Skip to content

Instantly share code, notes, and snippets.

@ssbarnea
Created October 6, 2018 13:20
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save ssbarnea/67fc03e9d1d653b5ce1e3e1444c5e007 to your computer and use it in GitHub Desktop.
Save ssbarnea/67fc03e9d1d653b5ce1e3e1444c5e007 to your computer and use it in GitHub Desktop.
netgate acme cert failure
cat /tmp/acme/example.com/acme_issuecert.log
readlink exists=0
dirname exists=0
Lets find script dir.
_SCRIPT_='/usr/local/pkg/acme/acme.sh'
_script='/usr/local/pkg/acme/acme.sh'
_script_home='/usr/local/pkg/acme'
Using config home:/tmp/acme/example.com/
APP
2:LOG_FILE='/tmp/acme/example.com/acme_issuecert.log'
APP
3:LOG_LEVEL='3'
LE_WORKING_DIR='/tmp/acme/example.com/'
_main_domain='example.com'
_alt_domains='no'
Using config home:/tmp/acme/example.com/
ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
_ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
CA_CONF='/tmp/acme/example.com//ca/acme-v02.api.letsencrypt.org/ca.conf'
DOMAIN_PATH='/tmp/acme/example.com//example.com'
'dns_aws' does not contain 'dns'
Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
_init api for server: https://acme-v02.api.letsencrypt.org/directory
GET
url='https://acme-v02.api.letsencrypt.org/directory'
timeout=
curl exists=0
wget exists=127
_CURL='curl -L --silent --dump-header /tmp/acme/example.com//http.header -g '
ret='0'
response='{
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
"website": "https://letsencrypt.org"
},
"mg3dR4O4hWU": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}'
ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
ACME_NEW_AUTHZ
ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
ACME_VERSION='2'
Le_NextRenewTime
APP
2:Le_Domain='example.com'
APP
3:Le_Alt='no'
APP
4:Le_Webroot='dns_aws'
APP
5:Le_PreHook=''
APP
6:Le_PostHook=''
APP
7:Le_RenewHook=''
APP
8:Le_API='https://acme-v02.api.letsencrypt.org/directory'
_on_before_issue
_chk_main_domain='example.com'
_chk_alt_domains
'dns_aws' does not contain 'no'
Le_LocalAddress
d='example.com'
Check for domain='example.com'
_currentRoot='dns_aws'
d
'dns_aws' does not contain 'apache'
config file is empty, can not read CA_KEY_HASH
_saved_account_key_hash
Using config home:/tmp/acme/example.com/
ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
_ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
CA_CONF='/tmp/acme/example.com//ca/acme-v02.api.letsencrypt.org/ca.conf'
_regAccount
_init api for server: https://acme-v02.api.letsencrypt.org/directory
Only RSA or EC key is supported.
_on_issue_err
Please check log file for more details: /tmp/acme/example.com/acme_issuecert.log
_chk_vlist
[Sat Oct 6 12:51:10 UTC 2018] readlink exists=0
[Sat Oct 6 12:51:10 UTC 2018] dirname exists=0
[Sat Oct 6 12:51:10 UTC 2018] Lets find script dir.
[Sat Oct 6 12:51:10 UTC 2018] _SCRIPT_='/usr/local/pkg/acme/acme.sh'
[Sat Oct 6 12:51:10 UTC 2018] _script='/usr/local/pkg/acme/acme.sh'
[Sat Oct 6 12:51:10 UTC 2018] _script_home='/usr/local/pkg/acme'
[Sat Oct 6 12:51:10 UTC 2018] Using config home:/tmp/acme/example.com/
[Sat Oct 6 12:51:10 UTC 2018] APP
[Sat Oct 6 12:51:10 UTC 2018] 2:LOG_FILE='/tmp/acme/example.com/acme_issuecert.log'
[Sat Oct 6 12:51:10 UTC 2018] APP
[Sat Oct 6 12:51:10 UTC 2018] 3:LOG_LEVEL='3'
[Sat Oct 6 12:51:10 UTC 2018] LE_WORKING_DIR='/tmp/acme/example.com/'
[Sat Oct 6 12:51:10 UTC 2018] _main_domain='example.com'
[Sat Oct 6 12:51:10 UTC 2018] _alt_domains='no'
[Sat Oct 6 12:51:10 UTC 2018] Using config home:/tmp/acme/example.com/
[Sat Oct 6 12:51:10 UTC 2018] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sat Oct 6 12:51:10 UTC 2018] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sat Oct 6 12:51:10 UTC 2018] CA_CONF='/tmp/acme/example.com//ca/acme-v02.api.letsencrypt.org/ca.conf'
[Sat Oct 6 12:51:10 UTC 2018] DOMAIN_PATH='/tmp/acme/example.com//example.com'
[Sat Oct 6 12:51:10 UTC 2018] 'dns_aws' does not contain 'dns'
[Sat Oct 6 12:51:10 UTC 2018] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Sat Oct 6 12:51:10 UTC 2018] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sat Oct 6 12:51:10 UTC 2018] GET
[Sat Oct 6 12:51:10 UTC 2018] url='https://acme-v02.api.letsencrypt.org/directory'
[Sat Oct 6 12:51:10 UTC 2018] timeout=
[Sat Oct 6 12:51:10 UTC 2018] curl exists=0
[Sat Oct 6 12:51:10 UTC 2018] wget exists=127
[Sat Oct 6 12:51:10 UTC 2018] _CURL='curl -L --silent --dump-header /tmp/acme/example.com//http.header -g '
ret='0'
response='{
"VVuFTFJcc1w": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
"meta": {
"caaIdentities": [
"letsencrypt.org"
],
"termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
"website": "https://letsencrypt.org"
},
"newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
"newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
"newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
"revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}'
ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
ACME_NEW_AUTHZ
ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
ACME_VERSION='2'
Le_NextRenewTime
OK
2:Le_Domain='example.com'
OK
3:Le_Alt='no'
OK
4:Le_Webroot='dns_aws'
OK
5:Le_PreHook=''
OK
6:Le_PostHook=''
OK
7:Le_RenewHook=''
OK
8:Le_API='https://acme-v02.api.letsencrypt.org/directory'
_on_before_issue
_chk_main_domain='example.com'
_chk_alt_domains
'dns_aws' does not contain 'no'
Le_LocalAddress
d='example.com'
Check for domain='example.com'
_currentRoot='dns_aws'
d
'dns_aws' does not contain 'apache'
config file is empty, can not read CA_KEY_HASH
_saved_account_key_hash
Using config home:/tmp/acme/example.com/
ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
_ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
CA_CONF='/tmp/acme/example.com//ca/acme-v02.api.letsencrypt.org/ca.conf'
_regAccount
_init api for server: https://acme-v02.api.letsencrypt.org/directory
Only RSA or EC key is supported.
_on_issue_err
Please check log file for more details: /tmp/acme/example.com/acme_issuecert.log
_chk_vlist
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment