Skip to content

Instantly share code, notes, and snippets.

@optilude
Created January 5, 2016 23:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save optilude/cb37275d6b8455ff49f5 to your computer and use it in GitHub Desktop.
Save optilude/cb37275d6b8455ff49f5 to your computer and use it in GitHub Desktop.
2016-01-05 23:23:13,486:DEBUG:letsencrypt.cli:Root logging level set at -20
2016-01-05 23:23:13,501:INFO:letsencrypt.cli:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2016-01-05 23:23:13,517:DEBUG:letsencrypt.cli:letsencrypt version: 0.2.0.dev0
2016-01-05 23:23:13,534:DEBUG:letsencrypt.cli:Arguments: ['-vvvvv', '--debug', '--renew-by-default', '--webroot', '--webroot-path', '/webroot', '--domain', 'cloud.mydomain.net', '--domain', 'router.mydomain.net', '--domain', 'nas.mydomain.net', '--email', 'optilude@gmail.com', '--agree-tos']
2016-01-05 23:23:13,549:DEBUG:letsencrypt.cli:Discovered plugins: PluginsRegistry(PluginEntryPoint#nginx,PluginEntryPoint#standalone,PluginEntryPoint#manual,PluginEntryPoint#webroot,PluginEntryPoint#apache,PluginEntryPoint#null)
2016-01-05 23:23:13,564:DEBUG:letsencrypt.cli:Requested authenticator webroot and installer None
2016-01-05 23:23:13,579:DEBUG:letsencrypt.plugins.webroot:Creating root challenges validation dir at /webroot/.well-known/acme-challenge
2016-01-05 23:23:13,599:DEBUG:letsencrypt.plugins.webroot:Creating root challenges validation dir at /webroot/.well-known/acme-challenge
2016-01-05 23:23:13,615:DEBUG:letsencrypt.plugins.webroot:Creating root challenges validation dir at /webroot/.well-known/acme-challenge
2016-01-05 23:23:13,627:DEBUG:letsencrypt.display.ops:Single candidate plugin: * webroot
Description: Webroot Authenticator
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = letsencrypt.plugins.webroot:Authenticator
Initialized: <letsencrypt.plugins.webroot.Authenticator object at 0x7f7cd16c33d0>
Prep: True
2016-01-05 23:23:13,638:DEBUG:letsencrypt.cli:Selected authenticator <letsencrypt.plugins.webroot.Authenticator object at 0x7f7cd16c33d0> and installer None
2016-01-05 23:23:13,705:DEBUG:letsencrypt.cli:Picked account: <Account(aa0365efde4e5ed71a7d41928b75f466)>
2016-01-05 23:23:13,724:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
2016-01-05 23:23:13,755:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:14,155:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 200 263
2016-01-05 23:23:14,171:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '263', 'Expires': 'Tue, 05 Jan 2016 23:23:14 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:14 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'uxNSykaAwEC91ZE4IBckvrbJGnKeWHyTSTxmUcghjSs'}. Content: '{"new-authz":"https://acme-v01.api.letsencrypt.org/acme/new-authz","new-cert":"https://acme-v01.api.letsencrypt.org/acme/new-cert","new-reg":"https://acme-v01.api.letsencrypt.org/acme/new-reg","revoke-cert":"https://acme-v01.api.letsencrypt.org/acme/revoke-cert"}'
2016-01-05 23:23:14,187:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '263', 'Expires': 'Tue, 05 Jan 2016 23:23:14 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:14 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'uxNSykaAwEC91ZE4IBckvrbJGnKeWHyTSTxmUcghjSs'}): '{"new-authz":"https://acme-v01.api.letsencrypt.org/acme/new-authz","new-cert":"https://acme-v01.api.letsencrypt.org/acme/new-cert","new-reg":"https://acme-v01.api.letsencrypt.org/acme/new-reg","revoke-cert":"https://acme-v01.api.letsencrypt.org/acme/revoke-cert"}'
2016-01-05 23:23:14,211:INFO:letsencrypt.cli:Auto-renewal forced with --renew-by-default...
2016-01-05 23:23:14,322:INFO:letsencrypt.crypto_util:Generating key (2048 bits): /etc/letsencrypt/keys/0018_key-letsencrypt.pem
2016-01-05 23:23:14,354:INFO:letsencrypt.crypto_util:Creating CSR: /etc/letsencrypt/csr/0018_csr-letsencrypt.pem
2016-01-05 23:23:14,365:DEBUG:letsencrypt.client:CSR: CSR(file='/etc/letsencrypt/csr/0018_csr-letsencrypt.pem', data='0\x82\x02\xc90\x82\x01\xb1\x02\x01\x000!1\x1f0\x1d\x06\x03U\x04\x03\x0c\x16cloud.mydomain.net0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xdeq:D3\xe5\xa7|\xb16\xa6t\xe8ry\xa1\xd5\xbe\xf44\x93\xd5\xc6\x10\xb29\xbb\xc2\xf7\xba=)F\xa5\x03\xf9\xe6\xb1\'\xfd\xe9\xf5\ncM\xb1Yk\xeaQ\xe2U\xb2R\xa1s\x8c\xd5\x9f\xa6\xfb\rG1\x85b>S$@\x17}b\x7f\x80\xf4@^s\x14a\xedLB\xf8\xbd\xd0)\x96\xe9\xbcA\xbdq\xb37q\xc9}\xc6\xef\xdb\x10v\xba\xa73t\xcfy\xf5\xa9C\x83\x8e$,\xc5$\x8a\xa4\x8d\\\xbb-\xb3^\xacv\xf9\xec\xd2\xfc\xc6S*e}\'iq|\xec;\x0e\xa3C\x16$\x13)\xbb\x83\xee\xd4\x08\xf3\xe6\xb6\x19\x88\\\x0b\xcd\xf2S]|\xcd\xbc\xce\xaetgY{\r\xa9O\x05\x03\xc1\x9e}\x96\x10#\xf9*\xc0b\x8a\x1f\xe7/P\xcfq\x98\xaf3\x93TF%\x93M\xa3\xdaF\xb0\xb80\x8er|>\xb7\x8dY4\xb7\xbd\xbb1\xb9\x94\xd0\x96C\xbd\xf8]E!C\xff\x7f/\xa0\xab\xa6\x84\x95\xce#Kq\x0b\x14iS\xfc\xac\xd4Y\x02\x03\x01\x00\x01\xa0c0a\x06\t*\x86H\x86\xf7\r\x01\t\x0e1T0R0P\x06\x03U\x1d\x11\x04I0G\x82\x16cloud.mydomain.net\x82\x17router.mydomain.net\x82\x14nas.mydomain.net0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00g\x1f\x96\x7fp]\xd9#\xf03N\x07\xb4\x0c>\xf2\x17\xb6e\x8c\xcd#L\x0e>\xe6c\xf3\xb0\x1b\xd6[TK`\xc0y\x00\x1e\x065Gm\xfb\x9cb\x04\x17_\x9dQ~\x9dy@\xdbC\xefy\xcd\xbdX\xfc\x0b\x9b\xfb\x91\x12\x00\xe4*\xbd*\x91M%\x8b\xe8T\xa7P\x82\xee\xad\x97d\xa1\xede\x89\xcd\x942\ty\xb4$\xd8\x0b\xf0\x14\xecE\x91-\xf8E\xa81\xde4\xd1V\xa2|\xf5\x06y\xd2\xaa\xb8\x94ju4\x87(\xbeK\x0f\x0fR\x040\xfa}\xf0\xa0`>G\xae\xa4\x16\x080\xab\x883\xfe\x04\x15EiZCW\xa7\xe6E\xa3c5\xef6\xb2\xe4-\'\xce\xebL}0Z\xcfi\xe4\xa4\xa1\x08\xfcK\xc5\xab\xa6\x1b\xbaj\xea\x0c"\xd48\xf8d\xa5e\xc6\xd7\x17\x1f\xfe?W%\x81CB\x86\x90L\xe0O\x8fh\xa9\xd35^\x9d\x12\x173\x08\x05\x03\xfa$\x0e.*\xa2\xac\x05\xde_\xd6\xae9\x0e%\xb3\xa8\xd3[\x05\xe0\xdf\xb3\x16\x95\xe4Ot\x8d', form='der'), domains: ['cloud.mydomain.net', 'router.mydomain.net', 'nas.mydomain.net']
2016-01-05 23:23:14,382:DEBUG:root:Requesting fresh nonce
2016-01-05 23:23:14,400:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {}
2016-01-05 23:23:14,419:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:14,678:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0
2016-01-05 23:23:14,704:DEBUG:root:Received <Response [405]>. Headers: {'Content-Length': '0', 'Pragma': 'no-cache', 'Expires': 'Tue, 05 Jan 2016 23:23:14 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:14 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'mVJRffzwqnLIWK3-EccbnDjWgX0LVO9e46yxB9AxYWU'}. Content: ''
2016-01-05 23:23:14,719:DEBUG:acme.client:Storing nonce: '\x99RQ}\xfc\xf0\xaar\xc8X\xad\xfe\x11\xc7\x1b\x9c8\xd6\x81}\x0bT\xef^\xe3\xac\xb1\x07\xd01ae'
2016-01-05 23:23:14,732:DEBUG:acme.jose.json_util:Omitted empty fields: expires=None, challenges=None, status=None, combinations=None
2016-01-05 23:23:14,746:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "cloud.mydomain.net"}, "resource": "new-authz"}
2016-01-05 23:23:14,766:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-01-05 23:23:14,790:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-01-05 23:23:14,811:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "qXe6riR8jy1I1ERHB6Ohec5GU0elTHm-04kNaRuMoYnzKPNhiJmjLClOX3qIFLIyYTSNsHiAybR_ZiXBsRtb_NmIW3Gyug1cwNfONZ1pGLcgzbOEBca8JZAQIN-7G7CLML1yAKvVNbTzU5ZPTt36or3A-KuBh9kZqO_7LItjsaHjy3UAElTMgn0SntaPU5PCVcY0UC3JWXViiIvLOSvABXXNmBSoYojjiFnORQb4Q6PVhR4C4qOwL03x9lBAmw44-VT-moyREUmsh3tdYiT88QcDJQ1eB7NAASVWSBH_O8f0i4LiPibqrV427I1ssjX31EoGyK9nVDYjMxuxwz_aqw"}}, "protected": "eyJub25jZSI6ICJtVkpSZmZ6d3FuTElXSzMtRWNjYm5EaldnWDBMVk85ZTQ2eXhCOUF4WVdVIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJjbG91ZC5tYXJ0aW5hc3BlbGkubmV0In0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ", "signature": "MTj25ZpZnbchuRw0VijmRQak_LvXZy4tF3X61AyQcRxdhi0HRT4fKr-z-l7vYzcAYQ0R6kxxNFqAb2nzFwtg2_0fyNC2yawfivfvLgV_PAS6Tyr1QAFLPRJAGAApTfMBs4Ca7fCpSP144xXQOmLDcbU7K-iGffab_zOFSYKPeyAe9fOvAiMD1TSz57J_wImy882l6N-hslwfKjteVUcFBHWMo4qfGB3zuFOM1GA2rI8Bi4NUUf7d6vVcuc4nuY_8U_Aa-rFUEtMQU0uECmQxIm1dzChVGJhv1UbP9a_ZrlkEs743M0AiyoznzflH7RSnx89FnXE237Oya9W9WIezCg"}'}
2016-01-05 23:23:14,827:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:15,224:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 575
2016-01-05 23:23:15,239:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '575', 'Expires': 'Tue, 05 Jan 2016 23:23:15 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:15 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'sXE93OO64vWPJ_RqDdioj4RnIb8G3cNelmgrvCmZfto'}. Content: '{"identifier":{"type":"dns","value":"cloud.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15.125488091Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688050","token":"ZyJtuImZKCNVYe4bBCCKIUFUIslLd-CxeACJ1z92oxU"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:15,255:DEBUG:acme.client:Storing nonce: "\xb1q=\xdc\xe3\xba\xe2\xf5\x8f'\xf4j\r\xd8\xa8\x8f\x84g!\xbf\x06\xdd\xc3^\x96h+\xbc)\x99~\xda"
2016-01-05 23:23:15,268:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '575', 'Expires': 'Tue, 05 Jan 2016 23:23:15 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:15 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'sXE93OO64vWPJ_RqDdioj4RnIb8G3cNelmgrvCmZfto'}): '{"identifier":{"type":"dns","value":"cloud.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15.125488091Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688050","token":"ZyJtuImZKCNVYe4bBCCKIUFUIslLd-CxeACJ1z92oxU"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:15,283:DEBUG:acme.jose.json_util:Omitted empty fields: expires=None, challenges=None, status=None, combinations=None
2016-01-05 23:23:15,296:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "router.mydomain.net"}, "resource": "new-authz"}
2016-01-05 23:23:15,311:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-01-05 23:23:15,326:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-01-05 23:23:15,339:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "qXe6riR8jy1I1ERHB6Ohec5GU0elTHm-04kNaRuMoYnzKPNhiJmjLClOX3qIFLIyYTSNsHiAybR_ZiXBsRtb_NmIW3Gyug1cwNfONZ1pGLcgzbOEBca8JZAQIN-7G7CLML1yAKvVNbTzU5ZPTt36or3A-KuBh9kZqO_7LItjsaHjy3UAElTMgn0SntaPU5PCVcY0UC3JWXViiIvLOSvABXXNmBSoYojjiFnORQb4Q6PVhR4C4qOwL03x9lBAmw44-VT-moyREUmsh3tdYiT88QcDJQ1eB7NAASVWSBH_O8f0i4LiPibqrV427I1ssjX31EoGyK9nVDYjMxuxwz_aqw"}}, "protected": "eyJub25jZSI6ICJzWEU5M09PNjR2V1BKX1JxRGRpb2o0Um5JYjhHM2NOZWxtZ3J2Q21aZnRvIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJyb3V0ZXIubWFydGluYXNwZWxpLm5ldCJ9LCAicmVzb3VyY2UiOiAibmV3LWF1dGh6In0", "signature": "HRpKWfy_LxYLbwg-0MaXo9W96qAjcAvrmUg5BkiKLRRiq3AJLrST6n9ovf-loGiYckqomEKyPH-P0Dnbk5hyjJceNDMcZBi2jAGU8HbR78g-fndV917LtU8iY-cXKvBQ_yxOB3LZWFa-e8fneYCmn8gYAMT7oKO2ke1mvMHTYk77NQ2zcOU7f7Ex4vYiww6q3lRPEdUUsckpX6Q8UJyrlyYqWgVwMtJ5J-CSXwBONfkZKsQHv-ldhy0V0I7GFwuGpcz7i_bu-Zy3FHd6dRDxO3KxiLiM-RNXV9ABAPGzAtKbz7Cr9zy2k5WYNH9Fe1oAZqHDd7Y-qx7sRa316kN6CA"}'}
2016-01-05 23:23:15,361:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:16,009:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 576
2016-01-05 23:23:16,030:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '576', 'Expires': 'Tue, 05 Jan 2016 23:23:15 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:15 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'BI_RFzeohZBkk-KJUtCDlygSjdZeOeZ6Vdh2yhTn8Xw'}. Content: '{"identifier":{"type":"dns","value":"router.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15.877153531Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688053","token":"SUMHWxAmsX5WjTIuugxdlrHOMUXUwMuGLlQyi_J5DoY"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:16,042:DEBUG:acme.client:Storing nonce: '\x04\x8f\xd1\x177\xa8\x85\x90d\x93\xe2\x89R\xd0\x83\x97(\x12\x8d\xd6^9\xe6zU\xd8v\xca\x14\xe7\xf1|'
2016-01-05 23:23:16,070:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '576', 'Expires': 'Tue, 05 Jan 2016 23:23:15 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:15 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'BI_RFzeohZBkk-KJUtCDlygSjdZeOeZ6Vdh2yhTn8Xw'}): '{"identifier":{"type":"dns","value":"router.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15.877153531Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688053","token":"SUMHWxAmsX5WjTIuugxdlrHOMUXUwMuGLlQyi_J5DoY"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:16,088:DEBUG:acme.jose.json_util:Omitted empty fields: expires=None, challenges=None, status=None, combinations=None
2016-01-05 23:23:16,100:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "nas.mydomain.net"}, "resource": "new-authz"}
2016-01-05 23:23:16,115:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-01-05 23:23:16,136:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-01-05 23:23:16,151:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "qXe6riR8jy1I1ERHB6Ohec5GU0elTHm-04kNaRuMoYnzKPNhiJmjLClOX3qIFLIyYTSNsHiAybR_ZiXBsRtb_NmIW3Gyug1cwNfONZ1pGLcgzbOEBca8JZAQIN-7G7CLML1yAKvVNbTzU5ZPTt36or3A-KuBh9kZqO_7LItjsaHjy3UAElTMgn0SntaPU5PCVcY0UC3JWXViiIvLOSvABXXNmBSoYojjiFnORQb4Q6PVhR4C4qOwL03x9lBAmw44-VT-moyREUmsh3tdYiT88QcDJQ1eB7NAASVWSBH_O8f0i4LiPibqrV427I1ssjX31EoGyK9nVDYjMxuxwz_aqw"}}, "protected": "eyJub25jZSI6ICJCSV9SRnplb2haQmtrLUtKVXRDRGx5Z1NqZFplT2VaNlZkaDJ5aFRuOFh3In0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJuYXMubWFydGluYXNwZWxpLm5ldCJ9LCAicmVzb3VyY2UiOiAibmV3LWF1dGh6In0", "signature": "XR3kUbIjyPVXuWHrSRgKODPsTwnO-1lTPtIFCXrqPcD3IpDWdrEYkELd1a1RJtw-v6TluaZ5YXNPN88lsGJkvD3W8cRiBj6CjBlimJHuLG98PoRXBauxPUBF9CnJ72MZkprJlW8WcuAQMghT7mVbNvZq3OEKKwy3BT0QGU1tVBg4hUYAcTIOpcpe5RAnGpkGu6vu1XmDEtxWpI_xx9bv5DglwTzZ-1HablHtNoAgfbDj1uAH9Nc-ZSot37ddpxVP7w-GwP059pZCAmXlYL5vi2d-Wow8JQRb4VPvI0aK9SJlT12RAEAR8PQzoOtCk6zKTId4UJB17LgO8Q79PH8AtA"}'}
2016-01-05 23:23:16,166:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:16,668:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 573
2016-01-05 23:23:16,688:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '573', 'Expires': 'Tue, 05 Jan 2016 23:23:16 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:16 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'K8-fQZbr73u4JmINK6xsh5azWkgOhm_lJ5WgS-cH5Lg'}. Content: '{"identifier":{"type":"dns","value":"nas.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:16.584861784Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688058","token":"lDsKV1bFsLVqTsIzp69AD_-_GgFGoFB6_LgWGxf_P-c"}],"combinations":[[1],[0]]}'
2016-01-05 23:23:16,703:DEBUG:acme.client:Storing nonce: "+\xcf\x9fA\x96\xeb\xef{\xb8&b\r+\xacl\x87\x96\xb3ZH\x0e\x86o\xe5'\x95\xa0K\xe7\x07\xe4\xb8"
2016-01-05 23:23:16,720:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '573', 'Expires': 'Tue, 05 Jan 2016 23:23:16 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:16 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'K8-fQZbr73u4JmINK6xsh5azWkgOhm_lJ5WgS-cH5Lg'}): '{"identifier":{"type":"dns","value":"nas.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:16.584861784Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688058","token":"lDsKV1bFsLVqTsIzp69AD_-_GgFGoFB6_LgWGxf_P-c"}],"combinations":[[1],[0]]}'
2016-01-05 23:23:16,736:INFO:letsencrypt.auth_handler:Performing the following challenges:
2016-01-05 23:23:16,754:INFO:letsencrypt.auth_handler:http-01 challenge for cloud.mydomain.net
2016-01-05 23:23:16,767:INFO:letsencrypt.auth_handler:http-01 challenge for router.mydomain.net
2016-01-05 23:23:16,784:INFO:letsencrypt.auth_handler:http-01 challenge for nas.mydomain.net
2016-01-05 23:23:16,806:DEBUG:letsencrypt.plugins.webroot:Attempting to save validation to /webroot/.well-known/acme-challenge/HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ
2016-01-05 23:23:16,827:DEBUG:letsencrypt.plugins.webroot:Attempting to save validation to /webroot/.well-known/acme-challenge/j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE
2016-01-05 23:23:16,863:DEBUG:letsencrypt.plugins.webroot:Attempting to save validation to /webroot/.well-known/acme-challenge/5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc
2016-01-05 23:23:16,881:INFO:letsencrypt.auth_handler:Waiting for verification...
2016-01-05 23:23:16,902:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA", "type": "http-01", "resource": "challenge"}
2016-01-05 23:23:16,921:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-01-05 23:23:16,940:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-01-05 23:23:16,958:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "qXe6riR8jy1I1ERHB6Ohec5GU0elTHm-04kNaRuMoYnzKPNhiJmjLClOX3qIFLIyYTSNsHiAybR_ZiXBsRtb_NmIW3Gyug1cwNfONZ1pGLcgzbOEBca8JZAQIN-7G7CLML1yAKvVNbTzU5ZPTt36or3A-KuBh9kZqO_7LItjsaHjy3UAElTMgn0SntaPU5PCVcY0UC3JWXViiIvLOSvABXXNmBSoYojjiFnORQb4Q6PVhR4C4qOwL03x9lBAmw44-VT-moyREUmsh3tdYiT88QcDJQ1eB7NAASVWSBH_O8f0i4LiPibqrV427I1ssjX31EoGyK9nVDYjMxuxwz_aqw"}}, "protected": "eyJub25jZSI6ICJLOC1mUVpicjczdTRKbUlOSzZ4c2g1YXpXa2dPaG1fbEo1V2dTLWNINUxnIn0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogIkhDeDNEZF9KbU1QbDVwSFItVGpVRm9ubktvbEl5VHg4OUNzSW43QXRtZ1EuSmFNbFlUeFFQdEE1Z1JtdHc5dkt4akYtTldBZ1hjaFZyajc4Rnl6Nk1MQSIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "NzfugmoeDWkgo5BBAE8g-PT-c74C0HTBuwQmg8Y1ucz0q1TCaidscACvPlQ_dUk-nuSEFGBiWlYvlB57mAjwPHU6HNUCira-Ld24Q9yUt-qHNbR4LjBTR1QxgZVYmjKqD0h7_3XP4b6DLzdn5PJHa_SEp-xF2FzyRGF3dR1KOmD9MPNkRtu7inO2AudrjCIxtOj2GfTr_aL9IyOOoYxzz-htZp5cGbfRKgnDY9QxPtShx1AyZo9Hwr9VPU9sYNfEM2KFphPqHbI9tSfvq3Tn_OiJmX0t-IFS7R7NTIAnFf66S2iibArP5iNkTchiAYDV_g93xfN5ZIJzpDXjbcFSxg"}'}
2016-01-05 23:23:16,971:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:17,634:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049 HTTP/1.1" 202 312
2016-01-05 23:23:17,654:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '312', 'Expires': 'Tue, 05 Jan 2016 23:23:17 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:17 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'zOF1zOXCTvXPTqaeYgho4oQ9Dqm9sf50GGM4clFCh4w'}. Content: '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","keyAuthorization":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}'
2016-01-05 23:23:17,670:DEBUG:acme.client:Storing nonce: '\xcc\xe1u\xcc\xe5\xc2N\xf5\xcfN\xa6\x9eb\x08h\xe2\x84=\x0e\xa9\xbd\xb1\xfet\x18c8rQB\x87\x8c'
2016-01-05 23:23:17,683:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '312', 'Expires': 'Tue, 05 Jan 2016 23:23:17 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:17 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'zOF1zOXCTvXPTqaeYgho4oQ9Dqm9sf50GGM4clFCh4w'}): '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","keyAuthorization":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}'
2016-01-05 23:23:17,696:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA", "type": "http-01", "resource": "challenge"}
2016-01-05 23:23:17,714:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-01-05 23:23:17,733:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-01-05 23:23:17,748:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "qXe6riR8jy1I1ERHB6Ohec5GU0elTHm-04kNaRuMoYnzKPNhiJmjLClOX3qIFLIyYTSNsHiAybR_ZiXBsRtb_NmIW3Gyug1cwNfONZ1pGLcgzbOEBca8JZAQIN-7G7CLML1yAKvVNbTzU5ZPTt36or3A-KuBh9kZqO_7LItjsaHjy3UAElTMgn0SntaPU5PCVcY0UC3JWXViiIvLOSvABXXNmBSoYojjiFnORQb4Q6PVhR4C4qOwL03x9lBAmw44-VT-moyREUmsh3tdYiT88QcDJQ1eB7NAASVWSBH_O8f0i4LiPibqrV427I1ssjX31EoGyK9nVDYjMxuxwz_aqw"}}, "protected": "eyJub25jZSI6ICJ6T0Yxek9YQ1R2WFBUcWFlWWdobzRvUTlEcW05c2Y1MEdHTTRjbEZDaDR3In0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogImo5T01YdGZWR0VLR01oNkg1MVRpWlUtRF82TFQxcmlrczctSkwtSG1WV0UuSmFNbFlUeFFQdEE1Z1JtdHc5dkt4akYtTldBZ1hjaFZyajc4Rnl6Nk1MQSIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "A24Bs_GCPvfz_YZfpLWoq0qrBeZbdqaULWKeaSzsoTuw1tBGniFRCjjwjItMIoMiDWLWE7SxHqnX-Qs1-8dUEU7h6CbgDJPF5leoGChX9nqTqbRWAnXVWeqJtwCAWL2GFMKGIUNRJ5lCnoKFgRrpuQpLyU1YgnTLrq94aeTHxFmAzJfD2ySKZSqGY6lpi-dIpJVikA30M_8yVYK8JmZYSUrSVNYDdp8yF-N-aTsqkfYbn-vuaxWEulQQkUxrxldITaFZRo_raTW1hk9CArQj6kaxBu-5T_ujuYJCljcy03J6aqE52L1VZJjIvnaZYRQ-qqxQ7Pg9Gqgn0pIJNUMYCQ"}'}
2016-01-05 23:23:17,763:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:18,437:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054 HTTP/1.1" 202 312
2016-01-05 23:23:18,458:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '312', 'Expires': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'p4nWOqMQqwWVhm02AhzKINnE61GA1VtB860Fw1XIlkk'}. Content: '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","keyAuthorization":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}'
2016-01-05 23:23:18,474:DEBUG:acme.client:Storing nonce: '\xa7\x89\xd6:\xa3\x10\xab\x05\x95\x86m6\x02\x1c\xca \xd9\xc4\xebQ\x80\xd5[A\xf3\xad\x05\xc3U\xc8\x96I'
2016-01-05 23:23:18,491:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '312', 'Expires': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'p4nWOqMQqwWVhm02AhzKINnE61GA1VtB860Fw1XIlkk'}): '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","keyAuthorization":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}'
2016-01-05 23:23:18,504:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA", "type": "http-01", "resource": "challenge"}
2016-01-05 23:23:18,525:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, jwk=None, x5t=None, x5tS256=None, cty=None, x5u=None, typ=None, alg=None, jku=None
2016-01-05 23:23:18,543:DEBUG:acme.jose.json_util:Omitted empty fields: x5c=(), crit=(), kid=None, nonce=None, x5tS256=None, cty=None, x5t=None, x5u=None, typ=None, jku=None
2016-01-05 23:23:18,567:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "qXe6riR8jy1I1ERHB6Ohec5GU0elTHm-04kNaRuMoYnzKPNhiJmjLClOX3qIFLIyYTSNsHiAybR_ZiXBsRtb_NmIW3Gyug1cwNfONZ1pGLcgzbOEBca8JZAQIN-7G7CLML1yAKvVNbTzU5ZPTt36or3A-KuBh9kZqO_7LItjsaHjy3UAElTMgn0SntaPU5PCVcY0UC3JWXViiIvLOSvABXXNmBSoYojjiFnORQb4Q6PVhR4C4qOwL03x9lBAmw44-VT-moyREUmsh3tdYiT88QcDJQ1eB7NAASVWSBH_O8f0i4LiPibqrV427I1ssjX31EoGyK9nVDYjMxuxwz_aqw"}}, "protected": "eyJub25jZSI6ICJwNG5XT3FNUXF3V1ZobTAyQWh6S0lObkU2MUdBMVZ0Qjg2MEZ3MVhJbGtrIn0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogIjVTRy1qTWNDUzZUY2FGa3dMOVUzMGJiQmhoQkpvR3E0bDF2UHp0YWdqSWMuSmFNbFlUeFFQdEE1Z1JtdHc5dkt4akYtTldBZ1hjaFZyajc4Rnl6Nk1MQSIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "qTQ2Yk6e1RiOp9mYtAWY8S_hAkTRVH1RbxJv7Mcq0_z_VyZMOvxnwZYDSm-NpOO3x5TqRA_cDK2rCsVkpWMioeJDvE1nGU-apYHOFDlABrqjP8eZE8ACCiYIFWJ73WtZFnYcFZFZ6T-T3y_QNWFqYjeD0lj5O2IwsFwEMncbdKBUx8oGm0lrRoQiAjIHfe3m6T0skmdWEr-r4SCqRJImpbkfsxdYPvof2McMN01xaTfHdjGJ4aX0xLvPxtK2F8ju3qi7xouO8Yl3udTNaC9_1f06QH41IFrIqr-mvjOnutM4XDH1d-ZildMU7Z5d2WN-gONEn7xrdUdpoNkkiy8LYQ"}'}
2016-01-05 23:23:18,593:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:18,864:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057 HTTP/1.1" 202 312
2016-01-05 23:23:18,886:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '312', 'Expires': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': '1kHd9lUDMFHYoqVB7zAPc-8XcHRJ01rtT0qcblWOZvI'}. Content: '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","keyAuthorization":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}'
2016-01-05 23:23:18,901:DEBUG:acme.client:Storing nonce: '\xd6A\xdd\xf6U\x030Q\xd8\xa2\xa5A\xef0\x0fs\xef\x17ptI\xd3Z\xedOJ\x9cnU\x8ef\xf2'
2016-01-05 23:23:18,915:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '312', 'Expires': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:18 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': '1kHd9lUDMFHYoqVB7zAPc-8XcHRJ01rtT0qcblWOZvI'}): '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","keyAuthorization":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}'
2016-01-05 23:23:21,935:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4. args: (), kwargs: {}
2016-01-05 23:23:21,953:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:22,211:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4 HTTP/1.1" 200 674
2016-01-05 23:23:22,224:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '674', 'Expires': 'Tue, 05 Jan 2016 23:23:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'mAg8BwA446m0AN7hDtJt7QUKVW2yLmONop4xeRvoyXQ'}. Content: '{"identifier":{"type":"dns","value":"cloud.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","keyAuthorization":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688050","token":"ZyJtuImZKCNVYe4bBCCKIUFUIslLd-CxeACJ1z92oxU"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:22,239:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '674', 'Expires': 'Tue, 05 Jan 2016 23:23:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'mAg8BwA446m0AN7hDtJt7QUKVW2yLmONop4xeRvoyXQ'}): '{"identifier":{"type":"dns","value":"cloud.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","keyAuthorization":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688050","token":"ZyJtuImZKCNVYe4bBCCKIUFUIslLd-CxeACJ1z92oxU"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:22,257:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g. args: (), kwargs: {}
2016-01-05 23:23:22,272:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:22,517:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g HTTP/1.1" 200 675
2016-01-05 23:23:22,531:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '675', 'Expires': 'Tue, 05 Jan 2016 23:23:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'iOW4IHuPpe0kQUX3OyK5gAYyKKkqE_TQd2L7XFTEr4A'}. Content: '{"identifier":{"type":"dns","value":"router.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688053","token":"SUMHWxAmsX5WjTIuugxdlrHOMUXUwMuGLlQyi_J5DoY"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","keyAuthorization":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:22,546:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '675', 'Expires': 'Tue, 05 Jan 2016 23:23:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'iOW4IHuPpe0kQUX3OyK5gAYyKKkqE_TQd2L7XFTEr4A'}): '{"identifier":{"type":"dns","value":"router.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688053","token":"SUMHWxAmsX5WjTIuugxdlrHOMUXUwMuGLlQyi_J5DoY"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","keyAuthorization":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:22,566:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE. args: (), kwargs: {}
2016-01-05 23:23:22,585:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:22,837:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE HTTP/1.1" 200 672
2016-01-05 23:23:22,861:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '672', 'Expires': 'Tue, 05 Jan 2016 23:23:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'wHUO4cw7MlbKBZuSSLYZ0vpi85SsobqgJtKmFQth8m8'}. Content: '{"identifier":{"type":"dns","value":"nas.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:16Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","keyAuthorization":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688058","token":"lDsKV1bFsLVqTsIzp69AD_-_GgFGoFB6_LgWGxf_P-c"}],"combinations":[[1],[0]]}'
2016-01-05 23:23:22,874:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '672', 'Expires': 'Tue, 05 Jan 2016 23:23:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'wHUO4cw7MlbKBZuSSLYZ0vpi85SsobqgJtKmFQth8m8'}): '{"identifier":{"type":"dns","value":"nas.mydomain.net"},"status":"pending","expires":"2016-01-12T23:23:16Z","challenges":[{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","keyAuthorization":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688058","token":"lDsKV1bFsLVqTsIzp69AD_-_GgFGoFB6_LgWGxf_P-c"}],"combinations":[[1],[0]]}'
2016-01-05 23:23:25,893:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4. args: (), kwargs: {}
2016-01-05 23:23:25,905:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:26,203:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4 HTTP/1.1" 200 1104
2016-01-05 23:23:26,227:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1104', 'Expires': 'Tue, 05 Jan 2016 23:23:26 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:26 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'Wld3XXJ4JdGlPI4bZ2q20UME3hDxSxhoqL3L4rcA-NM'}. Content: '{"identifier":{"type":"dns","value":"cloud.mydomain.net"},"status":"invalid","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:connection","detail":"Could not connect to http://cloud.mydomain.net/.well-known/acme-challenge/HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","keyAuthorization":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA","validationRecord":[{"url":"http://cloud.mydomain.net/.well-known/acme-challenge/HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","hostname":"cloud.mydomain.net","port":"80","addressesResolved":["151.231.155.180"],"addressUsed":"151.231.155.180"}]},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688050","token":"ZyJtuImZKCNVYe4bBCCKIUFUIslLd-CxeACJ1z92oxU"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:26,239:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1104', 'Expires': 'Tue, 05 Jan 2016 23:23:26 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:26 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'Wld3XXJ4JdGlPI4bZ2q20UME3hDxSxhoqL3L4rcA-NM'}): '{"identifier":{"type":"dns","value":"cloud.mydomain.net"},"status":"invalid","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:connection","detail":"Could not connect to http://cloud.mydomain.net/.well-known/acme-challenge/HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688049","token":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","keyAuthorization":"HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA","validationRecord":[{"url":"http://cloud.mydomain.net/.well-known/acme-challenge/HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ","hostname":"cloud.mydomain.net","port":"80","addressesResolved":["151.231.155.180"],"addressUsed":"151.231.155.180"}]},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/UvXD13l7gjs7Wmo-ro9gIHBVotXG2fFjvIEDV0Nj2N4/4688050","token":"ZyJtuImZKCNVYe4bBCCKIUFUIslLd-CxeACJ1z92oxU"}],"combinations":[[0],[1]]}'
2016-01-05 23:23:26,271:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g. args: (), kwargs: {}
2016-01-05 23:23:26,306:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:26,633:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g HTTP/1.1" 200 1108
2016-01-05 23:23:26,648:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1108', 'Expires': 'Tue, 05 Jan 2016 23:23:26 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:26 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'cCBRO4rl0LoO0lxDmpiYPsQx-zzSHJEi6WC9uDWqCMc'}. Content: '{"identifier":{"type":"dns","value":"router.mydomain.net"},"status":"invalid","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688053","token":"SUMHWxAmsX5WjTIuugxdlrHOMUXUwMuGLlQyi_J5DoY"},{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:connection","detail":"Could not connect to http://router.mydomain.net/.well-known/acme-challenge/j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","keyAuthorization":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA","validationRecord":[{"url":"http://router.mydomain.net/.well-known/acme-challenge/j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","hostname":"router.mydomain.net","port":"80","addressesResolved":["151.231.155.180"],"addressUsed":"151.231.155.180"}]}],"combinations":[[0],[1]]}'
2016-01-05 23:23:26,666:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1108', 'Expires': 'Tue, 05 Jan 2016 23:23:26 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:26 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'cCBRO4rl0LoO0lxDmpiYPsQx-zzSHJEi6WC9uDWqCMc'}): '{"identifier":{"type":"dns","value":"router.mydomain.net"},"status":"invalid","expires":"2016-01-12T23:23:15Z","challenges":[{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688053","token":"SUMHWxAmsX5WjTIuugxdlrHOMUXUwMuGLlQyi_J5DoY"},{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:connection","detail":"Could not connect to http://router.mydomain.net/.well-known/acme-challenge/j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/jUjyIC3l3fPX5eNHrjFAb8l0W5Kdxzsi_fr-bHjKq9g/4688054","token":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","keyAuthorization":"j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA","validationRecord":[{"url":"http://router.mydomain.net/.well-known/acme-challenge/j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE","hostname":"router.mydomain.net","port":"80","addressesResolved":["151.231.155.180"],"addressUsed":"151.231.155.180"}]}],"combinations":[[0],[1]]}'
2016-01-05 23:23:26,684:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE. args: (), kwargs: {}
2016-01-05 23:23:26,697:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2016-01-05 23:23:26,976:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE HTTP/1.1" 200 1096
2016-01-05 23:23:26,995:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1096', 'Expires': 'Tue, 05 Jan 2016 23:23:26 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:26 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'skzY7xWZBZ0SNjZjNFgSAd-gGyRFhXUDA0tcT0dbi0A'}. Content: '{"identifier":{"type":"dns","value":"nas.mydomain.net"},"status":"invalid","expires":"2016-01-12T23:23:16Z","challenges":[{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:connection","detail":"Could not connect to http://nas.mydomain.net/.well-known/acme-challenge/5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","keyAuthorization":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA","validationRecord":[{"url":"http://nas.mydomain.net/.well-known/acme-challenge/5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","hostname":"nas.mydomain.net","port":"80","addressesResolved":["151.231.155.180"],"addressUsed":"151.231.155.180"}]},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688058","token":"lDsKV1bFsLVqTsIzp69AD_-_GgFGoFB6_LgWGxf_P-c"}],"combinations":[[1],[0]]}'
2016-01-05 23:23:27,010:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1096', 'Expires': 'Tue, 05 Jan 2016 23:23:26 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Tue, 05 Jan 2016 23:23:26 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'skzY7xWZBZ0SNjZjNFgSAd-gGyRFhXUDA0tcT0dbi0A'}): '{"identifier":{"type":"dns","value":"nas.mydomain.net"},"status":"invalid","expires":"2016-01-12T23:23:16Z","challenges":[{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:connection","detail":"Could not connect to http://nas.mydomain.net/.well-known/acme-challenge/5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688057","token":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","keyAuthorization":"5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc.JaMlYTxQPtA5gRmtw9vKxjF-NWAgXchVrj78Fyz6MLA","validationRecord":[{"url":"http://nas.mydomain.net/.well-known/acme-challenge/5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc","hostname":"nas.mydomain.net","port":"80","addressesResolved":["151.231.155.180"],"addressUsed":"151.231.155.180"}]},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/zFlk2U5lW1tu_gb6KreyHbiDcWai2SoyjnD3QCzSqeE/4688058","token":"lDsKV1bFsLVqTsIzp69AD_-_GgFGoFB6_LgWGxf_P-c"}],"combinations":[[1],[0]]}'
2016-01-05 23:23:27,052:INFO:letsencrypt.reporter:Reporting to user: The following 'urn:acme:error:connection' errors were reported by the server:
Domains: cloud.mydomain.net, nas.mydomain.net, router.mydomain.net
Error: The server could not connect to the client to verify the domain
2016-01-05 23:23:27,114:INFO:letsencrypt.auth_handler:Cleaning up challenges
2016-01-05 23:23:27,172:DEBUG:letsencrypt.plugins.webroot:Removing /webroot/.well-known/acme-challenge/HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ
2016-01-05 23:23:27,213:DEBUG:letsencrypt.plugins.webroot:Removing /webroot/.well-known/acme-challenge/j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE
2016-01-05 23:23:27,228:DEBUG:letsencrypt.plugins.webroot:Removing /webroot/.well-known/acme-challenge/5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc
2016-01-05 23:23:27,247:DEBUG:letsencrypt.cli:Exiting abnormally:
Traceback (most recent call last):
File "/opt/letsencrypt/venv/bin/letsencrypt", line 9, in <module>
load_entry_point('letsencrypt==0.2.0.dev0', 'console_scripts', 'letsencrypt')()
File "/opt/letsencrypt/src/letsencrypt/cli.py", line 1398, in main
return args.func(args, config, plugins)
File "/opt/letsencrypt/src/letsencrypt/cli.py", line 600, in obtain_cert
_auth_from_domains(le_client, config, domains)
File "/opt/letsencrypt/src/letsencrypt/cli.py", line 391, in _auth_from_domains
new_certr, new_chain, new_key, _ = le_client.obtain_certificate(domains)
File "/opt/letsencrypt/src/letsencrypt/client.py", line 266, in obtain_certificate
return self._obtain_certificate(domains, csr) + (key, csr)
File "/opt/letsencrypt/src/letsencrypt/client.py", line 224, in _obtain_certificate
authzr = self.auth_handler.get_authorizations(domains)
File "/opt/letsencrypt/src/letsencrypt/auth_handler.py", line 84, in get_authorizations
self._respond(cont_resp, dv_resp, best_effort)
File "/opt/letsencrypt/src/letsencrypt/auth_handler.py", line 142, in _respond
self._poll_challenges(chall_update, best_effort)
File "/opt/letsencrypt/src/letsencrypt/auth_handler.py", line 204, in _poll_challenges
raise errors.FailedChallenges(all_failed_achalls)
FailedChallenges: Failed authorization procedure. cloud.mydomain.net (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to http://cloud.mydomain.net/.well-known/acme-challenge/HCx3Dd_JmMPl5pHR-TjUFonnKolIyTx89CsIn7AtmgQ, router.mydomain.net (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to http://router.mydomain.net/.well-known/acme-challenge/j9OMXtfVGEKGMh6H51TiZU-D_6LT1riks7-JL-HmVWE, nas.mydomain.net (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Could not connect to http://nas.mydomain.net/.well-known/acme-challenge/5SG-jMcCS6TcaFkwL9U30bbBhhBJoGq4l1vPztagjIc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment