API tools faq
paste
Advertisement
Guest User

Certbot Log

a guest
Dec 7th, 2024
94
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 25.00 KB | None | 0 0
raw download clone embed print report
  1. 2024-12-08 01:29:26,091:DEBUG:certbot._internal.main:certbot version: 2.1.0
  2. 2024-12-08 01:29:26,091:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/bin/certbot
  3. 2024-12-08 01:29:26,091:DEBUG:certbot._internal.main:Arguments: ['--apache', '-d', 'nextcloud.wref.de', '--debug-challenges', '--dry-run', '-v']
  4. 2024-12-08 01:29:26,092:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#apache,PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
  5. 2024-12-08 01:29:26,106:DEBUG:certbot._internal.log:Root logging level set at 20
  6. 2024-12-08 01:29:26,107:DEBUG:certbot._internal.plugins.selection:Requested authenticator apache and installer apache
  7. 2024-12-08 01:29:26,189:DEBUG:certbot_apache._internal.configurator:Apache version is 2.4.62
  8. 2024-12-08 01:29:26,443:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
  9. Description: Apache Web Server plugin
  10. Interfaces: Authenticator, Installer, Plugin
  11. Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
  12. Initialized: <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7febf17a3490>
  13. Prep: True
  14. 2024-12-08 01:29:26,444:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * apache
  15. Description: Apache Web Server plugin
  16. Interfaces: Authenticator, Installer, Plugin
  17. Entry point: apache = certbot_apache._internal.entrypoint:ENTRYPOINT
  18. Initialized: <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7febf17a3490>
  19. Prep: True
  20. 2024-12-08 01:29:26,444:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7febf17a3490> and installer <certbot_apache._internal.override_debian.DebianConfigurator object at 0x7febf17a3490>
  21. 2024-12-08 01:29:26,445:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator apache, Installer apache
  22. 2024-12-08 01:29:26,570:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=None, contact=(), agreement=None, status=None, terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-staging-v02.api.letsencrypt.org/acme/acct/175026834', new_authzr_uri=None, terms_of_service=None), 1e328eb6a3b6ed9d2e9515a85edfa1ef, Meta(creation_dt=datetime.datetime(2024, 12, 7, 23, 40, 11, tzinfo=<UTC>), creation_host='nextcloud.wref.de', register_to_eff=None))>
  23. 2024-12-08 01:29:26,571:DEBUG:acme.client:Sending GET request to https://acme-staging-v02.api.letsencrypt.org/directory.
  24. 2024-12-08 01:29:26,573:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-staging-v02.api.letsencrypt.org:443
  25. 2024-12-08 01:29:27,033:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 820
  26. 2024-12-08 01:29:27,034:DEBUG:acme.client:Received response:
  27. HTTP 200
  28. Server: nginx
  29. Date: Sun, 08 Dec 2024 00:29:26 GMT
  30. Content-Type: application/json
  31. Content-Length: 820
  32. Connection: keep-alive
  33. Cache-Control: public, max-age=0, no-cache
  34. X-Frame-Options: DENY
  35. Strict-Transport-Security: max-age=604800
  36.  
  37. {
  38.   "1qjt5U32TaA": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  39.   "keyChange": "https://acme-staging-v02.api.letsencrypt.org/acme/key-change",
  40.   "meta": {
  41.     "caaIdentities": [
  42.       "letsencrypt.org"
  43.     ],
  44.     "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf",
  45.     "website": "https://letsencrypt.org/docs/staging-environment/"
  46.   },
  47.   "newAccount": "https://acme-staging-v02.api.letsencrypt.org/acme/new-acct",
  48.   "newNonce": "https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce",
  49.   "newOrder": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order",
  50.   "renewalInfo": "https://acme-staging-v02.api.letsencrypt.org/draft-ietf-acme-ari-03/renewalInfo",
  51.   "revokeCert": "https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert"
  52. }
  53. 2024-12-08 01:29:27,035:DEBUG:certbot._internal.display.obj:Notifying user: Simulating a certificate request for nextcloud.wref.de
  54. 2024-12-08 01:29:27,042:DEBUG:acme.client:Requesting fresh nonce
  55. 2024-12-08 01:29:27,043:DEBUG:acme.client:Sending HEAD request to https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce.
  56. 2024-12-08 01:29:27,195:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
  57. 2024-12-08 01:29:27,195:DEBUG:acme.client:Received response:
  58. HTTP 200
  59. Server: nginx
  60. Date: Sun, 08 Dec 2024 00:29:27 GMT
  61. Connection: keep-alive
  62. Cache-Control: public, max-age=0, no-cache
  63. Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
  64. Replay-Nonce: xBagF72J5tNm6K6fo0HCPbjt_EOVuyE5p2N1Dg7BNxE4mxNDGT8
  65. X-Frame-Options: DENY
  66. Strict-Transport-Security: max-age=604800
  67.  
  68.  
  69. 2024-12-08 01:29:27,196:DEBUG:acme.client:Storing nonce: xBagF72J5tNm6K6fo0HCPbjt_EOVuyE5p2N1Dg7BNxE4mxNDGT8
  70. 2024-12-08 01:29:27,196:DEBUG:acme.client:JWS payload:
  71. b'{\n  "identifiers": [\n    {\n      "type": "dns",\n      "value": "nextcloud.wref.de"\n    }\n  ]\n}'
  72. 2024-12-08 01:29:27,201:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/new-order:
  73. {
  74.   "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNzUwMjY4MzQiLCAibm9uY2UiOiAieEJhZ0Y3Mko1dE5tNks2Zm8wSENQYmp0X0VPVnV5RTVwMk4xRGc3Qk54RTRteE5ER1Q4IiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL25ldy1vcmRlciJ9",
  75.   "signature": "dB5Q5U8L4QK34xZ6V8CHiBHm68xezBcc08CNM6fel1k0AGQsBtEQNZ-CdRuWKglf7NcKD0ZY5i217DLDPm3AVX7Bdx14sOR4Jp7tf75oTkkMnn5RvsCdsh_zw5lElwG_F6rUHO7Y9eeGEgxko29iC0HIKDavytV7NhKID4c41A051wOtlRDnts-EZQKh08ITMvKvJ8vwBd5wF3TxIloLYd7vum07D_cNPGstppdzCQiFoSLCz1wCBdO1UqpgAN3EAjNgYCbuQXDwxR10IWkFpRWpxEDnYVC3-SV0qjY1-JdubNyaNnOCud1NQ63saZOJQmh4DS4Yzhu83ncdAwrLug",
  76.   "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm5leHRjbG91ZC53cmVmLmRlIgogICAgfQogIF0KfQ"
  77. }
  78. 2024-12-08 01:29:27,383:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 363
  79. 2024-12-08 01:29:27,383:DEBUG:acme.client:Received response:
  80. HTTP 201
  81. Server: nginx
  82. Date: Sun, 08 Dec 2024 00:29:27 GMT
  83. Content-Type: application/json
  84. Content-Length: 363
  85. Connection: keep-alive
  86. Boulder-Requester: 175026834
  87. Cache-Control: public, max-age=0, no-cache
  88. Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
  89. Location: https://acme-staging-v02.api.letsencrypt.org/acme/order/175026834/21124347464
  90. Replay-Nonce: 1TJBBIO4F4U6ZL-hVpAtJD5SktUPh1uACcX13pjy5VHSgrFIbWc
  91. X-Frame-Options: DENY
  92. Strict-Transport-Security: max-age=604800
  93.  
