letsencrypt.log.1 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331
  1. 2021-12-20 09:07:12,963:DEBUG:certbot._internal.main:certbot version: 1.22.0
  2. 2021-12-20 09:07:12,963:DEBUG:certbot._internal.main:Location of certbot entry point: /usr/local/bin/certbot
  3. 2021-12-20 09:07:12,963:DEBUG:certbot._internal.main:Arguments: ['--standalone', '-d', 'mail.algometic.com']
  4. 2021-12-20 09:07:12,963:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#manual,PluginEntryPoint#null,PluginEntryPoint#standalone,PluginEntryPoint#webroot)
  5. 2021-12-20 09:07:12,975:DEBUG:certbot._internal.log:Root logging level set at 30
  6. 2021-12-20 09:07:12,975:DEBUG:certbot._internal.plugins.selection:Requested authenticator standalone and installer None
  7. 2021-12-20 09:07:12,978:DEBUG:certbot._internal.plugins.selection:Single candidate plugin: * standalone
  8. Description: Spin up a temporary webserver
  9. Interfaces: Authenticator, Plugin
  10. Entry point: standalone = certbot._internal.plugins.standalone:Authenticator
  11. Initialized: <certbot._internal.plugins.standalone.Authenticator object at 0x7f8ed3cb3ac0>
  12. Prep: True
  13. 2021-12-20 09:07:12,979:DEBUG:certbot._internal.plugins.selection:Selected authenticator <certbot._internal.plugins.standalone.Authenticator object at 0x7f8ed3cb3ac0> and installer None
  14. 2021-12-20 09:07:12,979:INFO:certbot._internal.plugins.selection:Plugins selected: Authenticator standalone, Installer None
  15. 2021-12-20 09:07:28,250:DEBUG:acme.client:Sending GET request to https://acme-v02.api.letsencrypt.org/directory.
  16. 2021-12-20 09:07:28,252:DEBUG:urllib3.connectionpool:Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org:443
  17. 2021-12-20 09:07:28,928:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 658
  18. 2021-12-20 09:07:28,930:DEBUG:acme.client:Received response:
  19. HTTP 200
  20. Server: nginx
  21. Date: Mon, 20 Dec 2021 09:07:28 GMT
  22. Content-Type: application/json
  23. Content-Length: 658
  24. Connection: keep-alive
  25. Cache-Control: public, max-age=0, no-cache
  26. X-Frame-Options: DENY
  27. Strict-Transport-Security: max-age=604800
  28. {
  29. "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  30. "lUezvBoOPXI": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  31. "meta": {
  32. "caaIdentities": [
  33. "letsencrypt.org"
  34. ],
  35. "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
  36. "website": "https://letsencrypt.org"
  37. },
  38. "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  39. "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  40. "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  41. "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
  42. }
  43. 2021-12-20 09:07:34,554:DEBUG:acme.client:Requesting fresh nonce
  44. 2021-12-20 09:07:34,554:DEBUG:acme.client:Sending HEAD request to https://acme-v02.api.letsencrypt.org/acme/new-nonce.
  45. 2021-12-20 09:07:34,777:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "HEAD /acme/new-nonce HTTP/1.1" 200 0
  46. 2021-12-20 09:07:34,778:DEBUG:acme.client:Received response:
  47. HTTP 200
  48. Server: nginx
  49. Date: Mon, 20 Dec 2021 09:07:34 GMT
  50. Connection: keep-alive
  51. Cache-Control: public, max-age=0, no-cache
  52. Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
  53. Replay-Nonce: 0102iqAC3cMklkdI8mHc4IOu5wPZriFwaTIfOLUDJd82O9g
  54. X-Frame-Options: DENY
  55. Strict-Transport-Security: max-age=604800
  56. 2021-12-20 09:07:34,779:DEBUG:acme.client:Storing nonce: 0102iqAC3cMklkdI8mHc4IOu5wPZriFwaTIfOLUDJd82O9g
  57. 2021-12-20 09:07:34,779:DEBUG:acme.client:JWS payload:
  58. b'{\n "contact": [\n "mailto:orbitzs@gmail.com"\n ],\n "termsOfServiceAgreed": true\n}'
  59. 2021-12-20 09:07:34,782:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-acct:
  60. {
  61. "protected": "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",
  62. "signature": "A2hmShP9IMaFoHYMP2swDBRUk3gNHGjhNP-a_NKGLlPsR6YYGifRuKV14O-GFpxHOXiyFkgWUWdhBBv-y4YzetfdMmeeDEQbqrNly8mOSJeUSfZOitq5uMO2EzezVjdc2kJt8V7tOyRwSKGm0uu8Ki45lIkWIr9mcfG5LFVRYCR8G65YrgKQUL1G8bim3oBitNJlLKCh022XocCq40Ggxj8xz2ad1ex2czZ8JzRZUqHkpYtjFxBdxBrPN7LM8Se40WI1uVaUsAblRvY9b7NqMCqH285gbJLnaxe-g1vrzyYFbe5lU-h_wn0ytdmXjuTT8q5YcwpozUEKt_9AYIQzYQ",
  63. "payload": "ewogICJjb250YWN0IjogWwogICAgIm1haWx0bzpvcmJpdHpzQGdtYWlsLmNvbSIKICBdLAogICJ0ZXJtc09mU2VydmljZUFncmVlZCI6IHRydWUKfQ"
  64. }
  65. 2021-12-20 09:07:35,077:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-acct HTTP/1.1" 201 559
  66. 2021-12-20 09:07:35,079:DEBUG:acme.client:Received response:
  67. HTTP 201
  68. Server: nginx
  69. Date: Mon, 20 Dec 2021 09:07:34 GMT
  70. Content-Type: application/json
  71. Content-Length: 559
  72. Connection: keep-alive
  73. Boulder-Requester: 328731760
  74. Cache-Control: public, max-age=0, no-cache
  75. Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf>;rel="terms-of-service"
  76. Location: https://acme-v02.api.letsencrypt.org/acme/acct/328731760
  77. Replay-Nonce: 0102m8UEDIDuLTxrwB5WQZm-t_bd6OpP15HLe6zBTIl9_yY
  78. X-Frame-Options: DENY
  79. Strict-Transport-Security: max-age=604800
  80. {
  81. "key": {
  82. "kty": "RSA",
  83. "n": "m9Ek-jyYuOeG3Z-f8RaM8HRrOsXQbjqXmbdpsGHtR1AaOhmB1BHkp_Q2Rh6lAN5PyJhygZWH2Ep4wjBSeTQNgoUNCoSNEHvyhkEiRzpq3zxbYJjrJ2L8oCmMruHSplrZhsF3rNhA4ibGsBigjiI2klnMIQpZa-r9FmzlP2hfo9Nlb4q6OcpqtA82rsL6rSq8VkJTtoJy3wFvlJuP9AR9WCyz6q0VjAIxy3N8uUDO09Adr9uRdMpxXWIp_QE8PAbUUBaIMcyLwsME36W71G0tbk83ZICtCVOSd3nCH1lKMCJKhnZJo_yQHkodfWqw_Y4ph45IfizjgBbG2jxw1WZJ7w",
  84. "e": "AQAB"
  85. },
  86. "contact": [
  87. "mailto:orbitzs@gmail.com"
  88. ],
  89. "initialIp": "221.127.5.11",
  90. "createdAt": "2021-12-20T09:07:34.937874658Z",
  91. "status": "valid"
  92. }
  93. 2021-12-20 09:07:35,079:DEBUG:acme.client:Storing nonce: 0102m8UEDIDuLTxrwB5WQZm-t_bd6OpP15HLe6zBTIl9_yY
  94. 2021-12-20 09:07:39,500:DEBUG:certbot._internal.display.obj:Notifying user: Account registered.
  95. 2021-12-20 09:07:39,500:DEBUG:certbot._internal.main:Picked account: <Account(RegistrationResource(body=Registration(key=JWKRSA(key=<ComparableRSAKey(<cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f8ed3caf9d0>)>), contact=('mailto:orbitzs@gmail.com',), agreement=None, status='valid', terms_of_service_agreed=None, only_return_existing=None, external_account_binding=None), uri='https://acme-v02.api.letsencrypt.org/acme/acct/328731760', new_authzr_uri=None, terms_of_service='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'), 173795324628bb002462522c397472dc, Meta(creation_dt=datetime.datetime(2021, 12, 20, 9, 7, 35, tzinfo=<UTC>), creation_host='44b97416032e', register_to_eff='orbitzs@gmail.com'))>
  96. 2021-12-20 09:07:39,501:DEBUG:certbot._internal.display.obj:Notifying user: Requesting a certificate for mail.algometic.com
  97. 2021-12-20 09:07:39,582:DEBUG:certbot.crypto_util:Generating RSA key (2048 bits): /etc/letsencrypt/keys/0000_key-certbot.pem
  98. 2021-12-20 09:07:39,585:DEBUG:certbot.crypto_util:Creating CSR: /etc/letsencrypt/csr/0000_csr-certbot.pem
  99. 2021-12-20 09:07:39,585:DEBUG:acme.client:JWS payload:
  100. b'{\n "identifiers": [\n {\n "type": "dns",\n "value": "mail.algometic.com"\n }\n ]\n}'
  101. 2021-12-20 09:07:39,587:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/new-order:
  102. {
  103. "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzI4NzMxNzYwIiwgIm5vbmNlIjogIjAxMDJtOFVFRElEdUxUeHJ3QjVXUVptLXRfYmQ2T3BQMTVITGU2ekJUSWw5X3lZIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9uZXctb3JkZXIifQ",
  104. "signature": "kjlR4GeSd0FN-w8m7L_Ut-ZIBPKsR0d6YDCmD0pbGJ4rhJ8d0IzjcZQXs5qaziwGSp7tcmI9aY_tyrQP9P_h-gqX3aX9kI2IZwBCptfqoz2K0gKCTGvP6xy2yuGxfW3FgEHLDfx9wmGLDo8EgkB_2CQtRLdglCz7tbqIL9fmzJp7jXjWaIPYp6gnN3K9IjXzRICXiUwFTQ9RtLCIHftMSQ6jDA_mrq8d_e4K0r0ZJFZmo0kvikGUBFVvuqe5E3A8zMZNi5L6ely5argts_-p0Hs5mGTgqYAgt5w5dEYvpFhx_p_xykFivSMqpR2p94xEPG4yTQkwWOZ-wUUD9NKtyQ",
  105. "payload": "ewogICJpZGVudGlmaWVycyI6IFsKICAgIHsKICAgICAgInR5cGUiOiAiZG5zIiwKICAgICAgInZhbHVlIjogIm1haWwuYWxnb21ldGljLmNvbSIKICAgIH0KICBdCn0"
  106. }
  107. 2021-12-20 09:07:39,980:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/new-order HTTP/1.1" 201 341
  108. 2021-12-20 09:07:39,981:DEBUG:acme.client:Received response:
  109. HTTP 201
  110. Server: nginx
  111. Date: Mon, 20 Dec 2021 09:07:39 GMT
  112. Content-Type: application/json
  113. Content-Length: 341
  114. Connection: keep-alive
  115. Boulder-Requester: 328731760
  116. Cache-Control: public, max-age=0, no-cache
  117. Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
  118. Location: https://acme-v02.api.letsencrypt.org/acme/order/328731760/48727088600
  119. Replay-Nonce: 0101zCFT0hWW0Uct1fVnJSMDwDw5NR7kkqc6W0ZBKgSXTZ4
  120. X-Frame-Options: DENY
  121. Strict-Transport-Security: max-age=604800
  122. {
  123. "status": "pending",
  124. "expires": "2021-12-27T09:07:39Z",
  125. "identifiers": [
  126. {
  127. "type": "dns",
  128. "value": "mail.algometic.com"
  129. }
  130. ],
  131. "authorizations": [
  132. "https://acme-v02.api.letsencrypt.org/acme/authz-v3/60267527190"
  133. ],
  134. "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/328731760/48727088600"
  135. }
  136. 2021-12-20 09:07:39,981:DEBUG:acme.client:Storing nonce: 0101zCFT0hWW0Uct1fVnJSMDwDw5NR7kkqc6W0ZBKgSXTZ4
  137. 2021-12-20 09:07:39,982:DEBUG:acme.client:JWS payload:
  138. b''
  139. 2021-12-20 09:07:39,984:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/60267527190:
  140. {
  141. "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzI4NzMxNzYwIiwgIm5vbmNlIjogIjAxMDF6Q0ZUMGhXVzBVY3QxZlZuSlNNRHdEdzVOUjdra3FjNlcwWkJLZ1NYVFo0IiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My82MDI2NzUyNzE5MCJ9",
  142. "signature": "j5bfQTt_qxEoP3C74yMEelrRg_P66y3z7o1p8B6DoVA-mxJZSasPMc_jArKPlg2Z38nRDaXKAdy0V2cTzkeWKxfoj26rptMtspa9CFEjNpLEIGYc6P3zoCm9iS1IxG5IowFIUOlNmGL8a-f6GPjNKtTkGKOV6zZtQLzPScQiasgGaWX2BU7ZFukPuCDX_7ojlJsa0b7eU8jyUm8RtRgDX1gOsv1defndPZeP_wcxmsZLO0Zwwvzh3SRXhbhfsGt3-9oJFQMzsePR5TaO9vHDEbXOtcY1UElQVYGVl0zC2trk5yS10tlYia07ZIYpV7xT68hYC7wNJyvv5mXrcVqB6A",
  143. "payload": ""
  144. }
  145. 2021-12-20 09:07:40,233:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/60267527190 HTTP/1.1" 200 799
  146. 2021-12-20 09:07:40,234:DEBUG:acme.client:Received response:
  147. HTTP 200
  148. Server: nginx
  149. Date: Mon, 20 Dec 2021 09:07:40 GMT
  150. Content-Type: application/json
  151. Content-Length: 799
  152. Connection: keep-alive
  153. Boulder-Requester: 328731760
  154. Cache-Control: public, max-age=0, no-cache
  155. Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
  156. Replay-Nonce: 0102R6qlcUIFKj4stIssioUO4vT_ujIqlLECjnrd4gvUZlU
  157. X-Frame-Options: DENY
  158. Strict-Transport-Security: max-age=604800
  159. {
  160. "identifier": {
  161. "type": "dns",
  162. "value": "mail.algometic.com"
  163. },
  164. "status": "pending",
  165. "expires": "2021-12-27T09:07:39Z",
  166. "challenges": [
  167. {
  168. "type": "http-01",
  169. "status": "pending",
  170. "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/60267527190/m5I1iA",
  171. "token": "YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA"
  172. },
  173. {
  174. "type": "dns-01",
  175. "status": "pending",
  176. "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/60267527190/mPATdQ",
  177. "token": "YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA"
  178. },
  179. {
  180. "type": "tls-alpn-01",
  181. "status": "pending",
  182. "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/60267527190/KWjZiQ",
  183. "token": "YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA"
  184. }
  185. ]
  186. }
  187. 2021-12-20 09:07:40,234:DEBUG:acme.client:Storing nonce: 0102R6qlcUIFKj4stIssioUO4vT_ujIqlLECjnrd4gvUZlU
  188. 2021-12-20 09:07:40,236:INFO:certbot._internal.auth_handler:Performing the following challenges:
  189. 2021-12-20 09:07:40,236:INFO:certbot._internal.auth_handler:http-01 challenge for mail.algometic.com
  190. 2021-12-20 09:07:40,237:DEBUG:acme.standalone:Successfully bound to :80 using IPv6
  191. 2021-12-20 09:07:40,238:DEBUG:acme.standalone:Certbot wasn't able to bind to :80 using IPv4, this is often expected due to the dual stack nature of IPv6 socket implementations.
  192. 2021-12-20 09:07:40,240:DEBUG:acme.client:JWS payload:
  193. b'{}'
  194. 2021-12-20 09:07:40,242:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/chall-v3/60267527190/m5I1iA:
  195. {
  196. "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzI4NzMxNzYwIiwgIm5vbmNlIjogIjAxMDJSNnFsY1VJRktqNHN0SXNzaW9VTzR2VF91aklxbExFQ2pucmQ0Z3ZVWmxVIiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9jaGFsbC12My82MDI2NzUyNzE5MC9tNUkxaUEifQ",
  197. "signature": "a3PbvH__0PBOjcsvzCNEsJ4FBakGC3oKfUPwvNLaz6ptx95gNq6FsA4veGP1Vi15_fDutUu_3SiZ6Od9LzFH2QLUHwBF9-iFxE2IlC2XZiI8Fh6CKvLpWblk-jSoy2QdJLwu4vyafbt2j7ZG9zqAr_TFb01ut1O2PhF-LOAEwK71Koa7KMRKbK4AdSWRLUN6kIUhcyuTQHjE1DZ3_rZJ_pkOdXe9OHw2rgRTkNZyA2UwQgcnRUlJPMIefTOF8SUlU_BUhMZjL4vfOFkIGEmBvsCd1LA7vx5OofPq1E2GNltfREYn27Cew22MqGoJKqU9oqfLO_FV1TLv0Hi_B4c7sQ",
  198. "payload": "e30"
  199. }
  200. 2021-12-20 09:07:40,502:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/chall-v3/60267527190/m5I1iA HTTP/1.1" 200 186
  201. 2021-12-20 09:07:40,503:DEBUG:acme.client:Received response:
  202. HTTP 200
  203. Server: nginx
  204. Date: Mon, 20 Dec 2021 09:07:40 GMT
  205. Content-Type: application/json
  206. Content-Length: 186
  207. Connection: keep-alive
  208. Boulder-Requester: 328731760
  209. Cache-Control: public, max-age=0, no-cache
  210. Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index", <https://acme-v02.api.letsencrypt.org/acme/authz-v3/60267527190>;rel="up"
  211. Location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/60267527190/m5I1iA
  212. Replay-Nonce: 0102IfR4HiYUvXLg2ntbxSoisppWi9KglSq3eT_KMqyfKz8
  213. X-Frame-Options: DENY
  214. Strict-Transport-Security: max-age=604800
  215. {
  216. "type": "http-01",
  217. "status": "pending",
  218. "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/60267527190/m5I1iA",
  219. "token": "YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA"
  220. }
  221. 2021-12-20 09:07:40,503:DEBUG:acme.client:Storing nonce: 0102IfR4HiYUvXLg2ntbxSoisppWi9KglSq3eT_KMqyfKz8
  222. 2021-12-20 09:07:40,504:INFO:certbot._internal.auth_handler:Waiting for verification...
  223. 2021-12-20 09:07:41,505:DEBUG:acme.client:JWS payload:
  224. b''
  225. 2021-12-20 09:07:41,508:DEBUG:acme.client:Sending POST request to https://acme-v02.api.letsencrypt.org/acme/authz-v3/60267527190:
  226. {
  227. "protected": "eyJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMzI4NzMxNzYwIiwgIm5vbmNlIjogIjAxMDJJZlI0SGlZVXZYTGcybnRieFNvaXNwcFdpOUtnbFNxM2VUX0tNcXlmS3o4IiwgInVybCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hdXRoei12My82MDI2NzUyNzE5MCJ9",
  228. "signature": "NCIk6fi-L9THwrMdxtRIItvpXLJx6sH7MP6fR7Cfm0Az_5UR90drli-TgvvK-8-cr2LhiMKouTkcjSpOyJUNzxUR6x9yHCuwc4Vs9dPVsKzWmaOu3qYQLnGGpTflUi2RUmPZDBd4B740u9MjcNGezOuRqikfjKAFIHAyyCh0pWHKJY0zUEw4oUjZ0qRSHGisSjcHpSdfAz3rheyIUn2jjMjvwYL1XJdSFg9k5aE9DguzGaNv1H4-KNjym7UDkak4YpKIDSaN8gaHCy0-h0Ji58PsOKj0Lv6PBboULq6vsBtzeYGloBEfs754qwOau41VIW1UZDXDM6Gur2YNt-tpBA",
  229. "payload": ""
  230. }
  231. 2021-12-20 09:07:41,760:DEBUG:urllib3.connectionpool:https://acme-v02.api.letsencrypt.org:443 "POST /acme/authz-v3/60267527190 HTTP/1.1" 200 1022
  232. 2021-12-20 09:07:41,761:DEBUG:acme.client:Received response:
  233. HTTP 200
  234. Server: nginx
  235. Date: Mon, 20 Dec 2021 09:07:41 GMT
  236. Content-Type: application/json
  237. Content-Length: 1022
  238. Connection: keep-alive
  239. Boulder-Requester: 328731760
  240. Cache-Control: public, max-age=0, no-cache
  241. Link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
  242. Replay-Nonce: 0102O0IL8TgBZ0bNTYDppNoS3mdruJIz38JnGhcF34Ojvv8
  243. X-Frame-Options: DENY
  244. Strict-Transport-Security: max-age=604800
  245. {
  246. "identifier": {
  247. "type": "dns",
  248. "value": "mail.algometic.com"
  249. },
  250. "status": "invalid",
  251. "expires": "2021-12-27T09:07:39Z",
  252. "challenges": [
  253. {
  254. "type": "http-01",
  255. "status": "invalid",
  256. "error": {
  257. "type": "urn:ietf:params:acme:error:connection",
  258. "detail": "Fetching http://mail.algometic.com/.well-known/acme-challenge/YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA: Connection refused",
  259. "status": 400
  260. },
  261. "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/60267527190/m5I1iA",
  262. "token": "YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA",
  263. "validationRecord": [
  264. {
  265. "url": "http://mail.algometic.com/.well-known/acme-challenge/YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA",
  266. "hostname": "mail.algometic.com",
  267. "port": "80",
  268. "addressesResolved": [
  269. "221.127.5.11"
  270. ],
  271. "addressUsed": "221.127.5.11"
  272. }
  273. ],
  274. "validated": "2021-12-20T09:07:40Z"
  275. }
  276. ]
  277. }
  278. 2021-12-20 09:07:41,762:DEBUG:acme.client:Storing nonce: 0102O0IL8TgBZ0bNTYDppNoS3mdruJIz38JnGhcF34Ojvv8
  279. 2021-12-20 09:07:41,762:INFO:certbot._internal.auth_handler:Challenge failed for domain mail.algometic.com
  280. 2021-12-20 09:07:41,763:INFO:certbot._internal.auth_handler:http-01 challenge for mail.algometic.com
  281. 2021-12-20 09:07:41,763:DEBUG:certbot._internal.display.obj:Notifying user:
  282. Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
  283. Domain: mail.algometic.com
  284. Type: connection
  285. Detail: Fetching http://mail.algometic.com/.well-known/acme-challenge/YT038hDXoNXXLy5C92lL_41H4PHX62YgrkvAhr9oXaA: Connection refused
  286. Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.
  287. 2021-12-20 09:07:41,764:DEBUG:certbot._internal.error_handler:Encountered exception:
  288. Traceback (most recent call last):
  289. File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 105, in handle_authorizations
  290. self._poll_authorizations(authzrs, max_retries, best_effort)
  291. File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations
  292. raise errors.AuthorizationError('Some challenges have failed.')
  293. certbot.errors.AuthorizationError: Some challenges have failed.
  294. 2021-12-20 09:07:41,764:DEBUG:certbot._internal.error_handler:Calling registered functions
  295. 2021-12-20 09:07:41,764:INFO:certbot._internal.auth_handler:Cleaning up challenges
  296. 2021-12-20 09:07:41,764:DEBUG:certbot._internal.plugins.standalone:Stopping server at :::80...
  297. 2021-12-20 09:07:42,241:DEBUG:certbot._internal.log:Exiting abnormally:
  298. Traceback (most recent call last):
  299. File "/usr/local/bin/certbot", line 33, in <module>
  300. sys.exit(load_entry_point('certbot', 'console_scripts', 'certbot')())
  301. File "/opt/certbot/src/certbot/certbot/main.py", line 19, in main
  302. return internal_main.main(cli_args)
  303. File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 1632, in main
  304. return config.func(config, plugins)
  305. File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 1491, in certonly
  306. lineage = _get_and_save_cert(le_client, config, domains, certname, lineage)
  307. File "/opt/certbot/src/certbot/certbot/_internal/main.py", line 139, in _get_and_save_cert
  308. lineage = le_client.obtain_and_enroll_certificate(domains, certname)
  309. File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 496, in obtain_and_enroll_certificate
  310. cert, chain, key, _ = self.obtain_certificate(domains)
  311. File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 424, in obtain_certificate
  312. orderr = self._get_order_and_authorizations(csr.data, self.config.allow_subset_of_names)
  313. File "/opt/certbot/src/certbot/certbot/_internal/client.py", line 476, in _get_order_and_authorizations
  314. authzr = self.auth_handler.handle_authorizations(orderr, self.config, best_effort)
  315. File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 105, in handle_authorizations
  316. self._poll_authorizations(authzrs, max_retries, best_effort)
  317. File "/opt/certbot/src/certbot/certbot/_internal/auth_handler.py", line 205, in _poll_authorizations
  318. raise errors.AuthorizationError('Some challenges have failed.')
  319. certbot.errors.AuthorizationError: Some challenges have failed.
  320. 2021-12-20 09:07:42,243:ERROR:certbot._internal.log:Some challenges have failed.