API tools faq
paste
s3cur1ty88

Let's Encrypt

s3cur1ty88
May 9th, 2016
106
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 21.25 KB | None | 0 0
raw download clone embed print report
  1. 2016-05-09 10:58:22,296:DEBUG:letsencrypt.main:Root logging level set at -10
  2. 2016-05-09 10:58:22,300:INFO:letsencrypt.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
  3. 2016-05-09 10:58:22,304:DEBUG:letsencrypt.main:letsencrypt version: 0.5.0
  4. 2016-05-09 10:58:22,307:DEBUG:letsencrypt.main:Arguments: ['--webroot', '-w', '/home/USERNAME/public_html', '-d', 'DOMAIN.com', '-vvvv']
  5. 2016-05-09 10:58:22,311:DEBUG:letsencrypt.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
  6. 2016-05-09 10:58:22,318:DEBUG:letsencrypt.plugins.selection:Requested authenticator webroot and installer None
  7. 2016-05-09 10:58:22,324:DEBUG:letsencrypt.plugins.selection:Single candidate plugin: * webroot
  8. Description: Place files in webroot directory
  9. Interfaces: IAuthenticator, IPlugin
  10. Entry point: webroot = letsencrypt.plugins.webroot:Authenticator
  11. Initialized: <letsencrypt.plugins.webroot.Authenticator object at 0x7fc070446b50>
  12. Prep: True
  13. 2016-05-09 10:58:22,329:DEBUG:letsencrypt.plugins.selection:Selected authenticator <letsencrypt.plugins.webroot.Authenticator object at 0x7fc070446b50> and installer None
  14. 2016-05-09 10:58:22,442:DEBUG:letsencrypt.main:Picked account: <Account(f7978a610fa024c978d2db3cba52dce3)>
  15. 2016-05-09 10:58:22,448:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory. args: (), kwargs: {}
  16. 2016-05-09 10:58:22,458:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  17. 2016-05-09 10:58:22,840:DEBUG:requests.packages.urllib3.connectionpool:"GET /directory HTTP/1.1" 200 263
  18. 2016-05-09 10:58:22,848:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '263', 'Expires': 'Mon, 09 May 2016 10:58:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'pmKiOi3ByS-OduaCym9rvhglGWvluMVqVDt89eeBHrA'}. Content: '{"new-authz":"https://acme-v01.api.letsencrypt.org/acme/new-authz","new-cert":"https://acme-v01.api.letsencrypt.org/acme/new-cert","new-reg":"https://acme-v01.api.letsencrypt.org/acme/new-reg","revoke-cert":"https://acme-v01.api.letsencrypt.org/acme/revoke-cert"}'
  19. 2016-05-09 10:58:22,855:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '263', 'Expires': 'Mon, 09 May 2016 10:58:22 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:22 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'pmKiOi3ByS-OduaCym9rvhglGWvluMVqVDt89eeBHrA'}): '{"new-authz":"https://acme-v01.api.letsencrypt.org/acme/new-authz","new-cert":"https://acme-v01.api.letsencrypt.org/acme/new-cert","new-reg":"https://acme-v01.api.letsencrypt.org/acme/new-reg","revoke-cert":"https://acme-v01.api.letsencrypt.org/acme/revoke-cert"}'
  20. 2016-05-09 10:58:22,863:DEBUG:root:Requesting fresh nonce
  21. 2016-05-09 10:58:22,869:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {}
  22. 2016-05-09 10:58:22,876:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  23. 2016-05-09 10:58:23,050:DEBUG:requests.packages.urllib3.connectionpool:"HEAD /acme/new-authz HTTP/1.1" 405 0
  24. 2016-05-09 10:58:23,059:DEBUG:root:Received <Response [405]>. Headers: {'Content-Length': '78', 'Pragma': 'no-cache', 'Expires': 'Mon, 09 May 2016 10:58:23 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Allow': 'POST', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:23 GMT', 'Content-Type': 'application/problem+json', 'Replay-Nonce': 'WlcGBYEvGAkJZBFD2StiJSU8WXB54OQKsIwwM1KDCSA'}. Content: ''
  25. 2016-05-09 10:58:23,065:DEBUG:acme.client:Storing nonce: 'ZW\x06\x05\x81/\x18\t\td\x11C\xd9+b%%<Ypy\xe0\xe4\n\xb0\x8c03R\x83\t '
  26. 2016-05-09 10:58:23,071:DEBUG:acme.jose.json_util:Omitted empty fields: status=None, combinations=None, expires=None, challenges=None
  27. 2016-05-09 10:58:23,076:DEBUG:acme.client:Serialized JSON: {"identifier": {"type": "dns", "value": "DOMAIN.com"}, "resource": "new-authz"}
  28. 2016-05-09 10:58:23,081:DEBUG:acme.jose.json_util:Omitted empty fields: cty=None, x5t=None, crit=(), x5tS256=None, x5u=None, x5c=(), alg=None, jku=None, typ=None, kid=None, jwk=None
  29. 2016-05-09 10:58:23,088:DEBUG:acme.jose.json_util:Omitted empty fields: cty=None, x5t=None, crit=(), x5tS256=None, x5u=None, x5c=(), jku=None, typ=None, nonce=None, kid=None
  30. 2016-05-09 10:58:23,095:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "waslEmH3IdZF_LhpSr7w8GqYt_CoK8wkbjOWrqoUVGAlurZ7UquHe9pZfa8yZm4pVWuj2IeLZy9AiogyxG72ihE-6zJwxqG37ofgrABpP_XVMI7_4smVl3SwoLNWlI7aTKwXmdM2mLCiWwoU8OgZnQdeYPnUmmEBGidxJhyiAGITROMLAb6BV0QXCJiJlXFaXIZY1hR7AddXyNu7gp32IDf4LigVzSZYUy4VekkS1U69CnxynbYW3BKF87ExUtmIDPptIh6OOFZSjzmhqVgXk7fp8q72yLpfJ1RLDGSN3GME8o4dOrbKtV7x94AWFI63Qxht1OWcB8M2pCiE3JcZIQ"}}, "protected": "eyJub25jZSI6ICJXbGNHQllFdkdBa0paQkZEMlN0aUpTVThXWEI1NE9RS3NJd3dNMUtEQ1NBIn0", "payload": "eyJpZGVudGlmaWVyIjogeyJ0eXBlIjogImRucyIsICJ2YWx1ZSI6ICJyZXNodGkuY29tIn0sICJyZXNvdXJjZSI6ICJuZXctYXV0aHoifQ", "signature": "DJdRJz3HMSWbgY5R0jalJm-CtwfIeDjK8pd1JuFXA914FdYuUUwfmsM9QfIcvYA3OTT16w0uocF1ZY836QLLahpku4RGHkOVV51HTw8cXvrg-UOyIp1MWHNtQ8WY0FiwaHj5EWgKyjFqXGQcD9tsP4bVtlILlZVjacZijiD_PpimPBdBVp8QuViA5OmittPT2vAw_m7vFt77FAxEfUwkBzsm6KZ6YmkWuqBfYdUsr_gQDe7CDhhhwTLWbAAA6K5NIKDBZrlcwmGPJ1QM28ivPx5sZREmr-Y7YST9zW_RIgNr9gEX8ZN6jcNWK3pMEUccJH0_m4spczvbqErq481-fA"}'}
  31. 2016-05-09 10:58:23,102:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  32. 2016-05-09 10:58:23,300:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/new-authz HTTP/1.1" 201 773
  33. 2016-05-09 10:58:23,309:DEBUG:root:Received <Response [201]>. Headers: {'Content-Length': '773', 'Expires': 'Mon, 09 May 2016 10:58:23 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:23 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'm6O0Zlxd3s75gK5TayktevCrxiiFF81vKwFvtYc1m8A'}. Content: '{"identifier":{"type":"dns","value":"DOMAIN.com"},"status":"pending","expires":"2016-05-16T10:58:23.223592134Z","challenges":[{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300281","token":"2AJCpLFdlPp2UsTXI39__FhO_Ha55mFk0s-fGDJ8yEE"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282","token":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300283","token":"t-RsbwyQK8M9v_5JkIX0GZdruP2gQSedVS4pgZYL2G8"}],"combinations":[[0],[2],[1]]}'
  34. 2016-05-09 10:58:23,316:DEBUG:acme.client:Storing nonce: '\x9b\xa3\xb4f\\]\xde\xce\xf9\x80\xaeSk)-z\xf0\xab\xc6(\x85\x17\xcdo+\x01o\xb5\x875\x9b\xc0'
  35. 2016-05-09 10:58:23,321:DEBUG:acme.client:Received response <Response [201]> (headers: {'Content-Length': '773', 'Expires': 'Mon, 09 May 2016 10:58:23 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/authz/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:23 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'm6O0Zlxd3s75gK5TayktevCrxiiFF81vKwFvtYc1m8A'}): '{"identifier":{"type":"dns","value":"DOMAIN.com"},"status":"pending","expires":"2016-05-16T10:58:23.223592134Z","challenges":[{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300281","token":"2AJCpLFdlPp2UsTXI39__FhO_Ha55mFk0s-fGDJ8yEE"},{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282","token":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo"},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300283","token":"t-RsbwyQK8M9v_5JkIX0GZdruP2gQSedVS4pgZYL2G8"}],"combinations":[[0],[2],[1]]}'
  36. 2016-05-09 10:58:23,327:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u'status': u'pending', u'token': u'2AJCpLFdlPp2UsTXI39__FhO_Ha55mFk0s-fGDJ8yEE', u'type': u'dns-01', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300281'}
  37. 2016-05-09 10:58:23,333:INFO:letsencrypt.auth_handler:Performing the following challenges:
  38. 2016-05-09 10:58:23,338:INFO:letsencrypt.auth_handler:http-01 challenge for DOMAIN.com
  39. 2016-05-09 10:58:23,344:INFO:letsencrypt.plugins.webroot:Using the webroot path /home/USERNAME/public_html for all unmatched domains.
  40. 2016-05-09 10:58:23,349:DEBUG:letsencrypt.plugins.webroot:Creating root challenges validation dir at /home/USERNAME/public_html/.well-known/acme-challenge
  41. 2016-05-09 10:58:23,357:DEBUG:letsencrypt.plugins.webroot:Attempting to save validation to /home/USERNAME/public_html/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo
  42. 2016-05-09 10:58:23,363:INFO:letsencrypt.auth_handler:Waiting for verification...
  43. 2016-05-09 10:58:23,369:DEBUG:acme.client:Serialized JSON: {"keyAuthorization": "pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo.KAprPGzlZOWtcW63Kwdi6eqCCoesfR1LcLv5yqtkY2Q", "type": "http-01", "resource": "challenge"}
  44. 2016-05-09 10:58:23,375:DEBUG:acme.jose.json_util:Omitted empty fields: cty=None, x5t=None, crit=(), x5tS256=None, x5u=None, x5c=(), alg=None, jku=None, typ=None, kid=None, jwk=None
  45. 2016-05-09 10:58:23,382:DEBUG:acme.jose.json_util:Omitted empty fields: cty=None, x5t=None, crit=(), x5tS256=None, x5u=None, x5c=(), jku=None, typ=None, nonce=None, kid=None
  46. 2016-05-09 10:58:23,387:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282. args: (), kwargs: {'data': '{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "waslEmH3IdZF_LhpSr7w8GqYt_CoK8wkbjOWrqoUVGAlurZ7UquHe9pZfa8yZm4pVWuj2IeLZy9AiogyxG72ihE-6zJwxqG37ofgrABpP_XVMI7_4smVl3SwoLNWlI7aTKwXmdM2mLCiWwoU8OgZnQdeYPnUmmEBGidxJhyiAGITROMLAb6BV0QXCJiJlXFaXIZY1hR7AddXyNu7gp32IDf4LigVzSZYUy4VekkS1U69CnxynbYW3BKF87ExUtmIDPptIh6OOFZSjzmhqVgXk7fp8q72yLpfJ1RLDGSN3GME8o4dOrbKtV7x94AWFI63Qxht1OWcB8M2pCiE3JcZIQ"}}, "protected": "eyJub25jZSI6ICJtNk8wWmx4ZDNzNzVnSzVUYXlrdGV2Q3J4aWlGRjgxdkt3RnZ0WWMxbThBIn0", "payload": "eyJrZXlBdXRob3JpemF0aW9uIjogInBuWjZlNkNLNHg3SUw1cl9iSVVHZm5kMzZacDRZbzRXMUlscHFkTl9WcG8uS0FwclBHemxaT1d0Y1c2M0t3ZGk2ZXFDQ29lc2ZSMUxjTHY1eXF0a1kyUSIsICJ0eXBlIjogImh0dHAtMDEiLCAicmVzb3VyY2UiOiAiY2hhbGxlbmdlIn0", "signature": "ndyxwc4RUeUw-mBJOfuS9YwC6D3rjzmt_NBsBrku7pEOrpPjGOR6HDAsHMK9waG8L39Ua-q5NJMhh51e9UnYBDMJjHA5hzwFF3-b2qwsgtxaTnsT4brZIwoAA1d4blZLgUmVIxCeaj5FvngAtPyPJLPVwnwKmZ3frHi7WQ4cvS7I6RBJrvUiKYTN-OHevOG7lYXo_AaCzX3XXb5OakBECAMYCeXUVUVjSylVvdWRSNaQA-6et8QZlJXN3hS0bPijCCocVC4T7EOuo8cBBt9WG2bfVfUPUzuvZw4xsMmQWGLNgarIaFscmg3GcKKK6YP8DJRHuS8xyIpTVwh5igqicA"}'}
  47. 2016-05-09 10:58:23,394:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  48. 2016-05-09 10:58:23,931:DEBUG:requests.packages.urllib3.connectionpool:"POST /acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282 HTTP/1.1" 202 313
  49. 2016-05-09 10:58:23,939:DEBUG:root:Received <Response [202]>. Headers: {'Content-Length': '313', 'Expires': 'Mon, 09 May 2016 10:58:23 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:23 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'fakJd9wzeUX_W5uubC2RVwPiMvIm3Vl2Z8mlSHPKJL8'}. Content: '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282","token":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo","keyAuthorization":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo.KAprPGzlZOWtcW63Kwdi6eqCCoesfR1LcLv5yqtkY2Q"}'
  50. 2016-05-09 10:58:23,944:DEBUG:acme.client:Storing nonce: '}\xa9\tw\xdc3yE\xff[\x9b\xael-\x91W\x03\xe22\xf2&\xddYvg\xc9\xa5Hs\xca$\xbf'
  51. 2016-05-09 10:58:23,949:DEBUG:acme.client:Received response <Response [202]> (headers: {'Content-Length': '313', 'Expires': 'Mon, 09 May 2016 10:58:23 GMT', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/authz/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA>;rel="up"', 'Location': 'https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:23 GMT', 'Content-Type': 'application/json', 'Replay-Nonce': 'fakJd9wzeUX_W5uubC2RVwPiMvIm3Vl2Z8mlSHPKJL8'}): '{"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282","token":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo","keyAuthorization":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo.KAprPGzlZOWtcW63Kwdi6eqCCoesfR1LcLv5yqtkY2Q"}'
  52. 2016-05-09 10:58:26,960:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/acme/authz/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA. args: (), kwargs: {}
  53. 2016-05-09 10:58:26,967:INFO:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  54. 2016-05-09 10:58:27,145:DEBUG:requests.packages.urllib3.connectionpool:"GET /acme/authz/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA HTTP/1.1" 200 1289
  55. 2016-05-09 10:58:27,152:DEBUG:root:Received <Response [200]>. Headers: {'Content-Length': '1289', 'Expires': 'Mon, 09 May 2016 10:58:27 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:27 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'HgwxeydJG1WQRi14Ku5ym_E-zj90RoM_OkO9S5zBFvQ'}. Content: '{"identifier":{"type":"dns","value":"DOMAIN.com"},"status":"invalid","expires":"2016-05-16T10:58:23Z","challenges":[{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300281","token":"2AJCpLFdlPp2UsTXI39__FhO_Ha55mFk0s-fGDJ8yEE"},{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http://DOMAIN.com/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo [xx.xx.xx.xx]: 404"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282","token":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo","keyAuthorization":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo.KAprPGzlZOWtcW63Kwdi6eqCCoesfR1LcLv5yqtkY2Q","validationRecord":[{"url":"http://DOMAIN.com/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo","hostname":"DOMAIN.com","port":"80","addressesResolved":["xx.xx.xx.xx"],"addressUsed":"xx.xx.xx.xx"}]},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300283","token":"t-RsbwyQK8M9v_5JkIX0GZdruP2gQSedVS4pgZYL2G8"}],"combinations":[[0],[2],[1]]}'
  56. 2016-05-09 10:58:27,158:DEBUG:acme.client:Received response <Response [200]> (headers: {'Content-Length': '1289', 'Expires': 'Mon, 09 May 2016 10:58:27 GMT', 'Strict-Transport-Security': 'max-age=604800', 'Server': 'nginx', 'Connection': 'keep-alive', 'Link': '<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"', 'Pragma': 'no-cache', 'Cache-Control': 'max-age=0, no-cache, no-store', 'Date': 'Mon, 09 May 2016 10:58:27 GMT', 'X-Frame-Options': 'DENY', 'Content-Type': 'application/json', 'Replay-Nonce': 'HgwxeydJG1WQRi14Ku5ym_E-zj90RoM_OkO9S5zBFvQ'}): '{"identifier":{"type":"dns","value":"DOMAIN.com"},"status":"invalid","expires":"2016-05-16T10:58:23Z","challenges":[{"type":"dns-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300281","token":"2AJCpLFdlPp2UsTXI39__FhO_Ha55mFk0s-fGDJ8yEE"},{"type":"http-01","status":"invalid","error":{"type":"urn:acme:error:unauthorized","detail":"Invalid response from http://DOMAIN.com/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo [xx.xx.xx.xx]: 404"},"uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300282","token":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo","keyAuthorization":"pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo.KAprPGzlZOWtcW63Kwdi6eqCCoesfR1LcLv5yqtkY2Q","validationRecord":[{"url":"http://DOMAIN.com/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo","hostname":"DOMAIN.com","port":"80","addressesResolved":["xx.xx.xx.xx"],"addressUsed":"xx.xx.xx.xx"}]},{"type":"tls-sni-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300283","token":"t-RsbwyQK8M9v_5JkIX0GZdruP2gQSedVS4pgZYL2G8"}],"combinations":[[0],[2],[1]]}'
  57. 2016-05-09 10:58:27,163:DEBUG:acme.challenges:dns-01 was not recognized, full message: {u'status': u'pending', u'token': u'2AJCpLFdlPp2UsTXI39__FhO_Ha55mFk0s-fGDJ8yEE', u'type': u'dns-01', u'uri': u'https://acme-v01.api.letsencrypt.org/acme/challenge/P71NzOIVx7DDaPj2rR6IIZq3wuPDsrX2x8mvFJ5q_mA/79300281'}
  58. 2016-05-09 10:58:27,169:INFO:letsencrypt.reporter:Reporting to user: The following errors were reported by the server:
  59.  
  60. Domain: DOMAIN.com
  61. Type: unauthorized
  62. Detail: Invalid response from http://DOMAIN.com/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo [xx.xx.xx.xx]: 404
  63.  
  64. To fix these errors, please make sure that your domain name was entered correctly and the DNS A record(s) for that domain contain(s) the right IP address.
  65. 2016-05-09 10:58:27,173:INFO:letsencrypt.auth_handler:Cleaning up challenges
  66. 2016-05-09 10:58:27,178:DEBUG:letsencrypt.plugins.webroot:Removing /home/USERNAME/public_html/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo
  67. 2016-05-09 10:58:27,182:DEBUG:letsencrypt.plugins.webroot:Challenges cleaned up but /home/USERNAME/public_html/.well-known/acme-challenge not empty
  68. 2016-05-09 10:58:27,187:DEBUG:letsencrypt.main:Exiting abnormally:
  69. Traceback (most recent call last):
  70. File "/root/.local/share/letsencrypt/bin/letsencrypt", line 11, in <module>
  71. sys.exit(main())
  72. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/main.py", line 692, in main
  73. return config.func(config, plugins)
  74. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/main.py", line 509, in obtain_cert
  75. _, action = _auth_from_domains(le_client, config, domains, lineage)
  76. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/main.py", line 93, in _auth_from_domains
  77. lineage = le_client.obtain_and_enroll_certificate(domains)
  78. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/client.py", line 274, in obtain_and_enroll_certificate
  79. certr, chain, key, _ = self.obtain_certificate(domains)
  80. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/client.py", line 246, in obtain_certificate
  81. self.config.allow_subset_of_names)
  82. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/auth_handler.py", line 74, in get_authorizations
  83. self._respond(resp, best_effort)
  84. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/auth_handler.py", line 131, in _respond
  85. self._poll_challenges(chall_update, best_effort)
  86. File "/root/.local/share/letsencrypt/lib/python2.7/site-packages/letsencrypt/auth_handler.py", line 195, in _poll_challenges
  87. raise errors.FailedChallenges(all_failed_achalls)
  88. FailedChallenges: Failed authorization procedure. DOMAIN.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://DOMAIN.com/.well-known/acme-challenge/pnZ6e6CK4x7IL5r_bIUGfnd36Zp4Yo4W1IlpqdN_Vpo [xx.xx.xx.xx]: 404
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!