Skip to content

Instantly share code, notes, and snippets.

@elliotec
Last active May 14, 2017 07:06
Show Gist options
  • Save elliotec/255919069fdfd3e13a6320a8add6fc7c to your computer and use it in GitHub Desktop.
Save elliotec/255919069fdfd3e13a6320a8add6fc7c to your computer and use it in GitHub Desktop.
2017-05-14 06:45:08,109:DEBUG:certbot.main:Root logging level set at 20
2017-05-14 06:45:08,110:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-05-14 06:45:08,111:DEBUG:certbot.main:certbot version: 0.12.0
2017-05-14 06:45:08,111:DEBUG:certbot.main:Arguments: ['--webroot', '--webroot-path=/srv/www/elliotec.com/', '-d', 'elliotec.com', '-d', 'www.elliotec.com', '--staging']
2017-05-14 06:45:08,111:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2017-05-14 06:45:08,112:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
2017-05-14 06:45:08,112:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot.plugins.webroot:Authenticator
Initialized: <certbot.plugins.webroot.Authenticator object at 0x7f6be2b9aa10>
Prep: True
2017-05-14 06:45:08,113:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0x7f6be2b9aa10> and installer None
2017-05-14 06:45:08,281:DEBUG:certbot.main:Picked account: <Account(d753a044dd814678fe7d28ae7bc48795)>
2017-05-14 06:45:08,282:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/directory.
2017-05-14 06:45:08,295:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-staging.api.letsencrypt.org
2017-05-14 06:45:08,452:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 200 372
2017-05-14 06:45:08,453:DEBUG:acme.client:Received response:
HTTP 200
Content-Length: 372
Strict-Transport-Security: max-age=604800
Boulder-Request-Id: MvH25W5BWuIttVtRMWJ9aKDzlGKU8jNMcLEPepQ-0Fo
Expires: Sun, 14 May 2017 06:45:08 GMT
Server: nginx
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:08 GMT
X-Frame-Options: DENY
Content-Type: application/json
Replay-Nonce: Dv-puUHq3kewAlfbQI2Yhd6ZQOocgk08taDDpq9HQTY
{
"key-change": "https://acme-staging.api.letsencrypt.org/acme/key-change",
"new-authz": "https://acme-staging.api.letsencrypt.org/acme/new-authz",
"new-cert": "https://acme-staging.api.letsencrypt.org/acme/new-cert",
"new-reg": "https://acme-staging.api.letsencrypt.org/acme/new-reg",
"revoke-cert": "https://acme-staging.api.letsencrypt.org/acme/revoke-cert"
}
2017-05-14 06:45:08,455:DEBUG:certbot.cert_manager:Renewal conf file /etc/letsencrypt/renewal/elliotec.com.conf is broken. Skipping.
2017-05-14 06:45:08,456:DEBUG:certbot.cert_manager:Traceback was:
Traceback (most recent call last):
File "/usr/lib/python2.7/dist-packages/certbot/cert_manager.py", line 246, in _search_lineages
candidate_lineage = storage.RenewableCert(renewal_file, cli_config)
File "/usr/lib/python2.7/dist-packages/certbot/storage.py", line 392, in __init__
self._check_symlinks()
File "/usr/lib/python2.7/dist-packages/certbot/storage.py", line 451, in _check_symlinks
"expected {0} to be a symlink".format(link))
CertStorageError: expected /etc/letsencrypt/live/elliotec.com/cert.pem to be a symlink
2017-05-14 06:45:08,456:INFO:certbot.main:Obtaining a new certificate
2017-05-14 06:45:08,456:DEBUG:acme.client:Requesting fresh nonce
2017-05-14 06:45:08,456:DEBUG:acme.client:Sending HEAD request to https://acme-staging.api.letsencrypt.org/acme/new-authz.
2017-05-14 06:45:08,491:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0
2017-05-14 06:45:08,492:DEBUG:acme.client:Received response:
HTTP 405
Content-Length: 91
Allow: POST
Boulder-Request-Id: bchZcAG2G8QdolFqBGAZQhl8lb0M9Hn8rMDW3f1-PcU
Expires: Sun, 14 May 2017 06:45:08 GMT
Server: nginx
Connection: keep-alive
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:08 GMT
Content-Type: application/problem+json
Replay-Nonce: Pyrhil6k9Bj5QYE4YZZ3QO67lfg87hkL8hbs2KPqdbM
2017-05-14 06:45:08,492:DEBUG:acme.client:Storing nonce: Pyrhil6k9Bj5QYE4YZZ3QO67lfg87hkL8hbs2KPqdbM
2017-05-14 06:45:08,492:DEBUG:acme.client:JWS payload:
{
"identifier": {
"type": "dns",
"value": "elliotec.com"
},
"resource": "new-authz"
}
2017-05-14 06:45:08,495:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/new-authz:
{
"header": {
"alg": "RS256",
"jwk": {
"e": "AQAB",
"kty": "RSA",
"n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
}
},
"protected": "eyJub25jZSI6ICJQeXJoaWw2azlCajVRWUU0WVpaM1FPNjdsZmc4N2hrTDhoYnMyS1BxZGJNIn0",
"payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAiZWxsaW90ZWMuY29tIgogIH0sIAogICJyZXNvdXJjZSI6ICJuZXctYXV0aHoiCn0",
"signature": "ceMWo1FpLH7Fyla_qfk3wggO14vQHFrqM233Dh7TXuWgfAA2J--iyAHoApxRJLGlFr5HyZGe7_X0FgFDpHazL1XRhdbcM5WD0nIDP0DNFtzuVU1B0PMzM4Y4ABR7hHecGOUGp7z6WXI6orUZd9H4mOlOXcTKUGp_cRJmfMZSgdNoh1dq7aEUuJ3pQpmjck5FsboqEs0r-xbggFddj1gosdUrItwe_BS29YjbA_3_uOcA-iGVLZnwFkoKtk-91oqeqmydrl-oHDooZ_hAI02wodfJeg9SY7WGxhJ_he-WO9C4yV4qIqK0KmVBLPwwfQYyj7x_eEgdeTswyaZete0ZbQ"
}
2017-05-14 06:45:08,573:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 1005
2017-05-14 06:45:08,573:DEBUG:acme.client:Received response:
HTTP 201
Content-Length: 1005
Strict-Transport-Security: max-age=604800
Boulder-Request-Id: AV0iiEbH1ulCZm5oe09ac3bkTKyDq_C778oHphC6bvE
Boulder-Requester: 2239509
Expires: Sun, 14 May 2017 06:45:08 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
Location: https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:08 GMT
X-Frame-Options: DENY
Content-Type: application/json
Replay-Nonce: 3GULbXv1Y9bRTr4hHIBUpFK_cqXmv0nP0zMPXd2rvho
{
"identifier": {
"type": "dns",
"value": "elliotec.com"
},
"status": "pending",
"expires": "2017-05-21T06:45:08.58350495Z",
"challenges": [
{
"type": "http-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
"token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q"
},
{
"type": "dns-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620779",
"token": "lZAylq-TFiZ8J6b2YoN4YIn9VlbcByEQdwxV6VvSf2o"
},
{
"type": "tls-sni-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620780",
"token": "Qcd61WTSkzjbFfg_qpXYqtGw-fsLiU-7V5Cj72Fpd_c"
}
],
"combinations": [
[
1
],
[
0
],
[
2
]
]
}
2017-05-14 06:45:08,574:DEBUG:acme.client:Storing nonce: 3GULbXv1Y9bRTr4hHIBUpFK_cqXmv0nP0zMPXd2rvho
2017-05-14 06:45:08,575:DEBUG:acme.client:JWS payload:
{
"identifier": {
"type": "dns",
"value": "www.elliotec.com"
},
"resource": "new-authz"
}
2017-05-14 06:45:08,578:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/new-authz:
{
"header": {
"alg": "RS256",
"jwk": {
"e": "AQAB",
"kty": "RSA",
"n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
}
},
"protected": "eyJub25jZSI6ICIzR1VMYlh2MVk5YlJUcjRoSElCVXBGS19jcVhtdjBuUDB6TVBYZDJydmhvIn0",
"payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAid3d3LmVsbGlvdGVjLmNvbSIKICB9LCAKICAicmVzb3VyY2UiOiAibmV3LWF1dGh6Igp9",
"signature": "YE0b2xPkgwr-MWGeX-CMGjr1FzDdY8Ab7Ke5xI3miRDIR4auaDWN7PL4I5adY-eU7mI6fZ2KthQ9Xwyfx8iM4Ju9NzQgH-dbTYpi5tEykQyyDyVLVEOv6DFwPaqbBJz_gWhLFJQU1f6hsSmquvZQ2H2rH1HuTVk0D8JXtY1Kz5elrpi1ooVXDFmFvBBZdf6RYxh1VPX_xNsWkHTmK8ITj8voBNtEli7sfYa4RVEJ7trhqYHfQGlJJamOQYf4011NV3pWp2Z64L6z3YkRqaINxD_rowhqZEl6zKB2WPqCCSe7OghseLXBbHlWmdIWjVxEQaGqkirOK68-8yZXq1UnOw"
}
2017-05-14 06:45:08,632:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 1008
2017-05-14 06:45:08,633:DEBUG:acme.client:Received response:
HTTP 201
Content-Length: 1008
Strict-Transport-Security: max-age=604800
Boulder-Request-Id: aOFPrOqmiyUw7kNUmWpWFc4NbyE1KRo2DssWqjq8MCw
Boulder-Requester: 2239509
Expires: Sun, 14 May 2017 06:45:08 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
Location: https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:08 GMT
X-Frame-Options: DENY
Content-Type: application/json
Replay-Nonce: RQpmiFEvnj14U4puqHyFtcSadmtquNu_8DwJh4wuS9o
{
"identifier": {
"type": "dns",
"value": "www.elliotec.com"
},
"status": "pending",
"expires": "2017-05-21T06:45:08.6496456Z",
"challenges": [
{
"type": "http-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
"token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8"
},
{
"type": "tls-sni-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620782",
"token": "x-R5S8yyc3jOZsc4n2deM5Zxr-Zu-uJjBWtQjTCLwro"
},
{
"type": "dns-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620783",
"token": "SFZylrJ53cDoTiOt9KgbXtQBUp5CY24QgPwy_VXs_Tg"
}
],
"combinations": [
[
1
],
[
2
],
[
0
]
]
}
2017-05-14 06:45:08,633:DEBUG:acme.client:Storing nonce: RQpmiFEvnj14U4puqHyFtcSadmtquNu_8DwJh4wuS9o
2017-05-14 06:45:08,634:INFO:certbot.auth_handler:Performing the following challenges:
2017-05-14 06:45:08,634:INFO:certbot.auth_handler:http-01 challenge for elliotec.com
2017-05-14 06:45:08,635:INFO:certbot.auth_handler:http-01 challenge for www.elliotec.com
2017-05-14 06:45:08,635:INFO:certbot.plugins.webroot:Using the webroot path /srv/www/elliotec.com for all unmatched domains.
2017-05-14 06:45:08,635:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at /srv/www/elliotec.com/.well-known/acme-challenge
2017-05-14 06:45:08,636:DEBUG:certbot.plugins.webroot:Creating root challenges validation dir at /srv/www/elliotec.com/.well-known/acme-challenge
2017-05-14 06:45:08,639:DEBUG:certbot.plugins.webroot:Attempting to save validation to /srv/www/elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q
2017-05-14 06:45:08,643:DEBUG:certbot.plugins.webroot:Attempting to save validation to /srv/www/elliotec.com/.well-known/acme-challenge/77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8
2017-05-14 06:45:08,643:INFO:certbot.auth_handler:Waiting for verification...
2017-05-14 06:45:08,643:DEBUG:acme.client:JWS payload:
{
"keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI",
"type": "http-01",
"resource": "challenge"
}
2017-05-14 06:45:08,646:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778:
{
"header": {
"alg": "RS256",
"jwk": {
"e": "AQAB",
"kty": "RSA",
"n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
}
},
"protected": "eyJub25jZSI6ICJSUXBtaUZFdm5qMTRVNHB1cUh5RnRjU2FkbXRxdU51XzhEd0poNHd1UzlvIn0",
"payload": "ewogICJrZXlBdXRob3JpemF0aW9uIjogIm5BWnJhRGE2LWNUV2VmNmpGSXZYMTN1MUswcUUxUjlRbk5JMUFIbFpLX1EuMlFNdVp5a1c3OVVCcERCSVI0R2tVSE1aN0Vjd0pRT18zSS0zdlpHQ0ZjSSIsIAogICJ0eXBlIjogImh0dHAtMDEiLCAKICAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIgp9",
"signature": "jWe6xsmMfFxMo-85J9MAKsXa0QuVhiQbsUBchP7qwc-VFAngSHOYOZTe68YnoRZfnU36w-IWS8E0a16x0oLTVFnoe4_neleBHEZ4H4EQ5ijji7jg661jBnZ6__i499WWIfirwfdgfQie-8FvT3DoBwG9MXd8WiqSwTK9xRir1vnAryac76bVN2igHaHg7uxdvUXrs-afcQPKe5o8dOTR2z0K5Y90XzBuVV25UQp0E98IwwsyzNVz2Ro5zYsIgoTJfJ4dIst89x_Vi3K5Z_WbANJiFlig7C14ZSIbrDP9h3Plh9_9jUw5QKSoDNqDOnAUP_5L9Q5E53gettK4ruxW3A"
}
2017-05-14 06:45:08,698:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778 HTTP/1.1" 202 338
2017-05-14 06:45:08,698:DEBUG:acme.client:Received response:
HTTP 202
Content-Length: 338
Boulder-Request-Id: -Q2EoCcE4ZYSWBmqzuaTUzUnWOeQawSsY47js7ra3r8
Boulder-Requester: 2239509
Expires: Sun, 14 May 2017 06:45:08 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM>;rel="up"
Location: https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:08 GMT
Content-Type: application/json
Replay-Nonce: ktlb8mYoKILJSgP1OSpSGWxOdeuhpxCrS5g1Yf5kxus
{
"type": "http-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
"token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
"keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
}
2017-05-14 06:45:08,698:DEBUG:acme.client:Storing nonce: ktlb8mYoKILJSgP1OSpSGWxOdeuhpxCrS5g1Yf5kxus
2017-05-14 06:45:08,699:DEBUG:acme.client:JWS payload:
{
"keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI",
"type": "http-01",
"resource": "challenge"
}
2017-05-14 06:45:08,702:DEBUG:acme.client:Sending POST request to https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781:
{
"header": {
"alg": "RS256",
"jwk": {
"e": "AQAB",
"kty": "RSA",
"n": "vjoFGXJ_Rj69k2s_yCsHjVhuD2egMD5_5pAMCVIJghBNdkQoMHM7xRH7_iTVCrpHhx7FzH6LcmarOGg8VrNyGO3EnTpcA6HZ_y8IWUiwJjIvoOR1DdeLoDSRbXcc7FzeTO3y1LE_heQUzl_Bpmoo3JjxGNJpKCxUS4ewwdKvsGXSg0I0Giodxz_UD_rzbNI_ViCzUrjFdGhBmwXUb74WNE31oxoozUpl5ko7zGGsMEG2uhUcCjbQeva7KdR5SwhXEFJcSICW6eOQ-xcMabm-ljfghKmx3cEsgoAd8xk_kmkoZerkSCXgR9siVx6QwZGJb8wGg7FrVwPI6BAkV45NIw"
}
},
"protected": "eyJub25jZSI6ICJrdGxiOG1Zb0tJTEpTZ1AxT1NwU0dXeE9kZXVocHhDclM1ZzFZZjVreHVzIn0",
"payload": "ewogICJrZXlBdXRob3JpemF0aW9uIjogIjc3cG1DSEtZY2czNkRjN0NxTE4wTmRNR00xOHhoRFBTbW82b2VfM3NaXzguMlFNdVp5a1c3OVVCcERCSVI0R2tVSE1aN0Vjd0pRT18zSS0zdlpHQ0ZjSSIsIAogICJ0eXBlIjogImh0dHAtMDEiLCAKICAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIgp9",
"signature": "Pys_cf1U79nYchtWlDdtViS70O0aF1QZaLEBnm8tJ7CGsq_ji_qBJ3FcqPrImm9PbWPCL_jCtcoKqie883uwsAZSaj7WvkDso14zQg4iVuzIEEB9rJlx_6Iaue6hLixLip-IB-OFRc7IGajUS3n2Y5AXhMGKsv-C3UBTqqRaXYvZDkCuXgyw-I867wYSwHSB8HM8xWJeFeQWZMJIkOg86ztA3lLWEwNDz8JjWI7h0zEYZTUUciE2Tqyy71tckz67zqKvCNb9RyxXK85-toUq28tGhI3ln3iHiAL-TF9RlMIgKxpyseRBrfaQNgNafb8YnHdwRIxW5iPGteN6clWQnQ"
}
2017-05-14 06:45:08,765:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781 HTTP/1.1" 202 338
2017-05-14 06:45:08,766:DEBUG:acme.client:Received response:
HTTP 202
Content-Length: 338
Boulder-Request-Id: fupUIybI_IGqMYP1jhu1fIpZ8iwUvMDWeY6YjgbYazo
Boulder-Requester: 2239509
Expires: Sun, 14 May 2017 06:45:08 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg>;rel="up"
Location: https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:08 GMT
Content-Type: application/json
Replay-Nonce: pf9xwqsj5-SE2q-G8Yn6vCZt8TIRX9Hu4fdkz_cEg1A
{
"type": "http-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
"token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
"keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
}
2017-05-14 06:45:08,766:DEBUG:acme.client:Storing nonce: pf9xwqsj5-SE2q-G8Yn6vCZt8TIRX9Hu4fdkz_cEg1A
2017-05-14 06:45:11,769:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM.
2017-05-14 06:45:12,335:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM HTTP/1.1" 200 1113
2017-05-14 06:45:12,336:DEBUG:acme.client:Received response:
HTTP 200
Content-Length: 1113
Strict-Transport-Security: max-age=604800
Boulder-Request-Id: _NjARZvGLaBnblbEwQcPkkZJpeGO-pG_FLOM9WsMY-k
Expires: Sun, 14 May 2017 06:45:12 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:12 GMT
X-Frame-Options: DENY
Content-Type: application/json
Replay-Nonce: oEJwei70-yUEHMiC76_u_K6uRz18MACk7mTNqzTq0CE
{
"identifier": {
"type": "dns",
"value": "elliotec.com"
},
"status": "pending",
"expires": "2017-05-21T06:45:08Z",
"challenges": [
{
"type": "http-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
"token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
"keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
},
{
"type": "dns-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620779",
"token": "lZAylq-TFiZ8J6b2YoN4YIn9VlbcByEQdwxV6VvSf2o"
},
{
"type": "tls-sni-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620780",
"token": "Qcd61WTSkzjbFfg_qpXYqtGw-fsLiU-7V5Cj72Fpd_c"
}
],
"combinations": [
[
1
],
[
0
],
[
2
]
]
}
2017-05-14 06:45:12,337:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg.
2017-05-14 06:45:12,501:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg HTTP/1.1" 200 1117
2017-05-14 06:45:12,502:DEBUG:acme.client:Received response:
HTTP 200
Content-Length: 1117
Strict-Transport-Security: max-age=604800
Boulder-Request-Id: nnlcAszabjsRgErfZ1KWJityGXOnNDmNlTPuLbxlndU
Expires: Sun, 14 May 2017 06:45:12 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:12 GMT
X-Frame-Options: DENY
Content-Type: application/json
Replay-Nonce: YQH9st1I4NsSllQgJ56MkM1mqZb6qp3FvM887Iv7SsI
{
"identifier": {
"type": "dns",
"value": "www.elliotec.com"
},
"status": "pending",
"expires": "2017-05-21T06:45:08Z",
"challenges": [
{
"type": "http-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
"token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
"keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI"
},
{
"type": "tls-sni-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620782",
"token": "x-R5S8yyc3jOZsc4n2deM5Zxr-Zu-uJjBWtQjTCLwro"
},
{
"type": "dns-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620783",
"token": "SFZylrJ53cDoTiOt9KgbXtQBUp5CY24QgPwy_VXs_Tg"
}
],
"combinations": [
[
1
],
[
2
],
[
0
]
]
}
2017-05-14 06:45:15,505:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM.
2017-05-14 06:45:15,550:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM HTTP/1.1" 200 2115
2017-05-14 06:45:15,551:DEBUG:acme.client:Received response:
HTTP 200
Content-Length: 2115
Strict-Transport-Security: max-age=604800
Boulder-Request-Id: JZW80A6wso1PB2rZn01bvjfra85AvaxfNVUkcINWNr8
Expires: Sun, 14 May 2017 06:45:15 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:15 GMT
X-Frame-Options: DENY
Content-Type: application/json
Replay-Nonce: OA2Jzp1WyAOLX4rTsYf9pfUG3_ETrQGcr5rA73b5bM8
{
"identifier": {
"type": "dns",
"value": "elliotec.com"
},
"status": "invalid",
"expires": "2017-05-21T06:45:08Z",
"challenges": [
{
"type": "http-01",
"status": "invalid",
"error": {
"type": "urn:acme:error:connection",
"detail": "Could not connect to elliotec.com",
"status": 400
},
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620778",
"token": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
"keyAuthorization": "nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI",
"validationRecord": [
{
"url": "https://elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
"hostname": "elliotec.com",
"port": "443",
"addressesResolved": [
"138.68.236.200",
"2604:a880:2:d0::972:f001"
],
"addressUsed": "138.68.236.200",
"addressesTried": []
},
{
"url": "http://elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q",
"hostname": "elliotec.com",
"port": "80",
"addressesResolved": [
"138.68.236.200",
"2604:a880:2:d0::972:f001"
],
"addressUsed": "138.68.236.200",
"addressesTried": [
"2604:a880:2:d0::972:f001"
]
}
]
},
{
"type": "dns-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620779",
"token": "lZAylq-TFiZ8J6b2YoN4YIn9VlbcByEQdwxV6VvSf2o"
},
{
"type": "tls-sni-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/a1xgylrzUtu9pnW-4UkFgiPouEaXvVZXtA5FXbiRwDM/38620780",
"token": "Qcd61WTSkzjbFfg_qpXYqtGw-fsLiU-7V5Cj72Fpd_c"
}
],
"combinations": [
[
1
],
[
0
],
[
2
]
]
}
2017-05-14 06:45:15,552:DEBUG:acme.client:Sending GET request to https://acme-staging.api.letsencrypt.org/acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg.
2017-05-14 06:45:15,597:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg HTTP/1.1" 200 1706
2017-05-14 06:45:15,598:DEBUG:acme.client:Received response:
HTTP 200
Content-Length: 1706
Strict-Transport-Security: max-age=604800
Boulder-Request-Id: O-dcCEO22wSftPfoxsvw4hR_7RO4cJMx0tyXZ3fwf_A
Expires: Sun, 14 May 2017 06:45:15 GMT
Server: nginx
Connection: keep-alive
Link: <https://acme-staging.api.letsencrypt.org/acme/new-cert>;rel="next"
Pragma: no-cache
Cache-Control: max-age=0, no-cache, no-store
Date: Sun, 14 May 2017 06:45:15 GMT
X-Frame-Options: DENY
Content-Type: application/json
Replay-Nonce: JEN5MtUnGRN0NINOoH_ye5-obhaWHTLpNgD07HqC8H0
{
"identifier": {
"type": "dns",
"value": "www.elliotec.com"
},
"status": "invalid",
"expires": "2017-05-21T06:45:08Z",
"challenges": [
{
"type": "http-01",
"status": "invalid",
"error": {
"type": "urn:acme:error:connection",
"detail": "Could not connect to www.elliotec.com",
"status": 400
},
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620781",
"token": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
"keyAuthorization": "77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8.2QMuZykW79UBpDBIR4GkUHMZ7EcwJQO_3I-3vZGCFcI",
"validationRecord": [
{
"url": "http://www.elliotec.com/.well-known/acme-challenge/77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8",
"hostname": "www.elliotec.com",
"port": "80",
"addressesResolved": [
"138.68.236.200",
"2604:a880:2:d0::972:f001"
],
"addressUsed": "2604:a880:2:d0::972:f001",
"addressesTried": []
}
]
},
{
"type": "tls-sni-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620782",
"token": "x-R5S8yyc3jOZsc4n2deM5Zxr-Zu-uJjBWtQjTCLwro"
},
{
"type": "dns-01",
"status": "pending",
"uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/Bg2CgTjkD_F0WKs9fUFlytp_hf5VRlxJEeVACUhzzvg/38620783",
"token": "SFZylrJ53cDoTiOt9KgbXtQBUp5CY24QgPwy_VXs_Tg"
}
],
"combinations": [
[
1
],
[
2
],
[
0
]
]
}
2017-05-14 06:45:15,599:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:
Domain: www.elliotec.com
Type: connection
Detail: Could not connect to www.elliotec.com
Domain: elliotec.com
Type: connection
Detail: Could not connect to elliotec.com
To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided.
2017-05-14 06:45:15,599:INFO:certbot.auth_handler:Cleaning up challenges
2017-05-14 06:45:15,599:DEBUG:certbot.plugins.webroot:Removing /srv/www/elliotec.com/.well-known/acme-challenge/nAZraDa6-cTWef6jFIvX13u1K0qE1R9QnNI1AHlZK_Q
2017-05-14 06:45:15,600:DEBUG:certbot.plugins.webroot:Removing /srv/www/elliotec.com/.well-known/acme-challenge/77pmCHKYcg36Dc7CqLN0NdMGM18xhDPSmo6oe_3sZ_8
2017-05-14 06:45:15,600:DEBUG:certbot.plugins.webroot:All challenges cleaned up, removing /srv/www/elliotec.com/.well-known/acme-challenge
2017-05-14 06:45:15,601:DEBUG:certbot.main:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 11, in <module>
load_entry_point('certbot==0.12.0', 'console_scripts', 'certbot')()
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 896, in main
return config.func(config, plugins)
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 692, in certonly
lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 92, in _get_and_save_cert
lineage = le_client.obtain_and_enroll_certificate(domains, certname)
File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 294, in obtain_and_enroll_certificate
certr, chain, key, _ = self.obtain_certificate(domains)
File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 265, in obtain_certificate
self.config.allow_subset_of_names)
File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 77, in get_authorizations
self._respond(resp, best_effort)
File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 134, in _respond
self._poll_challenges(chall_update, best_effort)
File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 198, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
FailedChallenges: Failed authorization procedure. www.elliotec.com (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to www.elliotec.com, elliotec.com (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to elliotec.com
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment