Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

"acmetool want" not working #312

Open
jotauses opened this issue Sep 14, 2018 · 0 comments
Open

"acmetool want" not working #312

jotauses opened this issue Sep 14, 2018 · 0 comments

Comments

@jotauses
Copy link

jotauses commented Sep 14, 2018

When I type:
sudo acmetool want example.com www.example.com --xlog.severity=debug

I get the next error:
6 [] false false map[] 0xc4201dc960 0xc4200ba210} <nil> 20180914213430 [DEBUG] acme.storageops: trying to obtain authorization for "example.com" 20180914213430 [DEBUG] acme.api: request: https://acme-v01.api.letsencrypt.org/acme/new-authz 20180914213430 [DEBUG] acme.api: response: &{201 Created 201 HTTP/1.1 1 1 map[Replay-Nonce:[fdD5hL1nU0z_wtPMApXqNTxfzRcZjaaADXtcLSFr84w] X-Frame-Options:[DENY] Content-Length:[995] Boulder-Requester:[42094492] Cache-Control:[max-age=0, no-cache, no-store] Pragma:[no-cache] Server:[nginx] Strict-Transport-Security:[max-age=604800] Link:[<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"] Location:[https://acme-v01.api.letsencrypt.org/acme/authz/MaVMhaFdImJI9B0jkYjvNylI2YD7dz41DtzBdRTYqGc] Date:[Fri, 14 Sep 2018 19:34:30 GMT] Connection:[keep-alive] Content-Type:[application/json] Expires:[Fri, 14 Sep 2018 19:34:30 GMT]] 0xc4202fd7c0 995 [] false false map[] 0xc4201ddb30 0xc4200ba210} <nil> 20180914213430 [DEBUG] acme.solver: attempting challenge type http-01 20180914213430 [DEBUG] acme.responder: failed to listen on [::]:80: listen tcp [::]:80: bind: address already in use 20180914213430 [DEBUG] acme.responder: failed to listen on :80: listen tcp :80: bind: address already in use 20180914213430 [DEBUG] acme.responder: listening on [::1]:402 20180914213430 [DEBUG] acme.responder: listening on 127.0.0.1:402 20180914213430 [DEBUG] acme.responder: listening on [::1]:4402 20180914213430 [DEBUG] acme.responder: listening on 127.0.0.1:4402 20180914213430 [DEBUG] acme.responder: writing 2 webroot challenge files 20180914213430 [DEBUG] acme.responder: writing webroot file /var/www/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213430 [DEBUG] acme.responder: writing webroot file /var/run/acme/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213430 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/haproxy 20180914213430 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/reload 20180914213430 [DEBUG] acme.responder: http-01 self test 20180914213430 [INFO] acme.responder: http-01 self test failed: Get https://example.com/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y: remote error: tls: internal error 20180914213430 [DEBUG] acme.responder: removing webroot file /var/www/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213430 [DEBUG] acme.responder: removing webroot file /var/run/acme/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213430 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/haproxy 20180914213430 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/reload 20180914213430 [DEBUG] acme.solver: challenge start failed: Get https://example.com/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y: remote error: tls: internal error 20180914213430 [DEBUG] acme.solver: attempting challenge type dns-01 20180914213430 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/haproxy 20180914213430 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/reload 20180914213430 [DEBUG] acme.solver: challenge start failed: could not install DNS challenge, no hooks succeeded 20180914213430 [ERROR] acme.storageops: could not obtain authorization for example.com: failed all combinations 20180914213430 [ERROR] acme.storageops: Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed to request certificate: failed all combinations 20180914213430 [DEBUG] acme.storageops: done processing targets, reconciliation complete, 1 errors occurred 20180914213430 [ERROR] acme.storageops: error while processing targets: the following errors occurred: error satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed all combinations 20180914213430 [ERROR] acme.storageops: failed to reconcile: the following errors occurred: error satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed all combinations 20180914213430 [DEBUG] acme.storageops: disjoint hostname mapping: example.com -> Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0) 20180914213430 [DEBUG] acme.storageops: disjoint hostname mapping: www.example.com -> Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0) 20180914213430 [DEBUG] acme.storageops: could not find certificate satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): no certificate satisfies this target 20180914213430 [DEBUG] acme.storageops: could not find certificate satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): no certificate satisfies this target 20180914213430 [CRITICAL] acmetool: fatal: reconcile: the following errors occurred: error satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed all combinations root@vmi203168:~# clear root@vmi203168:~# acmetool want example.com www.example.com --xlog.severity=debug 20180914213451 [DEBUG] acme.storageops: Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): best certificate satisfying is <nil>, err=Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): no certificate satisfies this target 20180914213451 [DEBUG] acme.storageops: Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): requesting certificate 20180914213451 [DEBUG] acme.api: request: https://acme-v01.api.letsencrypt.org/directory 20180914213451 [DEBUG] acme.api: response: &{200 OK 200 HTTP/1.1 1 1 map[Content-Type:[application/json] X-Frame-Options:[DENY] Strict-Transport-Security:[max-age=604800] Expires:[Fri, 14 Sep 2018 19:34:51 GMT] Pragma:[no-cache] Server:[nginx] Content-Length:[658] Replay-Nonce:[qWfok2XgVTUmcm6-g75qsxyHMx5_T_Zv91BPW6RP5pA] Cache-Control:[max-age=0, no-cache, no-store] Date:[Fri, 14 Sep 2018 19:34:51 GMT] Connection:[keep-alive]] 0xc420336040 658 [] false false map[] 0xc42015ce10 0xc4201e2840} <nil> 20180914213451 [DEBUG] acme.api: request: https://acme-v01.api.letsencrypt.org/acme/new-reg 20180914213451 [DEBUG] acme.api: response: &{409 Conflict 409 HTTP/1.1 1 1 map[Replay-Nonce:[OQR8V0ZVnm332DIlD3l1sTg-yGlYuaR8Ze7IBfvBixg] Expires:[Fri, 14 Sep 2018 19:34:51 GMT] Cache-Control:[max-age=0, no-cache, no-store] Pragma:[no-cache] Date:[Fri, 14 Sep 2018 19:34:51 GMT] Content-Type:[application/problem+json] Content-Length:[107] Boulder-Requester:[42094492] Location:[https://acme-v01.api.letsencrypt.org/acme/reg/42094492] Server:[nginx]] 0xc42037c180 107 [] true false map[] 0xc4201da5a0 0xc4201e2840} <nil> 20180914213451 [DEBUG] acme.api: request: https://acme-v01.api.letsencrypt.org/acme/reg/42094492 20180914213452 [DEBUG] acme.api: response: &{202 Accepted 202 HTTP/1.1 1 1 map[Content-Type:[application/json] Replay-Nonce:[F7fEdUCwFiMpPmcjRcM2IOE9cGKnCfErxWIFscKJKR4] Expires:[Fri, 14 Sep 2018 19:34:52 GMT] Cache-Control:[max-age=0, no-cache, no-store] Date:[Fri, 14 Sep 2018 19:34:52 GMT] Connection:[keep-alive] Server:[nginx] Boulder-Requester:[42094492] Link:[<https://acme-v01.api.letsencrypt.org/acme/new-authz>;rel="next" <https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf>;rel="terms-of-service"] Pragma:[no-cache] Content-Length:[666]] 0xc42037c640 666 [] false false map[] 0xc420186690 0xc42035af20} <nil> 20180914213452 [DEBUG] acme.storageops: trying to obtain authorization for "example.com" 20180914213452 [DEBUG] acme.api: request: https://acme-v01.api.letsencrypt.org/acme/new-authz 20180914213452 [DEBUG] acme.api: response: &{201 Created 201 HTTP/1.1 1 1 map[Content-Length:[995] Replay-Nonce:[L1aNeD7NIY09Hyy-QumFTEae2UckloUeBSHcG9A1M-8] Expires:[Fri, 14 Sep 2018 19:34:52 GMT] Date:[Fri, 14 Sep 2018 19:34:52 GMT] Connection:[keep-alive] Location:[https://acme-v01.api.letsencrypt.org/acme/authz/MaVMhaFdImJI9B0jkYjvNylI2YD7dz41DtzBdRTYqGc] X-Frame-Options:[DENY] Strict-Transport-Security:[max-age=604800] Link:[<https://acme-v01.api.letsencrypt.org/acme/new-cert>;rel="next"] Cache-Control:[max-age=0, no-cache, no-store] Pragma:[no-cache] Server:[nginx] Content-Type:[application/json] Boulder-Requester:[42094492]] 0xc420337a80 995 [] false false map[] 0xc420187860 0xc42035af20} <nil> 20180914213452 [DEBUG] acme.solver: attempting challenge type http-01 20180914213452 [DEBUG] acme.responder: failed to listen on [::]:80: listen tcp [::]:80: bind: address already in use 20180914213452 [DEBUG] acme.responder: failed to listen on :80: listen tcp :80: bind: address already in use 20180914213452 [DEBUG] acme.responder: listening on [::1]:402 20180914213452 [DEBUG] acme.responder: listening on 127.0.0.1:402 20180914213452 [DEBUG] acme.responder: listening on [::1]:4402 20180914213452 [DEBUG] acme.responder: listening on 127.0.0.1:4402 20180914213452 [DEBUG] acme.responder: writing 2 webroot challenge files 20180914213452 [DEBUG] acme.responder: writing webroot file /var/www/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213452 [DEBUG] acme.responder: writing webroot file /var/run/acme/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213452 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/haproxy 20180914213452 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/reload 20180914213452 [DEBUG] acme.responder: http-01 self test 20180914213452 [INFO] acme.responder: http-01 self test failed: Get https://example.com/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y: remote error: tls: internal error 20180914213452 [DEBUG] acme.responder: removing webroot file /var/www/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213452 [DEBUG] acme.responder: removing webroot file /var/run/acme/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y 20180914213452 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/haproxy 20180914213452 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/reload 20180914213452 [DEBUG] acme.solver: challenge start failed: Get https://example.com/.well-known/acme-challenge/O4UtsZG7cgqIy_HKq2Uz-nlwQwOOvjta-G2GosOTQ5Y: remote error: tls: internal error 20180914213452 [DEBUG] acme.solver: attempting challenge type dns-01 20180914213452 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/haproxy 20180914213452 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/reload 20180914213452 [DEBUG] acme.solver: challenge start failed: could not install DNS challenge, no hooks succeeded 20180914213452 [ERROR] acme.storageops: could not obtain authorization for example.com: failed all combinations 20180914213452 [ERROR] acme.storageops: Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed to request certificate: failed all combinations 20180914213452 [DEBUG] acme.storageops: done processing targets, reconciliation complete, 1 errors occurred 20180914213452 [ERROR] acme.storageops: error while processing targets: the following errors occurred: error satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed all combinations 20180914213452 [ERROR] acme.storageops: failed to reconcile: the following errors occurred: error satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed all combinations 20180914213452 [DEBUG] acme.storageops: disjoint hostname mapping: example.com -> Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0) 20180914213452 [DEBUG] acme.storageops: disjoint hostname mapping: www.example.com -> Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0) 20180914213452 [DEBUG] acme.storageops: could not find certificate satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): no certificate satisfies this target 20180914213452 [DEBUG] acme.storageops: could not find certificate satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): no certificate satisfies this target 20180914213452 [CRITICAL] acmetool: fatal: reconcile: the following errors occurred: error satisfying Target(example.com,www.example.com;https://acme-v01.api.letsencrypt.org/directory;0): failed all combinations

I can't generate the certs...

PD: I sanitized the output "example.com"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant