 CST 2018] ep=‘domain’
[Sun Sep 23 17:03:22 CST 2018] url=‘https://www.cloudxns.net/api2/domain’
[Sun Sep 23 17:03:22 CST 2018] cdate=‘2018-09-23 09:03:22 UTC’
[Sun Sep 23 17:03:22 CST 2018] data
‘ttps://www.cloudxns.net/api2/domain2018-09-23 09:03:22 UTCaefa8233b182092f
[Sun Sep 23 17:03:22 CST 2018] hmac=‘ed875caedbca31b2912fabddd7a853d0’
[Sun Sep 23 17:03:22 CST 2018] GET
[Sun Sep 23 17:03:22 CST 2018] url=‘https://www.cloudxns.net/api2/domain’
[Sun Sep 23 17:03:22 CST 2018] timeout=
[Sun Sep 23 17:03:23 CST 2018] _CURL=‘curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’
[Sun Sep 23 17:03:23 CST 2018] ret=‘0’
[Sun Sep 23 17:03:23 CST 2018] invalid domain
[Sun Sep 23 17:03:23 CST 2018] Error add txt for domain:_acme-challenge.zen02.newnet.cf
[Sun Sep 23 17:03:23 CST 2018] pid
[Sun Sep 23 17:03:23 CST 2018] No need to restore nginx, skip.
[Sun Sep 23 17:03:23 CST 2018] _clearupdns
[Sun Sep 23 17:03:23 CST 2018] skip dns.
[Sun Sep 23 17:03:23 CST 2018] _on_issue_err
[Sun Sep 23 17:03:23 CST 2018] Please add ‘–debug’ or ‘–log’ to check more details.
[Sun Sep 23 17:03:23 CST 2018] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh
[Sun Sep 23 17:03:23 CST 2018] url=‘https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311’
[Sun Sep 23 17:03:23 CST 2018] payload=’{“resource”: “challenge”, “keyAuthorization”: “NFQ0yw0jKRwCmDfUdqc5O-cUWlGy16QyxXx3WHYDXTo.3XBwyNz5JzZgDMnfqAWw97tVCJeQTzDPIbPlSbyKXyg”}’
[Sun Sep 23 17:03:23 CST 2018] POST
[Sun Sep 23 17:03:23 CST 2018] _post_url=‘https://acme-v01.api.letsencrypt.org/acme/challenge/-sc7GfkC6A3nQ0KnOgaLi9HB4GWSwhkYLLFerQduZLE/7597565311’
[Sun Sep 23 17:03:23 CST 2018] _CURL='curl -L --silent --dump-header /home/zenops/.acme.sh/http.header -g ’
[Sun Sep 23 17:03:24 CST 2018] _ret=‘0’
[Sun Sep 23 17:03:24 CST 2018] code=‘202’
[Sun Sep 23 17:03:24 CST 2018] Diagnosis versions:
openssl:openssl
OpenSSL 1.0.2g 1 Mar 2016
apache:
apache doesn’t exists.
nginx:
nginx doesn’t exists.
socat: