Advertisement
Guest User

Untitled

a guest
Oct 27th, 2018
158
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 12.50 KB | None | 0 0
  1.  
  2. > 2018-10-27 10:51:01,314:DEBUG:certbot.main:Root logging level set at 20
  3. > 2018-10-27 10:51:01,315:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
  4. > 2018-10-27 10:51:01,317:DEBUG:certbot.main:certbot version: 0.10.2
  5. > 2018-10-27 10:51:01,317:DEBUG:certbot.main:Arguments: ['--apache', '-m', 'my@email.com', '-d', 'server.base.com', '-d', 'www.server.base.com']
  6. > 2018-10-27 10:51:01,318:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
  7. > 2018-10-27 10:51:01,318:DEBUG:certbot.plugins.selection:Requested authenticator apache and installer apache
  8. > 2018-10-27 10:51:01,956:DEBUG:certbot.plugins.selection:Single candidate plugin: * apache
  9. > Description: Apache Web Server plugin - Beta
  10. > Interfaces: IAuthenticator, IInstaller, IPlugin
  11. > Entry point: apache = certbot_apache.configurator:ApacheConfigurator
  12. > Initialized: <certbot_apache.configurator.ApacheConfigurator object at 0x7fd634670f90>
  13. > Prep: True
  14. > 2018-10-27 10:51:01,959:DEBUG:certbot.plugins.selection:Selected authenticator <certbot_apache.configurator.ApacheConfigurator object at 0x7fd634670f90> and installer <certbot_apache.configurator.ApacheConfigurator object at 0x7fd634670$
  15. > 2018-10-27 10:51:01,965:DEBUG:certbot.main:Picked account: <Account(4009d111fce4292971c10406f74afad8)>
  16. > 2018-10-27 10:51:01,967:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
  17. > 2018-10-27 10:51:01,974:DEBUG:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
  18. > 2018-10-27 10:51:02,549:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658
  19. > 2018-10-27 10:51:02,551:DEBUG:acme.client:Received response:
  20. > HTTP 200
  21. > Server: nginx
  22. > Content-Type: application/json
  23. > Content-Length: 658
  24. > Replay-Nonce: 9ztTTjHAXRF3eKpRCIiaKnOpnLOYJfaGiG08ix7rH1c
  25. > X-Frame-Options: DENY
  26. > Strict-Transport-Security: max-age=604800
  27. > Expires: Sat, 27 Oct 2018 10:51:02 GMT
  28. > Cache-Control: max-age=0, no-cache, no-store
  29. > Pragma: no-cache
  30. > Date: Sat, 27 Oct 2018 10:51:02 GMT
  31. > Connection: keep-alive
  32. >
  33. > {
  34. > "L1L9hxdti2A": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  35. > "key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change",
  36. > "meta": {
  37. > "caaIdentities": [
  38. > "letsencrypt.org"
  39. > ],
  40. > "terms-of-service": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
  41. > "website": "https://letsencrypt.org"
  42. > },
  43. > "new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",
  44. > "new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",
  45. > "new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",
  46. > "revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"
  47. > }
  48. > 018-10-27 10:51:02,552:INFO:certbot.main:Obtaining a new certificate
  49. > 2018-10-27 10:51:02,553:DEBUG:root:Requesting fresh nonce
  50. > 2018-10-27 10:51:02,553:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz.
  51. > 2018-10-27 10:51:02,768:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "HEAD /acme/new-authz HTTP/1.1" 405 0
  52. > 2018-10-27 10:51:02,770:DEBUG:acme.client:Received response:
  53. > HTTP 405
  54. > Server: nginx
  55. > Content-Type: application/problem+json
  56. > Content-Length: 91
  57. > Allow: POST
  58. > Replay-Nonce: 7uJl7xKi1aI9iw14ttMId5PGMiAdk_x9ZChNdDzelOA
  59. > Expires: Sat, 27 Oct 2018 10:51:02 GMT
  60. > Cache-Control: max-age=0, no-cache, no-store
  61. > Pragma: no-cache
  62. > Date: Sat, 27 Oct 2018 10:51:02 GMT
  63. > Connection: keep-alive
  64. >
  65. > 2018-10-27 10:51:02,770:DEBUG:acme.client:Storing nonce: 7uJl7xKi1aI9iw14ttMId5PGMiAdk_x9ZChNdDzelOA
  66. > 2018-10-27 10:51:02,771:DEBUG:acme.client:JWS payload:
  67. > {
  68. > "identifier": {
  69. > "type": "dns",
  70. > "value": "server.base.com"
  71. > },
  72. > "resource": "new-authz"
  73. > }
  74. > 2018-10-27 10:51:02,781:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz:
  75. > {
  76. > "header": {
  77. > "alg": "RS256",
  78. > "jwk": {
  79. > "e": "AQAB",
  80. > "kty": "RSA",
  81. > "n": "tnCIgka_08cCvvz-8GCiR8my93sxjUtUNXTfNtMytyyTaFa8CR8N0ufYmL991gqrpD2TrJsKsj0MHHcz2Qery8LvXAM5jK8-sATVzRKsjNfxrTN9m74Ifp1cljlVNYlwCOAe0QOaPssGpNOPahWMz8BdwTY4bEYC9DPSqvLnhLffG1mOSFQg96CzYbWZNhf7Xx3SBsGApaci3sBEm2QNzwpYaPmhN7TF$
  82. > }
  83. > },
  84. > "protected": "eyJub25jZSI6ICI3dUpsN3hLaTFhSTlpdzE0dHRNSWQ1UEdNaUFka194OVpDaE5kRHplbE9BIn0",
  85. > "payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAic2VydmVyLmJhc2UuY29tIgogIH0sIAogICJyZXNvdXJjZSI6ICJuZXctYXV0aHoiCn0",
  86. > "signature": "Tgs3zZTnGxa63fYc3Y1GXWQyfJjxWsjFMmHQBgCjtLgdx3qeC2ZJIPNz_4KwIbU8Fu8GPfe2YivTqJos2ki3TsYq0UUlI7RnUVj3gNtoeyg-_7Q5C9Sewn7j_PXbr6KmMmmiUar7ZO1tlf0FNAnqzSn6-8H74ObB_K8zdx4l3MUkrKJii3j4HCUGgq2nmjFxwRZ-27EJ4cLqs0uNXvOg9iRPBplk$
  87. > }
  88. > 2018-10-27 10:51:03,085:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-authz HTTP/1.1" 201 994
  89. > 2018-10-27 10:51:03,086:DEBUG:acme.client:Received response:
  90. > HTTP 201
  91. > Server: nginx
  92. > Content-Type: application/json
  93. > Content-Length: 994
  94. > Boulder-Requester: 44510204
  95. > Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
  96. > Location: https://acme-v01.api.letsencrypt.org/acme/authz/G7QDjXgeNnzcUu5glJLeelrCPi_4yHqCkYJGT0ttZ7U
  97. > Replay-Nonce: NmWHwmskCqufS3vdI8jCzUxViCOavRj3Edc_ZzmAvYc
  98. > X-Frame-Options: DENY
  99. > Strict-Transport-Security: max-age=604800
  100. > Expires: Sat, 27 Oct 2018 10:51:03 GMT
  101. > Cache-Control: max-age=0, no-cache, no-store
  102. > Pragma: no-cache
  103. > Date: Sat, 27 Oct 2018 10:51:03 GMT
  104. > Connection: keep-alive
  105. >
  106. >
  107. > "identifier": {
  108. > "type": "dns",
  109. > "value": "server.base.com"
  110. > },
  111. > "status": "pending",
  112. > "expires": "2018-11-03T10:46:42Z",
  113. > "challenges": [
  114. > {
  115. > "type": "dns-01",
  116. > "status": "pending",
  117. > "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/G7QDjXgeNnzcUu5glJLeelrCPi_4yHqCkYJGT0ttZ7U/8682149941",
  118. > "token": "6Qi4_csIQBHKoPzjskM6G1f8c1Y8mmN5b3EdfpwWD_8"
  119. > },
  120. > {
  121. > "type": "tls-alpn-01",
  122. > "status": "pending",
  123. > "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/G7QDjXgeNnzcUu5glJLeelrCPi_4yHqCkYJGT0ttZ7U/8682149942",
  124. > "token": "GpcuyUaaEBWr2PlW3ZtelAluwZSqN2QQuZsP44zplxg"
  125. > },
  126. > {
  127. > "type": "http-01",
  128. > "status": "pending",
  129. > "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/G7QDjXgeNnzcUu5glJLeelrCPi_4yHqCkYJGT0ttZ7U/8682149943",
  130. > "token": "-Pn9G9kNU8gGNvPkxVgBQHwyFc99B-S1Mq3jf722q-o"
  131. > }
  132. > ],
  133. > "combinations": [
  134. > [
  135. > 0
  136. > ],
  137. > [
  138. > 2
  139. > ],
  140. > [
  141. > 1
  142. > ]
  143. > ]
  144. > }
  145. > 2018-10-27 10:51:03,087:DEBUG:acme.client:Storing nonce: NmWHwmskCqufS3vdI8jCzUxViCOavRj3Edc_ZzmAvYc
  146. > 2018-10-27 10:51:03,088:DEBUG:acme.challenges:tls-alpn-01 was not recognized, full message: {u'status': u'pending', u'token': u'GpcuyUaaEBWr2PlW3ZtelAluwZSqN2QQuZsP44zplxg', u'type': u'tls-alpn-01', u'uri': u'https://acme-v01.api.letsen$
  147. > 2018-10-27 10:51:03,089:DEBUG:acme.client:JWS payload:
  148. > {
  149. > "identifier": {
  150. > "type": "dns",
  151. > "value": "www.server.base.com"
  152. > },
  153. > "resource": "new-authz"
  154. > }
  155. > 2018-10-27 10:51:03,096:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz:
  156. > {
  157. >
  158. > "header": {
  159. > "alg": "RS256",
  160. > "jwk": {
  161. > "e": "AQAB",
  162. > "kty": "RSA",
  163. > "n": "tnCIgka_08cCvvz-8GCiR8my93sxjUtUNXTfNtMytyyTaFa8CR8N0ufYmL991gqrpD2TrJsKsj0MHHcz2Qery8LvXAM5jK8-sATVzRKsjNfxrTN9m74Ifp1cljlVNYlwCOAe0QOaPssGpNOPahWMz8BdwTY4bEYC9DPSqvLnhLffG1mOSFQg96CzYbWZNhf7Xx3SBsGApaci3sBEm2QNzwpYaPmhN7TF$
  164. > }
  165. > },
  166. > "protected": "eyJub25jZSI6ICJObVdId21za0NxdWZTM3ZkSThqQ3pVeFZpQ09hdlJqM0VkY19aem1BdlljIn0",
  167. > "payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAid3d3LnNlcnZlci5iYXNlLmNvbSIKICB9LCAKICAicmVzb3VyY2UiOiAibmV3LWF1dGh6Igp9",
  168. > "signature": "bbMyA6hajpcJM1LE78urMQzSIzJ5VjLXdbOyMlJ7iNJwDyMEPLp4QAe8vUcNHCtoXjAzSKn5jzpTI-d1OzNcS7r2BwvNoHQGL-ZA8AuE8Ewhy-Vgb6yoTh9cnbeFKuMFA__7Zog0sLU3Q_yHCPmoiT77dv4BuAn-NG-sNx8uh1KtM9xZ6IX_uafJrOS_UGOrrYaxU2kdd7YWT2K2FEDqCYTth6eM$
  169. > }
  170. > 2018-10-27 10:51:03,390:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-authz HTTP/1.1" 201 998
  171. > 2018-10-27 10:51:03,391:DEBUG:acme.client:Received response:
  172. > HTTP 201
  173. > Server: nginx
  174. > Content-Type: application/json
  175. > Content-Length: 998
  176. > Boulder-Requester: 44510204
  177. > Link: <https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"
  178. > Location: https://acme-v01.api.letsencrypt.org/acme/authz/gRmY34yajnejE3IiGJoHGwLFls3bSAimuCsKExIl0yU
  179. > Replay-Nonce: ZpVu6HAH0AQWN1BHSaF6jEx4F0MqclPY_VYm4JMCiLE
  180. > X-Frame-Options: DENY
  181. > Strict-Transport-Security: max-age=604800
  182. > Expires: Sat, 27 Oct 2018 10:51:03 GMT
  183. > Cache-Control: max-age=0, no-cache, no-store
  184. > Pragma: no-cache
  185. > Date: Sat, 27 Oct 2018 10:51:03 GMT
  186. > Connection: keep-alive
  187. > {
  188. > "identifier": {
  189. > "type": "dns",
  190. > "value": "www.server.base.com"
  191. > },
  192. > "status": "pending",
  193. > "expires": "2018-11-02T21:15:30Z",
  194. > "challenges": [
  195. > {
  196. > "type": "dns-01",
  197. > "status": "pending",
  198. > "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/gRmY34yajnejE3IiGJoHGwLFls3bSAimuCsKExIl0yU/8664364127",
  199. > "token": "NyjjJmzRDG7RBcPRDIgF6eojZQNzk1ex8bEcul65nzk"
  200. > },
  201. > {
  202. > "type": "tls-alpn-01",
  203. > "status": "pending",
  204. > "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/gRmY34yajnejE3IiGJoHGwLFls3bSAimuCsKExIl0yU/8664364128",
  205. > "token": "_HOvBeYAQpCxxMmTvSjIZ1GXQ0LwAIQ9NQ_oiuMlEbE"
  206. > },
  207. > {
  208. > "type": "http-01",
  209. > "status": "pending",
  210. > "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/gRmY34yajnejE3IiGJoHGwLFls3bSAimuCsKExIl0yU/8664364130",
  211. > "token": "rjhgv3_wqKg1sa0_E8IpRzzR95XBAweAmpqC9AQZvYY"
  212. > }
  213. > ],
  214. > "combinations": [
  215. > [
  216. > 2
  217. > ],
  218. > [
  219. > 1
  220. > ],
  221. > [
  222. > 0
  223. > ]
  224. > ]
  225. > }
  226. > 2018-10-27 10:51:03,392:DEBUG:acme.client:Storing nonce: ZpVu6HAH0AQWN1BHSaF6jEx4F0MqclPY_VYm4JMCiLE
  227. > 2018-10-27 10:51:03,393:DEBUG:acme.challenges:tls-alpn-01 was not recognized, full message: {u'status': u'pending', u'token': u'_HOvBeYAQpCxxMmTvSjIZ1GXQ0LwAIQ9NQ_oiuMlEbE', u'type': u'tls-alpn-01', u'uri': u'https://acme-v01.api.letsen$
  228. > 2018-10-27 10:51:03,393:INFO:certbot.auth_handler:Performing the following challenges:
  229. > 2018-10-27 10:51:03,394:CRITICAL:certbot.auth_handler:Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
  230. > 2018-10-27 10:51:03,396:DEBUG:certbot.main:Exiting abnormally:
  231. > Traceback (most recent call last):
  232. > File "/usr/bin/certbot", line 11, in <module>
  233. > load_entry_point('certbot==0.10.2', 'console_scripts', 'certbot')()
  234. > File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 849, in main
  235. > return config.func(config, plugins)
  236. > File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 575, in run
  237. > action, lineage = _auth_from_available(le_client, config, domains, certname)
  238. > File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 107, in _auth_from_available
  239. > lineage = le_client.obtain_and_enroll_certificate(domains, certname)
  240. > File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 291, in obtain_and_enroll_certificate
  241. > certr, chain, key, _ = self.obtain_certificate(domains)
  242. > File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 69, in get_authorizations
  243. > self._choose_challenges(domains)
  244. > File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 99, in _choose_challenges
  245. > self.authzr[dom].body.combinations)
  246. > File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 370, in gen_challenge_path
  247. > return _find_smart_path(challbs, preferences, combinations)
  248. > File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 407, in _find_smart_path
  249. > _report_no_chall_path()
  250. > File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 438, in _report_no_chall_path
  251. > raise errors.AuthorizationError(msg)
  252. > AuthorizationError: Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement