The challenge file for Let's Encrypt is giving 404 error when the site on litespeed server is accessed via http using acme.sh on CentOS 7. How do I resolve?

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
imeitracker.2kks.com.ng

I ran this command:
[root@aproko2kks ~]# acme.sh --log --issue --staging -d imeitracker.2kks.com.ng -w /home/2kks.com.ng/imeitracker/.well-known/acme-challenge/ --deploy-hook "chmod 644 /home/2kks.com.ng/imeitracker/.well-known/acme-challenge/*"

It produced this output:

My web server is (include version):
LiteSpeed/1.7.19 Open (BUILD built: Tue Apr 16 15:14:26 UTC 2024)
module versions:
lsquic 3.3.2
modgzip 1.1
cache 1.66
mod_security 1.4 (with libmodsecurity v3.0.12)

The operating system my web server runs on is (include version):
Static hostname: aproko2kks.vps
Icon name: computer-container
Chassis: container
Machine ID: f4e9fe1aa11a4cf0b9ad9a0b8df88ee5
Boot ID: 13f52215899047df899eda2930bf3ad5
Virtualization: openvz
Operating System: CentOS Linux 7 (Core)
CPE OS Name: cpe:/o:centos:centos:7
Kernel: Linux 3.10.0
Architecture: x86-64

My hosting provider, if applicable, is:
Hostinger

I can login to a root shell on my machine (yes or no, or I don't know):
Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Cyberpanel

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
I am using acme.sh.

v3.0.8

This is the error log
acme.sh.log.upload.txt (32.4 KB)

2

Why?

What does your web server log say about that 404 error?

2 Likes
3

This is the error message that is displayed. I have attached the error logs in the original message:

[root@aproko2kks ~]# acme.sh --log --issue --staging -d imeitracker.2kks.com.ng -w /home/2kks.com.ng/imeitracker/.well-known/acme-challenge/ --deploy-hook "chmod 644 /home/2kks.com.ng/imeitracker/.well-known/acme-challenge/*"
[Sat Aug 17 16:40:39 UTC 2024] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 16:40:40 UTC 2024] Using CA: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 16:40:40 UTC 2024] Single domain='imeitracker.2kks.com.ng'
[Sat Aug 17 16:40:42 UTC 2024] Getting webroot for domain='imeitracker.2kks.com.ng'
[Sat Aug 17 16:40:42 UTC 2024] Verifying: imeitracker.2kks.com.ng
[Sat Aug 17 16:40:42 UTC 2024] Pending. The CA is processing your order, please wait. (1/30)
[Sat Aug 17 16:40:46 UTC 2024] imeitracker.2kks.com.ng: Invalid status. Verification error details: 31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/JJtYSJGagdHiQI8MI5H6qUGnuFsgrHsaWegMyteCMpY: 404
[Sat Aug 17 16:40:46 UTC 2024] Please check log file for more details: /root/.acme.sh/acme.sh.log

4

But you haven't attached logs from your webserver, which is what @9peppe asked for.

2 Likes
5 
[Sat Aug 17 14:29:10 UTC 2024] LE_WORKING_DIR='/root/.acme.sh'
[Sat Aug 17 14:29:10 UTC 2024] Running cmd: issue
[Sat Aug 17 14:29:10 UTC 2024] _main_domain='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:10 UTC 2024] _alt_domains='no'
[Sat Aug 17 14:29:10 UTC 2024] Using config home: /root/.acme.sh
[Sat Aug 17 14:29:10 UTC 2024] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 14:29:10 UTC 2024] ACME_DIRECTORY='https://acme-staging-v02.api.letsencrypt.org/directory'
[Sat Aug 17 14:29:10 UTC 2024] _ACME_SERVER_HOST='acme-staging-v02.api.letsencrypt.org'
[Sat Aug 17 14:29:10 UTC 2024] _ACME_SERVER_PATH='directory'
[Sat Aug 17 14:29:10 UTC 2024] DOMAIN_PATH='/root/.acme.sh/imeitracker.2kks.com.ng_ecc'
[Sat Aug 17 14:29:10 UTC 2024] '/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/' does not contain 'dns'
[Sat Aug 17 14:29:10 UTC 2024] Le_NextRenewTime
[Sat Aug 17 14:29:10 UTC 2024] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 14:29:10 UTC 2024] _init API for server: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 14:29:10 UTC 2024] GET
[Sat Aug 17 14:29:10 UTC 2024] url='https://acme-staging-v02.api.letsencrypt.org/directory'
[Sat Aug 17 14:29:10 UTC 2024] timeout=
[Sat Aug 17 14:29:10 UTC 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sat Aug 17 14:29:11 UTC 2024] ret='0'
[Sat Aug 17 14:29:11 UTC 2024] response='{
  "BKXki892ZXQ": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-staging-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf",
    "website": "https://letsencrypt.org/docs/staging-environment/"
  },
  "newAccount": "https://acme-staging-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-staging-v02.api.letsencrypt.org/draft-ietf-acme-ari-03/renewalInfo",
  "revokeCert": "https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert"
}'
[Sat Aug 17 14:29:11 UTC 2024] ACME_KEY_CHANGE='https://acme-staging-v02.api.letsencrypt.org/acme/key-change'
[Sat Aug 17 14:29:11 UTC 2024] ACME_NEW_AUTHZ
[Sat Aug 17 14:29:11 UTC 2024] ACME_NEW_ORDER='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Sat Aug 17 14:29:11 UTC 2024] ACME_NEW_ACCOUNT='https://acme-staging-v02.api.letsencrypt.org/acme/new-acct'
[Sat Aug 17 14:29:11 UTC 2024] ACME_REVOKE_CERT='https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert'
[Sat Aug 17 14:29:11 UTC 2024] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf'
[Sat Aug 17 14:29:11 UTC 2024] ACME_NEW_NONCE='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Sat Aug 17 14:29:11 UTC 2024] Using CA: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 14:29:11 UTC 2024] _on_before_issue
[Sat Aug 17 14:29:11 UTC 2024] _chk_main_domain='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] _chk_alt_domains
[Sat Aug 17 14:29:11 UTC 2024] '/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/' does not contain 'no'
[Sat Aug 17 14:29:11 UTC 2024] Le_LocalAddress
[Sat Aug 17 14:29:11 UTC 2024] d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] Checking for domain='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] _currentRoot='/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/'
[Sat Aug 17 14:29:11 UTC 2024] d
[Sat Aug 17 14:29:11 UTC 2024] '/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/' does not contain 'apache'
[Sat Aug 17 14:29:11 UTC 2024] _saved_account_key_hash='hWDj2UgF8aE+B6DVTeL/Zm3F6Umv2ntz/pfmsjGanuY='
[Sat Aug 17 14:29:11 UTC 2024] _saved_account_key_hash was not changed, skipping account registration.
[Sat Aug 17 14:29:11 UTC 2024] Read key length: ec-256
[Sat Aug 17 14:29:11 UTC 2024] _createcsr
[Sat Aug 17 14:29:11 UTC 2024] domain='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] domainlist
[Sat Aug 17 14:29:11 UTC 2024] csrkey='/root/.acme.sh/imeitracker.2kks.com.ng_ecc/imeitracker.2kks.com.ng.key'
[Sat Aug 17 14:29:11 UTC 2024] csr='/root/.acme.sh/imeitracker.2kks.com.ng_ecc/imeitracker.2kks.com.ng.csr'
[Sat Aug 17 14:29:11 UTC 2024] csrconf='/root/.acme.sh/imeitracker.2kks.com.ng_ecc/imeitracker.2kks.com.ng.csr.conf'
[Sat Aug 17 14:29:11 UTC 2024] Single domain='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] seg='imeitracker'
[Sat Aug 17 14:29:11 UTC 2024] _is_idn_d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] _idn_temp
[Sat Aug 17 14:29:11 UTC 2024] _is_idn_d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] _idn_temp
[Sat Aug 17 14:29:11 UTC 2024] _csr_cn='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] seg='imeitracker'
[Sat Aug 17 14:29:11 UTC 2024] Getting domain auth token for each domain
[Sat Aug 17 14:29:11 UTC 2024] seg='imeitracker'
[Sat Aug 17 14:29:11 UTC 2024] _is_idn_d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:11 UTC 2024] _idn_temp
[Sat Aug 17 14:29:11 UTC 2024] d
[Sat Aug 17 14:29:11 UTC 2024] _identifiers='{"type":"dns","value":"imeitracker.2kks.com.ng"}'
[Sat Aug 17 14:29:11 UTC 2024] _notBefore
[Sat Aug 17 14:29:11 UTC 2024] _notAfter
[Sat Aug 17 14:29:11 UTC 2024] STEP 1, Ordering a Certificate
[Sat Aug 17 14:29:11 UTC 2024] =======Sending Signed Request=======
[Sat Aug 17 14:29:11 UTC 2024] url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Sat Aug 17 14:29:11 UTC 2024] payload='{"identifiers": [{"type":"dns","value":"imeitracker.2kks.com.ng"}]}'
[Sat Aug 17 14:29:11 UTC 2024] EC key
[Sat Aug 17 14:29:11 UTC 2024] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Sat Aug 17 14:29:11 UTC 2024] HEAD
[Sat Aug 17 14:29:11 UTC 2024] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
[Sat Aug 17 14:29:11 UTC 2024] body
[Sat Aug 17 14:29:11 UTC 2024] _postContentType='application/jose+json'
[Sat Aug 17 14:29:11 UTC 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g  -I  '
[Sat Aug 17 14:29:11 UTC 2024] _ret='0'
[Sat Aug 17 14:29:11 UTC 2024] _headers='HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Aug 2024 14:29:11 GMT
Connection: keep-alive
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 8DtmaS8Sq7AKBsDLGSAa0JyOxCALJ6TMh5Eq9vaKv8vd8vjlW-Y
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

'
[Sat Aug 17 14:29:11 UTC 2024] _CACHED_NONCE='8DtmaS8Sq7AKBsDLGSAa0JyOxCALJ6TMh5Eq9vaKv8vd8vjlW-Y'
[Sat Aug 17 14:29:11 UTC 2024] nonce='8DtmaS8Sq7AKBsDLGSAa0JyOxCALJ6TMh5Eq9vaKv8vd8vjlW-Y'
[Sat Aug 17 14:29:11 UTC 2024] POST
[Sat Aug 17 14:29:11 UTC 2024] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
[Sat Aug 17 14:29:11 UTC 2024] body='{"protected": "eyJub25jZSI6ICI4RHRtYVM4U3E3QUtCc0RMR1NBYTBKeU94Q0FMSjZUTWg1RXE5dmFLdjh2ZDh2amxXLVkiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzE1OTQ0MDI0MyJ9", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6ImltZWl0cmFja2VyLjJra3MuY29tLm5nIn1dfQ", "signature": "AtExw09zLfn2VhhX7Vg-f_oq4EVV4xjQgQs7bfAw9I3yEgxtwOJOENKAoIUT6DJECbnIY6_QrzZYAx8xvJL7Mg"}'
[Sat Aug 17 14:29:11 UTC 2024] _postContentType='application/jose+json'
[Sat Aug 17 14:29:11 UTC 2024] Http already initialized.
[Sat Aug 17 14:29:11 UTC 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sat Aug 17 14:29:12 UTC 2024] _ret='0'
[Sat Aug 17 14:29:12 UTC 2024] responseHeaders='HTTP/1.1 201 Created
Server: nginx
Date: Sat, 17 Aug 2024 14:29:12 GMT
Content-Type: application/json
Content-Length: 362
Connection: keep-alive
Boulder-Requester: 159440243
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Location: https://acme-staging-v02.api.letsencrypt.org/acme/order/159440243/18471810743
Replay-Nonce: AasbL_-ImiKE-8LhKXcJWN0Q1j3UEv_1QwITen8MJNN8bgc9ppw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

'
[Sat Aug 17 14:29:12 UTC 2024] code='201'
[Sat Aug 17 14:29:12 UTC 2024] original='{
  "status": "pending",
  "expires": "2024-08-24T14:29:12Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "imeitracker.2kks.com.ng"
    }
  ],
  "authorizations": [
    "https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613"
  ],
  "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/159440243/18471810743"
}'
[Sat Aug 17 14:29:12 UTC 2024] response='{"status":"pending","expires":"2024-08-24T14:29:12Z","identifiers":[{"type":"dns","value":"imeitracker.2kks.com.ng"}],"authorizations":["https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613"],"finalize":"https://acme-staging-v02.api.letsencrypt.org/acme/finalize/159440243/18471810743"}'
[Sat Aug 17 14:29:12 UTC 2024] Le_LinkOrder='https://acme-staging-v02.api.letsencrypt.org/acme/order/159440243/18471810743'
[Sat Aug 17 14:29:12 UTC 2024] Le_OrderFinalize='https://acme-staging-v02.api.letsencrypt.org/acme/finalize/159440243/18471810743'
[Sat Aug 17 14:29:12 UTC 2024] _authorizations_seg='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] STEP 2, Get the authorizations of each domain
[Sat Aug 17 14:29:12 UTC 2024] _authz_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] =======Sending Signed Request=======
[Sat Aug 17 14:29:12 UTC 2024] url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] payload
[Sat Aug 17 14:29:12 UTC 2024] Use cached jwk for file: /root/.acme.sh/ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
[Sat Aug 17 14:29:12 UTC 2024] Use _CACHED_NONCE='AasbL_-ImiKE-8LhKXcJWN0Q1j3UEv_1QwITen8MJNN8bgc9ppw'
[Sat Aug 17 14:29:12 UTC 2024] nonce='AasbL_-ImiKE-8LhKXcJWN0Q1j3UEv_1QwITen8MJNN8bgc9ppw'
[Sat Aug 17 14:29:12 UTC 2024] POST
[Sat Aug 17 14:29:12 UTC 2024] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] body='{"protected": "eyJub25jZSI6ICJBYXNiTF8tSW1pS0UtOExoS1hjSldOMFExajNVRXZfMVF3SVRlbjhNSk5OOGJnYzlwcHciLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMTM2MjE4NTg2MTMiLCAiYWxnIjogIkVTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTU5NDQwMjQzIn0", "payload": "", "signature": "hR6phjQWj6jpYqknkQTT62uzY-MAkKeNvf8zwfG6CHZFNxIRTHVLobqQm5D9ocDEG2cJK3tFRL9k5TDB0UMTzA"}'
[Sat Aug 17 14:29:12 UTC 2024] _postContentType='application/jose+json'
[Sat Aug 17 14:29:12 UTC 2024] Http already initialized.
[Sat Aug 17 14:29:12 UTC 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sat Aug 17 14:29:12 UTC 2024] _ret='0'
[Sat Aug 17 14:29:12 UTC 2024] responseHeaders='HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Aug 2024 14:29:12 GMT
Content-Type: application/json
Content-Length: 828
Connection: keep-alive
Boulder-Requester: 159440243
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 8DtmaS8SFRL1bSGd7k3YqeDqq7-cleZLLgi138GyFuCNI3ybfuw
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

'
[Sat Aug 17 14:29:12 UTC 2024] code='200'
[Sat Aug 17 14:29:12 UTC 2024] original='{
  "identifier": {
    "type": "dns",
    "value": "imeitracker.2kks.com.ng"
  },
  "status": "pending",
  "expires": "2024-08-24T14:29:12Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w",
      "status": "pending",
      "token": "cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"
    },
    {
      "type": "dns-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/9BNUHA",
      "status": "pending",
      "token": "cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"
    },
    {
      "type": "tls-alpn-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/UlT-dQ",
      "status": "pending",
      "token": "cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"
    }
  ]
}'
[Sat Aug 17 14:29:12 UTC 2024] response='{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"pending","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/9BNUHA","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/UlT-dQ","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}]}'
[Sat Aug 17 14:29:12 UTC 2024] response='{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"pending","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/9BNUHA","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/UlT-dQ","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}]}'
[Sat Aug 17 14:29:12 UTC 2024] _d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:12 UTC 2024] _authorizations_map='imeitracker.2kks.com.ng,{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"pending","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/9BNUHA","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/UlT-dQ","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}]}#https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613
'
[Sat Aug 17 14:29:12 UTC 2024] d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:12 UTC 2024] Getting webroot for domain='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:12 UTC 2024] _w='/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/'
[Sat Aug 17 14:29:12 UTC 2024] _currentRoot='/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/'
[Sat Aug 17 14:29:12 UTC 2024] _is_idn_d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:12 UTC 2024] _idn_temp
[Sat Aug 17 14:29:12 UTC 2024] _candidates='imeitracker.2kks.com.ng,{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"pending","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/9BNUHA","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/UlT-dQ","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}]}#https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] response='{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"pending","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/9BNUHA","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/UlT-dQ","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}]}#https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] _authz_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] entry='"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"'
[Sat Aug 17 14:29:12 UTC 2024] token='cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI'
[Sat Aug 17 14:29:12 UTC 2024] uri='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:12 UTC 2024] keyauthorization='cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI.XZuQ0xf4NyfBPQkW2zK8cMDBMsypLogRmfla5z2Rpw4'
[Sat Aug 17 14:29:12 UTC 2024] dvlist='imeitracker.2kks.com.ng#cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI.XZuQ0xf4NyfBPQkW2zK8cMDBMsypLogRmfla5z2Rpw4#https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w#http-01#/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/#https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] d
[Sat Aug 17 14:29:12 UTC 2024] vlist='imeitracker.2kks.com.ng#cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI.XZuQ0xf4NyfBPQkW2zK8cMDBMsypLogRmfla5z2Rpw4#https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w#http-01#/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/#https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613,'
[Sat Aug 17 14:29:12 UTC 2024] d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:12 UTC 2024] OK, let's start verification
[Sat Aug 17 14:29:12 UTC 2024] Verifying: imeitracker.2kks.com.ng
[Sat Aug 17 14:29:12 UTC 2024] d='imeitracker.2kks.com.ng'
[Sat Aug 17 14:29:12 UTC 2024] keyauthorization='cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI.XZuQ0xf4NyfBPQkW2zK8cMDBMsypLogRmfla5z2Rpw4'
[Sat Aug 17 14:29:12 UTC 2024] uri='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:12 UTC 2024] _authz_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:12 UTC 2024] _currentRoot='/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/'
[Sat Aug 17 14:29:12 UTC 2024] wellknown_path='/home/2kks.com.ng/imeitracker/.well-known/acme-challenge//.well-known/acme-challenge'
[Sat Aug 17 14:29:12 UTC 2024] Writing token: cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI to /home/2kks.com.ng/imeitracker/.well-known/acme-challenge//.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI
[Sat Aug 17 14:29:12 UTC 2024] Trigger domain validation.
[Sat Aug 17 14:29:12 UTC 2024] _t_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:12 UTC 2024] _t_key_authz='cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI.XZuQ0xf4NyfBPQkW2zK8cMDBMsypLogRmfla5z2Rpw4'
[Sat Aug 17 14:29:12 UTC 2024] _t_vtype='http-01'
[Sat Aug 17 14:29:12 UTC 2024] =======Sending Signed Request=======
[Sat Aug 17 14:29:12 UTC 2024] url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:12 UTC 2024] payload='{}'
[Sat Aug 17 14:29:12 UTC 2024] Use cached jwk for file: /root/.acme.sh/ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
[Sat Aug 17 14:29:12 UTC 2024] Use _CACHED_NONCE='8DtmaS8SFRL1bSGd7k3YqeDqq7-cleZLLgi138GyFuCNI3ybfuw'
[Sat Aug 17 14:29:12 UTC 2024] nonce='8DtmaS8SFRL1bSGd7k3YqeDqq7-cleZLLgi138GyFuCNI3ybfuw'
[Sat Aug 17 14:29:12 UTC 2024] POST
[Sat Aug 17 14:29:12 UTC 2024] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:12 UTC 2024] body='{"protected": "eyJub25jZSI6ICI4RHRtYVM4U0ZSTDFiU0dkN2szWXFlRHFxNy1jbGVaTExnaTEzOEd5RnVDTkkzeWJmdXciLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMTM2MjE4NTg2MTMvOHJ3ejV3IiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzE1OTQ0MDI0MyJ9", "payload": "e30", "signature": "sTgODwrUuJCFCaBp4zOf5sPBtMgtt4tuzp8uENTPbeGX7SCMN-n3_ivS9P3MNX2eBgstgCFtfbHU7FAIkKuywQ"}'
[Sat Aug 17 14:29:12 UTC 2024] _postContentType='application/jose+json'
[Sat Aug 17 14:29:12 UTC 2024] Http already initialized.
[Sat Aug 17 14:29:12 UTC 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sat Aug 17 14:29:15 UTC 2024] _ret='0'
[Sat Aug 17 14:29:15 UTC 2024] responseHeaders='HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Aug 2024 14:29:15 GMT
Content-Type: application/json
Content-Length: 194
Connection: keep-alive
Boulder-Requester: 159440243
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Link: <https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613>;rel="up"
Location: https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w
Replay-Nonce: 8DtmaS8SuR93ZjAQCENEnCMrVx_gbARrzxWo92So17HzqgbSuDM
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

'
[Sat Aug 17 14:29:15 UTC 2024] code='200'
[Sat Aug 17 14:29:15 UTC 2024] original='{
  "type": "http-01",
  "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w",
  "status": "pending",
  "token": "cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"
}'
[Sat Aug 17 14:29:15 UTC 2024] response='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}'
[Sat Aug 17 14:29:15 UTC 2024] Trigger validation code: 200
[Sat Aug 17 14:29:15 UTC 2024] Let's check the authz status
[Sat Aug 17 14:29:15 UTC 2024] original='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}'
[Sat Aug 17 14:29:15 UTC 2024] response='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"pending","token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI"}'
[Sat Aug 17 14:29:15 UTC 2024] status='pending'
[Sat Aug 17 14:29:15 UTC 2024] Pending. The CA is processing your order, please wait. (1/30)
[Sat Aug 17 14:29:15 UTC 2024] Sleep 2 seconds before verifying again
[Sat Aug 17 14:29:18 UTC 2024] Checking
[Sat Aug 17 14:29:18 UTC 2024] =======Sending Signed Request=======
[Sat Aug 17 14:29:18 UTC 2024] url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:18 UTC 2024] payload
[Sat Aug 17 14:29:18 UTC 2024] Use cached jwk for file: /root/.acme.sh/ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
[Sat Aug 17 14:29:18 UTC 2024] Use _CACHED_NONCE='8DtmaS8SuR93ZjAQCENEnCMrVx_gbARrzxWo92So17HzqgbSuDM'
[Sat Aug 17 14:29:18 UTC 2024] nonce='8DtmaS8SuR93ZjAQCENEnCMrVx_gbARrzxWo92So17HzqgbSuDM'
[Sat Aug 17 14:29:18 UTC 2024] POST
[Sat Aug 17 14:29:18 UTC 2024] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613'
[Sat Aug 17 14:29:18 UTC 2024] body='{"protected": "eyJub25jZSI6ICI4RHRtYVM4U3VSOTNaakFRQ0VORW5DTXJWeF9nYkFScnp4V285MlNvMTdIenFnYlN1RE0iLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMTM2MjE4NTg2MTMiLCAiYWxnIjogIkVTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTU5NDQwMjQzIn0", "payload": "", "signature": "z-Euy-a7ae4oigWKYx_nON9S9-ozrfrQT4sCt5sIf9UYen9RLaUDPDBmWspMGuXkkdb0YZNZOfeRpC_jDumPGg"}'
[Sat Aug 17 14:29:18 UTC 2024] _postContentType='application/jose+json'
[Sat Aug 17 14:29:18 UTC 2024] Http already initialized.
[Sat Aug 17 14:29:18 UTC 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sat Aug 17 14:29:18 UTC 2024] _ret='0'
[Sat Aug 17 14:29:19 UTC 2024] responseHeaders='HTTP/1.1 200 OK
Server: nginx
Date: Sat, 17 Aug 2024 14:29:18 GMT
Content-Type: application/json
Content-Length: 1067
Connection: keep-alive
Boulder-Requester: 159440243
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: 8DtmaS8SUnzHXstc0dZjOop9ZDTjhfEf6vEH_yEGUnomvr4tg1c
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800

'
[Sat Aug 17 14:29:19 UTC 2024] code='200'
[Sat Aug 17 14:29:19 UTC 2024] original='{
  "identifier": {
    "type": "dns",
    "value": "imeitracker.2kks.com.ng"
  },
  "status": "invalid",
  "expires": "2024-08-24T14:29:12Z",
  "challenges": [
    {
      "type": "http-01",
      "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w",
      "status": "invalid",
      "validated": "2024-08-17T14:29:15Z",
      "error": {
        "type": "urn:ietf:params:acme:error:unauthorized",
        "detail": "31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI: 404",
        "status": 403
      },
      "token": "cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI",
      "validationRecord": [
        {
          "url": "http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI",
          "hostname": "imeitracker.2kks.com.ng",
          "port": "80",
          "addressesResolved": [
            "31.220.51.138"
          ],
          "addressUsed": "31.220.51.138"
        }
      ]
    }
  ]
}'
[Sat Aug 17 14:29:19 UTC 2024] response='{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"invalid","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"invalid","validated":"2024-08-17T14:29:15Z","error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI: 404","status": 403},"token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI","validationRecord":[{"url":"http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI","hostname":"imeitracker.2kks.com.ng","port":"80","addressesResolved":["31.220.51.138"],"addressUsed":"31.220.51.138"}]}]}'
[Sat Aug 17 14:29:19 UTC 2024] original='{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"invalid","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"invalid","validated":"2024-08-17T14:29:15Z","error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI: 404","status": 403},"token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI","validationRecord":[{"url":"http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI","hostname":"imeitracker.2kks.com.ng","port":"80","addressesResolved":["31.220.51.138"],"addressUsed":"31.220.51.138"}]}]}'
[Sat Aug 17 14:29:19 UTC 2024] response='{"identifier":{"type":"dns","value":"imeitracker.2kks.com.ng"},"status":"invalid","expires":"2024-08-24T14:29:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w","status":"invalid","validated":"2024-08-17T14:29:15Z","error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI: 404","status": 403},"token":"cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI","validationRecord":[{"url":"http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI","hostname":"imeitracker.2kks.com.ng","port":"80","addressesResolved":["31.220.51.138"],"addressUsed":"31.220.51.138"}]}]}'
[Sat Aug 17 14:29:19 UTC 2024] status='invalid
invalid'
[Sat Aug 17 14:29:19 UTC 2024] error='"error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI: 404","status": 403'
[Sat Aug 17 14:29:19 UTC 2024] errordetail='31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI: 404'
[Sat Aug 17 14:29:19 UTC 2024] imeitracker.2kks.com.ng: Invalid status. Verification error details: 31.220.51.138: Invalid response from http://imeitracker.2kks.com.ng/.well-known/acme-challenge/cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI: 404
[Sat Aug 17 14:29:19 UTC 2024] pid
[Sat Aug 17 14:29:19 UTC 2024] No need to restore nginx config, skipping.
[Sat Aug 17 14:29:19 UTC 2024] _clearupdns
[Sat Aug 17 14:29:19 UTC 2024] dns_entries
[Sat Aug 17 14:29:19 UTC 2024] Skipping dns.
[Sat Aug 17 14:29:19 UTC 2024] _on_issue_err
[Sat Aug 17 14:29:19 UTC 2024] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Sat Aug 17 14:29:19 UTC 2024] _chk_vlist='imeitracker.2kks.com.ng#cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI.XZuQ0xf4NyfBPQkW2zK8cMDBMsypLogRmfla5z2Rpw4#https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w#http-01#/home/2kks.com.ng/imeitracker/.well-known/acme-challenge/#https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/13621858613,'
[Sat Aug 17 14:29:19 UTC 2024] start to deactivate authz
[Sat Aug 17 14:29:19 UTC 2024] Trigger domain validation.
[Sat Aug 17 14:29:19 UTC 2024] _t_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:19 UTC 2024] _t_key_authz='cVd4ULQuWxfUAARBKPYbRO6I8F1zpp0jxEzSboM8OBI.XZuQ0xf4NyfBPQkW2zK8cMDBMsypLogRmfla5z2Rpw4'
[Sat Aug 17 14:29:19 UTC 2024] _t_vtype
[Sat Aug 17 14:29:19 UTC 2024] =======Sending Signed Request=======
[Sat Aug 17 14:29:19 UTC 2024] url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:19 UTC 2024] payload='{}'
[Sat Aug 17 14:29:19 UTC 2024] Use cached jwk for file: /root/.acme.sh/ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
[Sat Aug 17 14:29:19 UTC 2024] Use _CACHED_NONCE='8DtmaS8SUnzHXstc0dZjOop9ZDTjhfEf6vEH_yEGUnomvr4tg1c'
[Sat Aug 17 14:29:19 UTC 2024] nonce='8DtmaS8SUnzHXstc0dZjOop9ZDTjhfEf6vEH_yEGUnomvr4tg1c'
[Sat Aug 17 14:29:19 UTC 2024] POST
[Sat Aug 17 14:29:19 UTC 2024] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall-v3/13621858613/8rwz5w'
[Sat Aug 17 14:29:19 UTC 2024] body='{"protected": "eyJub25jZSI6ICI4RHRtYVM4U1VuekhYc3RjMGRaak9vcDlaRFRqaGZFZjZ2RUhfeUVHVW5vbXZyNHRnMWMiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMTM2MjE4NTg2MTMvOHJ3ejV3IiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzE1OTQ0MDI0MyJ9", "payload": "e30", "signature": "Gd3zq0_WqPf-D1FmR6r3DFfVdHcBvDn1KjkO0MFuYxs-yzyvLUSFtPankxDVZklky-UpHjBhbPH2UwAfu4j_TA"}'
[Sat Aug 17 14:29:19 UTC 2024] _postContentType='application/jose+json'
[Sat Aug 17 14:29:19 UTC 2024] Http already initialized.
[Sat Aug 17 14:29:19 UTC 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sat Aug 17 14:29:19 UTC 2024] _ret='0'
[Sat Aug 17 14:29:19 UTC 2024] responseHeaders='HTTP/1.1 400 Bad Request
Server: nginx
Date: Sat, 17 Aug 2024 14:29:19 GMT
Content-Type: application/problem+json
Content-Length: 144
Connection: keep-alive
Boulder-Requester: 159440243
Cache-Control: public, max-age=0, no-cache
Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
Replay-Nonce: AasbL_-IE4FRygHUn_lZYenDtbGNCDdJxvUZJuVMqo0_T76Q3iY

'
[Sat Aug 17 14:29:19 UTC 2024] code='400'
[Sat Aug 17 14:29:19 UTC 2024] original='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
[Sat Aug 17 14:29:19 UTC 2024] response='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
6

I think the webroot path (-w option) shouldn't include the /.well-known/acme-challenge/ part of the path; look at the examples acme.sh has.

2 Likes
7

What part of "web server logs" are you not understanding? You've been asked for them twice, and you've twice given logs from acme.sh. These are not the same thing.

1 Like
8

Thank you, very much. The issue appears to be resolved. Your observation was spot on.

[root@aproko2kks ~]# acme.sh --log --issue --staging -d imeitracker.2kks.com.ng -w /home/2kks.com.ng/imeitracker/ --depl
oy-hook "chmod 644 /home/2kks.com.ng/imeitracker/.well-known/acme-challenge/*"
[Sat Aug 17 17:15:19 UTC 2024] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 17:15:19 UTC 2024] Using CA: https://acme-staging-v02.api.letsencrypt.org/directory
[Sat Aug 17 17:15:19 UTC 2024] Single domain='imeitracker.2kks.com.ng'
[Sat Aug 17 17:15:21 UTC 2024] Getting webroot for domain='imeitracker.2kks.com.ng'
[Sat Aug 17 17:15:21 UTC 2024] Verifying: imeitracker.2kks.com.ng
[Sat Aug 17 17:15:22 UTC 2024] Pending. The CA is processing your order, please wait. (1/30)
[Sat Aug 17 17:15:25 UTC 2024] Pending. The CA is processing your order, please wait. (2/30)
[Sat Aug 17 17:15:29 UTC 2024] Success
[Sat Aug 17 17:15:29 UTC 2024] Verification finished, beginning signing.
[Sat Aug 17 17:15:29 UTC 2024] Let's finalize the order.
[Sat Aug 17 17:15:29 UTC 2024] Le_OrderFinalize='https://acme-staging-v02.api.letsencrypt.org/acme/finalize/159440243/18474087473'
[Sat Aug 17 17:15:29 UTC 2024] Order status is 'processing', let's sleep and retry.
[Sat Aug 17 17:15:29 UTC 2024] Sleeping for 3 seconds then retrying
[Sat Aug 17 17:15:33 UTC 2024] Polling order status: https://acme-staging-v02.api.letsencrypt.org/acme/order/159440243/18474087473
[Sat Aug 17 17:15:34 UTC 2024] Downloading cert.
[Sat Aug 17 17:15:34 UTC 2024] Le_LinkCert='https://acme-staging-v02.api.letsencrypt.org/acme/cert/2bf439753ce7a009c6dd031bc92a9026380b'
[Sat Aug 17 17:15:34 UTC 2024] Cert success.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
[Sat Aug 17 17:15:34 UTC 2024] Your cert is in: /root/.acme.sh/imeitracker.2kks.com.ng_ecc/imeitracker.2kks.com.ng.cer
[Sat Aug 17 17:15:34 UTC 2024] Your cert key is in: /root/.acme.sh/imeitracker.2kks.com.ng_ecc/imeitracker.2kks.com.ng.key
[Sat Aug 17 17:15:34 UTC 2024] The intermediate CA cert is in: /root/.acme.sh/imeitracker.2kks.com.ng_ecc/ca.cer
[Sat Aug 17 17:15:34 UTC 2024] And the full-chain cert is in: /root/.acme.sh/imeitracker.2kks.com.ng_ecc/fullchain.cer

2 Likes
9

Sorry about that. I sent the acme.sh logs twice.

2 Likes
10

After having successfully issued letsencrypt certificates for my domain (imeitracker.2kks.com.ng), I am having issues when attempting to open it with a browser for the first time. It keeps complaining of net::ERR_CERT_AUTHORITY_INVALID. This is the full message: Your connection isn't private
Attackers might be trying to steal your information from imeitracker.2kks.com.ng (for example, passwords, messages, or credit cards).
net::ERR_CERT_AUTHORITY_INVALID
Subject: 2kks.com.ng

Issuer: 2kks.com.ng

Expires on: Aug 15, 2034

Current date: Aug 17, 2024

PEM encoded chain:
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE----- Why is the subject refering to the domain (2kks.com.ng) when I have successfully issued certificates for imeitracker.2kks.com.ng? And my issuer is letsencrypt and not 2kks.com.ng.

11

image
image404×511 9.62 KB

That is a self-sighed cert.
Not a cert issued by LE.

2 Likes
12

You have gotten 5 Let's Encrypt certs today. That is the limit per week for a cert with that exact same set of domain names (using your account). You will not be able to get any more identical certs for a week.

Your problem is you have not properly configured your LiteSpeed server to use any of those. Please review LiteSpeed config or ask your hosting provider for help.

image
image2442×375 93.2 KB

Also see:
https://www.ssllabs.com/ssltest/analyze.html?d=imeitracker.2kks.com.ng&hideResults=on&latest

2 Likes