2021-12-11 20:52:16,567:DEBUG:certbot._internal.main:certbot version: 1.21.0 2021-12-11 20:52:16,568:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot 2021-12-11 20:52:16,568:DEBUG:certbot._internal.main:Arguments: ['--config', '/etc/letsencrypt.ini', '--cert-name', 'npm-10', '--agree-tos', '--authenticator', 'webroot', '--email', 'contact@davideddy.com.au', '--preferred-challenges', 'dns,http', '--domains', 'vaultwarden.strafebink.io'] 2021-12-11 20:52:16,569:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot) 2021-12-11 20:52:16,671:DEBUG:certbot._internal.log:Root logging level set at 30 2021-12-11 20:52:16,675:DEBUG:certbot._internal.plugins.selection:Requested authenticator webroot and installer None 2021-12-11 20:52:16,698:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * webroot Description: Place files in webroot directory Interfaces: Authenticator, Plugin Entry point: webroot = certbot._internal.plugins.webroot:Authenticator Initialized: Prep: True 2021-12-11 20:52:16,699:DEBUG:certbot._internal.plugins.selection:Selected authenticator and installer None 2021-12-11 20:52:16,700:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator webroot, Installer None 2021-12-11 20:52:16,726:DEBUG:certbot._internal.main:Picked account: ), creation_host='da8dff328c67', register_to_eff=None))> 2021-12-11 20:52:16,729:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory. 2021-12-11 20:52:16,741:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443 2021-12-11 20:52:17,420:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658 2021-12-11 20:52:17,422:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 11 Dec 2021 12:52:17 GMT Content-Type: application/json Content-Length: 658 Connection: keep-alive Cache-Control: public, max-age=0, no-cache X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "X1MZBbaE8Q0": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417", "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change", "meta": { "caaIdentities": [ "letsencrypt.org" ], "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf", "website": "https://letsencrypt.org" }, "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct", "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce", "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order", "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert" } 2021-12-11 20:52:17,424:DEBUG:certbot._internal.display.obj:Notifying user: Requesting a certificate for vaultwarden.strafebink.io 2021-12-11 20:52:17,431:DEBUG:certbot.crypto_util:Generating ECDSA key (2048 bits): /etc/letsencrypt/keys/0000_key-certbot.pem 2021-12-11 20:52:17,440:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0000_csr-certbot.pem 2021-12-11 20:52:17,444:DEBUG:acme.client:Requesting fresh nonce 2021-12-11 20:52:17,444:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce. 2021-12-11 20:52:17,678:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0 2021-12-11 20:52:17,680:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 11 Dec 2021 12:52:17 GMT Connection: keep-alive Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 0001rWcus7eopaPqV2jBKhwhuPoCYNEfeNTfYCcWOnj9pYE X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 2021-12-11 20:52:17,680:DEBUG:acme.client:Storing nonce: 0001rWcus7eopaPqV2jBKhwhuPoCYNEfeNTfYCcWOnj9pYE 2021-12-11 20:52:17,681:DEBUG:acme.client:JWS payload: b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "vaultwarden.strafebink.io"\n }\n ]\n}' 2021-12-11 20:52:17,688:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzE2ODU4OTgwIiwgIm5vbmNlIjogIjAwMDFyV2N1czdlb3BhUHFWMmpCS2h3aHVQb0NZTkVmZU5UZllDY1dPbmo5cFlFIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIifQ", "signature": "jTisxenAraQ_eUCuB6xnOx7B80egAnCCPlTrV2CPVl6mfPx_EPxNOqn7xu3IiFXTx9jQJ_w5eoTCxlWPADHroX-xaFMXd8vKp112-t8RaROrFuRyDMpVFCj-dB31TMsaCU78LJxRUWPCouFXcpjThwkBlHuXjC1EY6kojaVb-JzRzR2yj9aPSz-W-1Ow20dfu70yl-EFOtrm-p8fqBonEF-D1Yr8fcgS9PS0GICujAdklUh-_ark_CoYPcYEMy626enJZ3pV_-lY_-OibyM-J0uv61DgamPr9_txYvnBZFBS6xhN3xr4dtp-Tm_zmCjnhLQIXYpqahbLIlNTlLN4eA", "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogInZhdWx0d2FyZGVuLnN0cmFmZWJpbmsuaW8iCiAgICB9CiAgXQp9" } 2021-12-11 20:52:17,985:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 348 2021-12-11 20:52:17,988:DEBUG:acme.client:Received response: HTTP 201 Server: nginx Date: Sat, 11 Dec 2021 12:52:17 GMT Content-Type: application/json Content-Length: 348 Connection: keep-alive Boulder-Requester: 316858980 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Location: https://acme-v02.api.letsencrypt.org/acme/order/316858980/46459532320 Replay-Nonce: 0002QeyPz6FnFm8ujU0VxC_W9B75Oaz9JT5eNrS3NxNcvY4 X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "status": "pending", "expires": "2021-12-18T12:52:17Z", "identifiers": [ { "type": "dns", "value": "vaultwarden.strafebink.io" } ], "authorizations": [ "https://acme-v02.api.letsencrypt.org/acme/authz-v3/57513322400" ], "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/316858980/46459532320" } 2021-12-11 20:52:17,988:DEBUG:acme.client:Storing nonce: 0002QeyPz6FnFm8ujU0VxC_W9B75Oaz9JT5eNrS3NxNcvY4 2021-12-11 20:52:17,990:DEBUG:acme.client:JWS payload: b'' 2021-12-11 20:52:17,996:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/57513322400: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzE2ODU4OTgwIiwgIm5vbmNlIjogIjAwMDJRZXlQejZGbkZtOHVqVTBWeENfVzlCNzVPYXo5SlQ1ZU5yUzNOeE5jdlk0IiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My81NzUxMzMyMjQwMCJ9", "signature": "bNh_9UcsYRPUKIN0xzG4ifyP2q634hTCDQGz6U-kRMpdWft-BRYGlmU8m8lSciR7c0xF2mPH4yszFbnlYVgeeYUcrqxWgQIjFO8TF693_ynns-haK9rsD2Pvw5D1nYqaM-WPiTtRHGU0Diyf2aEgtzHIndLalvfl95dNyfqgeeCOivLs3URyofbfH2qVgJDJQIZayGAkEKhPzFOXxbMCON2rHgeO_ZdVBta2eBM6MOXrfppcwuv4fiijKESAvEOvuQSM07e9qvNVvdP67faA86OoRSrB1rcUIJWbXUhGAi1t-9JM4Gv1_V-nNN54AyKe6Iws_LkMJBE2t2hFGQ9SpA", "payload": "" } 2021-12-11 20:52:18,247:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/57513322400 HTTP/1.1" 200 806 2021-12-11 20:52:18,250:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 11 Dec 2021 12:52:18 GMT Content-Type: application/json Content-Length: 806 Connection: keep-alive Boulder-Requester: 316858980 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 0002xxgufOlTx3cL2N_BQoZtZEAkk7WV0wqx7zkl1CObTPA X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "vaultwarden.strafebink.io" }, "status": "pending", "expires": "2021-12-18T12:52:17Z", "challenges": [ { "type": "http-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/2Jr7mQ", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4" }, { "type": "dns-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/p49eXQ", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4" }, { "type": "tls-alpn-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/hFA_-w", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4" } ] } 2021-12-11 20:52:18,251:DEBUG:acme.client:Storing nonce: 0002xxgufOlTx3cL2N_BQoZtZEAkk7WV0wqx7zkl1CObTPA 2021-12-11 20:52:18,253:INFO:certbot._internal.auth_handler:Performing the following challenges: 2021-12-11 20:52:18,253:INFO:certbot._internal.auth_handler:http-01 challenge for vaultwarden.strafebink.io 2021-12-11 20:52:18,254:INFO:certbot._internal.plugins.webroot:Using the webroot path /data/letsencrypt-acme-challenge for all unmatched domains. 2021-12-11 20:52:18,255:DEBUG:certbot._internal.plugins.webroot:Creating root challenges validation dir at /data/letsencrypt-acme-challenge/.well-known/acme-challenge 2021-12-11 20:52:18,262:DEBUG:certbot._internal.plugins.webroot:Attempting to save validation to /data/letsencrypt-acme-challenge/.well-known/acme-challenge/--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4 2021-12-11 20:52:18,264:DEBUG:acme.client:JWS payload: b'{}' 2021-12-11 20:52:18,269:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/2Jr7mQ: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzE2ODU4OTgwIiwgIm5vbmNlIjogIjAwMDJ4eGd1Zk9sVHgzY0wyTl9CUW9adFpFQWtrN1dWMHdxeDd6a2wxQ09iVFBBIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbC12My81NzUxMzMyMjQwMC8ySnI3bVEifQ", "signature": "mbAOnKQ70ckeQGhyNA0Xf5XXhbdKj_maqU7pglEBey049Z5W3MbL6dTQk7aMVTPmZGuGXIwfNYk1ddDnQclIXutrFqZe-XRxrUDayzZ-wqn9-aZ7PsRVQh7pwatrEcFwVR8Zy_bLLjeLqClPNnLUteGyy7yTiIaAQxcHHFMivB1c6cwWGke8m6YFEkxsj4uv5b27M0hXBruEW7J-fHKMVM8tsd5PusAXHk1o1kueKQnX02ZVCV6ueTWiMXG3f_BXYmXiy5gG9hq1428A6JXiBXV2lJgcCC0QL_YF3cynoCQrFl_3kDF1O1ZhvjkNSZG2nLrmrfuo5SWRG_BuIeyEfQ", "payload": "e30" } 2021-12-11 20:52:18,521:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/57513322400/2Jr7mQ HTTP/1.1" 200 186 2021-12-11 20:52:18,523:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 11 Dec 2021 12:52:18 GMT Content-Type: application/json Content-Length: 186 Connection: keep-alive Boulder-Requester: 316858980 Cache-Control: public, max-age=0, no-cache Link: ;rel="index", ;rel="up" Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/2Jr7mQ Replay-Nonce: 0001YikqBTnMcF_cFy0yzCsqBxLajFsjZWKpp8qxrqpOO0w X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "type": "http-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/2Jr7mQ", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4" } 2021-12-11 20:52:18,523:DEBUG:acme.client:Storing nonce: 0001YikqBTnMcF_cFy0yzCsqBxLajFsjZWKpp8qxrqpOO0w 2021-12-11 20:52:18,525:INFO:certbot._internal.auth_handler:Waiting for verification... 2021-12-11 20:52:19,526:DEBUG:acme.client:JWS payload: b'' 2021-12-11 20:52:19,532:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/57513322400: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzE2ODU4OTgwIiwgIm5vbmNlIjogIjAwMDFZaWtxQlRuTWNGX2NGeTB5ekNzcUJ4TGFqRnNqWldLcHA4cXhycXBPTzB3IiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My81NzUxMzMyMjQwMCJ9", "signature": "VolrTN-F4QgEJsvnJYw29-SSbc4-IGw7x4mx3XauFA3a7CR0z0-P6bhG6viGl8F0b4-bCmK1SseJfCNSfamdnKRQW3u3a8qdkpPbds8sxXys66gD6Pbi3cUUlkFZUmL4uvNKMJDfQ_XjgQEal_7pioFgRxDkWpEajf_8JjVSUV7ysEXhvqnw1icdLh4A841MFe99coMEn6C7AW23DotiSSgcMs6R0RwCLDTUTUAoLT5iqBrOEQOiHsdgEqd236TO7_9sCcasFl8PN18H5Tw6NlycizrnAer2sQw75GkbfvWhGhu6vlBP_NGahGe2X7Fq3OV5kv2XYYJqGKUnJm3ZRw", "payload": "" } 2021-12-11 20:52:19,776:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/57513322400 HTTP/1.1" 200 806 2021-12-11 20:52:19,778:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 11 Dec 2021 12:52:19 GMT Content-Type: application/json Content-Length: 806 Connection: keep-alive Boulder-Requester: 316858980 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 0002R9OGjkQLfsG0RtyEzgX3AaMnu0_nmuWveLXKKBlPRdk X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "vaultwarden.strafebink.io" }, "status": "pending", "expires": "2021-12-18T12:52:17Z", "challenges": [ { "type": "http-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/2Jr7mQ", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4" }, { "type": "dns-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/p49eXQ", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4" }, { "type": "tls-alpn-01", "status": "pending", "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/hFA_-w", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4" } ] } 2021-12-11 20:52:19,779:DEBUG:acme.client:Storing nonce: 0002R9OGjkQLfsG0RtyEzgX3AaMnu0_nmuWveLXKKBlPRdk 2021-12-11 20:52:22,784:DEBUG:acme.client:JWS payload: b'' 2021-12-11 20:52:22,789:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/57513322400: { "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzE2ODU4OTgwIiwgIm5vbmNlIjogIjAwMDJSOU9HamtRTGZzRzBSdHlFemdYM0FhTW51MF9ubXVXdmVMWEtLQmxQUmRrIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My81NzUxMzMyMjQwMCJ9", "signature": "OJI7E06bRkDj63Xf_cMy-ymHehmaXbXe3fAjj7TEYR6O6gpjZj1ptUZ1ncTS0C9rJxSP2h7d8hv7w9mIp21FPjGZxZxJvaK187DVxPNFDqDEUr3J4TW294LtXqinFXAeCrzjrm6FFBD3_qBA3dm_v97CDQRDXlnP4rdV2P7uIRAR-Dyx6gB1jYKcNRdO-EUhlQrAslXBnb87f59_2YJLoJl-HTm5T9V5u5xgzhc8ue4mWOpWHMvFuassB_E0HM20kKQt-pVfThj9a3goTw49uhxtYL4_ZO6Hb4FqiShFJ31_iTMXNnz9bR71QdIGpR_VR2eSWvcL_u61YaITBnZP6A", "payload": "" } 2021-12-11 20:52:23,036:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/57513322400 HTTP/1.1" 200 1407 2021-12-11 20:52:23,038:DEBUG:acme.client:Received response: HTTP 200 Server: nginx Date: Sat, 11 Dec 2021 12:52:22 GMT Content-Type: application/json Content-Length: 1407 Connection: keep-alive Boulder-Requester: 316858980 Cache-Control: public, max-age=0, no-cache Link: ;rel="index" Replay-Nonce: 0002c-nLBGc6MlMRgZy8QclStnWRpXZVzg-VUb-6hCSpfaw X-Frame-Options: DENY Strict-Transport-Security: max-age=604800 { "identifier": { "type": "dns", "value": "vaultwarden.strafebink.io" }, "status": "invalid", "expires": "2021-12-18T12:52:17Z", "challenges": [ { "type": "http-01", "status": "invalid", "error": { "type": "urn:ietf:params:acme:error:unauthorized", "detail": "Invalid response from http://vaultwarden.strafebink.io/.well-known/acme-challenge/--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4 [2606:4700:3037::ac43:a883]: \"\u003c!DOCTYPE html\u003e\\n\u003c!--[if lt IE 7]\u003e \u003chtml class=\\\"no-js ie6 oldie\\\" lang=\\\"en-US\\\"\u003e \u003c![endif]--\u003e\\n\u003c!--[if IE 7]\u003e \u003chtml class=\\\"no-js \"", "status": 403 }, "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/57513322400/2Jr7mQ", "token": "--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4", "validationRecord": [ { "url": "http://vaultwarden.strafebink.io/.well-known/acme-challenge/--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4", "hostname": "vaultwarden.strafebink.io", "port": "80", "addressesResolved": [ "172.67.168.131", "104.21.26.199", "2606:4700:3037::ac43:a883", "2606:4700:3035::6815:1ac7" ], "addressUsed": "2606:4700:3037::ac43:a883" } ], "validated": "2021-12-11T12:52:18Z" } ] } 2021-12-11 20:52:23,038:DEBUG:acme.client:Storing nonce: 0002c-nLBGc6MlMRgZy8QclStnWRpXZVzg-VUb-6hCSpfaw 2021-12-11 20:52:23,040:INFO:certbot._internal.auth_handler:Challenge failed for domain vaultwarden.strafebink.io 2021-12-11 20:52:23,041:INFO:certbot._internal.auth_handler:http-01 challenge for vaultwarden.strafebink.io 2021-12-11 20:52:23,042:DEBUG:certbot._internal.display.obj:Notifying user: Certbot failed to authenticate some domains (authenticator: webroot). The Certificate Authority reported these problems: Domain: vaultwarden.strafebink.io Type: unauthorized Detail: Invalid response from http://vaultwarden.strafebink.io/.well-known/acme-challenge/--2xDilRPjjuw4fD51wJM0yQTC86t-ur1v-h7gAnsx4 [2606:4700:3037::ac43:a883]: "\n\n