none.gif

昵称已注册

GF  2023-08-12 22:42
(一般不保存资源,不用私信要了...)

[全年龄正常向]3000sp请教关于acme.shl更新etsencrypt证书的问题

群晖一个cloudflare代理的域名证书,主要用到下面两个项目
https://github.com/acmesh-official/acme.sh
https://github.com/andyzhshg/syno-acme

问题:更新不了证书,试过阿里云的可以更新成功
cloudflare超时怎么都添加不了,疑似网络问题但挂不挂我都试过不行,哪里没设置好
日志如下:
[code][Sat Aug 12 17:13:46 CST 2023] _main_domain='XXXXX.XXX.org'[/summary]
[Sat Aug 12 17:13:46 CST 2023] _alt_domains='*.XXXXX.XXX.org'
[Sat Aug 12 17:13:46 CST 2023] Using config home:/volume1/docker/acme/acme.sh
[Sat Aug 12 17:13:46 CST 2023] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
[Sat Aug 12 17:13:46 CST 2023] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sat Aug 12 17:13:46 CST 2023] DOMAIN_PATH='/volume1/docker/acme/acme.sh/XXXXX.XXX.org_ecc'
[Sat Aug 12 17:13:46 CST 2023] Le_NextRenewTime
[Sat Aug 12 17:13:46 CST 2023] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Sat Aug 12 17:13:46 CST 2023] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Sat Aug 12 17:13:46 CST 2023] GET
[Sat Aug 12 17:13:46 CST 2023] url='https://acme-v02.api.letsencrypt.org/directory'
[Sat Aug 12 17:13:46 CST 2023] timeout=
[Sat Aug 12 17:13:46 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g '
[Sat Aug 12 17:13:47 CST 2023] ret='0'
[Sat Aug 12 17:13:47 CST 2023] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Sat Aug 12 17:13:47 CST 2023] ACME_NEW_AUTHZ
[Sat Aug 12 17:13:47 CST 2023] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sat Aug 12 17:13:47 CST 2023] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Sat Aug 12 17:13:47 CST 2023] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Sat Aug 12 17:13:47 CST 2023] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.3-September-21-2022.pdf'
[Sat Aug 12 17:13:47 CST 2023] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sat Aug 12 17:13:47 CST 2023] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Sat Aug 12 17:13:47 CST 2023] _on_before_issue
[Sat Aug 12 17:13:47 CST 2023] _chk_main_domain='XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] _chk_alt_domains='*.XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] Le_LocalAddress
[Sat Aug 12 17:13:47 CST 2023] d='XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] Check for domain='XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] _currentRoot='dns_cf'
[Sat Aug 12 17:13:47 CST 2023] d='*.XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] Check for domain='*.XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] _currentRoot='dns_cf'
[Sat Aug 12 17:13:47 CST 2023] d
[Sat Aug 12 17:13:47 CST 2023] _saved_account_key_hash is not changed, skip register account.
[Sat Aug 12 17:13:47 CST 2023] Read key length:ec-256
[Sat Aug 12 17:13:47 CST 2023] _createcsr
[Sat Aug 12 17:13:47 CST 2023] Multi domain='DNS:XXXXX.XXX.org,DNS:*.XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] Getting domain auth token for each domain
[Sat Aug 12 17:13:47 CST 2023] d='*.XXXXX.XXX.org'
[Sat Aug 12 17:13:47 CST 2023] d
[Sat Aug 12 17:13:47 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sat Aug 12 17:13:47 CST 2023] payload='{"identifiers": [{"type":"dns","value":"XXXXX.XXX.org"},{"type":"dns","value":"*.XXXXX.XXX.org"}]}'
[Sat Aug 12 17:13:47 CST 2023] EC key
[Sat Aug 12 17:13:47 CST 2023] HEAD
[Sat Aug 12 17:13:47 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Sat Aug 12 17:13:47 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g  -I  '
[Sat Aug 12 17:13:49 CST 2023] _ret='0'
[Sat Aug 12 17:13:49 CST 2023] POST
[Sat Aug 12 17:13:49 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Sat Aug 12 17:13:49 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g '
[Sat Aug 12 17:13:51 CST 2023] _ret='0'
[Sat Aug 12 17:13:51 CST 2023] code='201'
[Sat Aug 12 17:13:51 CST 2023] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/1254141266/201080636586'
[Sat Aug 12 17:13:51 CST 2023] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/1254141266/201080636586'
[Sat Aug 12 17:13:51 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/254249675226'
[Sat Aug 12 17:13:51 CST 2023] payload
[Sat Aug 12 17:13:51 CST 2023] POST
[Sat Aug 12 17:13:51 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/254249675226'
[Sat Aug 12 17:13:51 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g '
[Sat Aug 12 17:13:52 CST 2023] _ret='0'
[Sat Aug 12 17:13:52 CST 2023] code='200'
[Sat Aug 12 17:13:52 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/254249675236'
[Sat Aug 12 17:13:52 CST 2023] payload
[Sat Aug 12 17:13:52 CST 2023] POST
[Sat Aug 12 17:13:52 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/254249675236'
[Sat Aug 12 17:13:52 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g '
[Sat Aug 12 17:13:54 CST 2023] _ret='0'
[Sat Aug 12 17:13:54 CST 2023] code='200'
[Sat Aug 12 17:13:54 CST 2023] d='XXXXX.XXX.org'
[Sat Aug 12 17:13:54 CST 2023] Getting webroot for domain='XXXXX.XXX.org'
[Sat Aug 12 17:13:54 CST 2023] _w='dns_cf'
[Sat Aug 12 17:13:54 CST 2023] _currentRoot='dns_cf'
[Sat Aug 12 17:13:54 CST 2023] entry='"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675236/qClL8A","token":"NmawQe2QoR9FSn1OzDTNPhVdqtoM92SCRpq6Z17yRrI"'
[Sat Aug 12 17:13:54 CST 2023] token='NmawQe2QoR9FSn1OzDTNPhVdqtoM92SCRpq6Z17yRrI'
[Sat Aug 12 17:13:54 CST 2023] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675236/qClL8A'
[Sat Aug 12 17:13:54 CST 2023] keyauthorization='NmawQe2QoR9FSn1OzDTNPhVdqtoM92SCRpq6Z17yRrI.4cE3yjDFlfRMtK8zHr0_jaYhs0uQ0tGu0Hz4YOV0TT4'
[Sat Aug 12 17:13:54 CST 2023] dvlist='XXXXX.XXX.org#NmawQe2QoR9FSn1OzDTNPhVdqtoM92SCRpq6Z17yRrI.4cE3yjDFlfRMtK8zHr0_jaYhs0uQ0tGu0Hz4YOV0TT4#https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675236/qClL8A#dns-01#dns_cf'
[Sat Aug 12 17:13:54 CST 2023] d='*.XXXXX.XXX.org'
[Sat Aug 12 17:13:54 CST 2023] Getting webroot for domain='*.XXXXX.XXX.org'
[Sat Aug 12 17:13:54 CST 2023] _w='dns_cf'
[Sat Aug 12 17:13:54 CST 2023] _currentRoot='dns_cf'
[Sat Aug 12 17:13:54 CST 2023] entry='"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675226/_SkB6Q","token":"5W1yabNYtH60VZ9IuW4TZaqOCPS7F5uQ9es1WTOzoig"'
[Sat Aug 12 17:13:54 CST 2023] token='5W1yabNYtH60VZ9IuW4TZaqOCPS7F5uQ9es1WTOzoig'
[Sat Aug 12 17:13:54 CST 2023] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675226/_SkB6Q'
[Sat Aug 12 17:13:54 CST 2023] keyauthorization='5W1yabNYtH60VZ9IuW4TZaqOCPS7F5uQ9es1WTOzoig.4cE3yjDFlfRMtK8zHr0_jaYhs0uQ0tGu0Hz4YOV0TT4'
[Sat Aug 12 17:13:54 CST 2023] dvlist='*.XXXXX.XXX.org#5W1yabNYtH60VZ9IuW4TZaqOCPS7F5uQ9es1WTOzoig.4cE3yjDFlfRMtK8zHr0_jaYhs0uQ0tGu0Hz4YOV0TT4#https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675226/_SkB6Q#dns-01#dns_cf'
[Sat Aug 12 17:13:54 CST 2023] d
[Sat Aug 12 17:13:54 CST 2023] vlist='XXXXX.XXX.org#NmawQe2QoR9FSn1OzDTNPhVdqtoM92SCRpq6Z17yRrI.4cE3yjDFlfRMtK8zHr0_jaYhs0uQ0tGu0Hz4YOV0TT4#https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675236/qClL8A#dns-01#dns_cf,*.XXXXX.XXX.org#5W1yabNYtH60VZ9IuW4TZaqOCPS7F5uQ9es1WTOzoig.4cE3yjDFlfRMtK8zHr0_jaYhs0uQ0tGu0Hz4YOV0TT4#https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675226/_SkB6Q#dns-01#dns_cf,'
[Sat Aug 12 17:13:54 CST 2023] d='XXXXX.XXX.org'
[Sat Aug 12 17:13:54 CST 2023] _d_alias
[Sat Aug 12 17:13:54 CST 2023] txtdomain='_acme-challenge.XXXXX.XXX.org'
[Sat Aug 12 17:13:54 CST 2023] txt='8PYSwhzzuJvRVXMGHEy0vagBok-v6a7ky51LdveGe1U'
[Sat Aug 12 17:13:54 CST 2023] d_api='/volume1/docker/acme/acme.sh/dnsapi/dns_cf.sh'
[Sat Aug 12 17:13:54 CST 2023] Found domain api file: /volume1/docker/acme/acme.sh/dnsapi/dns_cf.sh
[Sat Aug 12 17:13:54 CST 2023] Adding txt value: 8PYSwhzzuJvRVXMGHEy0vagBok-v6a7ky51LdveGe1U for domain:  _acme-challenge.XXXXX.XXX.org
[Sat Aug 12 17:13:54 CST 2023] First detect the root zone
[Sat Aug 12 17:13:54 CST 2023] zones/3cXXXXXXXXXXXXXXXXXXXXXXXXd4b9063ee8ec
[Sat Aug 12 17:13:54 CST 2023] GET
[Sat Aug 12 17:13:54 CST 2023] url='https://api.cloudflare.com/client/v4/zones/3c09f0XXX5XXXXXXXXXXXXXc'
[Sat Aug 12 17:13:54 CST 2023] timeout=
[Sat Aug 12 17:13:54 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g '
[Sat Aug 12 17:13:54 CST 2023] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 51
[Sat Aug 12 17:13:54 CST 2023] ret='51'
[Sat Aug 12 17:13:54 CST 2023] error zones/3c09f0XXXXXXXXXXXXXXXXX6ec
[Sat Aug 12 17:13:54 CST 2023] invalid domain
[Sat Aug 12 17:13:54 CST 2023] Error add txt for domain:_acme-challenge.XXXXX.XXX.org
[Sat Aug 12 17:13:54 CST 2023] _on_issue_err
[Sat Aug 12 17:13:54 CST 2023] Please check log file for more details: /volume1/docker/acme/acme.sh/acme.sh.log
[Sat Aug 12 17:13:54 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675236/qClL8A'
[Sat Aug 12 17:13:54 CST 2023] payload='{}'
[Sat Aug 12 17:13:54 CST 2023] POST
[Sat Aug 12 17:13:54 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675236/qClL8A'
[Sat Aug 12 17:13:54 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g '
[Sat Aug 12 17:13:56 CST 2023] _ret='0'
[Sat Aug 12 17:13:56 CST 2023] code='200'
[Sat Aug 12 17:13:56 CST 2023] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675226/_SkB6Q'
[Sat Aug 12 17:13:56 CST 2023] payload='{}'
[Sat Aug 12 17:13:56 CST 2023] POST
[Sat Aug 12 17:13:56 CST 2023] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/254249675226/_SkB6Q'
[Sat Aug 12 17:13:56 CST 2023] _CURL='curl --silent --dump-header /volume1/docker/acme/acme.sh/http.header  -L  -g '
[Sat Aug 12 17:13:57 CST 2023] _ret='0'
[Sat Aug 12 17:13:57 CST 2023] code='200'
[Sat Aug 12 17:13:57 CST 2023] pid
[Sat Aug 12 17:13:57 CST 2023] No need to restore nginx, skip.
[Sat Aug 12 17:13:57 CST 2023] _clearupdns
[Sat Aug 12 17:13:57 CST 2023] dns_entries
[Sat Aug 12 17:13:57 CST 2023] skip dns.
[Sat Aug 12 17:13:57 CST 2023] Running cmd: installcert
[Sat Aug 12 17:13:57 CST 2023] Using config home:/volume1/docker/acme/acme.sh
[Sat Aug 12 17:13:57 CST 2023] default_acme_server='https://acme-v02.api.letsencrypt.org/directory'
[Sat Aug 12 17:13:57 CST 2023] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Sat Aug 12 17:13:57 CST 2023] The domain 'XXXXX.XXX.org' seems to have a ECC cert already, lets use ecc cert.
[Sat Aug 12 17:13:57 CST 2023] DOMAIN_PATH='/volume1/docker/acme/acme.sh/XXXXX.XXX.org_ecc'
[Sat Aug 12 17:13:57 CST 2023] Installing cert to: /usr/syno/etc/certificate/_archive/5dsf7s/cert.pem
此帖悬赏中(剩余时间:已结束)...
最佳答案: 20 SP币
热心助人剩余点数: 10 SP币

none.gif

昵称已注册

B1F  2023-08-13 03:02
(一般不保存资源,不用私信要了...)
知道问题在哪里了