Unable to generate cert on Staging... Rate limit?


#4

Oh. :relieved:

I don’t understand the log file. I don’t know what acme.sh’s logs usually look like, but it doesn’t look like anything has gone wrong yet. It looks like it just stopped near the beginning of the process.

Are there more logs? What happens if you use a less verbose log level?


#5

Right So, i’ve just tried to issue a cert and was going to post the output or attach but being a new user i’m unable to.

guess i’ll carry on googling and wait another week before i try again.

Thanks though


#6

You should be able to now. :slightly_smiling_face:


#7

Thank you kind sir

right so this is the log the previous output was referencing!

its guite alot more than before! sorry

HTTP/1.1 201 Created
Server: nginx
Content-Type: application/json
Content-Length: 550
Boulder-Requester: 7840378
Location: https://acme-staging-v02.api.letsencrypt.org/acme/order/7840378/19516221
Replay-Nonce: nD–K_HHIgpKZp5MUPIunsfgbNvZnIAby9rRuep8dfE
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Sun, 13 Jan 2019 00:36:28 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 13 Jan 2019 00:36:28 GMT
Connection: keep-alive


[Sun Jan 13 00:36:28 GMT 2019] response=’{“status”:“pending”,“expires”:“2019-01-19T23:44:07Z”,“identifiers”:[{“type”:“dns”,“value”:".dargranet.com"},{“type”:“dns”,“value”:“dargranet.com”}],“authorizations”:[“https://acme-staging-v02.api.letsencrypt.org/acme/authz/I-m6Tlr78zBrfyi-79S4dMTl2pZE0gkzBr_ukgnG8v8",“https://acme-staging-v02.api.letsencrypt.org/acme/authz/WHix2xqNeQ7L94nbixD_-obyIMwPK5yRL5pUPDS_Dos”],“finalize”:"https://acme-staging-v02.api.letsencrypt.org/acme/finalize/7840378/19516221”}’
[Sun Jan 13 00:36:28 GMT 2019] code=‘201’
[Sun Jan 13 00:36:28 GMT 2019] Le_OrderFinalize=‘https://acme-staging-v02.api.letsencrypt.org/acme/finalize/7840378/19516221
[Sun Jan 13 00:36:28 GMT 2019] OK
[Sun Jan 13 00:36:28 GMT 2019] 9:Le_OrderFinalize=‘https://acme-staging-v02.api.letsencrypt.org/acme/finalize/7840378/19516221
[Sun Jan 13 00:36:28 GMT 2019] authorizations_seg='https://acme-staging-v02.api.letsencrypt.org/acme/authz/I-m6Tlr78zBrfyi-79S4dMTl2pZE0gkzBr_ukgnG8v8,https://acme-staging-v02.api.letsencrypt.org/acme/authz/WHix2xqNeQ7L94nbixD-obyIMwPK5yRL5pUPDS_Dos’
[Sun Jan 13 00:36:28 GMT 2019] _authz_url=‘https://acme-staging-v02.api.letsencrypt.org/acme/authz/I-m6Tlr78zBrfyi-79S4dMTl2pZE0gkzBr_ukgnG8v8
[Sun Jan 13 00:36:28 GMT 2019] GET
[Sun Jan 13 00:36:28 GMT 2019] url=‘https://acme-staging-v02.api.letsencrypt.org/acme/authz/I-m6Tlr78zBrfyi-79S4dMTl2pZE0gkzBr_ukgnG8v8
[Sun Jan 13 00:36:28 GMT 2019] timeout=
[Sun Jan 13 00:36:28 GMT 2019] Http already initialized.
[Sun Jan 13 00:36:28 GMT 2019] _CURL=‘curl -L --silent --dump-header /tmp/acme/DARGRANET.COM//http.header -g ’
[Sun Jan 13 00:36:29 GMT 2019] ret=‘0’
[Sun Jan 13 00:36:29 GMT 2019] response=’{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-19T23:44:07Z”,“challenges”:[{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-staging-v02.api.letsencrypt.org/acme/challenge/I-m6Tlr78zBrfyi-79S4dMTl2pZE0gkzBr_ukgnG8v8/221598684",“token”:"-EO-UCBIcw16l9ntz3NZaEJWfZTVW4V0SKS0M1ebrcU"}],"wildcard”: true}’
[Sun Jan 13 00:36:29 GMT 2019] _d=’
.dargranet.com’
[Sun Jan 13 00:36:29 GMT 2019] authz_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz/WHix2xqNeQ7L94nbixD-obyIMwPK5yRL5pUPDS_Dos’
[Sun Jan 13 00:36:29 GMT 2019] GET
[Sun Jan 13 00:36:29 GMT 2019] url=‘https://acme-staging-v02.api.letsencrypt.org/acme/authz/WHix2xqNeQ7L94nbixD_-obyIMwPK5yRL5pUPDS_Dos
[Sun Jan 13 00:36:29 GMT 2019] timeout=
[Sun Jan 13 00:36:29 GMT 2019] Http already initialized.
[Sun Jan 13 00:36:29 GMT 2019] CURL=‘curl -L --silent --dump-header /tmp/acme/DARGRANET.COM//http.header -g ’
[Sun Jan 13 00:36:29 GMT 2019] ret=‘0’
[Sun Jan 13 00:36:29 GMT 2019] response=’{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-19T23:44:07Z”,“challenges”:[{“type”:“tls-alpn-01”,“status”:“pending”,“url”:"https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD
-obyIMwPK5yRL5pUPDS_Dos/221598685",“token”:“VusBetg-vFuY86_p7-lGymiFGEBVXf9YNBcUz4CG3mg”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD_-obyIMwPK5yRL5pUPDS_Dos/221598686",“token”:“H-Q4YUwfjUdB7qOyqB9Vp6-P108o_d_nw3qnnZnNxl8”},{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD_-obyIMwPK5yRL5pUPDS_Dos/221598687”,“token”:"cUYzcBOnTb-QXH2VmX4dr0n2KwB5pvsw5X68_vLMC4o”}]}’
[Sun Jan 13 00:36:29 GMT 2019] d=‘dargranet.com
[Sun Jan 13 00:36:29 GMT 2019] authorizations_map='dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-19T23:44:07Z”,“challenges”:[{“type”:“tls-alpn-01”,“status”:“pending”,“url”:"https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD-obyIMwPK5yRL5pUPDS_Dos/221598685",“token”:“VusBetg-vFuY86_p7-lGymiFGEBVXf9YNBcUz4CG3mg”},{“type”:“dns-01”,“status”:“pending”,“url”:"https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD
-obyIMwPK5yRL5pUPDS_Dos/221598686",“token”:“H-Q4YUwfjUdB7qOyqB9Vp6-P108o_d_nw3qnnZnNxl8”},{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD_-obyIMwPK5yRL5pUPDS_Dos/221598687",“token”:"cUYzcBOnTb-QXH2VmX4dr0n2KwB5pvsw5X68_vLMC4o”}]}
.dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-19T23:44:07Z”,“challenges”:[{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-staging-v02.api.letsencrypt.org/acme/challenge/I-m6Tlr78zBrfyi-79S4dMTl2pZE0gkzBr_ukgnG8v8/221598684",“token”:"-EO-UCBIcw16l9ntz3NZaEJWfZTVW4V0SKS0M1ebrcU"}],"wildcard”: true}

[Sun Jan 13 00:36:29 GMT 2019] d=’
.DARGRANET.COM’
[Sun Jan 13 00:36:29 GMT 2019] Getting webroot for domain=’*.DARGRANET.COM’
[Sun Jan 13 00:36:29 GMT 2019] w=‘dns_he’
[Sun Jan 13 00:36:29 GMT 2019] currentRoot=‘dns_he’
[Sun Jan 13 00:36:29 GMT 2019] response
[Sun Jan 13 00:36:29 GMT 2019] get to authz error.
[Sun Jan 13 00:36:29 GMT 2019] authorizations_map='dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-19T23:44:07Z”,“challenges”:[{“type”:“tls-alpn-01”,“status”:“pending”,“url”:"https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD-obyIMwPK5yRL5pUPDS_Dos/221598685",“token”:“VusBetg-vFuY86_p7-lGymiFGEBVXf9YNBcUz4CG3mg”},{“type”:“dns-01”,“status”:“pending”,“url”:"https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD
-obyIMwPK5yRL5pUPDS_Dos/221598686",“token”:“H-Q4YUwfjUdB7qOyqB9Vp6-P108o_d_nw3qnnZnNxl8”},{“type”:“http-01”,“status”:“pending”,“url”:"https://acme-staging-v02.api.letsencrypt.org/acme/challenge/WHix2xqNeQ7L94nbixD
-obyIMwPK5yRL5pUPDS_Dos/221598687",“token”:“cUYzcBOnTb-QXH2VmX4dr0n2KwB5pvsw5X68_vLMC4o”}]}
*.dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-19T23:44:07Z”,“challenges”:[{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-staging-v02.api.letsencrypt.org/acme/challenge/I-m6Tlr78zBrfyi-79S4dMTl2pZE0gkzBr_ukgnG8v8/221598684",“token”:"-EO-UCBIcw16l9ntz3NZaEJWfZTVW4V0SKS0M1ebrcU"}],"wildcard”: true}

[Sun Jan 13 00:36:29 GMT 2019] pid
[Sun Jan 13 00:36:29 GMT 2019] No need to restore nginx, skip.
[Sun Jan 13 00:36:29 GMT 2019] _clearupdns
[Sun Jan 13 00:36:29 GMT 2019] skip dns.
[Sun Jan 13 00:36:29 GMT 2019] _on_issue_err
[Sun Jan 13 00:36:29 GMT 2019] Please check log file for more details: /tmp/acme/DARGRANET.COM/acme_issuecert.log
[Sun Jan 13 00:36:29 GMT 2019] _chk_vlist


#8

You need a way to separate the HE DNS creation/update portion to test that part independently.
Like while in process you should see something from:
nslookup -q=txt _acme-challenge.DARGRANET.COM ns1.he.net


#9

Hi @Skehardscooby

what says

Your order isn’t invalid

https://acme-staging-v02.api.letsencrypt.org/acme/order/7840378/19516221

instead the complete order is pending.


#10

Oh right okay.

Strangely the first time I set it up on pfsense it worked a treat but yeah lost all the keys. Ever since it’s failed with this.

Obviously something is broke myside so I’ll rebuild the FW from scratch and may try another DNS provider to rule out HE.net

I’ve no doubt that I’ve hit cap for pending requests this week so I’ll wait til next weekend to request another cert.

Thanks for everyone’s help


#11

I don’t see that you have hitted a limit. Pending means that the order waits, that the client confirms the challenges. So “pending” is a normal state of an ACME-order.

Your dns plugin doesn’t work. So acme.sh waits, waits - that the dns-plugin is finished. And the order waits too.


#12

Right okay,

I’ll first try another method then. To rule out the plug-in.

I had tried it last night to no avail.

Might just use another tool to get the cert for the time being whilst I sort this out.

Ruddy annoying as it just worked the first time!


#13

Right so I can rule out pfsense as just rebuilt from scratch.

Did try manual but couldn’t seem to find the challenge key until after it had run so obviously failed.

Time to go back to original DNS provider (GoDaddy) and see how that fairs.

Thought ACME was supposed to be simple! Hahaha


#14

Here we go again.

I’ve moved my DNS to Cloudflare.

Getting pretty much the same error as i was with HE.

[Sun Jan 13 21:41:07 GMT 2019] _ret=‘0’
[Sun Jan 13 21:41:07 GMT 2019] _headers='HTTP/1.1 204 No Content
Server: nginx
Replay-Nonce: lPKg_sSvrjMlfAkqV3Qd5PJ3_xUIEYK3u0gfkloYR00
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Sun, 13 Jan 2019 21:41:07 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 13 Jan 2019 21:41:07 GMT
Connection: keep-alive


[Sun Jan 13 21:41:07 GMT 2019] _CACHED_NONCE=‘lPKg_sSvrjMlfAkqV3Qd5PJ3_xUIEYK3u0gfkloYR00’
[Sun Jan 13 21:41:07 GMT 2019] nonce=‘lPKg_sSvrjMlfAkqV3Qd5PJ3_xUIEYK3u0gfkloYR00’
[Sun Jan 13 21:41:07 GMT 2019] protected=’{“nonce”: “lPKg_sSvrjMlfAkqV3Qd5PJ3_xUIEYK3u0gfkloYR00”, “url”: “https://acme-v02.api.letsencrypt.org/acme/new-acct”, “alg”: “RS256”, “jwk”: {“e”: “AQAB”, “kty”: “RSA”, “n”: “pqsh4VprsPX8CEjVJUr-r4MI3ufbe7jMkOezbnFiQ25EZKkoZ__C7g_WcgY__sX7kKdm_WnESHUHhyHjVEfPKUUC1ucAgJMN4_dzx0E3T929h9BK71rF52ac4dyZITHWoXs3YB_L0zwdbV_MJfdE7wpIfW-aW6KocoKN0hu7iH9XBzj8SZ_inD9Z8rd6BXKCkjcRMKN8962nxlrgZ4dgL8X3ik8ltdBhQMULBcWBxAZR5LIPmv2ZeMNRUWkmCDDAuPURg0tEAWx1uJiTGl_FS4YW9JJlTteAv4orjDKPXohDSliY5kCzDyJ7ftALTMCn0HA0mOhamjNlTHIg8pyfVyvrUmn08oi73AAyupSrpW2_umW8bnzjcNihpO1gl3IzHSd7AeI3Uctz8pM-hUq59cDw5poEYPqoTN2iTsJOmmiTZ6vgaHt98vZXxKlDkqg5mFMjQAz59OZSuI4QD-cXiutaj-lcSdez3jtlBxX_UB5jWu2z_tg42JHDXWq6tTtvXK4AD0rwaAhTsIsd4fG6VlFDPOWSuU0Naqdlf9VpemyjuS_AwE_AjvDj4mwfyqSJNXLb62hDcqJVpw_JjLnc62dZYSlJX2hJAGZ5MOYtZchjUxBhqcFVltTuQlXDxqUyZt_KqvAjEuXn3YNapcyslFOOlis2qygyUReBmaLDKEc”}}’
[Sun Jan 13 21:41:07 GMT 2019] base64 single line.
[Sun Jan 13 21:41:07 GMT 2019] protected64=‘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’
[Sun Jan 13 21:41:07 GMT 2019] base64 single line.
[Sun Jan 13 21:41:07 GMT 2019] _sig_t=‘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’
[Sun Jan 13 21:41:07 GMT 2019] sig=‘B4bIlYxccs8ipmwzez1tSZIAmxG8JSlX-bp-SXrf8WGPwUCQHssLo0mdx-K7TdN1GJB60A1Wbkk4gqbA0D8pPIbHUZuwSMKDbH30xlwWzrRVo6G6Gvo-58ak0NvtEKwYdJbGBa9_Ubxr-FT54XvhSS0xmdUprpXXKAOpFOjzDQzOaqEbWvUm__WzKzSBH9Y9CZf45_PMNG8i8ODOv6UQ2MI66AQny8qi8IkhZ9aEnzC29Cv4-FvlGyEpu5bIltUy2X_hkkS4uDb9y1hEOE7pBY6of8aj8T6Fe3YWwMw74pAvSulmYHWcQYFOSe87z02g7YBLDUKrnoMsrB3KJl_xAoKg6FfFtuFna8ZGeRcIPv9zGwzVDswb4ZzTYraRXTO15-s-XYiW9Vm8vMKDUQFw4HdPefxAMQkwNXMSTDgupbiBLhT-cbha7W56Dp_aXiaL7B8Im-nYHDyFjHlo-NMLUdG_rSeaf1kSPTGKBUnt0Ql5YkKTbRFKtnR4QHF9U05PaI3KK6bg0T5vW70dmXNvNaDq2FUlt60nXHP-yEhwTgA5Ay_5WnDH1pJQDi4LY-M0MwF1WImtwLBfNFY2p1GHCqMD3q3EnSd-C4f4YmBf1o_zYfARtnXqhKQxxAHTo2Pnh0Llxpq8xF64pUZL1TRgMFY8CVsRJ_B2HY9GrhwfrkU’
[Sun Jan 13 21:41:07 GMT 2019] body=’{“protected”: “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”, “payload”: “eyJjb250YWN0IjogWyJtYWlsdG86IFJpY2hhcmRNYXR0aGV3c0BEQVJHUkFORVQuQ09NIl0sICJ0ZXJtc09mU2VydmljZUFncmVlZCI6IHRydWV9”, “signature”: “B4bIlYxccs8ipmwzez1tSZIAmxG8JSlX-bp-SXrf8WGPwUCQHssLo0mdx-K7TdN1GJB60A1Wbkk4gqbA0D8pPIbHUZuwSMKDbH30xlwWzrRVo6G6Gvo-58ak0NvtEKwYdJbGBa9_Ubxr-FT54XvhSS0xmdUprpXXKAOpFOjzDQzOaqEbWvUm__WzKzSBH9Y9CZf45_PMNG8i8ODOv6UQ2MI66AQny8qi8IkhZ9aEnzC29Cv4-FvlGyEpu5bIltUy2X_hkkS4uDb9y1hEOE7pBY6of8aj8T6Fe3YWwMw74pAvSulmYHWcQYFOSe87z02g7YBLDUKrnoMsrB3KJl_xAoKg6FfFtuFna8ZGeRcIPv9zGwzVDswb4ZzTYraRXTO15-s-XYiW9Vm8vMKDUQFw4HdPefxAMQkwNXMSTDgupbiBLhT-cbha7W56Dp_aXiaL7B8Im-nYHDyFjHlo-NMLUdG_rSeaf1kSPTGKBUnt0Ql5YkKTbRFKtnR4QHF9U05PaI3KK6bg0T5vW70dmXNvNaDq2FUlt60nXHP-yEhwTgA5Ay_5WnDH1pJQDi4LY-M0MwF1WImtwLBfNFY2p1GHCqMD3q3EnSd-C4f4YmBf1o_zYfARtnXqhKQxxAHTo2Pnh0Llxpq8xF64pUZL1TRgMFY8CVsRJ_B2HY9GrhwfrkU”}’
[Sun Jan 13 21:41:07 GMT 2019] POST
[Sun Jan 13 21:41:07 GMT 2019] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/new-acct
[Sun Jan 13 21:41:07 GMT 2019] body=’{“protected”: “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”, “payload”: “eyJjb250YWN0IjogWyJtYWlsdG86IFJpY2hhcmRNYXR0aGV3c0BEQVJHUkFORVQuQ09NIl0sICJ0ZXJtc09mU2VydmljZUFncmVlZCI6IHRydWV9”, “signature”: “B4bIlYxccs8ipmwzez1tSZIAmxG8JSlX-bp-SXrf8WGPwUCQHssLo0mdx-K7TdN1GJB60A1Wbkk4gqbA0D8pPIbHUZuwSMKDbH30xlwWzrRVo6G6Gvo-58ak0NvtEKwYdJbGBa9_Ubxr-FT54XvhSS0xmdUprpXXKAOpFOjzDQzOaqEbWvUm__WzKzSBH9Y9CZf45_PMNG8i8ODOv6UQ2MI66AQny8qi8IkhZ9aEnzC29Cv4-FvlGyEpu5bIltUy2X_hkkS4uDb9y1hEOE7pBY6of8aj8T6Fe3YWwMw74pAvSulmYHWcQYFOSe87z02g7YBLDUKrnoMsrB3KJl_xAoKg6FfFtuFna8ZGeRcIPv9zGwzVDswb4ZzTYraRXTO15-s-XYiW9Vm8vMKDUQFw4HdPefxAMQkwNXMSTDgupbiBLhT-cbha7W56Dp_aXiaL7B8Im-nYHDyFjHlo-NMLUdG_rSeaf1kSPTGKBUnt0Ql5YkKTbRFKtnR4QHF9U05PaI3KK6bg0T5vW70dmXNvNaDq2FUlt60nXHP-yEhwTgA5Ay_5WnDH1pJQDi4LY-M0MwF1WImtwLBfNFY2p1GHCqMD3q3EnSd-C4f4YmBf1o_zYfARtnXqhKQxxAHTo2Pnh0Llxpq8xF64pUZL1TRgMFY8CVsRJ_B2HY9GrhwfrkU”}’
[Sun Jan 13 21:41:07 GMT 2019] _postContentType=‘application/jose+json’
[Sun Jan 13 21:41:07 GMT 2019] Http already initialized.
[Sun Jan 13 21:41:07 GMT 2019] _CURL=‘curl -L --silent --dump-header /tmp/acme/DARGRANET.COM//http.header -g ’
[Sun Jan 13 21:41:08 GMT 2019] _ret=‘0’
[Sun Jan 13 21:41:08 GMT 2019] original=’{
“id”: 49459328,
“key”: {
“kty”: “RSA”,
“n”: “pqsh4VprsPX8CEjVJUr-r4MI3ufbe7jMkOezbnFiQ25EZKkoZ__C7g_WcgY__sX7kKdm_WnESHUHhyHjVEfPKUUC1ucAgJMN4_dzx0E3T929h9BK71rF52ac4dyZITHWoXs3YB_L0zwdbV_MJfdE7wpIfW-aW6KocoKN0hu7iH9XBzj8SZ_inD9Z8rd6BXKCkjcRMKN8962nxlrgZ4dgL8X3ik8ltdBhQMULBcWBxAZR5LIPmv2ZeMNRUWkmCDDAuPURg0tEAWx1uJiTGl_FS4YW9JJlTteAv4orjDKPXohDSliY5kCzDyJ7ftALTMCn0HA0mOhamjNlTHIg8pyfVyvrUmn08oi73AAyupSrpW2_umW8bnzjcNihpO1gl3IzHSd7AeI3Uctz8pM-hUq59cDw5poEYPqoTN2iTsJOmmiTZ6vgaHt98vZXxKlDkqg5mFMjQAz59OZSuI4QD-cXiutaj-lcSdez3jtlBxX_UB5jWu2z_tg42JHDXWq6tTtvXK4AD0rwaAhTsIsd4fG6VlFDPOWSuU0Naqdlf9VpemyjuS_AwE_AjvDj4mwfyqSJNXLb62hDcqJVpw_JjLnc62dZYSlJX2hJAGZ5MOYtZchjUxBhqcFVltTuQlXDxqUyZt_KqvAjEuXn3YNapcyslFOOlis2qygyUReBmaLDKEc”,
“e”: “AQAB”
},
“contact”: [
“mailto: Email@DARGRANET.COM
],
“initialIp”: “2001:470:1f08:1cf::2”,
“createdAt”: “2019-01-13T21:41:08.340127817Z”,
“status”: “valid”
}’
[Sun Jan 13 21:41:08 GMT 2019] responseHeaders='HTTP/1.1 100 Continue
Expires: Sun, 13 Jan 2019 21:41:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 201 Created
Server: nginx
Content-Type: application/json
Content-Length: 939
Boulder-Requester: 49459328
Link: https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;rel=“terms-of-service”
Location: https://acme-v02.api.letsencrypt.org/acme/acct/49459328
Replay-Nonce: LOsW16i9Xmpz-y7Hey-kM2Wy1P5ULuCsuiZsIkmPscY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Sun, 13 Jan 2019 21:41:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 13 Jan 2019 21:41:08 GMT
Connection: keep-alive


[Sun Jan 13 21:41:08 GMT 2019] response=’{“id”: 49459328,“key”:{“kty”:“RSA”,“n”:“pqsh4VprsPX8CEjVJUr-r4MI3ufbe7jMkOezbnFiQ25EZKkoZ__C7g_WcgY__sX7kKdm_WnESHUHhyHjVEfPKUUC1ucAgJMN4_dzx0E3T929h9BK71rF52ac4dyZITHWoXs3YB_L0zwdbV_MJfdE7wpIfW-aW6KocoKN0hu7iH9XBzj8SZ_inD9Z8rd6BXKCkjcRMKN8962nxlrgZ4dgL8X3ik8ltdBhQMULBcWBxAZR5LIPmv2ZeMNRUWkmCDDAuPURg0tEAWx1uJiTGl_FS4YW9JJlTteAv4orjDKPXohDSliY5kCzDyJ7ftALTMCn0HA0mOhamjNlTHIg8pyfVyvrUmn08oi73AAyupSrpW2_umW8bnzjcNihpO1gl3IzHSd7AeI3Uctz8pM-hUq59cDw5poEYPqoTN2iTsJOmmiTZ6vgaHt98vZXxKlDkqg5mFMjQAz59OZSuI4QD-cXiutaj-lcSdez3jtlBxX_UB5jWu2z_tg42JHDXWq6tTtvXK4AD0rwaAhTsIsd4fG6VlFDPOWSuU0Naqdlf9VpemyjuS_AwE_AjvDj4mwfyqSJNXLb62hDcqJVpw_JjLnc62dZYSlJX2hJAGZ5MOYtZchjUxBhqcFVltTuQlXDxqUyZt_KqvAjEuXn3YNapcyslFOOlis2qygyUReBmaLDKEc”,“e”:“AQAB”},“contact”:[“mailto: email@DARGRANET.COM”],“initialIp”:“2001:470:1f08:1cf::2”,“createdAt”:“2019-01-13T21:41:08.340127817Z”,“status”:“valid”}’
[Sun Jan 13 21:41:08 GMT 2019] code=‘201’
[Sun Jan 13 21:41:08 GMT 2019] Registered
[Sun Jan 13 21:41:08 GMT 2019] responseHeaders='HTTP/1.1 100 Continue
Expires: Sun, 13 Jan 2019 21:41:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 201 Created
Server: nginx
Content-Type: application/json
Content-Length: 939
Boulder-Requester: 49459328
Link: https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;rel=“terms-of-service”
Location: https://acme-v02.api.letsencrypt.org/acme/acct/49459328
Replay-Nonce: LOsW16i9Xmpz-y7Hey-kM2Wy1P5ULuCsuiZsIkmPscY
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Sun, 13 Jan 2019 21:41:08 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 13 Jan 2019 21:41:08 GMT
Connection: keep-alive


[Sun Jan 13 21:41:08 GMT 2019] _accUri=‘https://acme-v02.api.letsencrypt.org/acme/acct/49459328
[Sun Jan 13 21:41:08 GMT 2019] APP
[Sun Jan 13 21:41:08 GMT 2019] 1:ACCOUNT_URL=‘https://acme-v02.api.letsencrypt.org/acme/acct/49459328
[Sun Jan 13 21:41:08 GMT 2019] base64 single line.
[Sun Jan 13 21:41:08 GMT 2019] Calc CA_KEY_HASH=‘b3qvx6sASCL4D+VYzt7uZ+GAjWp2qYEMKtgHtc7G63Y=’
[Sun Jan 13 21:41:08 GMT 2019] APP
[Sun Jan 13 21:41:08 GMT 2019] 2:CA_KEY_HASH=‘b3qvx6sASCL4D+VYzt7uZ+GAjWp2qYEMKtgHtc7G63Y=’
[Sun Jan 13 21:41:08 GMT 2019] base64 single line.
[Sun Jan 13 21:41:08 GMT 2019] ACCOUNT_THUMBPRINT=‘rPdi14LyIZL3SOvrjrr5nx8aHFLFo4SGOR4TFaageLU’
[Sun Jan 13 21:41:08 GMT 2019] Read key length:
[Sun Jan 13 21:41:08 GMT 2019] _createcsr
[Sun Jan 13 21:41:08 GMT 2019] domain=’.DARGRANET.COM’
[Sun Jan 13 21:41:08 GMT 2019] domainlist=‘DARGRANET.COM
[Sun Jan 13 21:41:08 GMT 2019] csrkey=’/tmp/acme/DARGRANET.COM//
.DARGRANET.COM/.DARGRANET.COM.key’
[Sun Jan 13 21:41:08 GMT 2019] csr=’/tmp/acme/DARGRANET.COM//
.DARGRANET.COM/.DARGRANET.COM.csr’
[Sun Jan 13 21:41:08 GMT 2019] csrconf=’/tmp/acme/DARGRANET.COM//
.DARGRANET.COM/.DARGRANET.COM.csr.conf’
[Sun Jan 13 21:41:08 GMT 2019] _is_idn_d=‘DARGRANET.COM
[Sun Jan 13 21:41:08 GMT 2019] _idn_temp
[Sun Jan 13 21:41:08 GMT 2019] domainlist=‘DARGRANET.COM
[Sun Jan 13 21:41:08 GMT 2019] Multi domain='DNS:
.DARGRANET.COM,DNS:DARGRANET.COM’
[Sun Jan 13 21:41:08 GMT 2019] _is_idn_d=’.DARGRANET.COM’
[Sun Jan 13 21:41:08 GMT 2019] _idn_temp
[Sun Jan 13 21:41:08 GMT 2019] _csr_cn=’
.DARGRANET.COM’
[Sun Jan 13 21:41:08 GMT 2019] APP
[Sun Jan 13 21:41:08 GMT 2019] 8:Le_Keylength=’’
[Sun Jan 13 21:41:08 GMT 2019] Getting domain auth token for each domain
[Sun Jan 13 21:41:08 GMT 2019] d=‘DARGRANET.COM
[Sun Jan 13 21:41:08 GMT 2019] d
[Sun Jan 13 21:41:08 GMT 2019] _identifiers=’{“type”:“dns”,“value”:".DARGRANET.COM"},{“type”:“dns”,“value”:“DARGRANET.COM”}’
[Sun Jan 13 21:41:08 GMT 2019] url=‘https://acme-v02.api.letsencrypt.org/acme/new-order
[Sun Jan 13 21:41:08 GMT 2019] payload=’{“identifiers”: [{“type”:“dns”,“value”:"
.DARGRANET.COM"},{“type”:“dns”,“value”:“DARGRANET.COM”}]}’
[Sun Jan 13 21:41:08 GMT 2019] Use cached jwk for file: /tmp/acme/DARGRANET.COM//ca/acme-v02.api.letsencrypt.org/account.key
[Sun Jan 13 21:41:08 GMT 2019] base64 single line.
[Sun Jan 13 21:41:08 GMT 2019] payload64=‘eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6IiouREFSR1JBTkVULkNPTSJ9LHsidHlwZSI6ImRucyIsInZhbHVlIjoiREFSR1JBTkVULkNPTSJ9XX0’
[Sun Jan 13 21:41:08 GMT 2019] _request_retry_times=‘1’
[Sun Jan 13 21:41:08 GMT 2019] Use _CACHED_NONCE=‘LOsW16i9Xmpz-y7Hey-kM2Wy1P5ULuCsuiZsIkmPscY’
[Sun Jan 13 21:41:08 GMT 2019] nonce=‘LOsW16i9Xmpz-y7Hey-kM2Wy1P5ULuCsuiZsIkmPscY’
[Sun Jan 13 21:41:08 GMT 2019] protected=’{“nonce”: “LOsW16i9Xmpz-y7Hey-kM2Wy1P5ULuCsuiZsIkmPscY”, “url”: “https://acme-v02.api.letsencrypt.org/acme/new-order”, “alg”: “RS256”, “kid”: “https://acme-v02.api.letsencrypt.org/acme/acct/49459328”}’
[Sun Jan 13 21:41:08 GMT 2019] base64 single line.
[Sun Jan 13 21:41:08 GMT 2019] protected64=‘eyJub25jZSI6ICJMT3NXMTZpOVhtcHoteTdIZXkta00yV3kxUDVVTHVDc3VpWnNJa21Qc2NZIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIiLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzQ5NDU5MzI4In0’
[Sun Jan 13 21:41:08 GMT 2019] base64 single line.
[Sun Jan 13 21:41:08 GMT 2019] _sig_t=‘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’
[Sun Jan 13 21:41:08 GMT 2019] sig=‘TV3uJ9WYBery4td_aaYcEwyVbzkAOpsOXQSOh0MCZqoTQP1JAiQqGypmufWz-24ldAxJ0U6h7bZxDbBlHyQyYIRs5EpUcsPU8mVVQVck8ovvFOMxvsdMFgmBihNnAwBKiz0kaQgg56JmVhxiU2UsitUBZhGaeQknJ1KqqNC_YPyZGeNYb6k7cZUK823Swdb17Ez5Q_iRcbfiHxWtMQjLHRXDiWCl53lp5Ts_6pMdxbNcABtQU8dM3KVIPOk5VrEml9Kwb4hmkyULMA9z0v4MvZvMu5sROJGx0uIjFgfQZSc9MKCKakl-_uiAuYNfZ-Ik6gSHIT92cUBW1M4QCmcyTyN_51m9mMe0bMzJNphl2G9bmFXBtGIn20mrUDOgnEZC6xO5GtzkRDa5LCZ3eSmDZ9EEMxJYEFT82davz3OYR1hsh3_JQ1DMPwOPuiX-GS0Rb8P0tF8t-Y_GO45zulsE4fP2gl737J4wpu2jQX721UpVFv0AO5A7IdGjO6gwRAxSi_gfrmA565ITVPj92cry2TZU2xzfOMLjzfB2l48mmWXQ887V7Pc6R7gGKAyhxJdqGTqNfUC5XOvWlliFwSGemVbFapKHyerMZegx3g_CtKsGIiXoNb9E6lVHLdbWF0-N_z4Z8CHgznlJipDyjYSycX6-NWgsF6wZ3pE0qNSXHI4’
[Sun Jan 13 21:41:08 GMT 2019] body=’{“protected”: “eyJub25jZSI6ICJMT3NXMTZpOVhtcHoteTdIZXkta00yV3kxUDVVTHVDc3VpWnNJa21Qc2NZIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIiLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzQ5NDU5MzI4In0”, “payload”: “eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6IiouREFSR1JBTkVULkNPTSJ9LHsidHlwZSI6ImRucyIsInZhbHVlIjoiREFSR1JBTkVULkNPTSJ9XX0”, “signature”: “TV3uJ9WYBery4td_aaYcEwyVbzkAOpsOXQSOh0MCZqoTQP1JAiQqGypmufWz-24ldAxJ0U6h7bZxDbBlHyQyYIRs5EpUcsPU8mVVQVck8ovvFOMxvsdMFgmBihNnAwBKiz0kaQgg56JmVhxiU2UsitUBZhGaeQknJ1KqqNC_YPyZGeNYb6k7cZUK823Swdb17Ez5Q_iRcbfiHxWtMQjLHRXDiWCl53lp5Ts_6pMdxbNcABtQU8dM3KVIPOk5VrEml9Kwb4hmkyULMA9z0v4MvZvMu5sROJGx0uIjFgfQZSc9MKCKakl-_uiAuYNfZ-Ik6gSHIT92cUBW1M4QCmcyTyN_51m9mMe0bMzJNphl2G9bmFXBtGIn20mrUDOgnEZC6xO5GtzkRDa5LCZ3eSmDZ9EEMxJYEFT82davz3OYR1hsh3_JQ1DMPwOPuiX-GS0Rb8P0tF8t-Y_GO45zulsE4fP2gl737J4wpu2jQX721UpVFv0AO5A7IdGjO6gwRAxSi_gfrmA565ITVPj92cry2TZU2xzfOMLjzfB2l48mmWXQ887V7Pc6R7gGKAyhxJdqGTqNfUC5XOvWlliFwSGemVbFapKHyerMZegx3g_CtKsGIiXoNb9E6lVHLdbWF0-N_z4Z8CHgznlJipDyjYSycX6-NWgsF6wZ3pE0qNSXHI4”}’
[Sun Jan 13 21:41:08 GMT 2019] POST
[Sun Jan 13 21:41:08 GMT 2019] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/new-order
[Sun Jan 13 21:41:08 GMT 2019] body=’{“protected”: “eyJub25jZSI6ICJMT3NXMTZpOVhtcHoteTdIZXkta00yV3kxUDVVTHVDc3VpWnNJa21Qc2NZIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIiLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzQ5NDU5MzI4In0”, “payload”: “eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6IiouREFSR1JBTkVULkNPTSJ9LHsidHlwZSI6ImRucyIsInZhbHVlIjoiREFSR1JBTkVULkNPTSJ9XX0”, “signature”: “TV3uJ9WYBery4td_aaYcEwyVbzkAOpsOXQSOh0MCZqoTQP1JAiQqGypmufWz-24ldAxJ0U6h7bZxDbBlHyQyYIRs5EpUcsPU8mVVQVck8ovvFOMxvsdMFgmBihNnAwBKiz0kaQgg56JmVhxiU2UsitUBZhGaeQknJ1KqqNC_YPyZGeNYb6k7cZUK823Swdb17Ez5Q_iRcbfiHxWtMQjLHRXDiWCl53lp5Ts_6pMdxbNcABtQU8dM3KVIPOk5VrEml9Kwb4hmkyULMA9z0v4MvZvMu5sROJGx0uIjFgfQZSc9MKCKakl-_uiAuYNfZ-Ik6gSHIT92cUBW1M4QCmcyTyN_51m9mMe0bMzJNphl2G9bmFXBtGIn20mrUDOgnEZC6xO5GtzkRDa5LCZ3eSmDZ9EEMxJYEFT82davz3OYR1hsh3_JQ1DMPwOPuiX-GS0Rb8P0tF8t-Y_GO45zulsE4fP2gl737J4wpu2jQX721UpVFv0AO5A7IdGjO6gwRAxSi_gfrmA565ITVPj92cry2TZU2xzfOMLjzfB2l48mmWXQ887V7Pc6R7gGKAyhxJdqGTqNfUC5XOvWlliFwSGemVbFapKHyerMZegx3g_CtKsGIiXoNb9E6lVHLdbWF0-N_z4Z8CHgznlJipDyjYSycX6-NWgsF6wZ3pE0qNSXHI4”}’
[Sun Jan 13 21:41:08 GMT 2019] _postContentType=‘application/jose+json’
[Sun Jan 13 21:41:08 GMT 2019] Http already initialized.
[Sun Jan 13 21:41:08 GMT 2019] _CURL=‘curl -L --silent --dump-header /tmp/acme/DARGRANET.COM//http.header -g ’
[Sun Jan 13 21:41:09 GMT 2019] _ret=‘0’
[Sun Jan 13 21:41:09 GMT 2019] original=’{
“status”: “pending”,
“expires”: “2019-01-20T21:41:09.681618753Z”,
“identifiers”: [
{
“type”: “dns”,
“value”: “*.dargranet.com”
},
{
“type”: “dns”,
“value”: “dargranet.com
}
],
“authorizations”: [
https://acme-v02.api.letsencrypt.org/acme/authz/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g”,
https://acme-v02.api.letsencrypt.org/acme/authz/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w
],
“finalize”: “https://acme-v02.api.letsencrypt.org/acme/finalize/49459328/269946260
}’
[Sun Jan 13 21:41:09 GMT 2019] responseHeaders='HTTP/1.1 100 Continue
Expires: Sun, 13 Jan 2019 21:41:09 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache

HTTP/1.1 201 Created
Server: nginx
Content-Type: application/json
Content-Length: 538
Boulder-Requester: 49459328
Location: https://acme-v02.api.letsencrypt.org/acme/order/49459328/269946260
Replay-Nonce: Ldd3gqrxvYW1VA_0uaScivKPVonYl_ufBCD1jVhVPFU
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Sun, 13 Jan 2019 21:41:09 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Sun, 13 Jan 2019 21:41:09 GMT
Connection: keep-alive


[Sun Jan 13 21:41:09 GMT 2019] response=’{“status”:“pending”,“expires”:“2019-01-20T21:41:09.681618753Z”,“identifiers”:[{“type”:“dns”,“value”:".dargranet.com"},{“type”:“dns”,“value”:“dargranet.com”}],“authorizations”:[“https://acme-v02.api.letsencrypt.org/acme/authz/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g",“https://acme-v02.api.letsencrypt.org/acme/authz/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w”],“finalize”:"https://acme-v02.api.letsencrypt.org/acme/finalize/49459328/269946260”}’
[Sun Jan 13 21:41:09 GMT 2019] code=‘201’
[Sun Jan 13 21:41:09 GMT 2019] Le_OrderFinalize=‘https://acme-v02.api.letsencrypt.org/acme/finalize/49459328/269946260
[Sun Jan 13 21:41:09 GMT 2019] APP
[Sun Jan 13 21:41:09 GMT 2019] 9:Le_OrderFinalize=‘https://acme-v02.api.letsencrypt.org/acme/finalize/49459328/269946260
[Sun Jan 13 21:41:09 GMT 2019] _authorizations_seg=‘https://acme-v02.api.letsencrypt.org/acme/authz/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g,https://acme-v02.api.letsencrypt.org/acme/authz/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w
[Sun Jan 13 21:41:09 GMT 2019] _authz_url=‘https://acme-v02.api.letsencrypt.org/acme/authz/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g
[Sun Jan 13 21:41:09 GMT 2019] GET
[Sun Jan 13 21:41:09 GMT 2019] url=‘https://acme-v02.api.letsencrypt.org/acme/authz/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g
[Sun Jan 13 21:41:09 GMT 2019] timeout=
[Sun Jan 13 21:41:09 GMT 2019] Http already initialized.
[Sun Jan 13 21:41:09 GMT 2019] _CURL=‘curl -L --silent --dump-header /tmp/acme/DARGRANET.COM//http.header -g ’
[Sun Jan 13 21:41:10 GMT 2019] ret=‘0’
[Sun Jan 13 21:41:10 GMT 2019] response=’{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-20T21:41:09Z”,“challenges”:[{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g/11430302543",“token”:“yeRmUBhq2fKyC5nisuXUcuoJAl2CZG_vQcn50Vp6rig”}],"wildcard”: true}’
[Sun Jan 13 21:41:10 GMT 2019] _d=’
.dargranet.com’
[Sun Jan 13 21:41:10 GMT 2019] _authz_url=‘https://acme-v02.api.letsencrypt.org/acme/authz/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w
[Sun Jan 13 21:41:10 GMT 2019] GET
[Sun Jan 13 21:41:10 GMT 2019] url=‘https://acme-v02.api.letsencrypt.org/acme/authz/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w
[Sun Jan 13 21:41:10 GMT 2019] timeout=
[Sun Jan 13 21:41:10 GMT 2019] Http already initialized.
[Sun Jan 13 21:41:10 GMT 2019] _CURL=‘curl -L --silent --dump-header /tmp/acme/DARGRANET.COM//http.header -g ’
[Sun Jan 13 21:41:10 GMT 2019] ret=‘0’
[Sun Jan 13 21:41:10 GMT 2019] response=’{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-20T21:41:09Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302544",“token”:“rno4kRLTHaRk3h_gwa5ETeNKGHauVWOs38SOTB5XZEg”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302546”,“token”:“NuYjyxEhGZWFpUVdgc_fQytt3k4EAwdR8LtDUQiFigc”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302547”,“token”:"tkZXLiNEIjgDZvmLZNLdWAVZZIv6JhuSThHpEZlNoHg”}]}’
[Sun Jan 13 21:41:10 GMT 2019] _d=‘dargranet.com
[Sun Jan 13 21:41:10 GMT 2019] _authorizations_map=‘dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-20T21:41:09Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302544",“token”:“rno4kRLTHaRk3h_gwa5ETeNKGHauVWOs38SOTB5XZEg”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302546”,“token”:“NuYjyxEhGZWFpUVdgc_fQytt3k4EAwdR8LtDUQiFigc”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302547”,“token”:"tkZXLiNEIjgDZvmLZNLdWAVZZIv6JhuSThHpEZlNoHg”}]}
.dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-20T21:41:09Z”,“challenges”:[{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g/11430302543",“token”:“yeRmUBhq2fKyC5nisuXUcuoJAl2CZG_vQcn50Vp6rig”}],"wildcard”: true}

[Sun Jan 13 21:41:10 GMT 2019] d=’
.DARGRANET.COM’
[Sun Jan 13 21:41:10 GMT 2019] Getting webroot for domain=’*.DARGRANET.COM’
[Sun Jan 13 21:41:10 GMT 2019] _w=‘dns_cf’
[Sun Jan 13 21:41:10 GMT 2019] _currentRoot=‘dns_cf’
[Sun Jan 13 21:41:10 GMT 2019] response
[Sun Jan 13 21:41:10 GMT 2019] get to authz error.
[Sun Jan 13 21:41:10 GMT 2019] _authorizations_map='dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-20T21:41:09Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302544",“token”:“rno4kRLTHaRk3h_gwa5ETeNKGHauVWOs38SOTB5XZEg”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302546”,“token”:“NuYjyxEhGZWFpUVdgc_fQytt3k4EAwdR8LtDUQiFigc”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w/11430302547”,“token”:"tkZXLiNEIjgDZvmLZNLdWAVZZIv6JhuSThHpEZlNoHg”}]}
*.dargranet.com,{“identifier”:{“type”:“dns”,“value”:“dargranet.com”},“status”:“pending”,“expires”:“2019-01-20T21:41:09Z”,“challenges”:[{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/challenge/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g/11430302543",“token”:“yeRmUBhq2fKyC5nisuXUcuoJAl2CZG_vQcn50Vp6rig”}],"wildcard”: true}

[Sun Jan 13 21:41:10 GMT 2019] pid
[Sun Jan 13 21:41:10 GMT 2019] No need to restore nginx, skip.
[Sun Jan 13 21:41:10 GMT 2019] _clearupdns
[Sun Jan 13 21:41:10 GMT 2019] skip dns.
[Sun Jan 13 21:41:10 GMT 2019] _on_issue_err
[Sun Jan 13 21:41:10 GMT 2019] Please check log file for more details: /tmp/acme/DARGRANET.COM/acme_issuecert.log
[Sun Jan 13 21:41:10 GMT 2019] _chk_vlist

Anyone have ANY ideas?


#15

It’s the same picture. The code stops, your order is pending.

https://acme-v02.api.letsencrypt.org/acme/authz/aXtMPtnxtGUiI4acGooq4zSqaoAwsw9kh6fFVzdFX3g
https://acme-v02.api.letsencrypt.org/acme/authz/xp1C03q58eGa6hnfbZklwEgFjJfzitNzng7JzksZT2w

So again: What says this log?


#16

That is the log :slight_smile: I’m wondering if the whole pfsense API is screwed up! Dispite reinstalling pf a dozen times.


#17

Perhaps you should ask in a pfsense forum.

https://www.netgate.com/docs/pfsense/certificates/acme-validation.html

There was a small Letsencrypt API change

but I don’t know if this is relevant.


#18

Thanks JuergenAuer, I was thinking exactly the same.

For now I’ll just use certify the web and copy the cert to firewall


#19

It definitely isn’t, the change is not live yet. It will be enabled in staging on the 16th


#20

Well I’ve asked the question in the pfsense forums and waiting on a response. Seems others aren’t having issues though so my head is wrecked.

Will wait until 16th and try staging again.


#21

I hope those folks are able to figure out the problem. Best of luck!

The change @JuergenAuer linked to won’t change your situation, it’s completely unrelated. Unfortunately if your Pfsesne client is not working today I don’t have strong reason to believe it will start working on the 16th.


#22

Annoyingly it was working and nothing has really changed. I just rebuilt the VM and restored the config file. Just lacking the acme settings was all.

Shouldn’t really cause any issue!

There is support for another CA but I’d rather not move because of this issue. I’d rather fix it.

Kinda like buying a new car once the tank is empty!

Just fix it


#23

SORTED!!

believe it or not, it was capitalisation in the cert that caused it to fail.

If anybody else has issues with certs failing, try going lowercase!

Makes no sense but it works

Thanks to jimp in the netgate forums for suggesting it,
dispite suggesting it would make no difference!