Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Non-existent error code 139,resulting in application failure #5134

Open
avsba001 opened this issue May 5, 2024 · 2 comments
Open

Non-existent error code 139,resulting in application failure #5134

avsba001 opened this issue May 5, 2024 · 2 comments

Comments

@avsba001
Copy link

avsba001 commented May 5, 2024

Steps to reproduce

I don't know how to reproduce it because it only appears on this computer

Debug log

[Sun May  5 10:00:26 PM CST 2024] Lets find script dir.
[Sun May  5 10:00:26 PM CST 2024] _SCRIPT_='./acme.sh'
[Sun May  5 10:00:26 PM CST 2024] _script='/root/acme.sh/acme.sh'
[Sun May  5 10:00:26 PM CST 2024] _script_home='/root/acme.sh'
[Sun May  5 10:00:26 PM CST 2024] Using config home:/root/.acme.sh
[Sun May  5 10:00:26 PM CST 2024] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.0.8
[Sun May  5 10:00:26 PM CST 2024] Running cmd: renew
[Sun May  5 10:00:26 PM CST 2024] _renewServer
[Sun May  5 10:00:26 PM CST 2024] Using config home:/root/.acme.sh
[Sun May  5 10:00:26 PM CST 2024] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
[Sun May  5 10:00:26 PM CST 2024] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun May  5 10:00:26 PM CST 2024] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sun May  5 10:00:26 PM CST 2024] _ACME_SERVER_PATH='directory'
[Sun May  5 10:00:26 PM CST 2024] The domain 'zhangxiong.work' seems to have a ECC cert already, lets use ecc cert.
[Sun May  5 10:00:26 PM CST 2024] DOMAIN_PATH='/root/.acme.sh/zhangxiong.work_ecc'
[Sun May  5 10:00:26 PM CST 2024] Renew: 'zhangxiong.work'
[Sun May  5 10:00:26 PM CST 2024] Le_API='https://acme-v02.api.letsencrypt.org/directory'
[Sun May  5 10:00:26 PM CST 2024] Renew to Le_API=https://acme-v02.api.letsencrypt.org/directory
[Sun May  5 10:00:26 PM CST 2024] initpath again.
[Sun May  5 10:00:26 PM CST 2024] Using config home:/root/.acme.sh
[Sun May  5 10:00:26 PM CST 2024] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun May  5 10:00:26 PM CST 2024] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Sun May  5 10:00:26 PM CST 2024] _ACME_SERVER_PATH='directory'
[Sun May  5 10:00:26 PM CST 2024] _main_domain='zhangxiong.work'
[Sun May  5 10:00:26 PM CST 2024] _alt_domains='*.zhangxiong.work'
[Sun May  5 10:00:26 PM CST 2024] 'dns' contains 'dns'
[Sun May  5 10:00:26 PM CST 2024] 'dns' contains 'dns'
[Sun May  5 10:00:26 PM CST 2024] Le_NextRenewTime
[Sun May  5 10:00:26 PM CST 2024] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Sun May  5 10:00:26 PM CST 2024] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sun May  5 10:00:26 PM CST 2024] GET
[Sun May  5 10:00:26 PM CST 2024] url='https://acme-v02.api.letsencrypt.org/directory'
[Sun May  5 10:00:26 PM CST 2024] timeout=
[Sun May  5 10:00:27 PM CST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.JzgkY1CWUJ  -g '
[Sun May  5 10:00:27 PM CST 2024] ret='0'
[Sun May  5 10:00:27 PM CST 2024] response='{
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "renewalInfo": "https://acme-v02.api.letsencrypt.org/draft-ietf-acme-ari-02/renewalInfo/",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert",
  "s8h5ejk1hwE": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417"
}'
[Sun May  5 10:00:27 PM CST 2024] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Sun May  5 10:00:27 PM CST 2024] ACME_NEW_AUTHZ
[Sun May  5 10:00:27 PM CST 2024] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun May  5 10:00:27 PM CST 2024] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Sun May  5 10:00:27 PM CST 2024] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Sun May  5 10:00:27 PM CST 2024] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf'
[Sun May  5 10:00:27 PM CST 2024] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun May  5 10:00:28 PM CST 2024] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Sun May  5 10:00:28 PM CST 2024] _on_before_issue
[Sun May  5 10:00:28 PM CST 2024] _chk_main_domain='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _chk_alt_domains='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] 'dns' does not contain 'no'
[Sun May  5 10:00:28 PM CST 2024] Le_LocalAddress
[Sun May  5 10:00:28 PM CST 2024] d='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] Check for domain='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _currentRoot='dns'
[Sun May  5 10:00:28 PM CST 2024] d='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] Check for domain='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _currentRoot='dns'
[Sun May  5 10:00:28 PM CST 2024] d
[Sun May  5 10:00:28 PM CST 2024] 'dns' does not contain 'apache'
[Sun May  5 10:00:28 PM CST 2024] _saved_account_key_hash='rxo4MM7sE2jIALMf8Ss0sWeSD2NHRIstWLpueBKt2nA='
[Sun May  5 10:00:28 PM CST 2024] _saved_account_key_hash is not changed, skip register account.
[Sun May  5 10:00:28 PM CST 2024] Read key length:ec-256
[Sun May  5 10:00:28 PM CST 2024] _createcsr
[Sun May  5 10:00:28 PM CST 2024] domain='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] domainlist='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] csrkey='/root/.acme.sh/zhangxiong.work_ecc/zhangxiong.work.key'
[Sun May  5 10:00:28 PM CST 2024] csr='/root/.acme.sh/zhangxiong.work_ecc/zhangxiong.work.csr'
[Sun May  5 10:00:28 PM CST 2024] csrconf='/root/.acme.sh/zhangxiong.work_ecc/zhangxiong.work.csr.conf'
[Sun May  5 10:00:28 PM CST 2024] _is_idn_d='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _idn_temp
[Sun May  5 10:00:28 PM CST 2024] domainlist='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] seg='zhangxiong'
[Sun May  5 10:00:28 PM CST 2024] _is_idn_d='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _idn_temp
[Sun May  5 10:00:28 PM CST 2024] seg='acme.sh'
[Sun May  5 10:00:28 PM CST 2024] Multi domain='DNS:zhangxiong.work,DNS:*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _is_idn_d='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _idn_temp
[Sun May  5 10:00:28 PM CST 2024] _csr_cn='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] seg='zhangxiong'
[Sun May  5 10:00:28 PM CST 2024] Getting domain auth token for each domain
[Sun May  5 10:00:28 PM CST 2024] seg='zhangxiong'
[Sun May  5 10:00:28 PM CST 2024] _is_idn_d='zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _idn_temp
[Sun May  5 10:00:28 PM CST 2024] d='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] seg='acme.sh'
[Sun May  5 10:00:28 PM CST 2024] _is_idn_d='*.zhangxiong.work'
[Sun May  5 10:00:28 PM CST 2024] _idn_temp
[Sun May  5 10:00:28 PM CST 2024] d
[Sun May  5 10:00:28 PM CST 2024] _identifiers='{"type":"dns","value":"zhangxiong.work"},{"type":"dns","value":"*.zhangxiong.work"}'
[Sun May  5 10:00:28 PM CST 2024] _notBefore
[Sun May  5 10:00:28 PM CST 2024] _notAfter
[Sun May  5 10:00:28 PM CST 2024] STEP 1, Ordering a Certificate
[Sun May  5 10:00:28 PM CST 2024] =======Begin Send Signed Request=======
[Sun May  5 10:00:28 PM CST 2024] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun May  5 10:00:28 PM CST 2024] payload='{"identifiers": [{"type":"dns","value":"zhangxiong.work"},{"type":"dns","value":"*.zhangxiong.work"}]}'
[Sun May  5 10:00:28 PM CST 2024] EC key
[Sun May  5 10:00:28 PM CST 2024] _URGLY_PRINTF
[Sun May  5 10:00:28 PM CST 2024] xargs
[Sun May  5 10:00:28 PM CST 2024] _URGLY_PRINTF
[Sun May  5 10:00:28 PM CST 2024] xargs
[Sun May  5 10:00:28 PM CST 2024] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun May  5 10:00:28 PM CST 2024] HEAD
[Sun May  5 10:00:28 PM CST 2024] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun May  5 10:00:28 PM CST 2024] body
[Sun May  5 10:00:28 PM CST 2024] _postContentType='application/jose+json'
[Sun May  5 10:00:28 PM CST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.9MhWJrwUut  -g  -I  '
[Sun May  5 10:00:29 PM CST 2024] _ret='0'
[Sun May  5 10:00:29 PM CST 2024] _headers='HTTP/2 200 
server: nginx
date: Sun, 05 May 2024 14:00:29 GMT
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: Gy4YNW4qb8-rQ--bR6-8elaqSQWdqOeJA9Ruqit1AZkjVL-nVl4
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun May  5 10:00:29 PM CST 2024] _CACHED_NONCE='Gy4YNW4qb8-rQ--bR6-8elaqSQWdqOeJA9Ruqit1AZkjVL-nVl4'
[Sun May  5 10:00:29 PM CST 2024] nonce='Gy4YNW4qb8-rQ--bR6-8elaqSQWdqOeJA9Ruqit1AZkjVL-nVl4'
[Sun May  5 10:00:29 PM CST 2024] _URGLY_PRINTF
[Sun May  5 10:00:29 PM CST 2024] xargs
[Sun May  5 10:00:29 PM CST 2024] POST
[Sun May  5 10:00:29 PM CST 2024] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun May  5 10:00:29 PM CST 2024] body='{"protected": "eyJub25jZSI6ICJHeTRZTlc0cWI4LXJRLS1iUjYtOGVsYXFTUVdkcU9lSkE5UnVxaXQxQVpralZMLW5WbDQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciIsICJhbGciOiAiRVMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTcwOTk2MzQ1NyJ9", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InpoYW5neGlvbmcud29yayJ9LHsidHlwZSI6ImRucyIsInZhbHVlIjoiKi56aGFuZ3hpb25nLndvcmsifV19", "signature": "FBajF-u_LqwLKy6bTBLWIYizFzLF9aKCkt9DOmpWS-8OTOHL7-3oHa9tUhc7ssgL8x5etKUXYBeDWpIElB9J4g"}'
[Sun May  5 10:00:29 PM CST 2024] _postContentType='application/jose+json'
[Sun May  5 10:00:29 PM CST 2024] Http already initialized.
[Sun May  5 10:00:29 PM CST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.9MhWJrwUut  -g '
[Sun May  5 10:00:30 PM CST 2024] _ret='0'
[Sun May  5 10:00:30 PM CST 2024] responseHeaders='HTTP/2 201 
server: nginx
date: Sun, 05 May 2024 14:00:30 GMT
content-type: application/json
content-length: 479
boulder-requester: 1709963457
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
location: https://acme-v02.api.letsencrypt.org/acme/order/1709963457/266810976747
replay-nonce: R8tUGx_Z_wh3kN9z58CmGulvWB69-yhF9sobn6-hyWNFIMC6qOg
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun May  5 10:00:30 PM CST 2024] code='201'
[Sun May  5 10:00:30 PM CST 2024] original='{
  "status": "ready",
  "expires": "2024-05-12T14:00:30Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "*.zhangxiong.work"
    },
    {
      "type": "dns",
      "value": "zhangxiong.work"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457",
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/1709963457/266810976747"
}'
[Sun May  5 10:00:30 PM CST 2024] response='{"status":"ready","expires":"2024-05-12T14:00:30Z","identifiers":[{"type":"dns","value":"*.zhangxiong.work"},{"type":"dns","value":"zhangxiong.work"}],"authorizations":["https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457","https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467"],"finalize":"https://acme-v02.api.letsencrypt.org/acme/finalize/1709963457/266810976747"}'
[Sun May  5 10:00:30 PM CST 2024] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/1709963457/266810976747'
[Sun May  5 10:00:30 PM CST 2024] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/1709963457/266810976747'
[Sun May  5 10:00:30 PM CST 2024] _authorizations_seg='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457,https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:30 PM CST 2024] STEP 2, Get the authorizations of each domain
[Sun May  5 10:00:30 PM CST 2024] _authz_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457'
[Sun May  5 10:00:30 PM CST 2024] =======Begin Send Signed Request=======
[Sun May  5 10:00:30 PM CST 2024] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457'
[Sun May  5 10:00:30 PM CST 2024] payload
[Sun May  5 10:00:30 PM CST 2024] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun May  5 10:00:30 PM CST 2024] Use _CACHED_NONCE='R8tUGx_Z_wh3kN9z58CmGulvWB69-yhF9sobn6-hyWNFIMC6qOg'
[Sun May  5 10:00:30 PM CST 2024] nonce='R8tUGx_Z_wh3kN9z58CmGulvWB69-yhF9sobn6-hyWNFIMC6qOg'
[Sun May  5 10:00:30 PM CST 2024] _URGLY_PRINTF
[Sun May  5 10:00:30 PM CST 2024] xargs
[Sun May  5 10:00:30 PM CST 2024] POST
[Sun May  5 10:00:30 PM CST 2024] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457'
[Sun May  5 10:00:30 PM CST 2024] body='{"protected": "eyJub25jZSI6ICJSOHRVR3hfWl93aDNrTjl6NThDbUd1bHZXQjY5LXloRjlzb2JuNi1oeVdORklNQzZxT2ciLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzM0Njk5ODcxODQ1NyIsICJhbGciOiAiRVMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTcwOTk2MzQ1NyJ9", "payload": "", "signature": "j28VNkjidT4p_uOfaAQBzTUpvPbkJyIIyR8LNKj77ATyu1eyie2RR0xbr_YnDsjP1CTfQbcGGyrE-VYlDojK4g"}'
[Sun May  5 10:00:30 PM CST 2024] _postContentType='application/jose+json'
[Sun May  5 10:00:30 PM CST 2024] Http already initialized.
[Sun May  5 10:00:30 PM CST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.9MhWJrwUut  -g '
[Sun May  5 10:00:31 PM CST 2024] _ret='0'
[Sun May  5 10:00:31 PM CST 2024] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 05 May 2024 14:00:31 GMT
content-type: application/json
content-length: 598
boulder-requester: 1709963457
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: Gy4YNW4qMUohA_-TTJxNCZmhpgkqdqv-w2GHMpQNd6dzAj9Hmc4
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun May  5 10:00:31 PM CST 2024] code='200'
[Sun May  5 10:00:31 PM CST 2024] original='{
  "identifier": {
    "type": "dns",
    "value": "zhangxiong.work"
  },
  "status": "valid",
  "expires": "2024-06-04T13:59:33Z",
  "challenges": [
    {
      "type": "dns-01",
      "status": "valid",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718457/SiPx4g",
      "token": "KJip5KgbY1Y-D8BcFCiBICBcxGEbq1sXBE7YXKiqeRA",
      "validationRecord": [
        {
          "hostname": "zhangxiong.work",
          "resolverAddrs": [
            "10.0.12.82:22757"
          ]
        }
      ],
      "validated": "2024-05-05T13:59:32Z"
    }
  ],
  "wildcard": true
}'
[Sun May  5 10:00:31 PM CST 2024] response='{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:33Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718457/SiPx4g","token":"KJip5KgbY1Y-D8BcFCiBICBcxGEbq1sXBE7YXKiqeRA","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.82:22757"]}],"validated":"2024-05-05T13:59:32Z"}],"wildcard": true}'
[Sun May  5 10:00:31 PM CST 2024] response='{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:33Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718457/SiPx4g","token":"KJip5KgbY1Y-D8BcFCiBICBcxGEbq1sXBE7YXKiqeRA","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.82:22757"]}],"validated":"2024-05-05T13:59:32Z"}],"wildcard": true}'
[Sun May  5 10:00:31 PM CST 2024] _d='*.zhangxiong.work'
[Sun May  5 10:00:31 PM CST 2024] _authz_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:31 PM CST 2024] =======Begin Send Signed Request=======
[Sun May  5 10:00:31 PM CST 2024] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:31 PM CST 2024] payload
[Sun May  5 10:00:31 PM CST 2024] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun May  5 10:00:31 PM CST 2024] Use _CACHED_NONCE='Gy4YNW4qMUohA_-TTJxNCZmhpgkqdqv-w2GHMpQNd6dzAj9Hmc4'
[Sun May  5 10:00:31 PM CST 2024] nonce='Gy4YNW4qMUohA_-TTJxNCZmhpgkqdqv-w2GHMpQNd6dzAj9Hmc4'
[Sun May  5 10:00:31 PM CST 2024] _URGLY_PRINTF
[Sun May  5 10:00:31 PM CST 2024] xargs
[Sun May  5 10:00:31 PM CST 2024] POST
[Sun May  5 10:00:31 PM CST 2024] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:31 PM CST 2024] body='{"protected": "eyJub25jZSI6ICJHeTRZTlc0cU1Vb2hBXy1UVEp4TkNabWhwZ2txZHF2LXcyR0hNcFFOZDZkekFqOUhtYzQiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzM0Njk5ODcxODQ2NyIsICJhbGciOiAiRVMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTcwOTk2MzQ1NyJ9", "payload": "", "signature": "kJIBU4dP6y9rrq5HLXlOox9qZIRYXqnRomTInEsf3LGPouG3WNo7bcEKoh4hKIrnhVsVd5ZK0zLKcW2jGWz4CA"}'
[Sun May  5 10:00:31 PM CST 2024] _postContentType='application/jose+json'
[Sun May  5 10:00:31 PM CST 2024] Http already initialized.
[Sun May  5 10:00:31 PM CST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.9MhWJrwUut  -g '
[Sun May  5 10:00:33 PM CST 2024] _ret='0'
[Sun May  5 10:00:33 PM CST 2024] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 05 May 2024 14:00:33 GMT
content-type: application/json
content-length: 578
boulder-requester: 1709963457
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: KBbvukTeSBd6okJC4Hf_UsXBEZZxzvhzcKwfsZbX5bON_C_68Ts
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun May  5 10:00:33 PM CST 2024] code='200'
[Sun May  5 10:00:33 PM CST 2024] original='{
  "identifier": {
    "type": "dns",
    "value": "zhangxiong.work"
  },
  "status": "valid",
  "expires": "2024-06-04T13:59:28Z",
  "challenges": [
    {
      "type": "dns-01",
      "status": "valid",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718467/hwCodA",
      "token": "EzdIIfq3TQ65gwCzlUKixen4kZvTZvw8mCee1z7-KGs",
      "validationRecord": [
        {
          "hostname": "zhangxiong.work",
          "resolverAddrs": [
            "10.0.12.89:20043"
          ]
        }
      ],
      "validated": "2024-05-05T13:59:28Z"
    }
  ]
}'
[Sun May  5 10:00:33 PM CST 2024] response='{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:28Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718467/hwCodA","token":"EzdIIfq3TQ65gwCzlUKixen4kZvTZvw8mCee1z7-KGs","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.89:20043"]}],"validated":"2024-05-05T13:59:28Z"}]}'
[Sun May  5 10:00:33 PM CST 2024] response='{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:28Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718467/hwCodA","token":"EzdIIfq3TQ65gwCzlUKixen4kZvTZvw8mCee1z7-KGs","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.89:20043"]}],"validated":"2024-05-05T13:59:28Z"}]}'
[Sun May  5 10:00:33 PM CST 2024] _d='zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] _authorizations_map='zhangxiong.work,{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:28Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718467/hwCodA","token":"EzdIIfq3TQ65gwCzlUKixen4kZvTZvw8mCee1z7-KGs","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.89:20043"]}],"validated":"2024-05-05T13:59:28Z"}]}#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467
*.zhangxiong.work,{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:33Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718457/SiPx4g","token":"KJip5KgbY1Y-D8BcFCiBICBcxGEbq1sXBE7YXKiqeRA","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.82:22757"]}],"validated":"2024-05-05T13:59:32Z"}],"wildcard": true}#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457
'
[Sun May  5 10:00:33 PM CST 2024] d='zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] Getting webroot for domain='zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] _w='dns'
[Sun May  5 10:00:33 PM CST 2024] _currentRoot='dns'
[Sun May  5 10:00:33 PM CST 2024] _is_idn_d='zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] _idn_temp
[Sun May  5 10:00:33 PM CST 2024] _candidates='zhangxiong.work,{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:28Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718467/hwCodA","token":"EzdIIfq3TQ65gwCzlUKixen4kZvTZvw8mCee1z7-KGs","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.89:20043"]}],"validated":"2024-05-05T13:59:28Z"}]}#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:33 PM CST 2024] response='{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:28Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718467/hwCodA","token":"EzdIIfq3TQ65gwCzlUKixen4kZvTZvw8mCee1z7-KGs","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.89:20043"]}],"validated":"2024-05-05T13:59:28Z"}]}#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:33 PM CST 2024] _authz_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:33 PM CST 2024] zhangxiong.work is already valid.
[Sun May  5 10:00:33 PM CST 2024] keyauthorization='verified_ok'
[Sun May  5 10:00:33 PM CST 2024] entry='"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718467/hwCodA","token":"EzdIIfq3TQ65gwCzlUKixen4kZvTZvw8mCee1z7-KGs","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.89:20043"]'
[Sun May  5 10:00:33 PM CST 2024] dvlist='zhangxiong.work#verified_ok##dns-01#dns#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467'
[Sun May  5 10:00:33 PM CST 2024] d='*.zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] Getting webroot for domain='*.zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] _w='dns'
[Sun May  5 10:00:33 PM CST 2024] _currentRoot='dns'
[Sun May  5 10:00:33 PM CST 2024] _is_idn_d='*.zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] _idn_temp
[Sun May  5 10:00:33 PM CST 2024] _candidates='*.zhangxiong.work,{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:33Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718457/SiPx4g","token":"KJip5KgbY1Y-D8BcFCiBICBcxGEbq1sXBE7YXKiqeRA","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.82:22757"]}],"validated":"2024-05-05T13:59:32Z"}],"wildcard": true}#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457'
[Sun May  5 10:00:33 PM CST 2024] response='{"identifier":{"type":"dns","value":"zhangxiong.work"},"status":"valid","expires":"2024-06-04T13:59:33Z","challenges":[{"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718457/SiPx4g","token":"KJip5KgbY1Y-D8BcFCiBICBcxGEbq1sXBE7YXKiqeRA","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.82:22757"]}],"validated":"2024-05-05T13:59:32Z"}],"wildcard": true}#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457'
[Sun May  5 10:00:33 PM CST 2024] _authz_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457'
[Sun May  5 10:00:33 PM CST 2024] *.zhangxiong.work is already valid.
[Sun May  5 10:00:33 PM CST 2024] keyauthorization='verified_ok'
[Sun May  5 10:00:33 PM CST 2024] entry='"type":"dns-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/346998718457/SiPx4g","token":"KJip5KgbY1Y-D8BcFCiBICBcxGEbq1sXBE7YXKiqeRA","validationRecord":[{"hostname":"zhangxiong.work","resolverAddrs":["10.0.12.82:22757"]'
[Sun May  5 10:00:33 PM CST 2024] dvlist='*.zhangxiong.work#verified_ok##dns-01#dns#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457'
[Sun May  5 10:00:33 PM CST 2024] d
[Sun May  5 10:00:33 PM CST 2024] vlist='zhangxiong.work#verified_ok##dns-01#dns#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718467,*.zhangxiong.work#verified_ok##dns-01#dns#https://acme-v02.api.letsencrypt.org/acme/authz-v3/346998718457,'
[Sun May  5 10:00:33 PM CST 2024] d='zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] zhangxiong.work is already verified, skip dns-01.
[Sun May  5 10:00:33 PM CST 2024] d='*.zhangxiong.work'
[Sun May  5 10:00:33 PM CST 2024] *.zhangxiong.work is already verified, skip dns-01.
[Sun May  5 10:00:33 PM CST 2024] ok, let's start to verify
[Sun May  5 10:00:33 PM CST 2024] zhangxiong.work is already verified, skip dns-01.
[Sun May  5 10:00:34 PM CST 2024] *.zhangxiong.work is already verified, skip dns-01.
[Sun May  5 10:00:34 PM CST 2024] pid
[Sun May  5 10:00:34 PM CST 2024] No need to restore nginx, skip.
[Sun May  5 10:00:34 PM CST 2024] _clearupdns
[Sun May  5 10:00:34 PM CST 2024] dns_entries
[Sun May  5 10:00:34 PM CST 2024] skip dns.
[Sun May  5 10:00:34 PM CST 2024] Verify finished, start to sign.
[Sun May  5 10:00:34 PM CST 2024] i='2'
[Sun May  5 10:00:34 PM CST 2024] j='8'
[Sun May  5 10:00:34 PM CST 2024] Lets finalize the order.
[Sun May  5 10:00:34 PM CST 2024] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/1709963457/266810976747'
[Sun May  5 10:00:34 PM CST 2024] =======Begin Send Signed Request=======
[Sun May  5 10:00:34 PM CST 2024] url='https://acme-v02.api.letsencrypt.org/acme/finalize/1709963457/266810976747'
[Sun May  5 10:00:34 PM CST 2024] payload='{"csr": "MIIBMzCB2wIBADAaMRgwFgYDVQQDDA96aGFuZ3hpb25nLndvcmswWTATBgcqhkjOPQIBBggqhkjOPQMBBwNCAATnTPAV1vO4jTNGGUDa6xomrU1Qh3zhr7a5GIag2ZXYLGYxKMfjOZD_MTE2FoSl76MRUoDvAck-mSAf8Mb70wzGoF8wXQYJKoZIhvcNAQkOMVAwTjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwLQYDVR0RBCYwJIIPemhhbmd4aW9uZy53b3JrghEqLnpoYW5neGlvbmcud29yazAKBggqhkjOPQQDAgNHADBEAiAo2v_MgLSEZkmjm4qrg3eEvDJ7PQqs1UTMIvLl-qOlLQIgSgwT9-1rkZO1I2OLYkOIy79bpYgcKEVf-W4XBXIc-E4"}'
[Sun May  5 10:00:34 PM CST 2024] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun May  5 10:00:34 PM CST 2024] Use _CACHED_NONCE='KBbvukTeSBd6okJC4Hf_UsXBEZZxzvhzcKwfsZbX5bON_C_68Ts'
[Sun May  5 10:00:34 PM CST 2024] nonce='KBbvukTeSBd6okJC4Hf_UsXBEZZxzvhzcKwfsZbX5bON_C_68Ts'
[Sun May  5 10:00:34 PM CST 2024] _URGLY_PRINTF
[Sun May  5 10:00:34 PM CST 2024] xargs
[Sun May  5 10:00:34 PM CST 2024] POST
[Sun May  5 10:00:34 PM CST 2024] _post_url='https://acme-v02.api.letsencrypt.org/acme/finalize/1709963457/266810976747'
[Sun May  5 10:00:34 PM CST 2024] body='{"protected": "eyJub25jZSI6ICJLQmJ2dWtUZVNCZDZva0pDNEhmX1VzWEJFWlp4enZoemNLd2ZzWmJYNWJPTl9DXzY4VHMiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2ZpbmFsaXplLzE3MDk5NjM0NTcvMjY2ODEwOTc2NzQ3IiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNzA5OTYzNDU3In0", "payload": "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", "signature": "Zt28-ClX3oODmqKx4LPuyi-dQI8AhhfK45w2AXbOcdJRuUO3TheoSFoDoRi5kBccPRw0oHUo3tgdArAS4-gBHA"}'
[Sun May  5 10:00:34 PM CST 2024] _postContentType='application/jose+json'
[Sun May  5 10:00:34 PM CST 2024] Http already initialized.
[Sun May  5 10:00:34 PM CST 2024] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.9MhWJrwUut  -g '
[Sun May  5 10:00:34 PM CST 2024] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 139
[Sun May  5 10:00:34 PM CST 2024] Here is the curl dump log:
[Sun May  5 10:00:34 PM CST 2024] == Info:   Trying 172.65.32.248:443...
== Info: Connected to acme-v02.api.letsencrypt.org (172.65.32.248) port 443 (#0)
== Info: ALPN: offers h2,http/1.1
=> Send SSL data, 5 bytes (0x5)
0000: .....
== Info: TLSv1.3 (OUT), TLS handshake, Client hello (1):
=> Send SSL data, 512 bytes (0x200)
0000: ......k..o.A....._uw..h..8.N...].}.o.w ...9.%....qJ.t..A....=...
0040: .._...N.>.......,.0.........+./...$.(.k.#.'.g.....9.....3.....=.
0080: <.5./.....u...!.....acme-v02.api.letsencrypt.org................
00c0: .........................h2.http/1.1.........1.....*.(..........
0100: ...............................+............-.....3.&.$... .}..v
0140: ~......A........g...............................................
0180: ................................................................
01c0: ................................................................
== Info:  CAfile: /etc/ssl/certs/ca-certificates.crt
== Info:  CApath: /etc/ssl/certs
<= Recv SSL data, 5 bytes (0x5)
0000: ....z
== Info: TLSv1.3 (IN), TLS handshake, Server hello (2):
<= Recv SSL data, 122 bytes (0x7a)
0000: ...v....|O....i+......D..;..,hQ..o/NB. ...9.%....qJ.t..A....=...
0040: .._...N......+.....3.$... (.:....P.+.yj.r:S....+J.S...;..X
<= Recv SSL data, 5 bytes (0x5)
0000: .....
<= Recv SSL data, 5 bytes (0x5)
0000: ....$
<= Recv SSL data, 1 bytes (0x1)
0000: .
== Info: TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
<= Recv SSL data, 19 bytes (0x13)
0000: .................h2
<= Recv SSL data, 5 bytes (0x5)
0000: .....
<= Recv SSL data, 1 bytes (0x1)
0000: .
== Info: TLSv1.3 (IN), TLS handshake, Certificate (11):
<= Recv SSL data, 2802 bytes (0xaf2)
0000: ...........0...0............k.B.RH ...=..B..0...*.H........021.0
0040: ...U....US1.0...U....Let's Encrypt1.0...U....R30...240503140648Z
0080: ..240801140647Z0'1%0#..U....acme-v02.api.letsencrypt.org0.."0...
00c0: *.H.............0............_.gk...N....../.<br....*<...._5.5..
0100: r?..a...4-.........@.!..+Y...........U^...4...6.]."l..._T`4..,Bd
0140: .iZ..V..fm.L..L...+.L*...<]xI..}.....f.8>.blhY.}^.eq{V..r....5.$
0180: .)..y...?.bN....JR....c.I..0ig.....q..7k....C`.../..K2le3..0C..M
01c0: ...Fc..>..T..........s............0...0...U...........0...U.%..0
0200: ...+.........+.......0...U.......0.0...U......zQ.H.....s^..._..Z
0240: ..0...U.#..0........XV..P.@........0U..+........I0G0!..+.....0..
0280: .http://r3.o.lencr.org0"..+.....0...http://r3.i.lencr.org/0....U
02c0: .....0....acme-v02-1.api.letsencrypt.org..acme-v02-2.api.letsenc
0300: rypt.org..acme-v02-3.api.letsencrypt.org..acme-v02-4.api.letsenc
0340: rypt.org..acme-v02-5.api.letsencrypt.org..acme-v02.api.letsencry
0380: pt.org..incident.letsencrypt.org0...U. ..0.0...g.....0.....+....
03c0: .y............v....q...R.0...?d..n(...R....J?.......>.\Z.....G0E
0400: .!..-....Q.....:..~A..BB.k.n.$..,.$. ....?U...~...L..;~U..?&.g.W
0440: ..^...v.H..k..G4..j...0..R..V.,.....9..s....>.]......G0E. ~EL...
0480: &..icG........I4.....O.Zs7.!.....cu...+.aG.......#..e.......O0..
04c0: .*.H..................Y.}.+.."V<.=..u.6......"9`l..?h&6.K...3..
0500: ..@"K.0-.l.1.C(...Q...?C.3....9....C.<..u.B.:..Vu.;LC..W...{..."
0540: ,.+...R..n...u.~....f..t$.../_48.....gR..m#d...vJ.m........+.C=G
0580: F.yF.@..+8..,..'......{..EkY.....N./.1....B.u.n...<m0..5%..D.]
05c0: .gdT.........f..=.....0...0............+.J....S...%._Z0...*.H...
0600: .....0O1.0...U....US1)0'..U... Internet Security Research Group1
0640: .0...U....ISRG Root X10...200904000000Z..250915160000Z021.0...U.
0680: ...US1.0...U....Let's Encrypt1.0...U....R30.."0...*.H...........
06c0: ..0...........(.........U.......zB..]&..+..L...k.u....G..U5W....
0700: 9...<B.Nn.;......\.Y8...i.Z.....$%..7q..........;ERE...S.4.R....
0740: ..`p..T..m...@4k+..f.f4|.k..W)..0.].ro......X=......+.....q].F..
0780: .%...`guf.....\.S.:..G.......w?.S......p...c.......S...H...i.%u.
07c0: ..R...Q.............0...0...U...........0...U.%..0...+.........+
0800: .......0...U.......0.......0...U...........XV..P.@........0...U.
0840: #..0...y.Y.{....s.....X...n02..+........&0$0"..+.....0...http://
0880: x1.i.lencr.org/0'..U... 0.0.......http://x1.c.lencr.org/0"..U. .
08c0: .0.0...g.....0...+..........0...*.H...............NG>...D...gx..
0900: c.uM..=3erT-...... ._..p..n;.^... ..........<....9..|%.G.en?F...
0940: ..+.T....'K.../...q.J....#{.-...W>...3.G!x..'.*....\.d...y.O.mD.
0980: ^.........D).Y .c.!..&..W..e..."...C....~...7.Z..0..n+*.!N......
09c0: .^....j...;3..K........?.UC6.h.6.j.....@.4...c959un..v.....Kl...
0a00: .......h..e..=wS..y...1.u*C.U.r.)...]N..F.0..._..y..^p.........a
0a40: q%*...%PRh........}..l.!1.........=.L.8...+.......= .~Y...X.[.H.
0a80: .\O.)..U#......|.../....GF?.....(Mh2.g^.i....../..RC.o2WeM2..8S.
0ac0: ]~]f)........V.B..N.%8DPm...U...Id.N....[.s...G...
<= Recv SSL data, 5 bytes (0x5)
0000: .....
<= Recv SSL data, 1 bytes (0x1)
0000: .
== Info: TLSv1.3 (IN), TLS handshake, CERT verify (15):
<= Recv SSL data, 264 bytes (0x108)
0000: .........sp................4&...X'N..8M0....Jv......*......S.e..
0040: ..R........._.r.....S.8...]g............]E.......-.p.x&_T....t.6
0080: ...f.K.=?u...vah........cx.3.&V...`.....9.-.D...XG.n.......`.+..
00c0: ...*j`..a..U..{...u..k:....J.6.'~.?...Z.......AX=.....&..Op=..T
0100: .8c@e...
<= Recv SSL data, 5 bytes (0x5)
0000: ....E
<= Recv SSL data, 1 bytes (0x1)
0000: .
== Info: TLSv1.3 (IN), TLS handshake, Finished (20):
<= Recv SSL data, 52 bytes (0x34)
0000: ...0.*^c..}...}d........<..e..y.'..yq]...g.D.}`..`.]
=> Send SSL data, 5 bytes (0x5)
0000: .....
== Info: TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
=> Send SSL data, 1 bytes (0x1)
0000: .
=> Send SSL data, 5 bytes (0x5)
0000: ....E
=> Send SSL data, 1 bytes (0x1)
0000: .
== Info: TLSv1.3 (OUT), TLS handshake, Finished (20):
=> Send SSL data, 52 bytes (0x34)
0000: ...0-S.?i..e.a.....8`*v...(..s...x.V9..)R.Eg.u.....}
== Info: SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384
== Info: ALPN: server accepted h2
== Info: Server certificate:
== Info:  subject: CN=acme-v02.api.letsencrypt.org
== Info:  start date: May  3 14:06:48 2024 GMT
== Info:  expire date: Aug  1 14:06:47 2024 GMT
== Info:  subjectAltName: host "acme-v02.api.letsencrypt.org" matched cert's "acme-v02.api.letsencrypt.org"
== Info:  issuer: C=US; O=Let's Encrypt; CN=R3
== Info:  SSL certificate verify ok.
=> Send SSL data, 5 bytes (0x5)
0000: ....Q
=> Send SSL data, 1 bytes (0x1)
0000: .
== Info: using HTTP/2
== Info: h2h3 [:method: POST]
== Info: h2h3 [:path: /acme/authz-v3/346998718467]
== Info: h2h3 [:scheme: https]
== Info: h2h3 [:authority: acme-v02.api.letsencrypt.org]
== Info: h2h3 [user-agent: acme.sh/3.0.8 (https://github.com/acmesh-official/acme.sh)]
== Info: h2h3 [accept: */*]
== Info: h2h3 [content-type: application/jose+json]
== Info: h2h3 [content-length: 431]
== Info: Using Stream ID: 1 (easy handle 0x564d606913f0)
=> Send SSL data, 5 bytes (0x5)
0000: .....
=> Send SSL data, 1 bytes (0x1)
0000: .
=> Send header, 222 bytes (0xde)
0000: POST /acme/authz-v3/346998718467 HTTP/2
0029: Host: acme-v02.api.letsencrypt.org
004d: user-agent: acme.sh/3.0.8 (https://github.com/acmesh-official/ac
008d: me.sh)
0095: accept: */*
00a2: content-type: application/jose+json
00c7: content-length: 431
00dc: 
=> Send SSL data, 5 bytes (0x5)
0000: .....
=> Send SSL data, 1 bytes (0x1)
0000: .
=> Send data, 431 bytes (0x1af)
0000: {"protected": "eyJub25jZSI6ICJHeTRZTlc0cU1Vb2hBXy1UVEp4TkNabWhwZ
0040: 2txZHF2LXcyR0hNcFFOZDZkekFqOUhtYzQiLCAidXJsIjogImh0dHBzOi8vYWNtZ
0080: S12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LXYzLzM0Njk5ODcxO
00c0: DQ2NyIsICJhbGciOiAiRVMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuY
0100: XBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMTcwOTk2MzQ1NyJ9", "paylo
0140: ad": "", "signature": "kJIBU4dP6y9rrq5HLXlOox9qZIRYXqnRomTInEsf3
0180: LGPouG3WNo7bcEKoh4hKIrnhVsVd5ZK0zLKcW2jGWz4CA"}
== Info: We are completely uploaded and fine
<= Recv SSL data, 5 bytes (0x5)
0000: ....J
<= Recv SSL data, 1 bytes (0x1)
0000: .
== Info: TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
<= Recv SSL data, 57 bytes (0x39)
0000: ...5..Q....<.......... ..s...T..rE-....8.w.7.D.....o.,...
<= Recv SSL data, 5 bytes (0x5)
0000: ....J
<= Recv SSL data, 1 bytes (0x1)
0000: .
== Info: TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
<= Recv SSL data, 57 bytes (0x39)
0000: ...5..Q...{Y.......... ...F.O>R.,...7.7..7..kZ[#....w....
== Info: old SSL session ID is stale, removing
<= Recv SSL data, 5 bytes (0x5)
0000: ....O
<= Recv SSL data, 1 bytes (0x1)
0000: .
=> Send SSL data, 5 bytes (0x5)
0000: .....
=> Send SSL data, 1 bytes (0x1)
0000: .
<= Recv SSL data, 5 bytes (0x5)
0000: ....g
<= Recv SSL data, 1 bytes (0x1)
0000: .
<= Recv header, 13 bytes (0xd)
0000: HTTP/2 200 
<= Recv header, 15 bytes (0xf)
0000: server: nginx
<= Recv header, 37 bytes (0x25)
0000: date: Sun, 05 May 2024 14:00:33 GMT
<= Recv header, 32 bytes (0x20)
0000: content-type: application/json
<= Recv header, 21 bytes (0x15)
0000: content-length: 578
<= Recv header, 31 bytes (0x1f)
0000: boulder-requester: 1709963457
<= Recv header, 44 bytes (0x2c)
0000: cache-control: public, max-age=0, no-cache
<= Recv header, 68 bytes (0x44)
0000: link: <https://acme-v02.api.letsencrypt.org/directory>;rel="inde
0040: x"
<= Recv header, 67 bytes (0x43)
0000: replay-nonce: KBbvukTeSBd6okJC4Hf_UsXBEZZxzvhzcKwfsZbX5bON_C_68T
0040: s
<= Recv header, 23 bytes (0x17)
0000: x-frame-options: DENY
<= Recv header, 43 bytes (0x2b)
0000: strict-transport-security: max-age=604800
<= Recv header, 2 bytes (0x2)
0000: 
<= Recv data, 578 bytes (0x242)
0000: {.  "identifier": {.    "type": "dns",.    "value": "zhangxiong.
0040: work".  },.  "status": "valid",.  "expires": "2024-06-04T13:59:2
0080: 8Z",.  "challenges": [.    {.      "type": "dns-01",.      "stat
00c0: us": "valid",.      "url": "https://acme-v02.api.letsencrypt.org
0100: /acme/chall-v3/346998718467/hwCodA",.      "token": "EzdIIfq3TQ6
0140: 5gwCzlUKixen4kZvTZvw8mCee1z7-KGs",.      "validationRecord": [. 
0180:        {.          "hostname": "zhangxiong.work",.          "res
01c0: olverAddrs": [.            "10.0.12.89:20043".          ].      
0200:   }.      ],.      "validated": "2024-05-05T13:59:28Z".    }.  ]
0240: .}
== Info: Connection #0 to host acme-v02.api.letsencrypt.org left intact
[Sun May  5 10:00:34 PM CST 2024] _ret='139'
[Sun May  5 10:00:34 PM CST 2024] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 05 May 2024 14:00:33 GMT
content-type: application/json
content-length: 578
boulder-requester: 1709963457
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: KBbvukTeSBd6okJC4Hf_UsXBEZZxzvhzcKwfsZbX5bON_C_68Ts
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun May  5 10:00:34 PM CST 2024] code='200'
[Sun May  5 10:00:34 PM CST 2024] original
[Sun May  5 10:00:34 PM CST 2024] response
[Sun May  5 10:00:34 PM CST 2024] Sign error, wrong status
[Sun May  5 10:00:34 PM CST 2024] 
[Sun May  5 10:00:34 PM CST 2024] _on_issue_err
[Sun May  5 10:00:34 PM CST 2024] Please add '--debug' or '--log' to check more details.
[Sun May  5 10:00:34 PM CST 2024] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
[Sun May  5 10:00:34 PM CST 2024] _chk_vlist
[Sun May  5 10:00:34 PM CST 2024] 'dns' contains 'dns'
[Sun May  5 10:00:34 PM CST 2024] The dns manual mode can not renew automatically, you must issue it again manually. You'd better use the other modes instead.
[Sun May  5 10:00:34 PM CST 2024] Diagnosis versions: 
openssl:openssl
OpenSSL 3.0.11 19 Sep 2023 (Library: OpenSSL 3.0.11 19 Sep 2023)
apache:
apache doesn't exist.
nginx:
nginx version: nginx/1.25.5
built by gcc 12.2.0 (Debian 12.2.0-14) 
built with OpenSSL 1.1.1q  5 Jul 2022
TLS SNI support enabled
configure arguments: --user=www --group=www --prefix=/www/server/nginx --add-module=/www/server/nginx/src/ngx_devel_kit --add-module=/www/server/nginx/src/lua_nginx_module --add-module=/www/server/nginx/src/ngx_cache_purge --with-openssl=/www/server/nginx/src/openssl --with-pcre=pcre-8.43 --with-http_v2_module --with-stream --with-stream_ssl_module --with-stream_ssl_preread_module --with-http_stub_status_module --with-http_ssl_module --with-http_image_filter_module --with-http_gzip_static_module --with-http_gunzip_module --with-ipv6 --with-http_sub_module --with-http_flv_module --with-http_addition_module --with-http_realip_module --with-http_mp4_module --add-module=/www/server/nginx/src/ngx_http_substitutions_filter_module-master --with-ld-opt=-Wl,-E --with-cc-opt=-Wno-error --with-ld-opt=-ljemalloc --with-http_dav_module --add-module=/www/server/nginx/src/nginx-dav-ext-module --with-http_v3_module --add-module=/www/server/ngx_brotli
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.4.4 on 06 Nov 2022 08:15:51
   running on Linux version #1 SMP PREEMPT_DYNAMIC Debian 6.1.85-1 (2024-04-11), release 6.1.0-20-amd64, machine x86_64
features:
  #define WITH_STDIO 1
  #define WITH_FDNUM 1
  #define WITH_FILE 1
  #define WITH_CREAT 1
  #define WITH_GOPEN 1
  #define WITH_TERMIOS 1
  #define WITH_PIPE 1
  #define WITH_UNIX 1
  #define WITH_ABSTRACT_UNIXSOCKET 1
  #define WITH_IP4 1
  #define WITH_IP6 1
  #define WITH_RAWIP 1
  #define WITH_GENERICSOCKET 1
  #define WITH_INTERFACE 1
  #define WITH_TCP 1
  #define WITH_UDP 1
  #define WITH_SCTP 1
  #define WITH_LISTEN 1
  #define WITH_SOCKS4 1
  #define WITH_SOCKS4A 1
  #define WITH_VSOCK 1
  #define WITH_PROXY 1
  #define WITH_SYSTEM 1
  #define WITH_EXEC 1
  #undef WITH_READLINE
  #define WITH_TUN 1
  #define WITH_PTY 1
  #define WITH_OPENSSL 1
  #undef WITH_FIPS
  #define WITH_LIBWRAP 1
  #define WITH_SYCLS 1
  #define WITH_FILAN 1
  #define WITH_RETRY 1
  #define WITH_MSGLEVEL 0 /*debug*/
Copy link

github-actions bot commented May 5, 2024

Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade If it's still not working, please provide the log with --debug 2, otherwise, nobody can help you.

@YAOmeihah
Copy link

同样的问题
[Wed May 22 23:36:05 CST 2024] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 139
[Wed May 22 23:36:05 CST 2024] Sign error, wrong status
[Wed May 22 23:36:05 CST 2024]
[Wed May 22 23:36:05 CST 2024] Please add '--debug' or '--log' to check more details.
[Wed May 22 23:36:05 CST 2024] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants