· 7 months ago · Mar 11, 2025, 06:45 PM
1```
2# acme.sh --issue --nginx -d fish.pre.imb.co --test --debug 2
3[Tue Mar 11 20:08:34 SAST 2025] Lets find script dir.
4[Tue Mar 11 20:08:34 SAST 2025] _SCRIPT_='/etc/acme.sh/acme.sh'
5[Tue Mar 11 20:08:34 SAST 2025] _script='/etc/acme.sh/acme.sh'
6[Tue Mar 11 20:08:34 SAST 2025] _script_home='/etc/acme.sh'
7[Tue Mar 11 20:08:34 SAST 2025] Using config home:/etc/acme.sh/
8[Tue Mar 11 20:08:34 SAST 2025] LE_WORKING_DIR='/etc/acme.sh'
9https://github.com/acmesh-official/acme.sh
10v3.0.2
11[Tue Mar 11 20:08:34 SAST 2025] Running cmd: issue
12[Tue Mar 11 20:08:34 SAST 2025] _main_domain='fish.pre.imb.co'
13[Tue Mar 11 20:08:34 SAST 2025] _alt_domains='no'
14[Tue Mar 11 20:08:34 SAST 2025] Using config home:/etc/acme.sh/
15[Tue Mar 11 20:08:34 SAST 2025] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
16[Tue Mar 11 20:08:34 SAST 2025] ACME_DIRECTORY='https://acme-staging-v02.api.letsencrypt.org/directory'
17[Tue Mar 11 20:08:34 SAST 2025] _ACME_SERVER_HOST='acme-staging-v02.api.letsencrypt.org'
18[Tue Mar 11 20:08:34 SAST 2025] _ACME_SERVER_PATH='directory'
19[Tue Mar 11 20:08:34 SAST 2025] DOMAIN_PATH='/etc/acme.sh/mycerts/fish.pre.imb.co'
20[Tue Mar 11 20:08:34 SAST 2025] 'nginx:' does not contain 'dns'
21[Tue Mar 11 20:08:34 SAST 2025] Le_NextRenewTime='1701502570'
22[Tue Mar 11 20:08:34 SAST 2025] Using ACME_DIRECTORY: https://acme-staging-v02.api.letsencrypt.org/directory
23[Tue Mar 11 20:08:34 SAST 2025] _init api for server: https://acme-staging-v02.api.letsencrypt.org/directory
24[Tue Mar 11 20:08:34 SAST 2025] GET
25[Tue Mar 11 20:08:34 SAST 2025] url='https://acme-staging-v02.api.letsencrypt.org/directory'
26[Tue Mar 11 20:08:34 SAST 2025] timeout=
27[Tue Mar 11 20:08:34 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.btldpvFXJ2 -g '
28[Tue Mar 11 20:08:35 SAST 2025] ret='0'
29[Tue Mar 11 20:08:35 SAST 2025] response='{
30 "5ylEUa3bB5s": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
31 "keyChange": "https://acme-staging-v02.api.letsencrypt.org/acme/key-change",
32 "meta": {
33 "caaIdentities": [
34 "letsencrypt.org"
35 ],
36 "profiles": {
37 "classic": "https://letsencrypt.org/docs/profiles#classic",
38 "shortlived": "https://letsencrypt.org/docs/profiles#shortlived (not yet generally available)",
39 "tlsserver": "https://letsencrypt.org/docs/profiles#tlsserver (not yet generally available)"
40 },
41 "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.5-February-24-2025.pdf",
42 "website": "https://letsencrypt.org/docs/staging-environment/"
43 },
44 "newAccount": "https://acme-staging-v02.api.letsencrypt.org/acme/new-acct",
45 "newNonce": "https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce",
46 "newOrder": "https://acme-staging-v02.api.letsencrypt.org/acme/new-order",
47 "renewalInfo": "https://acme-staging-v02.api.letsencrypt.org/draft-ietf-acme-ari-03/renewalInfo",
48 "revokeCert": "https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert"
49}'
50[Tue Mar 11 20:08:35 SAST 2025] ACME_KEY_CHANGE='https://acme-staging-v02.api.letsencrypt.org/acme/key-change'
51[Tue Mar 11 20:08:35 SAST 2025] ACME_NEW_AUTHZ
52[Tue Mar 11 20:08:35 SAST 2025] ACME_NEW_ORDER='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
53[Tue Mar 11 20:08:35 SAST 2025] ACME_NEW_ACCOUNT='https://acme-staging-v02.api.letsencrypt.org/acme/new-acct'
54[Tue Mar 11 20:08:35 SAST 2025] ACME_REVOKE_CERT='https://acme-staging-v02.api.letsencrypt.org/acme/revoke-cert'
55[Tue Mar 11 20:08:35 SAST 2025] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.5-February-24-2025.pdf'
56[Tue Mar 11 20:08:35 SAST 2025] ACME_NEW_NONCE='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
57[Tue Mar 11 20:08:35 SAST 2025] Using CA: https://acme-staging-v02.api.letsencrypt.org/directory
58[Tue Mar 11 20:08:35 SAST 2025] _on_before_issue
59[Tue Mar 11 20:08:35 SAST 2025] _chk_main_domain='fish.pre.imb.co'
60[Tue Mar 11 20:08:35 SAST 2025] _chk_alt_domains
61[Tue Mar 11 20:08:35 SAST 2025] 'nginx:' does not contain 'no'
62[Tue Mar 11 20:08:35 SAST 2025] Le_LocalAddress
63[Tue Mar 11 20:08:35 SAST 2025] d='fish.pre.imb.co'
64[Tue Mar 11 20:08:35 SAST 2025] Check for domain='fish.pre.imb.co'
65[Tue Mar 11 20:08:35 SAST 2025] _currentRoot='nginx:'
66[Tue Mar 11 20:08:35 SAST 2025] d
67[Tue Mar 11 20:08:35 SAST 2025] 'nginx:' does not contain 'apache'
68[Tue Mar 11 20:08:36 SAST 2025] _saved_account_key_hash='aR4wSu1L3Ybyy3B4+6qcgGMBRQaCOO2/jqqhMVON+b0='
69[Tue Mar 11 20:08:36 SAST 2025] _saved_account_key_hash is not changed, skip register account.
70[Tue Mar 11 20:08:36 SAST 2025] Read key length:
71[Tue Mar 11 20:08:36 SAST 2025] _createcsr
72[Tue Mar 11 20:08:36 SAST 2025] domain='fish.pre.imb.co'
73[Tue Mar 11 20:08:36 SAST 2025] domainlist
74[Tue Mar 11 20:08:36 SAST 2025] csrkey='/etc/acme.sh/mycerts/fish.pre.imb.co/fish.pre.imb.co.key'
75[Tue Mar 11 20:08:36 SAST 2025] csr='/etc/acme.sh/mycerts/fish.pre.imb.co/fish.pre.imb.co.csr'
76[Tue Mar 11 20:08:36 SAST 2025] csrconf='/etc/acme.sh/mycerts/fish.pre.imb.co/fish.pre.imb.co.csr.conf'
77[Tue Mar 11 20:08:36 SAST 2025] Single domain='fish.pre.imb.co'
78[Tue Mar 11 20:08:36 SAST 2025] seg='fish'
79[Tue Mar 11 20:08:36 SAST 2025] _is_idn_d='fish.pre.imb.co'
80[Tue Mar 11 20:08:36 SAST 2025] _idn_temp
81[Tue Mar 11 20:08:36 SAST 2025] _is_idn_d='fish.pre.imb.co'
82[Tue Mar 11 20:08:36 SAST 2025] _idn_temp
83[Tue Mar 11 20:08:36 SAST 2025] _csr_cn='fish.pre.imb.co'
84[Tue Mar 11 20:08:36 SAST 2025] seg='fish'
85[Tue Mar 11 20:08:36 SAST 2025] Getting domain auth token for each domain
86[Tue Mar 11 20:08:36 SAST 2025] seg='fish'
87[Tue Mar 11 20:08:36 SAST 2025] _is_idn_d='fish.pre.imb.co'
88[Tue Mar 11 20:08:36 SAST 2025] _idn_temp
89[Tue Mar 11 20:08:36 SAST 2025] d
90[Tue Mar 11 20:08:36 SAST 2025] _identifiers='{"type":"dns","value":"fish.pre.imb.co"}'
91[Tue Mar 11 20:08:36 SAST 2025] url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
92[Tue Mar 11 20:08:36 SAST 2025] payload='{"identifiers": [{"type":"dns","value":"fish.pre.imb.co"}]}'
93[Tue Mar 11 20:08:36 SAST 2025] RSA key
94[Tue Mar 11 20:08:36 SAST 2025] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
95[Tue Mar 11 20:08:36 SAST 2025] HEAD
96[Tue Mar 11 20:08:36 SAST 2025] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce'
97[Tue Mar 11 20:08:36 SAST 2025] body
98[Tue Mar 11 20:08:36 SAST 2025] _postContentType='application/jose+json'
99[Tue Mar 11 20:08:36 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.edAK2WLqSg -g -I '
100[Tue Mar 11 20:08:37 SAST 2025] _ret='0'
101[Tue Mar 11 20:08:37 SAST 2025] _headers='HTTP/1.1 200 OK
102Server: nginx
103Date: Tue, 11 Mar 2025 18:09:11 GMT
104Connection: keep-alive
105Cache-Control: public, max-age=0, no-cache
106Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
107Replay-Nonce: ocx3jFXM0pNGzYOArBoP-_WG6NQiB3qy5ZQbvNyo42KNhC5X_jE
108X-Frame-Options: DENY
109Strict-Transport-Security: max-age=604800
110'
111[Tue Mar 11 20:08:37 SAST 2025] _CACHED_NONCE='ocx3jFXM0pNGzYOArBoP-_WG6NQiB3qy5ZQbvNyo42KNhC5X_jE'
112[Tue Mar 11 20:08:37 SAST 2025] nonce='ocx3jFXM0pNGzYOArBoP-_WG6NQiB3qy5ZQbvNyo42KNhC5X_jE'
113[Tue Mar 11 20:08:37 SAST 2025] POST
114[Tue Mar 11 20:08:37 SAST 2025] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/new-order'
115[Tue Mar 11 20:08:37 SAST 2025] body='{"protected": "eyJub25jZSI6ICJvY3gzakZYTTBwTkd6WU9BckJvUC1fV0c2TlFpQjNxeTVaUWJ2TnlvNDJLTmhDNVhfakUiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzE4OTAyMDE0NCJ9", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6ImZpc2gucHJlLmltYi5jbyJ9XX0", "signature": "gRmOJ0J4DnUEKoXrVQHLkeEkWuxh7pW60HLvypyQWdBhkS9L01H2LwunNpBSxNxq6IZO0koGNNAFdaXGsFJYyNUBZCheRjZgI9I7A0NnngEp2_cTqEOYrNJiKUzWibyokuIWdkLFPN3XTit0JZGzEAQL6V8GnWqAlybJfIMITT-_dlEbGMrUUNT2ip7Q-0r7IZejOzLfoW77JaZqCeQuOw4Ykevjr2jh3gWrE3w1TOdATTCrG_xBYMVy0_CiquNloU_tLjdc6d8XuiD-mukX36KQmvP3Dx8lM84sEXlU2b6Bnf0lO1EZz3MegMI_uBLfcUKpyUjOjWRJepSebKWZzw"}'
116[Tue Mar 11 20:08:37 SAST 2025] _postContentType='application/jose+json'
117[Tue Mar 11 20:08:37 SAST 2025] Http already initialized.
118[Tue Mar 11 20:08:37 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.edAK2WLqSg -g '
119[Tue Mar 11 20:08:38 SAST 2025] _ret='0'
120[Tue Mar 11 20:08:38 SAST 2025] responseHeaders='HTTP/1.1 201 Created
121Server: nginx
122Date: Tue, 11 Mar 2025 18:09:12 GMT
123Content-Type: application/json
124Content-Length: 361
125Connection: keep-alive
126Boulder-Requester: 189020144
127Cache-Control: public, max-age=0, no-cache
128Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
129Location: https://acme-staging-v02.api.letsencrypt.org/acme/order/189020144/23182343254
130Replay-Nonce: IgYZ01HKmdzkM3H3Wy5FKvpA0e43Qj2UmOKDsJ9H4oYjfzRu43A
131X-Frame-Options: DENY
132Strict-Transport-Security: max-age=604800
133'
134[Tue Mar 11 20:08:38 SAST 2025] code='201'
135[Tue Mar 11 20:08:38 SAST 2025] original='{
136 "status": "pending",
137 "expires": "2025-03-18T18:09:12Z",
138 "identifiers": [
139 {
140 "type": "dns",
141 "value": "fish.pre.imb.co"
142 }
143 ],
144 "authorizations": [
145 "https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094"
146 ],
147 "finalize": "https://acme-staging-v02.api.letsencrypt.org/acme/finalize/189020144/23182343254"
148}'
149[Tue Mar 11 20:08:38 SAST 2025] response='{"status":"pending","expires":"2025-03-18T18:09:12Z","identifiers":[{"type":"dns","value":"fish.pre.imb.co"}],"authorizations":["https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094"],"finalize":"https://acme-staging-v02.api.letsencrypt.org/acme/finalize/189020144/23182343254"}'
150[Tue Mar 11 20:08:38 SAST 2025] Le_LinkOrder='https://acme-staging-v02.api.letsencrypt.org/acme/order/189020144/23182343254'
151[Tue Mar 11 20:08:38 SAST 2025] Le_OrderFinalize='https://acme-staging-v02.api.letsencrypt.org/acme/finalize/189020144/23182343254'
152[Tue Mar 11 20:08:38 SAST 2025] _authorizations_seg='https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094'
153[Tue Mar 11 20:08:38 SAST 2025] _authz_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094'
154[Tue Mar 11 20:08:38 SAST 2025] url='https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094'
155[Tue Mar 11 20:08:38 SAST 2025] payload
156[Tue Mar 11 20:08:38 SAST 2025] Use cached jwk for file: /etc/acme.sh//ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
157[Tue Mar 11 20:08:38 SAST 2025] Use _CACHED_NONCE='IgYZ01HKmdzkM3H3Wy5FKvpA0e43Qj2UmOKDsJ9H4oYjfzRu43A'
158[Tue Mar 11 20:08:38 SAST 2025] nonce='IgYZ01HKmdzkM3H3Wy5FKvpA0e43Qj2UmOKDsJ9H4oYjfzRu43A'
159[Tue Mar 11 20:08:38 SAST 2025] POST
160[Tue Mar 11 20:08:38 SAST 2025] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094'
161[Tue Mar 11 20:08:38 SAST 2025] body='{"protected": "eyJub25jZSI6ICJJZ1laMDFIS21kemtNM0gzV3k1Rkt2cEEwZTQzUWoyVW1PS0RzSjlING9ZamZ6UnU0M0EiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHovMTg5MDIwMTQ0LzE2MzYwMTI2MDk0IiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXN0YWdpbmctdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzE4OTAyMDE0NCJ9", "payload": "", "signature": "T_AeaeL2m2-zdPRqepI89LCt-kDi7HAbEcqjxtKtKXJMOF_Xb4JQn8NcKfJx5YAws8D8R9oZYhSFPjUzjlMVSLRfrR012Jwi9YZm32wBzQ-45_CJOW8VOot0AKlDmMPVSDSHdWrTQBFsSCsUHPfQ5Lfz-srhc4uiC08tkfMDTfDXw5KwMjV6_dZU2XE_QhbiwDmMmGPJIUgcvPlFlxtrBTaDqqBcvfuEybnx4WtJTf5CuZYQITY-mFhEeimSucgaEqyvoOHer1PfajPj75Jz34TgJ8ueglWpl2zZYff-w6WQCD-S6Kk4bOmOq11PFJ97cJ5IfDUa3AyHDuf0nuS4Cg"}'
162[Tue Mar 11 20:08:38 SAST 2025] _postContentType='application/jose+json'
163[Tue Mar 11 20:08:38 SAST 2025] Http already initialized.
164[Tue Mar 11 20:08:38 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.edAK2WLqSg -g '
165[Tue Mar 11 20:08:39 SAST 2025] _ret='0'
166[Tue Mar 11 20:08:39 SAST 2025] responseHeaders='HTTP/1.1 200 OK
167Server: nginx
168Date: Tue, 11 Mar 2025 18:09:13 GMT
169Content-Type: application/json
170Content-Length: 841
171Connection: keep-alive
172Boulder-Requester: 189020144
173Cache-Control: public, max-age=0, no-cache
174Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
175Replay-Nonce: IgYZ01HKv9twfvwFX1W9q4JxvZXidj0sfXSLU4fWt2XFBE85f7A
176X-Frame-Options: DENY
177Strict-Transport-Security: max-age=604800
178'
179[Tue Mar 11 20:08:39 SAST 2025] code='200'
180[Tue Mar 11 20:08:39 SAST 2025] original='{
181 "identifier": {
182 "type": "dns",
183 "value": "fish.pre.imb.co"
184 },
185 "status": "pending",
186 "expires": "2025-03-18T18:09:12Z",
187 "challenges": [
188 {
189 "type": "http-01",
190 "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ",
191 "status": "pending",
192 "token": "0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"
193 },
194 {
195 "type": "dns-01",
196 "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/svXyhg",
197 "status": "pending",
198 "token": "0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"
199 },
200 {
201 "type": "tls-alpn-01",
202 "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/jMRRmw",
203 "status": "pending",
204 "token": "0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"
205 }
206 ]
207}'
208[Tue Mar 11 20:08:39 SAST 2025] response='{"identifier":{"type":"dns","value":"fish.pre.imb.co"},"status":"pending","expires":"2025-03-18T18:09:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/svXyhg","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/jMRRmw","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}]}'
209[Tue Mar 11 20:08:39 SAST 2025] response='{"identifier":{"type":"dns","value":"fish.pre.imb.co"},"status":"pending","expires":"2025-03-18T18:09:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/svXyhg","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/jMRRmw","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}]}'
210[Tue Mar 11 20:08:39 SAST 2025] _d='fish.pre.imb.co'
211[Tue Mar 11 20:08:39 SAST 2025] _authorizations_map='fish.pre.imb.co,{"identifier":{"type":"dns","value":"fish.pre.imb.co"},"status":"pending","expires":"2025-03-18T18:09:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/svXyhg","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/jMRRmw","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}]}
212'
213[Tue Mar 11 20:08:39 SAST 2025] d='fish.pre.imb.co'
214[Tue Mar 11 20:08:39 SAST 2025] Getting webroot for domain='fish.pre.imb.co'
215[Tue Mar 11 20:08:39 SAST 2025] _w='nginx:'
216[Tue Mar 11 20:08:39 SAST 2025] _currentRoot='nginx:'
217[Tue Mar 11 20:08:39 SAST 2025] _is_idn_d='fish.pre.imb.co'
218[Tue Mar 11 20:08:39 SAST 2025] _idn_temp
219[Tue Mar 11 20:08:39 SAST 2025] _candidates='fish.pre.imb.co,{"identifier":{"type":"dns","value":"fish.pre.imb.co"},"status":"pending","expires":"2025-03-18T18:09:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/svXyhg","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/jMRRmw","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}]}'
220[Tue Mar 11 20:08:39 SAST 2025] response='{"identifier":{"type":"dns","value":"fish.pre.imb.co"},"status":"pending","expires":"2025-03-18T18:09:12Z","challenges":[{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"dns-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/svXyhg","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"},{"type":"tls-alpn-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/jMRRmw","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}]}'
221[Tue Mar 11 20:08:39 SAST 2025] entry='"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"'
222[Tue Mar 11 20:08:39 SAST 2025] token='0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k'
223[Tue Mar 11 20:08:39 SAST 2025] uri='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
224[Tue Mar 11 20:08:39 SAST 2025] keyauthorization='0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k.B6qnL9p1wm9k0860T7iPvaXlaLAiVzPoCp2IhukfQNM'
225[Tue Mar 11 20:08:39 SAST 2025] dvlist='fish.pre.imb.co#0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k.B6qnL9p1wm9k0860T7iPvaXlaLAiVzPoCp2IhukfQNM#https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ#http-01#nginx:'
226[Tue Mar 11 20:08:39 SAST 2025] d
227[Tue Mar 11 20:08:39 SAST 2025] vlist='fish.pre.imb.co#0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k.B6qnL9p1wm9k0860T7iPvaXlaLAiVzPoCp2IhukfQNM#https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ#http-01#nginx:,'
228[Tue Mar 11 20:08:39 SAST 2025] d='fish.pre.imb.co'
229[Tue Mar 11 20:08:39 SAST 2025] ok, let's start to verify
230[Tue Mar 11 20:08:39 SAST 2025] Verifying: fish.pre.imb.co
231[Tue Mar 11 20:08:39 SAST 2025] d='fish.pre.imb.co'
232[Tue Mar 11 20:08:39 SAST 2025] keyauthorization='0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k.B6qnL9p1wm9k0860T7iPvaXlaLAiVzPoCp2IhukfQNM'
233[Tue Mar 11 20:08:39 SAST 2025] uri='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
234[Tue Mar 11 20:08:39 SAST 2025] _currentRoot='nginx:'
235[Tue Mar 11 20:08:39 SAST 2025] Nginx mode for domain:fish.pre.imb.co
236[Tue Mar 11 20:08:39 SAST 2025] _croot='nginx:'
237[Tue Mar 11 20:08:39 SAST 2025] _start_f
238[Tue Mar 11 20:08:39 SAST 2025] find start conf from nginx command
239[Tue Mar 11 20:08:39 SAST 2025] NGINX_CONF='--conf-path=/etc/nginx/nginx.conf'
240[Tue Mar 11 20:08:39 SAST 2025] NGINX_CONF='/etc/nginx/nginx.conf'
241[Tue Mar 11 20:08:39 SAST 2025] Found nginx conf file:/etc/nginx/nginx.conf
242[Tue Mar 11 20:08:39 SAST 2025] Start detect nginx conf for fish.pre.imb.co from:/etc/nginx/nginx.conf
243[Tue Mar 11 20:08:39 SAST 2025] Start _checkConf from:/etc/nginx/nginx.conf
244[Tue Mar 11 20:08:39 SAST 2025] single
245[Tue Mar 11 20:08:39 SAST 2025] _isRealNginxConf fish.pre.imb.co /etc/nginx/nginx.conf
246[Tue Mar 11 20:08:39 SAST 2025] Try include files
247[Tue Mar 11 20:08:39 SAST 2025] check included /etc/nginx/mime.types
248[Tue Mar 11 20:08:39 SAST 2025] Start _checkConf from:/etc/nginx/mime.types
249[Tue Mar 11 20:08:39 SAST 2025] single
250[Tue Mar 11 20:08:39 SAST 2025] _isRealNginxConf fish.pre.imb.co /etc/nginx/mime.types
251[Tue Mar 11 20:08:39 SAST 2025] check included /etc/nginx/conf.d/*.conf
252[Tue Mar 11 20:08:40 SAST 2025] Start _checkConf from:/etc/nginx/conf.d/*.conf
253[Tue Mar 11 20:08:40 SAST 2025] wildcard
254[Tue Mar 11 20:08:40 SAST 2025] check included /etc/nginx/sites-enabled/fish.pre.imb.co.conf
255[Tue Mar 11 20:08:40 SAST 2025] Start _checkConf from:/etc/nginx/sites-enabled/fish.pre.imb.co.conf
256[Tue Mar 11 20:08:40 SAST 2025] single
257[Tue Mar 11 20:08:40 SAST 2025] _isRealNginxConf fish.pre.imb.co /etc/nginx/sites-enabled/fish.pre.imb.co.conf
258[Tue Mar 11 20:08:40 SAST 2025] _fln='9'
259[Tue Mar 11 20:08:40 SAST 2025] _start='6:server {'
260[Tue Mar 11 20:08:40 SAST 2025] _start_n='6'
261[Tue Mar 11 20:08:40 SAST 2025] _start_nn='7'
262[Tue Mar 11 20:08:40 SAST 2025] _left=' resolver_timeout 10s;
263
264 server_name fish.pre.imb.co;
265 root /var/local/www/fisheagle/public;
266 access_log /var/log/nginx/fisheagle.log;
267 rewrite_log on;
268 try_files $uri/index.html $uri @puma_fisheagle;
269
270 location @puma_fisheagle {
271 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
272 proxy_set_header Host $http_host;
273 proxy_read_timeout 1800s;
274 proxy_redirect off;
275 proxy_pass http://puma_fisheagle;
276 proxy_connect_timeout 2;
277 }
278
279 location /.well-known/acme-challenge {
280 default_type "text/plain";
281 allow all;
282 root /var/local/www/acme;
283 }
284
285 location /nginx_status {
286 stub_status on;
287 access_log off;
288 allow 192.168.131.0/24;
289 # deny all;
290 }
291
292 error_page 404 /404.html;
293 error_page 422 /422.html;
294 error_page 500 503 504 /500.html;
295 error_page 502 /502.html;
296 client_max_body_size 10m;
297 keepalive_timeout 10m;
298
299 listen 443 ssl;
300
301 ssl_certificate /etc/acme.sh/certs/fish.pre.imb.co/fullchain.cer;
302 ssl_certificate_key /etc/acme.sh/certs/fish.pre.imb.co/fish.pre.imb.co.key;
303 # intermediate configuration
304 # old configuration
305 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
306 ssl_prefer_server_ciphers on;
307 ssl_dhparam /etc/ssl/private/ffdhe4096.pem;
308 ssl_ecdh_curve secp384r1;
309 ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
310 ssl_session_timeout 60m;
311 ssl_session_cache shared:SSL:50m;
312 #ssl_stapling on;
313 #ssl_stapling_verify on;
314 #resolver 8.8.8.8 8.8.4.4 valid=300s;
315 #resolver_timeout 10s;
316
317}
318
319server {
320 if ($host = fish.pre.imb.co) {
321 return 301 https://$host$request_uri;
322 }
323
324 server_name fish.pre.imb.co;
325
326 listen 80;
327 return 404;
328}
329 '
330[Tue Mar 11 20:08:40 SAST 2025] _end='58:server {'
331[Tue Mar 11 20:08:40 SAST 2025] _end_n='58'
332[Tue Mar 11 20:08:40 SAST 2025] _seg_n=' resolver_timeout 10s;
333
334 server_name fish.pre.imb.co;
335 root /var/local/www/fisheagle/public;
336 access_log /var/log/nginx/fisheagle.log;
337 rewrite_log on;
338 try_files $uri/index.html $uri @puma_fisheagle;
339
340 location @puma_fisheagle {
341 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
342 proxy_set_header Host $http_host;
343 proxy_read_timeout 1800s;
344 proxy_redirect off;
345 proxy_pass http://puma_fisheagle;
346 proxy_connect_timeout 2;
347 }
348
349 location /.well-known/acme-challenge {
350 default_type "text/plain";
351 allow all;
352 root /var/local/www/acme;
353 }
354
355 location /nginx_status {
356 stub_status on;
357 access_log off;
358 allow 192.168.131.0/24;
359 # deny all;
360 }
361
362 error_page 404 /404.html;
363 error_page 422 /422.html;
364 error_page 500 503 504 /500.html;
365 error_page 502 /502.html;
366 client_max_body_size 10m;
367 keepalive_timeout 10m;
368
369 listen 443 ssl;
370
371 ssl_certificate /etc/acme.sh/certs/fish.pre.imb.co/fullchain.cer;
372 ssl_certificate_key /etc/acme.sh/certs/fish.pre.imb.co/fish.pre.imb.co.key;
373 # intermediate configuration
374 # old configuration
375 ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
376 ssl_prefer_server_ciphers on;
377 ssl_dhparam /etc/ssl/private/ffdhe4096.pem;
378 ssl_ecdh_curve secp384r1;
379 ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
380 ssl_session_timeout 60m;
381 ssl_session_cache shared:SSL:50m;
382 #ssl_stapling on;
383 #ssl_stapling_verify on;
384 #resolver 8.8.8.8 8.8.4.4 valid=300s;
385 #resolver_timeout 10s;
386
387}
388
389server {'
390[Tue Mar 11 20:08:40 SAST 2025] listen443ssl; is ssl
391[Tue Mar 11 20:08:40 SAST 2025] ssl on, skip
392[Tue Mar 11 20:08:40 SAST 2025] _fln='69'
393[Tue Mar 11 20:08:40 SAST 2025] _start='64:server {'
394[Tue Mar 11 20:08:40 SAST 2025] _start_n='64'
395[Tue Mar 11 20:08:40 SAST 2025] _start_nn='65'
396[Tue Mar 11 20:08:40 SAST 2025] _left=' if ($host = fish.pre.imb.co) {
397 return 301 https://$host$request_uri;
398 }
399
400 server_name fish.pre.imb.co;
401
402 listen 80;
403 return 404;
404}
405 '
406[Tue Mar 11 20:08:40 SAST 2025] _end
407[Tue Mar 11 20:08:40 SAST 2025] _seg_n=' if ($host = fish.pre.imb.co) {
408 return 301 https://$host$request_uri;
409 }
410
411 server_name fish.pre.imb.co;
412
413 listen 80;
414 return 404;
415}
416 '
417[Tue Mar 11 20:08:40 SAST 2025] listen80; is plain text
418[Tue Mar 11 20:08:40 SAST 2025] /etc/nginx/sites-enabled/fish.pre.imb.co.conf is found.
419[Tue Mar 11 20:08:40 SAST 2025] Found conf file: /etc/nginx/sites-enabled/fish.pre.imb.co.conf
420[Tue Mar 11 20:08:40 SAST 2025] _ln='69'
421[Tue Mar 11 20:08:40 SAST 2025] _lnn='70'
422[Tue Mar 11 20:08:40 SAST 2025] _start_tag
423[Tue Mar 11 20:08:40 SAST 2025] _backup_conf='/etc/acme.sh/mycerts/fish.pre.imb.co/backup/fish.pre.imb.co.nginx.conf'
424[Tue Mar 11 20:08:40 SAST 2025] Backup /etc/nginx/sites-enabled/fish.pre.imb.co.conf to /etc/acme.sh/mycerts/fish.pre.imb.co/backup/fish.pre.imb.co.nginx.conf
425[Tue Mar 11 20:08:40 SAST 2025] Check the nginx conf before setting up.
426[Tue Mar 11 20:08:40 SAST 2025] OK, Set up nginx config file
427[Tue Mar 11 20:08:40 SAST 2025] nginx conf is done, let's check it again.
428[Tue Mar 11 20:08:40 SAST 2025] Reload nginx
429[Tue Mar 11 20:08:40 SAST 2025] _realConf='/etc/nginx/sites-enabled/fish.pre.imb.co.conf'
430[Tue Mar 11 20:08:42 SAST 2025] Trigger domain validation.
431[Tue Mar 11 20:08:42 SAST 2025] _t_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
432[Tue Mar 11 20:08:42 SAST 2025] _t_key_authz='0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k.B6qnL9p1wm9k0860T7iPvaXlaLAiVzPoCp2IhukfQNM'
433[Tue Mar 11 20:08:42 SAST 2025] _t_vtype='http-01'
434[Tue Mar 11 20:08:42 SAST 2025] url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
435[Tue Mar 11 20:08:42 SAST 2025] payload='{}'
436[Tue Mar 11 20:08:42 SAST 2025] Use cached jwk for file: /etc/acme.sh//ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
437[Tue Mar 11 20:08:42 SAST 2025] Use _CACHED_NONCE='IgYZ01HKv9twfvwFX1W9q4JxvZXidj0sfXSLU4fWt2XFBE85f7A'
438[Tue Mar 11 20:08:42 SAST 2025] nonce='IgYZ01HKv9twfvwFX1W9q4JxvZXidj0sfXSLU4fWt2XFBE85f7A'
439[Tue Mar 11 20:08:42 SAST 2025] POST
440[Tue Mar 11 20:08:42 SAST 2025] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
441[Tue Mar 11 20:08:42 SAST 2025] body='{"protected": "eyJub25jZSI6ICJJZ1laMDFIS3Y5dHdmdndGWDFXOXE0Snh2WlhpZGowc2ZYU0xVNGZXdDJYRkJFODVmN0EiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwvMTg5MDIwMTQ0LzE2MzYwMTI2MDk0LzFNTnlNUSIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODkwMjAxNDQifQ", "payload": "e30", "signature": "pvJxJ3URG2ZfeorJAfQ8olFuQZYFz5gJG808sp9pv30TkYluXuxzPXrc1oM3f0V-XajVExCNa2CErGRcrDtQ5z-6WwdfWUWsRnrTybPhGmUIxA4_DGNSGEe8eBecid-UJmYSpQTuKy0n8BSDsS8viYPPmJ33zETeIW3fB5PCTTWAPtepJZl6moXZbcJcDa4BDiCx7OI0zb4yoIu5nRYFz5OK4nXG2od3b1_Op_UGGtuLhKzBVpjMSA1K07fVa54ZxQ1ZdmsWojho_whXv9uN6VYCQHbNG-Kr_kKqfGuDuQly0AGZB02D2ChNp5TM1kU2O0fUSRwF7-xT3-eGr079hA"}'
442[Tue Mar 11 20:08:42 SAST 2025] _postContentType='application/jose+json'
443[Tue Mar 11 20:08:42 SAST 2025] Http already initialized.
444[Tue Mar 11 20:08:42 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.edAK2WLqSg -g '
445[Tue Mar 11 20:08:43 SAST 2025] _ret='0'
446[Tue Mar 11 20:08:43 SAST 2025] responseHeaders='HTTP/1.1 200 OK
447Server: nginx
448Date: Tue, 11 Mar 2025 18:09:17 GMT
449Content-Type: application/json
450Content-Length: 201
451Connection: keep-alive
452Boulder-Requester: 189020144
453Cache-Control: public, max-age=0, no-cache
454Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
455Link: <https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094>;rel="up"
456Location: https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ
457Replay-Nonce: ocx3jFXM3dNUIXkF9heUPDsdgXD5A-XUm65ybipI2xMUMjF8L8U
458X-Frame-Options: DENY
459Strict-Transport-Security: max-age=604800
460'
461[Tue Mar 11 20:08:43 SAST 2025] code='200'
462[Tue Mar 11 20:08:43 SAST 2025] original='{
463 "type": "http-01",
464 "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ",
465 "status": "pending",
466 "token": "0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"
467}'
468[Tue Mar 11 20:08:43 SAST 2025] response='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}'
469[Tue Mar 11 20:08:43 SAST 2025] trigger validation code: 200
470[Tue Mar 11 20:08:43 SAST 2025] original='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}'
471[Tue Mar 11 20:08:43 SAST 2025] response='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"pending","token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k"}'
472[Tue Mar 11 20:08:43 SAST 2025] status='pending'
473[Tue Mar 11 20:08:43 SAST 2025] Pending, The CA is processing your order, please just wait. (1/30)
474[Tue Mar 11 20:08:43 SAST 2025] sleep 2 secs to verify again
475[Tue Mar 11 20:08:45 SAST 2025] checking
476[Tue Mar 11 20:08:45 SAST 2025] url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
477[Tue Mar 11 20:08:45 SAST 2025] payload
478[Tue Mar 11 20:08:45 SAST 2025] Use cached jwk for file: /etc/acme.sh//ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
479[Tue Mar 11 20:08:45 SAST 2025] Use _CACHED_NONCE='ocx3jFXM3dNUIXkF9heUPDsdgXD5A-XUm65ybipI2xMUMjF8L8U'
480[Tue Mar 11 20:08:45 SAST 2025] nonce='ocx3jFXM3dNUIXkF9heUPDsdgXD5A-XUm65ybipI2xMUMjF8L8U'
481[Tue Mar 11 20:08:45 SAST 2025] POST
482[Tue Mar 11 20:08:45 SAST 2025] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
483[Tue Mar 11 20:08:45 SAST 2025] body='{"protected": "eyJub25jZSI6ICJvY3gzakZYTTNkTlVJWGtGOWhlVVBEc2RnWEQ1QS1YVW02NXliaXBJMnhNVU1qRjhMOFUiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwvMTg5MDIwMTQ0LzE2MzYwMTI2MDk0LzFNTnlNUSIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODkwMjAxNDQifQ", "payload": "", "signature": "ZVJ-CmfGbt1Et9Ch5kP9yAKkyFUu8JAmGmrqcAJfGg2MOn91HAuRa8CzC44shPXVPUuTE9ItszD1g7GLwL1hSD2vae-VgX-9ECVFi_o54cCMXW5nVTnZluu8A30GuGmRbGOcIEDUBWKQkvws6BQ_--qKvXrhNwUroC2ARclU9xZzAiD0PSFomt94UO7IuG9aHYQ2On5jiw_z4CDQZ8WiRoQ9JVnyp2Y0YAHHpwwBQBqbM62KYKt-SPXNroZvihOaU-XQIzrhC0i0Ul3Ro36mlvsyiAOiabYuUXtyyBQ_TODByoN-v6qyuOc7Md2yco_OnLaSCFkIdgRP8uH_cDuwew"}'
484[Tue Mar 11 20:08:45 SAST 2025] _postContentType='application/jose+json'
485[Tue Mar 11 20:08:45 SAST 2025] Http already initialized.
486[Tue Mar 11 20:08:45 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.edAK2WLqSg -g '
487[Tue Mar 11 20:08:46 SAST 2025] _ret='0'
488[Tue Mar 11 20:08:46 SAST 2025] responseHeaders='HTTP/1.1 200 OK
489Server: nginx
490Date: Tue, 11 Mar 2025 18:09:20 GMT
491Content-Type: application/json
492Content-Length: 1083
493Connection: keep-alive
494Boulder-Requester: 189020144
495Cache-Control: public, max-age=0, no-cache
496Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
497Link: <https://acme-staging-v02.api.letsencrypt.org/acme/authz/189020144/16360126094>;rel="up"
498Location: https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ
499Replay-Nonce: IgYZ01HKwSEPDuhUoZXGYtrGtepCyVkfFCOEqEQfg2znEFhwW10
500X-Frame-Options: DENY
501Strict-Transport-Security: max-age=604800
502'
503[Tue Mar 11 20:08:46 SAST 2025] code='200'
504[Tue Mar 11 20:08:46 SAST 2025] original='{
505 "type": "http-01",
506 "url": "https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ",
507 "status": "invalid",
508 "validated": "2025-03-11T18:09:17Z",
509 "error": {
510 "type": "urn:ietf:params:acme:error:unauthorized",
511 "detail": "197.214.119.177: Invalid response from https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k: 404",
512 "status": 403
513 },
514 "token": "0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k",
515 "validationRecord": [
516 {
517 "url": "http://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k",
518 "hostname": "fish.pre.imb.co",
519 "port": "80",
520 "addressesResolved": [
521 "197.214.119.177"
522 ],
523 "addressUsed": "197.214.119.177"
524 },
525 {
526 "url": "https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k",
527 "hostname": "fish.pre.imb.co",
528 "port": "443",
529 "addressesResolved": [
530 "197.214.119.177"
531 ],
532 "addressUsed": "197.214.119.177"
533 }
534 ]
535}'
536[Tue Mar 11 20:08:46 SAST 2025] response='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"invalid","validated":"2025-03-11T18:09:17Z","error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"197.214.119.177: Invalid response from https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k: 404","status": 403},"token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","validationRecord":[{"url":"http://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","hostname":"fish.pre.imb.co","port":"80","addressesResolved":["197.214.119.177"],"addressUsed":"197.214.119.177"},{"url":"https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","hostname":"fish.pre.imb.co","port":"443","addressesResolved":["197.214.119.177"],"addressUsed":"197.214.119.177"}]}'
537[Tue Mar 11 20:08:46 SAST 2025] original='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"invalid","validated":"2025-03-11T18:09:17Z","error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"197.214.119.177: Invalid response from https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k: 404","status": 403},"token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","validationRecord":[{"url":"http://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","hostname":"fish.pre.imb.co","port":"80","addressesResolved":["197.214.119.177"],"addressUsed":"197.214.119.177"},{"url":"https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","hostname":"fish.pre.imb.co","port":"443","addressesResolved":["197.214.119.177"],"addressUsed":"197.214.119.177"}]}'
538[Tue Mar 11 20:08:46 SAST 2025] response='{"type":"http-01","url":"https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ","status":"invalid","validated":"2025-03-11T18:09:17Z","error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"197.214.119.177: Invalid response from https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k: 404","status": 403},"token":"0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","validationRecord":[{"url":"http://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","hostname":"fish.pre.imb.co","port":"80","addressesResolved":["197.214.119.177"],"addressUsed":"197.214.119.177"},{"url":"https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k","hostname":"fish.pre.imb.co","port":"443","addressesResolved":["197.214.119.177"],"addressUsed":"197.214.119.177"}]}'
539[Tue Mar 11 20:08:46 SAST 2025] status='invalid'
540[Tue Mar 11 20:08:46 SAST 2025] error='"error":{"type":"urn:ietf:params:acme:error:unauthorized","detail":"197.214.119.177: Invalid response from https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k: 404","status": 403'
541[Tue Mar 11 20:08:46 SAST 2025] errordetail='197.214.119.177: Invalid response from https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k: 404'
542[Tue Mar 11 20:08:46 SAST 2025] fish.pre.imb.co:Verify error:197.214.119.177: Invalid response from https://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k: 404
543[Tue Mar 11 20:08:46 SAST 2025] Debug: get token url.
544[Tue Mar 11 20:08:46 SAST 2025] GET
545[Tue Mar 11 20:08:46 SAST 2025] url='http://fish.pre.imb.co/.well-known/acme-challenge/0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k'
546[Tue Mar 11 20:08:46 SAST 2025] timeout=1
547[Tue Mar 11 20:08:46 SAST 2025] Http already initialized.
548[Tue Mar 11 20:08:46 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.edAK2WLqSg -g --connect-timeout 1'
549<!DOCTYPE html>
550<html>
551<head>
552 <title>The page you were looking for doesn't exist (404)</title>
553 <style type="text/css">
554 body { background-color: #fff;
555 color: #666;
556 font-family: sans-serif;
557 }
558
559 a {
560 color: #f37736;
561 text-decoration: underline;
562 }
563
564 p {
565
566 line-height: 1.5em;
567 margin: 0;
568 padding: 0 0 15px;
569 font-size: 0.9em;
570 }
571
572 a:hover {
573 color: #f37736;
574 text-decoration: underline;
575 }
576
577 .dialog {
578 width: 948px;
579 margin-left: auto;
580 margin-right: auto;
581}
582
583 h1 {
584 font-size: 2.2em;
585 color: #f37736;
586 line-height: 1.5em;
587margin-left: auto;
588 margin-right: auto;
589 }
590
591 h2 {
592 font-size: 1.5em;
593 line-height: 1em;
594 margin: 0;
595 padding: 0;
596 }
597
598
599 </style>
600</head>
601
602<body>
603 <div class="dialog">
604 <h1>404 Error: Page Does not Exist</h1>
605 <div id="error">
606
607 <img src="/error_on_site.jpg">
608
609 <h2><a href="javascript:history.back();">Return to our site</a></h2>
610 </div>
611 </div>
612</body>
613</html>
614[Tue Mar 11 20:08:46 SAST 2025] ret='0'
615[Tue Mar 11 20:08:46 SAST 2025] Skip for removelevel:
616[Tue Mar 11 20:08:46 SAST 2025] pid
617[Tue Mar 11 20:08:46 SAST 2025] _restoreNginx
618[Tue Mar 11 20:08:46 SAST 2025] NGINX_RESTORE_VLIST='fish.pre.imb.co#/etc/nginx/sites-enabled/fish.pre.imb.co.conf#/etc/acme.sh/mycerts/fish.pre.imb.co/backup/fish.pre.imb.co.nginx.conf,'
619[Tue Mar 11 20:08:46 SAST 2025] ng_entry='fish.pre.imb.co#/etc/nginx/sites-enabled/fish.pre.imb.co.conf#/etc/acme.sh/mycerts/fish.pre.imb.co/backup/fish.pre.imb.co.nginx.conf'
620[Tue Mar 11 20:08:46 SAST 2025] Restoring from /etc/acme.sh/mycerts/fish.pre.imb.co/backup/fish.pre.imb.co.nginx.conf to /etc/nginx/sites-enabled/fish.pre.imb.co.conf
621[Tue Mar 11 20:08:46 SAST 2025] Reload nginx
622[Tue Mar 11 20:08:46 SAST 2025] _clearupdns
623[Tue Mar 11 20:08:46 SAST 2025] dns_entries
624[Tue Mar 11 20:08:46 SAST 2025] skip dns.
625[Tue Mar 11 20:08:46 SAST 2025] _on_issue_err
626[Tue Mar 11 20:08:46 SAST 2025] Please check log file for more details: /etc/acme.sh//acme.sh.log
627[Tue Mar 11 20:08:46 SAST 2025] _chk_vlist='fish.pre.imb.co#0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k.B6qnL9p1wm9k0860T7iPvaXlaLAiVzPoCp2IhukfQNM#https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ#http-01#nginx:,'
628[Tue Mar 11 20:08:46 SAST 2025] start to deactivate authz
629[Tue Mar 11 20:08:46 SAST 2025] Trigger domain validation.
630[Tue Mar 11 20:08:46 SAST 2025] _t_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
631[Tue Mar 11 20:08:46 SAST 2025] _t_key_authz='0wDIf77g9i9U1fx75tGX9UEOK_d4-A3ZdORclyTd14k.B6qnL9p1wm9k0860T7iPvaXlaLAiVzPoCp2IhukfQNM'
632[Tue Mar 11 20:08:46 SAST 2025] _t_vtype
633[Tue Mar 11 20:08:46 SAST 2025] url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
634[Tue Mar 11 20:08:46 SAST 2025] payload='{}'
635[Tue Mar 11 20:08:46 SAST 2025] Use cached jwk for file: /etc/acme.sh//ca/acme-staging-v02.api.letsencrypt.org/directory/account.key
636[Tue Mar 11 20:08:46 SAST 2025] Use _CACHED_NONCE='IgYZ01HKwSEPDuhUoZXGYtrGtepCyVkfFCOEqEQfg2znEFhwW10'
637[Tue Mar 11 20:08:46 SAST 2025] nonce='IgYZ01HKwSEPDuhUoZXGYtrGtepCyVkfFCOEqEQfg2znEFhwW10'
638[Tue Mar 11 20:08:46 SAST 2025] POST
639[Tue Mar 11 20:08:46 SAST 2025] _post_url='https://acme-staging-v02.api.letsencrypt.org/acme/chall/189020144/16360126094/1MNyMQ'
640[Tue Mar 11 20:08:46 SAST 2025] body='{"protected": "eyJub25jZSI6ICJJZ1laMDFIS3dTRVBEdWhVb1pYR1l0ckd0ZXBDeVZrZkZDT0VxRVFmZzJ6bkVGaHdXMTAiLCAidXJsIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwvMTg5MDIwMTQ0LzE2MzYwMTI2MDk0LzFNTnlNUSIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS1zdGFnaW5nLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODkwMjAxNDQifQ", "payload": "e30", "signature": "gCHUNLY_WQE1CckVaZ-KPrMyghpnN_lhIUbnK7Pwmg-ubduTMg_kX0BrP6wuyaExphmpDsCvYfm1ew6kmxVLEjo7PsdMogkXwHQnagmkRDRfAyjSyyuHakb1-f7CCuAN6jDEkt2Ba5oEKcGeIWFdy--7u0otidAK66SWW7L33kTpszmQP5C-dZAPh2p__IVf3HZVIz3AyQJt7VOFfY0hXB7vcvL6Scr6-_PT53LkCtr0s9Xw9rVe2B63baiQ0oJy94IOeYxVPg5LdtayzVv1M5WXXwCL5NzUmhcAD_DxpfUkoLkCrWcpowhNF8tV046L8iIBGbPLlXUPR1CGaYvCVA"}'
641[Tue Mar 11 20:08:46 SAST 2025] _postContentType='application/jose+json'
642[Tue Mar 11 20:08:46 SAST 2025] Http already initialized.
643[Tue Mar 11 20:08:46 SAST 2025] _CURL='curl --silent --dump-header /etc/acme.sh//http.header -L --trace-ascii /tmp/tmp.edAK2WLqSg -g '
644[Tue Mar 11 20:08:48 SAST 2025] _ret='0'
645[Tue Mar 11 20:08:48 SAST 2025] responseHeaders='HTTP/1.1 400 Bad Request
646Server: nginx
647Date: Tue, 11 Mar 2025 18:09:22 GMT
648Content-Type: application/problem+json
649Content-Length: 144
650Connection: keep-alive
651Boulder-Requester: 189020144
652Cache-Control: public, max-age=0, no-cache
653Link: <https://acme-staging-v02.api.letsencrypt.org/directory>;rel="index"
654Replay-Nonce: IgYZ01HKNR4uenIqSeevmnBGZsj57lRYw7X7UEHvtpXDgTjvNi4
655'
656[Tue Mar 11 20:08:48 SAST 2025] code='400'
657[Tue Mar 11 20:08:48 SAST 2025] original='{
658 "type": "urn:ietf:params:acme:error:malformed",
659 "detail": "Unable to update challenge :: authorization must be pending",
660 "status": 400
661}'
662[Tue Mar 11 20:08:48 SAST 2025] response='{
663 "type": "urn:ietf:params:acme:error:malformed",
664 "detail": "Unable to update challenge :: authorization must be pending",
665 "status": 400
666}'
667[Tue Mar 11 20:08:48 SAST 2025] Diagnosis versions:
668openssl:openssl
669OpenSSL 1.0.1f 6 Jan 2014
670apache:
671apache doesn't exist.
672nginx:
673nginx version: nginx/1.4.6 (Ubuntu)
674built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04.4)
675TLS SNI support enabled
676configure arguments: --with-cc-opt='-g -O2 -fstack-protector --param=ssp-buffer-size=4 -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt='-Wl,-Bsymbolic-functions -Wl,-z,relro' --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf --http-log-path=/var/log/nginx/access.log --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-ipv6 --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_addition_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_spdy_module --with-http_sub_module --with-http_xslt_module --with-mail --with-mail_ssl_module
677socat:
678socat by Gerhard Rieger - see www.dest-unreach.org
679socat version 1.7.2.3+sigfix on Oct 9 2018 19:06:39
680 running on Linux version #293~14.04.1-Ubuntu SMP Mon Sep 2 11:33:55 UTC 2024, release 4.4.0-259-generic, machine x86_64
681features:
682 #define WITH_STDIO 1
683 #define WITH_FDNUM 1
684 #define WITH_FILE 1
685 #define WITH_CREAT 1
686 #define WITH_GOPEN 1
687 #define WITH_TERMIOS 1
688 #define WITH_PIPE 1
689 #define WITH_UNIX 1
690 #define WITH_ABSTRACT_UNIXSOCKET 1
691 #define WITH_IP4 1
692 #define WITH_IP6 1
693 #define WITH_RAWIP 1
694 #define WITH_GENERICSOCKET 1
695 #define WITH_INTERFACE 1
696 #define WITH_TCP 1
697 #define WITH_UDP 1
698 #define WITH_SCTP 1
699 #define WITH_LISTEN 1
700 #define WITH_SOCKS4 1
701 #define WITH_SOCKS4A 1
702 #define WITH_PROXY 1
703 #define WITH_SYSTEM 1
704 #define WITH_EXEC 1
705 #undef WITH_READLINE
706 #define WITH_TUN 1
707 #define WITH_PTY 1
708 #define WITH_OPENSSL 1
709 #undef WITH_FIPS
710 #define WITH_LIBWRAP 1
711 #define WITH_SYCLS 1
712 #define WITH_FILAN 1
713 #define WITH_RETRY 1
714 #define WITH_MSGLEVEL 0 /*debug*/
715```