[BlueOnyx:26683] Let's Encrypt: Certificate auto-renewal failed

Meaulnes Legler @ MailList bluelist at waveweb.ch
Sun Dec 24 09:40:19 -05 2023


Hello maillist

You are probably all sitting around your Christmas tree and not really willing to look at my problem in this contemplative time, but I'll try anyway...

I got from root yesterday and today the following:

> Automatic renewal of the following Let's Encrypt certificates has failed:
> * 'blaettler.legler.org' (Expiry date: 2024-01-21T21:37:45)
> Please check /var/log/letsencrypt/letsencrypt.log for more information.

/var/log/letsencrypt/letsencrypt.log is empty, but there is a letsencrypt.log-20231224.gz at the same location and same date with the attached content that didn't help me out.

I tried to disable and re-enable SSL in SiteManagement > SSL yesterday, the message came up again today. The certificate on the website doesn't show errors, the connection is secure.

Can anyone, when she/he has some spare time, help me out here, please? It's really stupid that this occurs right now...

Thank you and have a great Christmas Eve

で⊃ Meaulnes Legler
Zurich, Switzerland
+41¦0 44 260-1660


-------------- next part --------------
[Sun Dec 24 00:36:24 CET 2023] Lets find script dir.
[Sun Dec 24 00:36:24 CET 2023] _SCRIPT_='/usr/sausalito/acme/acme.sh'
[Sun Dec 24 00:36:24 CET 2023] _script='/usr/sausalito/acme/acme.sh'
[Sun Dec 24 00:36:24 CET 2023] _script_home='/usr/sausalito/acme'
[Sun Dec 24 00:36:24 CET 2023] Using default home:/.acme.sh
[Sun Dec 24 00:36:24 CET 2023] Using config home:/usr/sausalito/acme/data
[Sun Dec 24 00:36:24 CET 2023] Running cmd: issue
[Sun Dec 24 00:36:24 CET 2023] _main_domain='blaettler.legler.org'
[Sun Dec 24 00:36:24 CET 2023] _alt_domains='www.blaettler.legler.org'
[Sun Dec 24 00:36:24 CET 2023] Using config home:/usr/sausalito/acme/data
[Sun Dec 24 00:36:24 CET 2023] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
[Sun Dec 24 00:36:24 CET 2023] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun Dec 24 00:36:24 CET 2023] DOMAIN_PATH='/usr/sausalito/acme/certs/blaettler.legler.org'
[Sun Dec 24 00:36:24 CET 2023] Le_NextRenewTime='1703198268'
[Sun Dec 24 00:36:24 CET 2023] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Sun Dec 24 00:36:24 CET 2023] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sun Dec 24 00:36:24 CET 2023] GET
[Sun Dec 24 00:36:24 CET 2023] url='https://acme-v02.api.letsencrypt.org/directory'
[Sun Dec 24 00:36:24 CET 2023] timeout=
[Sun Dec 24 00:36:24 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:25 CET 2023] ret='0'
[Sun Dec 24 00:36:25 CET 2023] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Sun Dec 24 00:36:25 CET 2023] ACME_NEW_AUTHZ
[Sun Dec 24 00:36:25 CET 2023] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun Dec 24 00:36:25 CET 2023] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Sun Dec 24 00:36:25 CET 2023] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Sun Dec 24 00:36:25 CET 2023] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf'
[Sun Dec 24 00:36:25 CET 2023] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun Dec 24 00:36:25 CET 2023] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Sun Dec 24 00:36:25 CET 2023] _on_before_issue
[Sun Dec 24 00:36:25 CET 2023] _chk_main_domain='blaettler.legler.org'
[Sun Dec 24 00:36:25 CET 2023] _chk_alt_domains='www.blaettler.legler.org'
[Sun Dec 24 00:36:25 CET 2023] Le_LocalAddress
[Sun Dec 24 00:36:25 CET 2023] d='blaettler.legler.org'
[Sun Dec 24 00:36:25 CET 2023] Check for domain='blaettler.legler.org'
[Sun Dec 24 00:36:25 CET 2023] _currentRoot='apache'
[Sun Dec 24 00:36:25 CET 2023] d='www.blaettler.legler.org'
[Sun Dec 24 00:36:25 CET 2023] Check for domain='www.blaettler.legler.org'
[Sun Dec 24 00:36:25 CET 2023] _currentRoot='/home/.acme/'
[Sun Dec 24 00:36:25 CET 2023] d
[Sun Dec 24 00:36:25 CET 2023] Using config home:/usr/sausalito/acme/data
[Sun Dec 24 00:36:25 CET 2023] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun Dec 24 00:36:26 CET 2023] httpdconfname='conf/httpd.conf'
[Sun Dec 24 00:36:26 CET 2023] httpdroot='/etc/httpd'
[Sun Dec 24 00:36:26 CET 2023] httpdconf='/etc/httpd/conf/httpd.conf'
[Sun Dec 24 00:36:26 CET 2023] httpdconfname='httpd.conf'
[Sun Dec 24 00:36:26 CET 2023] Checking if there is an error in the apache config file before starting.
[Sun Dec 24 00:36:27 CET 2023] OK
[Sun Dec 24 00:36:27 CET 2023] Backup apache config file='/etc/httpd/conf/httpd.conf'
[Sun Dec 24 00:36:27 CET 2023] JFYI, Config file /etc/httpd/conf/httpd.conf is backuped to /usr/sausalito/acme/data/httpd.conf
[Sun Dec 24 00:36:27 CET 2023] In case there is an error that can not be restored automatically, you may try restore it yourself.
[Sun Dec 24 00:36:27 CET 2023] The backup file will be deleted on success, just forget it.
[Sun Dec 24 00:36:27 CET 2023] apacheVer='2.4.37'
[Sun Dec 24 00:36:27 CET 2023] _saved_account_key_hash is not changed, skip register account.
[Sun Dec 24 00:36:27 CET 2023] Read key length:4096
[Sun Dec 24 00:36:27 CET 2023] _createcsr
[Sun Dec 24 00:36:27 CET 2023] Multi domain='DNS:blaettler.legler.org,DNS:www.blaettler.legler.org'
[Sun Dec 24 00:36:27 CET 2023] Getting domain auth token for each domain
[Sun Dec 24 00:36:27 CET 2023] d='www.blaettler.legler.org'
[Sun Dec 24 00:36:27 CET 2023] d
[Sun Dec 24 00:36:27 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun Dec 24 00:36:27 CET 2023] payload='{"identifiers": [{"type":"dns","value":"blaettler.legler.org"},{"type":"dns","value":"www.blaettler.legler.org"}]}'
[Sun Dec 24 00:36:27 CET 2023] RSA key
[Sun Dec 24 00:36:27 CET 2023] HEAD
[Sun Dec 24 00:36:27 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun Dec 24 00:36:27 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g  -I  '
[Sun Dec 24 00:36:28 CET 2023] _ret='0'
[Sun Dec 24 00:36:28 CET 2023] POST
[Sun Dec 24 00:36:28 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sun Dec 24 00:36:28 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:28 CET 2023] _ret='0'
[Sun Dec 24 00:36:28 CET 2023] code='201'
[Sun Dec 24 00:36:28 CET 2023] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/115167654/231401126406'
[Sun Dec 24 00:36:28 CET 2023] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/115167654/231401126406'
[Sun Dec 24 00:36:28 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/296389290766'
[Sun Dec 24 00:36:28 CET 2023] payload
[Sun Dec 24 00:36:28 CET 2023] POST
[Sun Dec 24 00:36:28 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/296389290766'
[Sun Dec 24 00:36:28 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:29 CET 2023] _ret='0'
[Sun Dec 24 00:36:29 CET 2023] code='200'
[Sun Dec 24 00:36:29 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/296728528346'
[Sun Dec 24 00:36:29 CET 2023] payload
[Sun Dec 24 00:36:29 CET 2023] POST
[Sun Dec 24 00:36:29 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/296728528346'
[Sun Dec 24 00:36:29 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:30 CET 2023] _ret='0'
[Sun Dec 24 00:36:30 CET 2023] code='200'
[Sun Dec 24 00:36:30 CET 2023] d='blaettler.legler.org'
[Sun Dec 24 00:36:30 CET 2023] Getting webroot for domain='blaettler.legler.org'
[Sun Dec 24 00:36:30 CET 2023] _w='apache'
[Sun Dec 24 00:36:30 CET 2023] _currentRoot='apache'
[Sun Dec 24 00:36:30 CET 2023] blaettler.legler.org is already valid.
[Sun Dec 24 00:36:30 CET 2023] keyauthorization='verified_ok'
[Sun Dec 24 00:36:30 CET 2023] entry='"type":"http-01","status":"valid","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/296389290766/CT-rnQ","token":"0uMGxRqwrHr63-yNJwi7qgp-j_PMpnznyhnV-nhbTiM","validationRecord":[{"url":"http://blaettler.legler.org/.well-known/acme-challenge/0uMGxRqwrHr63-yNJwi7qgp-j_PMpnznyhnV-nhbTiM","hostname":"blaettler.legler.org","port":"80","addressesResolved":["94.103.99.73"],"addressUsed":"94.103.99.73"'
[Sun Dec 24 00:36:30 CET 2023] dvlist='blaettler.legler.org#verified_ok##http-01#apache'
[Sun Dec 24 00:36:30 CET 2023] d='www.blaettler.legler.org'
[Sun Dec 24 00:36:30 CET 2023] Getting webroot for domain='www.blaettler.legler.org'
[Sun Dec 24 00:36:30 CET 2023] _w='/home/.acme/'
[Sun Dec 24 00:36:30 CET 2023] _currentRoot='/home/.acme/'
[Sun Dec 24 00:36:30 CET 2023] entry='"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ","token":"nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw"'
[Sun Dec 24 00:36:30 CET 2023] token='nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw'
[Sun Dec 24 00:36:30 CET 2023] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:30 CET 2023] keyauthorization='nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw.bTTH7pNCa3EFx3F0dfwUG9f6Srk2pkqR8_qj2l0gzsw'
[Sun Dec 24 00:36:30 CET 2023] dvlist='www.blaettler.legler.org#nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw.bTTH7pNCa3EFx3F0dfwUG9f6Srk2pkqR8_qj2l0gzsw#https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ#http-01#/home/.acme/'
[Sun Dec 24 00:36:30 CET 2023] d
[Sun Dec 24 00:36:30 CET 2023] vlist='blaettler.legler.org#verified_ok##http-01#apache,www.blaettler.legler.org#nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw.bTTH7pNCa3EFx3F0dfwUG9f6Srk2pkqR8_qj2l0gzsw#https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ#http-01#/home/.acme/,'
[Sun Dec 24 00:36:30 CET 2023] d='blaettler.legler.org'
[Sun Dec 24 00:36:30 CET 2023] blaettler.legler.org is already verified, skip http-01.
[Sun Dec 24 00:36:30 CET 2023] d='www.blaettler.legler.org'
[Sun Dec 24 00:36:30 CET 2023] ok, let's start to verify
[Sun Dec 24 00:36:30 CET 2023] blaettler.legler.org is already verified, skip http-01.
[Sun Dec 24 00:36:30 CET 2023] Verifying: www.blaettler.legler.org
[Sun Dec 24 00:36:30 CET 2023] d='www.blaettler.legler.org'
[Sun Dec 24 00:36:30 CET 2023] keyauthorization='nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw.bTTH7pNCa3EFx3F0dfwUG9f6Srk2pkqR8_qj2l0gzsw'
[Sun Dec 24 00:36:30 CET 2023] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:30 CET 2023] _currentRoot='/home/.acme/'
[Sun Dec 24 00:36:30 CET 2023] wellknown_path='/home/.acme//.well-known/acme-challenge'
[Sun Dec 24 00:36:30 CET 2023] writing token:nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw to /home/.acme//.well-known/acme-challenge/nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw
[Sun Dec 24 00:36:30 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:30 CET 2023] payload='{}'
[Sun Dec 24 00:36:30 CET 2023] POST
[Sun Dec 24 00:36:30 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:30 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:30 CET 2023] _ret='0'
[Sun Dec 24 00:36:30 CET 2023] code='200'
[Sun Dec 24 00:36:30 CET 2023] trigger validation code: 200
[Sun Dec 24 00:36:30 CET 2023] Pending, The CA is processing your order, please just wait. (1/30)
[Sun Dec 24 00:36:30 CET 2023] sleep 2 secs to verify again
[Sun Dec 24 00:36:32 CET 2023] checking
[Sun Dec 24 00:36:32 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:32 CET 2023] payload
[Sun Dec 24 00:36:32 CET 2023] POST
[Sun Dec 24 00:36:32 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:32 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:33 CET 2023] _ret='0'
[Sun Dec 24 00:36:33 CET 2023] code='200'
[Sun Dec 24 00:36:33 CET 2023] Pending, The CA is processing your order, please just wait. (2/30)
[Sun Dec 24 00:36:33 CET 2023] sleep 2 secs to verify again
[Sun Dec 24 00:36:35 CET 2023] checking
[Sun Dec 24 00:36:35 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:35 CET 2023] payload
[Sun Dec 24 00:36:35 CET 2023] POST
[Sun Dec 24 00:36:35 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:35 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:36 CET 2023] _ret='0'
[Sun Dec 24 00:36:36 CET 2023] code='200'
[Sun Dec 24 00:36:36 CET 2023] Pending, The CA is processing your order, please just wait. (3/30)
[Sun Dec 24 00:36:36 CET 2023] sleep 2 secs to verify again
[Sun Dec 24 00:36:38 CET 2023] checking
[Sun Dec 24 00:36:38 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:38 CET 2023] payload
[Sun Dec 24 00:36:38 CET 2023] POST
[Sun Dec 24 00:36:38 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:38 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:38 CET 2023] _ret='0'
[Sun Dec 24 00:36:38 CET 2023] code='200'
[Sun Dec 24 00:36:38 CET 2023] Pending, The CA is processing your order, please just wait. (4/30)
[Sun Dec 24 00:36:38 CET 2023] sleep 2 secs to verify again
[Sun Dec 24 00:36:40 CET 2023] checking
[Sun Dec 24 00:36:40 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:40 CET 2023] payload
[Sun Dec 24 00:36:40 CET 2023] POST
[Sun Dec 24 00:36:40 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:40 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:41 CET 2023] _ret='0'
[Sun Dec 24 00:36:41 CET 2023] code='200'
[Sun Dec 24 00:36:41 CET 2023] Pending, The CA is processing your order, please just wait. (5/30)
[Sun Dec 24 00:36:41 CET 2023] sleep 2 secs to verify again
[Sun Dec 24 00:36:43 CET 2023] checking
[Sun Dec 24 00:36:43 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:43 CET 2023] payload
[Sun Dec 24 00:36:43 CET 2023] POST
[Sun Dec 24 00:36:43 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:43 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:43 CET 2023] _ret='0'
[Sun Dec 24 00:36:43 CET 2023] code='200'
[Sun Dec 24 00:36:43 CET 2023] www.blaettler.legler.org:Verify error:During secondary validation: DNS problem: NXDOMAIN looking up A for www.blaettler.legler.org - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.blaettler.legler.org - check that a DNS record exists for this domain
[Sun Dec 24 00:36:43 CET 2023] Debug: get token url.
[Sun Dec 24 00:36:43 CET 2023] GET
[Sun Dec 24 00:36:43 CET 2023] url='http://www.blaettler.legler.org/.well-known/acme-challenge/nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw'
[Sun Dec 24 00:36:43 CET 2023] timeout=1
[Sun Dec 24 00:36:43 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g  --connect-timeout 1'
[Sun Dec 24 00:36:44 CET 2023] ret='0'
[Sun Dec 24 00:36:44 CET 2023] Debugging, skip removing: /home/.acme//.well-known/acme-challenge/nmFSFa6hbUO6iBcOWorcZFQ0ZqtMVj_tgetYKx-TECw
[Sun Dec 24 00:36:44 CET 2023] pid
[Sun Dec 24 00:36:44 CET 2023] Using config home:/usr/sausalito/acme/data
[Sun Dec 24 00:36:44 CET 2023] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sun Dec 24 00:36:44 CET 2023] httpdconfname='conf/httpd.conf'
[Sun Dec 24 00:36:44 CET 2023] httpdroot='/etc/httpd'
[Sun Dec 24 00:36:44 CET 2023] httpdconf='/etc/httpd/conf/httpd.conf'
[Sun Dec 24 00:36:44 CET 2023] httpdconfname='httpd.conf'
[Sun Dec 24 00:36:44 CET 2023] Restored: /etc/httpd/conf/httpd.conf.
[Sun Dec 24 00:36:44 CET 2023] Restored successfully.
[Sun Dec 24 00:36:44 CET 2023] No need to restore nginx, skip.
[Sun Dec 24 00:36:44 CET 2023] _clearupdns
[Sun Dec 24 00:36:44 CET 2023] dns_entries
[Sun Dec 24 00:36:44 CET 2023] skip dns.
[Sun Dec 24 00:36:44 CET 2023] _on_issue_err
[Sun Dec 24 00:36:44 CET 2023] Please check log file for more details: /var/log/letsencrypt/letsencrypt.log
[Sun Dec 24 00:36:44 CET 2023] url
[Sun Dec 24 00:36:44 CET 2023] payload='{}'
[Sun Dec 24 00:36:44 CET 2023] POST
[Sun Dec 24 00:36:44 CET 2023] _post_url
[Sun Dec 24 00:36:44 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:44 CET 2023] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 3
[Sun Dec 24 00:36:44 CET 2023] _ret='3'
[Sun Dec 24 00:36:44 CET 2023] code
[Sun Dec 24 00:36:44 CET 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:44 CET 2023] payload='{}'
[Sun Dec 24 00:36:44 CET 2023] HEAD
[Sun Dec 24 00:36:44 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sun Dec 24 00:36:44 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g  -I  '
[Sun Dec 24 00:36:45 CET 2023] _ret='0'
[Sun Dec 24 00:36:45 CET 2023] POST
[Sun Dec 24 00:36:45 CET 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/296728528346/YjmhIQ'
[Sun Dec 24 00:36:45 CET 2023] _CURL='curl --silent --dump-header /usr/sausalito/acme/data/http.header  -L  -g '
[Sun Dec 24 00:36:45 CET 2023] _ret='0'
[Sun Dec 24 00:36:45 CET 2023] code='400'
[Sun Dec 24 00:36:46 CET 2023] Diagnosis versions: 
openssl:openssl
OpenSSL 1.1.1k  FIPS 25 Mar 2021
apache:
Server version: Apache/2.4.37 (AlmaLinux)
Server built:   Oct 18 2023 12:00:09
Server's Module Magic Number: 20120211:83
Server loaded:  APR 1.6.3, APR-UTIL 1.6.1
Compiled using: APR 1.6.3, APR-UTIL 1.6.1
Architecture:   64-bit
Server MPM:     prefork
  threaded:     no
    forked:     yes (variable process count)
Server compiled with....
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_SYSVSEM_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT="/etc/httpd"
 -D SUEXEC_BIN="/usr/sbin/suexec"
 -D DEFAULT_PIDLOG="run/httpd.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="conf/mime.types"
 -D SERVER_CONFIG_FILE="conf/httpd.conf"
nginx:
nginx version: nginx/1.14.1
built by gcc 8.3.1 20191121 (Red Hat 8.3.1-5) (GCC) 
built with OpenSSL 1.1.1g FIPS  21 Apr 2020 (running with OpenSSL 1.1.1k  FIPS 25 Mar 2021)
TLS SNI support enabled
configure arguments: --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --pid-path=/run/nginx.pid --lock-path=/run/lock/subsys/nginx --user=nginx --group=nginx --with-file-aio --with-ipv6 --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_xslt_module=dynamic --with-http_image_filter_module=dynamic --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_degradation_module --with-http_slice_module --with-http_stub_status_module --with-http_perl_module=dynamic --with-http_auth_request_module --with-mail=dynamic --with-mail_ssl_module --with-pcre --with-pcre-jit --with-stream=dynamic --with-stream_ssl_module --with-debug --with-cc-opt='-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection' --with-ld-opt='-Wl,-z,relro -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -Wl,-E'
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.4.1 on Oct  8 2021 11:43:18
   running on Linux version #1 SMP Thu Dec 15 20:31:06 MSK 2022, release 4.18.0, machine x86_64
features:
  #define WITH_STDIO 1
  #define WITH_FDNUM 1
  #define WITH_FILE 1
  #define WITH_CREAT 1
  #define WITH_GOPEN 1
  #define WITH_TERMIOS 1
  #define WITH_PIPE 1
  #define WITH_UNIX 1
  #define WITH_ABSTRACT_UNIXSOCKET 1
  #define WITH_IP4 1
  #define WITH_IP6 1
  #define WITH_RAWIP 1
  #define WITH_GENERICSOCKET 1
  #define WITH_INTERFACE 1
  #define WITH_TCP 1
  #define WITH_UDP 1
  #define WITH_SCTP 1
  #define WITH_LISTEN 1
  #define WITH_SOCKS4 1
  #define WITH_SOCKS4A 1
  #define WITH_VSOCK 1
  #define WITH_PROXY 1
  #define WITH_SYSTEM 1
  #define WITH_EXEC 1
  #define WITH_READLINE 1
  #define WITH_TUN 1
  #define WITH_PTY 1
  #define WITH_OPENSSL 1
  #undef WITH_FIPS
  #undef WITH_LIBWRAP
  #define WITH_SYCLS 1
  #define WITH_FILAN 1
  #define WITH_RETRY 1
  #define WITH_MSGLEVEL 0 /*debug*/


More information about the Blueonyx mailing list