  94. {
  95.   "status": "pending",
  96.   "expires": "2024-12-15T00:29:27Z",
  97.   "identifiers": [
  98.     {
  99.       "type": "dns",
  100.       "value": "nextcloud.wref.de"
  101.     }
  102.   ],
  103.   "authorizations": [
  104.     "https://acme-staging-v02.api.letsencrypt.org/acme/authz/175026834/15275191684"
  105.   ],
  106.   "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/175026834/21124347464"
  107. }
  108. 2024-12-08 01:29:27,384:DEBUG:acme.client:Storing nonce: 1TJBBIO4F4U6ZL-hVpAtJD5SktUPh1uACcX13pjy5VHSgrFIbWc
  109. 2024-12-08 01:29:27,384:DEBUG:acme.client:JWS payload:
  110. b''
  111. 2024-12-08 01:29:27,387:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/175026834/15275191684:
  112. {
  113.   "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNzUwMjY4MzQiLCAibm9uY2UiOiAiMVRKQkJJTzRGNFU2WkwtaFZwQXRKRDVTa3RVUGgxdUFDY1gxM3BqeTVWSFNnckZJYldjIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzE3NTAyNjgzNC8xNTI3NTE5MTY4NCJ9",
  114.   "signature": "WDK6AAAnis_fZElIABC8TiHhNuFhgY3oLapvz6RKc_74seEI9om3cL3iTTlprKJJ_NHAat7eaQL9ifDW0IrazcKVVCFK7FJDiRABS148Ux9kYSRLAeQ4_kHflrNmZ2bZE8usfYjMhYTxPTGpNQiBGN7rF90N0TI7Yjnvp3jjanJEpDzdPGt9GhWVnzosuUjnR1h0kH_GrqJ7KIMMvwyoXQfmwXyxxDHBIPN6QlxbgqEYXh7RbGYDtzj5ZJY_87cWaGJfHZpZVmSM2kdrGnPAwnyOc3STdKADI3DoIMrdMXyyeeesrkjVNEiMVASFu2rQH31PcT1Fm-xVFaGT3IYK4Q",
  115.   "payload": ""
  116. }
  117. 2024-12-08 01:29:27,544:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/authz/175026834/15275191684 HTTP/1.1" 200 843
  118. 2024-12-08 01:29:27,545:DEBUG:acme.client:Received response:
  119. HTTP 200
  120. Server: nginx
  121. Date: Sun, 08 Dec 2024 00:29:27 GMT
  122. Content-Type: application/json
  123. Content-Length: 843
  124. Connection: keep-alive
  125. Boulder-Requester: 175026834
  126. Cache-Control: public, max-age=0, no-cache
  127. Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
  128. Replay-Nonce: 1TJBBIO4Aisw8TsU0bY9ANnuags3xmf6MQb_9RglBAKE5pQgbzs
  129. X-Frame-Options: DENY
  130. Strict-Transport-Security: max-age=604800
  131.  
  132. {
  133.   "identifier": {
  134.     "type": "dns",
  135.     "value": "nextcloud.wref.de"
  136.   },
  137.   "status": "pending",
  138.   "expires": "2024-12-15T00:29:27Z",
  139.   "challenges": [
  140.     {
  141.       "type": "tls-alpn-01",
  142.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/0tkcmg",
  143.       "status": "pending",
  144.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  145.     },
  146.     {
  147.       "type": "dns-01",
  148.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/fdvbYw",
  149.       "status": "pending",
  150.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  151.     },
  152.     {
  153.       "type": "http-01",
  154.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/4mFcGg",
  155.       "status": "pending",
  156.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  157.     }
  158.   ]
  159. }
  160. 2024-12-08 01:29:27,545:DEBUG:acme.client:Storing nonce: 1TJBBIO4Aisw8TsU0bY9ANnuags3xmf6MQb_9RglBAKE5pQgbzs
  161. 2024-12-08 01:29:27,546:INFO:certbot._internal.auth_handler:Performing the following challenges:
  162. 2024-12-08 01:29:27,546:INFO:certbot._internal.auth_handler:http-01 challenge for nextcloud.wref.de
  163. 2024-12-08 01:29:27,555:DEBUG:certbot_apache._internal.http_01:Adding a temporary challenge validation Include for name: nextcloud.wref.de in: /etc/apache2/sites-enabled/nextcloud.conf
  164. 2024-12-08 01:29:27,556:DEBUG:certbot_apache._internal.http_01:writing a pre config file with text:
  165.          RewriteEngine on
  166.         RewriteRule ^/\.well-known/acme-challenge/([A-Za-z0-9-_=]+)$ /var/lib/letsencrypt/http_challenges/$1 [END]
  167.      
  168. 2024-12-08 01:29:27,556:DEBUG:certbot_apache._internal.http_01:writing a post config file with text:
  169.          <Directory /var/lib/letsencrypt/http_challenges>
  170.             Require all granted
  171.         </Directory>
  172.         <Location /.well-known/acme-challenge>
  173.             Require all granted
  174.         </Location>
  175.      
  176. 2024-12-08 01:29:27,896:DEBUG:certbot.reverter:Creating backup of /etc/apache2/sites-enabled/nextcloud.conf
  177. 2024-12-08 01:29:31,846:DEBUG:certbot._internal.display.obj:Notifying user: Challenges loaded. Press continue to submit to CA.
  178.  
  179. The following URLs should be accessible from the internet and return the value
  180. mentioned:
  181.  
  182. URL:
  183. http://nextcloud.wref.de/.well-known/acme-challenge/qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo
  184. Expected value:
  185. qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo.iMCLnutg62tG3mlwZLUYIX7-qzaRKuL0emaVxuomnB8
  186. 2024-12-08 01:29:41,745:DEBUG:acme.client:JWS payload:
  187. b'{}'
  188. 2024-12-08 01:29:41,748:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/4mFcGg:
  189. {
  190.   "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNzUwMjY4MzQiLCAibm9uY2UiOiAiMVRKQkJJTzRBaXN3OFRzVTBiWTlBTm51YWdzM3htZjZNUWJfOVJnbEJBS0U1cFFnYnpzIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzE3NTAyNjgzNC8xNTI3NTE5MTY4NC80bUZjR2cifQ",
  191.   "signature": "qk7On4Bn9yPwDRc8O-r99sUmyu-ROexadRam4kOVOTYFkmki7l9q_sEnNF3ISF2Zv1oTeqpTy1A2WbYVfDUwJQ5P00LdzjEk_CkSdtAGRnoOy1SZ4-zhU43v7VbJ0kaLYRRqnfu0BqY40WfsIhzx0gV3z0-jmFhiYlC3z220k8EFc-B12rN7oeFa2yUPX0FM4hIOiNLj3DlMuztLg-cMS5LyhaH5ahCIFDJ9IDoLa76AaiolOkpSY30RPN0s6QVkfwVqB-638xobCJJ8D-iaI5w0Z9KfLezAg_xnkOXqOtloKA0xfQdGzDDKJBuxm9dBlNUoMtjHIb9Z6DQlLW5CXQ",
  192.   "payload": "e30"
  193. }
  194. 2024-12-08 01:29:41,914:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/chall/175026834/15275191684/4mFcGg HTTP/1.1" 200 201
  195. 2024-12-08 01:29:41,915:DEBUG:acme.client:Received response:
  196. HTTP 200
  197. Server: nginx
  198. Date: Sun, 08 Dec 2024 00:29:41 GMT
  199. Content-Type: application/json
  200. Content-Length: 201
  201. Connection: keep-alive
  202. Boulder-Requester: 175026834
  203. Cache-Control: public, max-age=0, no-cache
  204. Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-staging-v02.api.letsencrypt.org/acme/authz/175026834/15275191684>;rel="up"
  205. Location: https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/4mFcGg
  206. Replay-Nonce: xBagF72JTHhli5cCQEMjZH63ilBJYXQu_OmaPuYh6PoVT5QCfpU
  207. X-Frame-Options: DENY
  208. Strict-Transport-Security: max-age=604800
  209.  
  210. {
  211.   "type": "http-01",
  212.   "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/4mFcGg",
  213.   "status": "pending",
  214.   "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  215. }
  216. 2024-12-08 01:29:41,915:DEBUG:acme.client:Storing nonce: xBagF72JTHhli5cCQEMjZH63ilBJYXQu_OmaPuYh6PoVT5QCfpU
  217. 2024-12-08 01:29:41,916:INFO:certbot._internal.auth_handler:Waiting for verification...
  218. 2024-12-08 01:29:42,916:DEBUG:acme.client:JWS payload:
  219. b''
  220. 2024-12-08 01:29:42,920:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/175026834/15275191684:
  221. {
  222.   "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNzUwMjY4MzQiLCAibm9uY2UiOiAieEJhZ0Y3MkpUSGhsaTVjQ1FFTWpaSDYzaWxCSllYUXVfT21hUHVZaDZQb1ZUNVFDZnBVIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzE3NTAyNjgzNC8xNTI3NTE5MTY4NCJ9",
  223.   "signature": "As-sAGQFRmIZ86jAddAhu_yBfKrNr2GiVAKpOhb5xBKOPMyf9GzGnipF6lHR0SrP6ObAcCD5RLvDFsPvt_1WW8Xw_tngj5Km10uE35HlYe1gtm6W6H6GqWfbLxCeecf60T5Hc6fmjJ_XtwCgZd2iYHabnX0HKA9yHEL9FQYmVJpQ_8CZS1_LiDUEkbpR8_smNrFyeewcFJuju2_AADsevWYyfnimAjyYZ8cFmitme9pcJ3RceeYkrMUhofBAXcFOW44cLf4jplqCBYc59OGE8N_WE2mn3ytnKBqXXq3tQhFcUB1UY3VWrZeJoCupiB2TAtrcm1IIFKTHN19CRVfEDg",
  224.   "payload": ""
  225. }
  226. 2024-12-08 01:29:43,081:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/authz/175026834/15275191684 HTTP/1.1" 200 843
  227. 2024-12-08 01:29:43,082:DEBUG:acme.client:Received response:
  228. HTTP 200
  229. Server: nginx
  230. Date: Sun, 08 Dec 2024 00:29:43 GMT
  231. Content-Type: application/json
  232. Content-Length: 843
  233. Connection: keep-alive
  234. Boulder-Requester: 175026834
  235. Cache-Control: public, max-age=0, no-cache
  236. Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
  237. Replay-Nonce: xBagF72J5h0YnnNh35YEY8YaMNftFuHCBfLvxfpYPrZ9vBUgceE
  238. X-Frame-Options: DENY
  239. Strict-Transport-Security: max-age=604800
  240.  
  241. {
  242.   "identifier": {
  243.     "type": "dns",
  244.     "value": "nextcloud.wref.de"
  245.   },
  246.   "status": "pending",
  247.   "expires": "2024-12-15T00:29:27Z",
  248.   "challenges": [
  249.     {
  250.       "type": "dns-01",
  251.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/fdvbYw",
  252.       "status": "pending",
  253.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  254.     },
  255.     {
  256.       "type": "http-01",
  257.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/4mFcGg",
  258.       "status": "pending",
  259.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  260.     },
  261.     {
  262.       "type": "tls-alpn-01",
  263.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/0tkcmg",
  264.       "status": "pending",
  265.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  266.     }
  267.   ]
  268. }
  269. 2024-12-08 01:29:43,082:DEBUG:acme.client:Storing nonce: xBagF72J5h0YnnNh35YEY8YaMNftFuHCBfLvxfpYPrZ9vBUgceE
  270. 2024-12-08 01:29:46,084:DEBUG:acme.client:JWS payload:
  271. b''
  272. 2024-12-08 01:29:46,087:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/175026834/15275191684:
  273. {
  274.   "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNzUwMjY4MzQiLCAibm9uY2UiOiAieEJhZ0Y3Mko1aDBZbm5OaDM1WUVZOFlhTU5mdEZ1SENCZkx2eGZwWVByWjl2QlVnY2VFIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzE3NTAyNjgzNC8xNTI3NTE5MTY4NCJ9",
  275.   "signature": "fB7rqItevd78KoTdjc95C8iR7yZSz1LhKKUpdryM257ssc8TfT76gM8POoNPiBwe19O4PkIQyp9aBCRZI45c89mHarOnyOIGss5JbCfPpL1zRF4WQjYdL9CpY1EMPaW95q7ZxXFFGVv4ClslCkFgbUbM6C-t1W4-9758NWqfyMfd5nlD3D9jt2P1KbzbAo1xvIgvWJQpswg5w1efj-byBryarp8GEubjiMUtSmKnDqozoDnn5bmsqhM0xBaz_Sz6NDIsD7qcH9SZCegWCoGYqCZF7kFCwIyARyqXAqRrq17bEL1jQEiQX6heCeQBo8vWV0iqkSg2181WTxoy3GNc3g",
  276.   "payload": ""
  277. }
  278. 2024-12-08 01:29:46,244:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/authz/175026834/15275191684 HTTP/1.1" 200 843
  279. 2024-12-08 01:29:46,245:DEBUG:acme.client:Received response:
  280. HTTP 200
  281. Server: nginx
  282. Date: Sun, 08 Dec 2024 00:29:46 GMT
  283. Content-Type: application/json
  284. Content-Length: 843
  285. Connection: keep-alive
  286. Boulder-Requester: 175026834
  287. Cache-Control: public, max-age=0, no-cache
  288. Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
  289. Replay-Nonce: xBagF72JOkuD-VU_s2zT7DQRzc_htovXVr4VSK5V0SPyLp1qqn8
  290. X-Frame-Options: DENY
  291. Strict-Transport-Security: max-age=604800
  292.  
  293. {
  294.   "identifier": {
  295.     "type": "dns",
  296.     "value": "nextcloud.wref.de"
  297.   },
  298.   "status": "pending",
  299.   "expires": "2024-12-15T00:29:27Z",
  300.   "challenges": [
  301.     {
  302.       "type": "http-01",
  303.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/4mFcGg",
  304.       "status": "pending",
  305.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  306.     },
  307.     {
  308.       "type": "dns-01",
  309.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/fdvbYw",
  310.       "status": "pending",
  311.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  312.     },
  313.     {
  314.       "type": "tls-alpn-01",
  315.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/0tkcmg",
  316.       "status": "pending",
  317.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo"
  318.     }
  319.   ]
  320. }
  321. 2024-12-08 01:29:49,412:DEBUG:acme.client:Storing nonce: xBagF72Jq08hMdnOzhvAEZQEV2JAQAe6NMlxvieVl8gfe4kzrzY
  322. 2024-12-08 01:29:52,413:DEBUG:acme.client:JWS payload:
  323. b''
  324. 2024-12-08 01:29:52,417:DEBUG:acme.client:Sending POST request to https://acme-staging-v02.api.letsencrypt.org/acme/authz/175026834/15275191684:
  325. {
  326.   "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xNzUwMjY4MzQiLCAibm9uY2UiOiAieEJhZ0Y3MkpxMDhoTWRuT3podkFFWlFFVjJKQVFBZTZOTWx4dmllVmw4Z2ZlNGt6cnpZIiwgInVybCI6ICJodHRwczovL2FjbWUtc3RhZ2luZy12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2F1dGh6LzE3NTAyNjgzNC8xNTI3NTE5MTY4NCJ9",
  327.   "signature": "vM6bgklnPeGNQtfnhcWhi7REs2W-oXdgvk6wOQfeAqRERlD939ubEzjZ0Vcgvs49NXnSnVEoLyUwIUWjyfHwS9gp4h4mtNLNZw0yzn4I-lw5x9bMu9yB13ORcQppI2WGu1Ktrdgvr_D8zL8sj-XNURrAnJwbc_9xCw4BLneYmgLRxjwjVCXV5pz9fnIoucbEJTrMgEG0TlJm9JSYiOeL0uVX9tSNyC_xkjxo9JOOrBdU44iA5MqUJ84SgvBDC8e-RDj0BD71zdNU0ylDG3x4d-AaIYVIMUvGzeJQ3xeCCL80Q2mwxV7GqhuF2M5_480PtSX8jlPri_y-4irceVzDRg",
  328.   "payload": ""
  329. }
  330. 2024-12-08 01:29:52,576:DEBUG:urllib3.connectionpool:https://acme-staging-v02.api.letsencrypt.org:443 "POST /acme/authz/175026834/15275191684 HTTP/1.1" 200 1158
  331. 2024-12-08 01:29:52,577:DEBUG:acme.client:Received response:
  332. HTTP 200
  333. Server: nginx
  334. Date: Sun, 08 Dec 2024 00:29:52 GMT
  335. Content-Type: application/json
  336. Content-Length: 1158
  337. Connection: keep-alive
  338. Boulder-Requester: 175026834
  339. Cache-Control: public, max-age=0, no-cache
  340. Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
  341. Replay-Nonce: 1TJBBIO4qDfcqkpXbrGaK62cvgx6lXScQLda2htyjxAFX8KRgo8
  342. X-Frame-Options: DENY
  343. Strict-Transport-Security: max-age=604800
  344.  
  345. {
  346.   "identifier": {
  347.     "type": "dns",
  348.     "value": "nextcloud.wref.de"
  349.   },
  350.   "status": "invalid",
  351.   "expires": "2024-12-15T00:29:27Z",
  352.   "challenges": [
  353.     {
  354.       "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/175026834/15275191684/4mFcGg",
  355.       "status": "invalid",
  356.       "validated": "2024-12-08T00:29:41Z",
  357.       "error": {
  358.         "type": "urn:ietf:params:acme:error:connection",
  359.         "detail": "2a00:6020:4196:ca00:3bee:c98b:d966:9e3d: Fetching http://nextcloud.wref.de/.well-known/acme-challenge/qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo: Timeout during connect (likely firewall problem)",
  360.         "status": 400
  361.       },
  362.       "token": "qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo",
  363.       "validationRecord": [
  364.         {
  365.           "url": "http://nextcloud.wref.de/.well-known/acme-challenge/qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo",
  366.           "hostname": "nextcloud.wref.de",
  367.           "port": "80",
  368.           "addressesResolved": [
  369.             "2a00:6020:4196:ca00:3bee:c98b:d966:9e3d"
  370.           ],
  371.           "addressUsed": "2a00:6020:4196:ca00:3bee:c98b:d966:9e3d"
  372.         }
  373.       ]
  374.     }
  375.   ]
  376. }
  377. 2024-12-08 01:29:52,577:DEBUG:acme.client:Storing nonce: 1TJBBIO4qDfcqkpXbrGaK62cvgx6lXScQLda2htyjxAFX8KRgo8
  378. 2024-12-08 01:29:52,577:INFO:certbot._internal.auth_handler:Challenge failed for domain nextcloud.wref.de
  379. 2024-12-08 01:29:52,578:INFO:certbot._internal.auth_handler:http-01 challenge for nextcloud.wref.de
  380. 2024-12-08 01:29:52,579:DEBUG:certbot._internal.display.obj:Notifying user:
  381. Certbot failed to authenticate some domains (authenticator: apache). The Certificate Authority reported these problems:
  382.   Domain: nextcloud.wref.de
  383.   Type:   connection
  384.   Detail: 2a00:6020:4196:ca00:3bee:c98b:d966:9e3d: Fetching http://nextcloud.wref.de/.well-known/acme-challenge/qjsA904E-PG2NQRvnGNzyq7n3ZDVR58vazgclVpoUuo: Timeout during connect (likely firewall problem)
  385.  
  386. Hint: The Certificate Authority failed to verify the temporary Apache configuration changes made by Certbot. Ensure that the listed domains point to this Apache server and that it is accessible from the internet.
  387.  
  388. 2024-12-08 01:29:52,580:DEBUG:certbot._internal.error_handler:Calling registered functions
  389. 2024-12-08 01:29:52,580:INFO:certbot._internal.auth_handler:Cleaning up challenges
  390. 2024-12-08 01:29:52,840:DEBUG:certbot._internal.log:Exiting abnormally:
  391. Traceback (most recent call last):
  392.   File "/usr/bin/certbot", line 33, in <module>
  393.     sys.exit(load_entry_point('certbot==2.1.0', 'console_scripts', 'certbot')())
  394.              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  395.   File "/usr/lib/python3/dist-packages/certbot/main.py", line 19, in main
  396.     return internal_main.main(cli_args)
  397.            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  398.   File "/usr/lib/python3/dist-packages/certbot/_internal/main.py", line 1736, in main
  399.     return config.func(config, plugins)
  400.            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  401.   File "/usr/lib/python3/dist-packages/certbot/_internal/main.py", line 1590, in certonly
  402.     lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
  403.               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  404.   File "/usr/lib/python3/dist-packages/certbot/_internal/main.py", line 138, in _get_and_save_cert
  405.     lineage = le_client.obtain_and_enroll_certificate(domains, certname)
  406.               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  407.   File "/usr/lib/python3/dist-packages/certbot/_internal/client.py", line 516, in obtain_and_enroll_certificate
  408.     cert, chain, key, _ = self.obtain_certificate(domains)
  409.                           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  410.   File "/usr/lib/python3/dist-packages/certbot/_internal/client.py", line 428, in obtain_certificate
  411.     orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  412.              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  413.   File "/usr/lib/python3/dist-packages/certbot/_internal/client.py", line 496, in _get_order_and_authorizations
  414.     authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
  415.              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  416.   File "/usr/lib/python3/dist-packages/certbot/_internal/auth_handler.py", line 106, in handle_authorizations
  417.     self._poll_authorizations(authzrs, max_retries, best_effort)
  418.   File "/usr/lib/python3/dist-packages/certbot/_internal/auth_handler.py", line 206, in _poll_authorizations
  419.     raise errors.AuthorizationError('Some challenges have failed.')
  420. certbot.errors.AuthorizationError: Some challenges have failed.
  421. 2024-12-08 01:29:52,843:ERROR:certbot._internal.log:Some challenges have failed.
  422.                                                                                                                                                                            
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!