신규 설치 시 Let’s Encrypt 오류 발생

제품 지원 자체 호스팅
1

앱 컨테이너에 성공적으로 진입했습니다. 제 도메인이 Encrypt에 의해 제한되고 있다는 뜻인가요?```
root@docker-s-1vcpu-2gb-sgp1-01-app:/shared/letsencrypt# ./acme.sh --issue -d bbs.antivte.com -k 4096 -w /var/www/discourse/public --debug 2
[Thu 26 Dec 2019 04:52:39 AM UTC] Lets find script dir.
[Thu 26 Dec 2019 04:52:39 AM UTC] SCRIPT=‘./acme.sh’
[Thu 26 Dec 2019 04:52:39 AM UTC] _script=‘/shared/letsencrypt/acme.sh’
[Thu 26 Dec 2019 04:52:39 AM UTC] _script_home=‘/shared/letsencrypt’
[Thu 26 Dec 2019 04:52:39 AM UTC] Using default home:/root/.acme.sh
[Thu 26 Dec 2019 04:52:39 AM UTC] Using config home:/root/.acme.sh
[Thu 26 Dec 2019 04:52:39 AM UTC] LE_WORKING_DIR=‘/root/.acme.sh’
GitHub - acmesh-official/acme.sh: A pure Unix shell script ACME client for SSL / TLS certificate automation · GitHub
v2.8.4
[Thu 26 Dec 2019 04:52:39 AM UTC] Running cmd: issue
[Thu 26 Dec 2019 04:52:39 AM UTC] _main_domain=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:39 AM UTC] _alt_domains=‘no’
[Thu 26 Dec 2019 04:52:39 AM UTC] Using config home:/root/.acme.sh
[Thu 26 Dec 2019 04:52:39 AM UTC] ACME_DIRECTORY=‘https://acme-v02.api.letsencrypt.org/directory’
[Thu 26 Dec 2019 04:52:39 AM UTC] _ACME_SERVER_HOST=‘acme-v02.api.letsencrypt.org’
[Thu 26 Dec 2019 04:52:39 AM UTC] DOMAIN_PATH=‘/root/.acme.sh/bbs.antivte.com’
[Thu 26 Dec 2019 04:52:39 AM UTC] ‘/var/www/discourse/public’ does not contain ‘dns’
[Thu 26 Dec 2019 04:52:39 AM UTC] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Thu 26 Dec 2019 04:52:39 AM UTC] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Thu 26 Dec 2019 04:52:39 AM UTC] GET
[Thu 26 Dec 2019 04:52:39 AM UTC] url=‘https://acme-v02.api.letsencrypt.org/directory’
[Thu 26 Dec 2019 04:52:39 AM UTC] timeout=
[Thu 26 Dec 2019 04:52:39 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.LOXvOHFIhy -g ’
[Thu 26 Dec 2019 04:52:40 AM UTC] ret=‘0’
[Thu 26 Dec 2019 04:52:40 AM UTC] response=’{
“FniD_4JroWM”: “Adding random entries to the directory - API Announcements - Let's Encrypt Community Support”,
“keyChange”: “https://acme-v02.api.letsencrypt.org/acme/key-change”,
“meta”: {
“caaIdentities”: [
“letsencrypt.org”
],
“termsOfService”: “https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf”,
“website”: “https://letsencrypt.org”
},
“newAccount”: “https://acme-v02.api.letsencrypt.org/acme/new-acct”,
“newNonce”: “https://acme-v02.api.letsencrypt.org/acme/new-nonce”,
“newOrder”: “https://acme-v02.api.letsencrypt.org/acme/new-order”,
“revokeCert”: “https://acme-v02.api.letsencrypt.org/acme/revoke-cert”
}’
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_KEY_CHANGE=‘https://acme-v02.api.letsencrypt.org/acme/key-change’
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_NEW_AUTHZ
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_NEW_ORDER=‘https://acme-v02.api.letsencrypt.org/acme/new-order’
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_NEW_ACCOUNT=‘https://acme-v02.api.letsencrypt.org/acme/new-acct’
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_REVOKE_CERT=‘https://acme-v02.api.letsencrypt.org/acme/revoke-cert’
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_AGREEMENT=‘https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf’
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_NEW_NONCE=‘https://acme-v02.api.letsencrypt.org/acme/new-nonce’
[Thu 26 Dec 2019 04:52:40 AM UTC] ACME_VERSION=‘2’
[Thu 26 Dec 2019 04:52:40 AM UTC] _on_before_issue
[Thu 26 Dec 2019 04:52:40 AM UTC] _chk_main_domain=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:40 AM UTC] _chk_alt_domains
[Thu 26 Dec 2019 04:52:40 AM UTC] ‘/var/www/discourse/public’ does not contain ‘no’
[Thu 26 Dec 2019 04:52:41 AM UTC] Le_LocalAddress
[Thu 26 Dec 2019 04:52:41 AM UTC] d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:41 AM UTC] Check for domain=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:41 AM UTC] _currentRoot=‘/var/www/discourse/public’
[Thu 26 Dec 2019 04:52:41 AM UTC] d
[Thu 26 Dec 2019 04:52:41 AM UTC] ‘/var/www/discourse/public’ does not contain ‘apache’
[Thu 26 Dec 2019 04:52:41 AM UTC] config file is empty, can not read CA_KEY_HASH
[Thu 26 Dec 2019 04:52:41 AM UTC] _saved_account_key_hash
[Thu 26 Dec 2019 04:52:41 AM UTC] Using config home:/root/.acme.sh
[Thu 26 Dec 2019 04:52:41 AM UTC] ACME_DIRECTORY=‘https://acme-v02.api.letsencrypt.org/directory’
[Thu 26 Dec 2019 04:52:41 AM UTC] _ACME_SERVER_HOST=‘acme-v02.api.letsencrypt.org’
[Thu 26 Dec 2019 04:52:41 AM UTC] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Thu 26 Dec 2019 04:52:41 AM UTC] Use default length 2048
[Thu 26 Dec 2019 04:52:41 AM UTC] length=‘2048’
[Thu 26 Dec 2019 04:52:41 AM UTC] Using config home:/root/.acme.sh
[Thu 26 Dec 2019 04:52:41 AM UTC] ACME_DIRECTORY=‘https://acme-v02.api.letsencrypt.org/directory’
[Thu 26 Dec 2019 04:52:41 AM UTC] _ACME_SERVER_HOST=‘acme-v02.api.letsencrypt.org’
[Thu 26 Dec 2019 04:52:41 AM UTC] _createkey for file:/root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key
[Thu 26 Dec 2019 04:52:41 AM UTC] Use length 2048
[Thu 26 Dec 2019 04:52:41 AM UTC] Using RSA: 2048
[Thu 26 Dec 2019 04:52:41 AM UTC] Create account key ok.
[Thu 26 Dec 2019 04:52:41 AM UTC] RSA key
[Thu 26 Dec 2019 04:52:41 AM UTC] Registering account
[Thu 26 Dec 2019 04:52:41 AM UTC] url=‘https://acme-v02.api.letsencrypt.org/acme/new-acct’
[Thu 26 Dec 2019 04:52:41 AM UTC] payload=‘{“termsOfServiceAgreed”: true}’
[Thu 26 Dec 2019 04:52:41 AM UTC] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key
[Thu 26 Dec 2019 04:52:41 AM UTC] Get nonce with HEAD. ACME_NEW_NONCE=‘https://acme-v02.api.letsencrypt.org/acme/new-nonce’
[Thu 26 Dec 2019 04:52:41 AM UTC] HEAD
[Thu 26 Dec 2019 04:52:41 AM UTC] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/new-nonce’
[Thu 26 Dec 2019 04:52:41 AM UTC] body
[Thu 26 Dec 2019 04:52:41 AM UTC] _postContentType=‘application/jose+json’
[Thu 26 Dec 2019 04:52:41 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g -I ’
[Thu 26 Dec 2019 04:52:42 AM UTC] _ret=‘0’
[Thu 26 Dec 2019 04:52:42 AM UTC] _headers=‘HTTP/2 200
server: nginx
date: Thu, 26 Dec 2019 04:52:42 GMT
cache-control: public, max-age=0, no-cache
link: https://acme-v02.api.letsencrypt.org/directory;rel=“index”
replay-nonce: 0001AxpV5dyHJWwOhObR8yiKO2ziG89-APmQJeBR7we6-w4
x-frame-options: DENY
strict-transport-security: max-age=604800
’
[Thu 26 Dec 2019 04:52:42 AM UTC] _CACHED_NONCE=‘0001AxpV5dyHJWwOhObR8yiKO2ziG89-APmQJeBR7we6-w4’
[Thu 26 Dec 2019 04:52:42 AM UTC] nonce=‘0001AxpV5dyHJWwOhObR8yiKO2ziG89-APmQJeBR7we6-w4’
[Thu 26 Dec 2019 04:52:42 AM UTC] POST
[Thu 26 Dec 2019 04:52:42 AM UTC] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/new-acct’
[Thu 26 Dec 2019 04:52:42 AM UTC] body=’{“protected”: “eyJub25jZSI6ICIwMDAxQXhwVjVkeUhKV3dPaE9iUjh5aUtPMnppRzg5LUFQbVFKZUJSN3dlNi13NCIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LWFjY3QiLCAiYWxnIjogIlJTMjU2IiwgImp3ayI6IHsiZSI6ICJBUUFCIiwgImt0eSI6ICJSU0EiLCAibiI6ICJ4M1hraWV0dnVNd0N5SS1iR0xmVkgyNkg3NmlOSnhSNm5Dc0JFWXJJTTZlZVNUdm1YZ2MzdlZhWU1lejNidGROTHkwWjM2V0FsYWx4X25FcUpGVnJ6cjd1U3BhM2hMS1pjaGF4My1Nd2pnMVdnNUVUbFJxWEE1WDdneEk1Ni1FMVhOUDdVMmktMmg2XzMxbnRvZld1VlZ4aGI1YzFXaDNYcDZJTkZvZXdsbWVwN01SNVAwWG1McnI4bFlWNjVYbzlOcy1pTy05R0JNRXhtOEh6cUVieGMxdTNUUGJGQUtjUzJ3MHpqWDE2X0w0V3lwejZha3pHLXNDZ0E4OUVLTW92eWxfd28tSUNiZnlxckZTaDRLU1BaVlhORTJfazVHN0hsTlVNVTZ0RUN4RHNrN05POUhkRGx1NXR2TmxJeFZEZ2N3R2w3NXJJeDJ1dG0wTm81V0RkeVEifX0”, “payload”: “eyJ0ZXJtc09mU2VydmljZUFncmVlZCI6IHRydWV9”, “signature”: “BkT6xyNOcbLShm1d2BLFCwopq7biySJLbbMWrylQ76da_1GPc030OgecWHdF1QWYDxC7PlHuL6JGAhSgssbgCti6cOw_tehil1oFGbNsq_AEe152eZKxeSNXIDCqIfShIj6JZzRIV3h8E-XpIRhn_z1t5M4FBp4jmQAxJG0cjq84YwruPqm6rQbRuU_JIhc2K61b6awcTyAAjmv9CKk1WLHe9TQoTHPRqZxQvLyTU0tOPqW19hHbBWSg_ZKTrtBOvIYh8PrHaZ0hN9NtY8UwxjOtpen5K5OAPFwvHurBceeftnEO-NSPC4K_gwagGIbfzBrAg-b56smVQocyF7quHQ”}’
[Thu 26 Dec 2019 04:52:42 AM UTC] _postContentType=‘application/jose+json’
[Thu 26 Dec 2019 04:52:42 AM UTC] Http already initialized.
[Thu 26 Dec 2019 04:52:42 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g ’
[Thu 26 Dec 2019 04:52:43 AM UTC] _ret=‘0’
[Thu 26 Dec 2019 04:52:43 AM UTC] responseHeaders=‘HTTP/2 201
server: nginx
date: Thu, 26 Dec 2019 04:52:43 GMT
content-type: application/json
content-length: 527
boulder-requester: 74543816
cache-control: public, max-age=0, no-cache
link: https://acme-v02.api.letsencrypt.org/directory;rel=“index”
link: https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;rel=“terms-of-service”
location: https://acme-v02.api.letsencrypt.org/acme/acct/74543816
replay-nonce: 0001hK3kXUp-A9i-YWF777bGt1i68imK6SGSbbeAh3s5raA
x-frame-options: DENY
strict-transport-security: max-age=604800
’
[Thu 26 Dec 2019 04:52:43 AM UTC] code=‘201’
[Thu 26 Dec 2019 04:52:43 AM UTC] original=’{
“key”: {
“kty”: “RSA”,
“n”: “x3XkietvuMwCyI-bGLfVH26H76iNJxR6nCsBEYrIM6eeSTvmXgc3vVaYMez3btdNLy0Z36WAlalx_nEqJFVrzr7uSpa3hLKZchax3-Mwjg1Wg5ETlRqXA5X7gxI56-E1XNP7U2i-2h6_31ntofWuVVxhb5c1Wh3Xp6INFoewlmep7MR5P0XmLrr8lYV65Xo9Ns-iO-9GBMExm8HzqEbxc1u3TPbFAKcS2w0zjX16_L4Wypz6akzG-sCgA89EKMovyl_wo-ICbfyqrFSh4KSPZVXNE2_k5G7HlNUMU6tECxDsk7NO9HdDlu5tvNlIxVDgcwGl75rIx2utm0No5WDdyQ”,
“e”: “AQAB”
},
“contact”: ,
“initialIp”: “128.199.246.56”,
“createdAt”: “2019-12-26T04:52:43.173478473Z”,
“status”: “valid”
}’
[Thu 26 Dec 2019 04:52:43 AM UTC] response=‘{“key”:{“kty”:“RSA”,“n”:“x3XkietvuMwCyI-bGLfVH26H76iNJxR6nCsBEYrIM6eeSTvmXgc3vVaYMez3btdNLy0Z36WAlalx_nEqJFVrzr7uSpa3hLKZchax3-Mwjg1Wg5ETlRqXA5X7gxI56-E1XNP7U2i-2h6_31ntofWuVVxhb5c1Wh3Xp6INFoewlmep7MR5P0XmLrr8lYV65Xo9Ns-iO-9GBMExm8HzqEbxc1u3TPbFAKcS2w0zjX16_L4Wypz6akzG-sCgA89EKMovyl_wo-ICbfyqrFSh4KSPZVXNE2_k5G7HlNUMU6tECxDsk7NO9HdDlu5tvNlIxVDgcwGl75rIx2utm0No5WDdyQ”,“e”:“AQAB”},“contact”:,“initialIp”:“128.199.246.56”,“createdAt”:“2019-12-26T04:52:43.173478473Z”,“status”:“valid”}’
[Thu 26 Dec 2019 04:52:43 AM UTC] Registered
[Thu 26 Dec 2019 04:52:43 AM UTC] responseHeaders=‘HTTP/2 201
server: nginx
date: Thu, 26 Dec 2019 04:52:43 GMT
content-type: application/json
content-length: 527
boulder-requester: 74543816
cache-control: public, max-age=0, no-cache
link: https://acme-v02.api.letsencrypt.org/directory;rel=“index”
link: https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf;rel=“terms-of-service”
location: https://acme-v02.api.letsencrypt.org/acme/acct/74543816
replay-nonce: 0001hK3kXUp-A9i-YWF777bGt1i68imK6SGSbbeAh3s5raA
x-frame-options: DENY
strict-transport-security: max-age=604800
’
[Thu 26 Dec 2019 04:52:43 AM UTC] _accUri=‘https://acme-v02.api.letsencrypt.org/acme/acct/74543816’
[Thu 26 Dec 2019 04:52:43 AM UTC] Calc CA_KEY_HASH=‘5TMvDldeJtWEHra6Xqn3izEY40++QnSBx2M2BvFMWAw=’
[Thu 26 Dec 2019 04:52:43 AM UTC] ACCOUNT_THUMBPRINT=‘QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M’
[Thu 26 Dec 2019 04:52:43 AM UTC] Read key length:
[Thu 26 Dec 2019 04:52:43 AM UTC] Creating domain key
[Thu 26 Dec 2019 04:52:43 AM UTC] Using config home:/root/.acme.sh
[Thu 26 Dec 2019 04:52:43 AM UTC] ACME_DIRECTORY=‘https://acme-v02.api.letsencrypt.org/directory’
[Thu 26 Dec 2019 04:52:43 AM UTC] _ACME_SERVER_HOST=‘acme-v02.api.letsencrypt.org’
[Thu 26 Dec 2019 04:52:43 AM UTC] _createkey for file:/root/.acme.sh/bbs.antivte.com/bbs.antivte.com.key
[Thu 26 Dec 2019 04:52:43 AM UTC] Use length 4096
[Thu 26 Dec 2019 04:52:43 AM UTC] Using RSA: 4096
[Thu 26 Dec 2019 04:52:44 AM UTC] The domain key is here: /root/.acme.sh/bbs.antivte.com/bbs.antivte.com.key
[Thu 26 Dec 2019 04:52:44 AM UTC] _createcsr
[Thu 26 Dec 2019 04:52:44 AM UTC] domain=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:44 AM UTC] domainlist
[Thu 26 Dec 2019 04:52:44 AM UTC] csrkey=’/root/.acme.sh/bbs.antivte.com/bbs.antivte.com.key’
[Thu 26 Dec 2019 04:52:44 AM UTC] csr=‘/root/.acme.sh/bbs.antivte.com/bbs.antivte.com.csr’
[Thu 26 Dec 2019 04:52:44 AM UTC] csrconf=‘/root/.acme.sh/bbs.antivte.com/bbs.antivte.com.csr.conf’
[Thu 26 Dec 2019 04:52:44 AM UTC] Single domain=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:44 AM UTC] _is_idn_d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:44 AM UTC] _idn_temp
[Thu 26 Dec 2019 04:52:44 AM UTC] _is_idn_d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:44 AM UTC] _idn_temp
[Thu 26 Dec 2019 04:52:44 AM UTC] _csr_cn=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:44 AM UTC] Getting domain auth token for each domain
[Thu 26 Dec 2019 04:52:44 AM UTC] _is_idn_d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:44 AM UTC] _idn_temp
[Thu 26 Dec 2019 04:52:44 AM UTC] d
[Thu 26 Dec 2019 04:52:44 AM UTC] _identifiers=‘{“type”:“dns”,“value”:“bbs.antivte.com”}’
[Thu 26 Dec 2019 04:52:44 AM UTC] url=‘https://acme-v02.api.letsencrypt.org/acme/new-order’
[Thu 26 Dec 2019 04:52:44 AM UTC] payload=‘{“identifiers”: [{“type”:“dns”,“value”:“bbs.antivte.com”}]}’
[Thu 26 Dec 2019 04:52:44 AM UTC] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key
[Thu 26 Dec 2019 04:52:44 AM UTC] Use _CACHED_NONCE=‘0001hK3kXUp-A9i-YWF777bGt1i68imK6SGSbbeAh3s5raA’
[Thu 26 Dec 2019 04:52:44 AM UTC] nonce=‘0001hK3kXUp-A9i-YWF777bGt1i68imK6SGSbbeAh3s5raA’
[Thu 26 Dec 2019 04:52:44 AM UTC] POST
[Thu 26 Dec 2019 04:52:44 AM UTC] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/new-order’
[Thu 26 Dec 2019 04:52:44 AM UTC] body=‘{“protected”: “eyJub25jZSI6ICIwMDAxaEsza1hVcC1BOWktWVdGNzc3Ykd0MWk2OGltSzZTR1NiYmVBaDNzNXJhQSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC83NDU0MzgxNiJ9”, “payload”: “eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6ImJicy5hbnRpdnRlLmNvbSJ9XX0”, “signature”: “Nv53ZkpgvCfJI5_U8j1GicqOCR2kOgSTmmGi1NT0TieO9ObSCU0F_clTBSkm8jGQn8ulikfkvRReTcqU2pLYicgCs73wmAG597Ot5lZlGog50-yYeBeU9xGPwzBUqR9PH8pA3jAwbuKxwwuLq8cFooOFBKujIJwhPPgMXSOkc21BnRwPpxqUwH3bN6SlHqt_kgOegFzR_znUPkl3z2WJxFCXwxy6IH2h6WygblQUPC8T-jgO2YnoBB3LYJeQyOI2pHhhd3_puEbxN70lK-9asUzIKIGVO35IY3yP_XEI3iL8RDbFGnqyDdZBI-0rRyCeqMk6Sr1ia9p6fVPnqb8qgg”}’
[Thu 26 Dec 2019 04:52:44 AM UTC] _postContentType=‘application/jose+json’
[Thu 26 Dec 2019 04:52:44 AM UTC] Http already initialized.
[Thu 26 Dec 2019 04:52:44 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g ’
[Thu 26 Dec 2019 04:52:45 AM UTC] _ret=‘0’
[Thu 26 Dec 2019 04:52:45 AM UTC] responseHeaders=‘HTTP/2 201
server: nginx
date: Thu, 26 Dec 2019 04:52:45 GMT
content-type: application/json
content-length: 345
boulder-requester: 74543816
cache-control: public, max-age=0, no-cache
link: https://acme-v02.api.letsencrypt.org/directory;rel=“index”
location: https://acme-v02.api.letsencrypt.org/acme/order/74543816/1853681043
replay-nonce: 00022VVZj9eHRQusUFyIaI5oSPJqhryfDBQdR8OTdGCyplc
x-frame-options: DENY
strict-transport-security: max-age=604800
’
[Thu 26 Dec 2019 04:52:45 AM UTC] code=‘201’
[Thu 26 Dec 2019 04:52:45 AM UTC] original=’{
“status”: “pending”,
“expires”: “2020-01-02T04:52:45.777717689Z”,
“identifiers”: [
{
“type”: “dns”,
“value”: “bbs.antivte.com”
}
],
“authorizations”: [
“https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397”
],
“finalize”: “https://acme-v02.api.letsencrypt.org/acme/finalize/74543816/1853681043”
}’
[Thu 26 Dec 2019 04:52:45 AM UTC] response=‘{“status”:“pending”,“expires”:“2020-01-02T04:52:45.777717689Z”,“identifiers”:[{“type”:“dns”,“value”:“bbs.antivte.com”}],“authorizations”:[“https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397"],“finalize”:"https://acme-v02.api.letsencrypt.org/acme/finalize/74543816/1853681043”}’
[Thu 26 Dec 2019 04:52:45 AM UTC] Le_LinkOrder=‘https://acme-v02.api.letsencrypt.org/acme/order/74543816/1853681043’
[Thu 26 Dec 2019 04:52:46 AM UTC] Le_OrderFinalize=‘https://acme-v02.api.letsencrypt.org/acme/finalize/74543816/1853681043’
[Thu 26 Dec 2019 04:52:46 AM UTC] _authorizations_seg=‘https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397’
[Thu 26 Dec 2019 04:52:46 AM UTC] _authz_url=‘https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397’
[Thu 26 Dec 2019 04:52:46 AM UTC] url=‘https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397’
[Thu 26 Dec 2019 04:52:46 AM UTC] payload
[Thu 26 Dec 2019 04:52:46 AM UTC] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key
[Thu 26 Dec 2019 04:52:46 AM UTC] Use _CACHED_NONCE=‘00022VVZj9eHRQusUFyIaI5oSPJqhryfDBQdR8OTdGCyplc’
[Thu 26 Dec 2019 04:52:46 AM UTC] nonce=‘00022VVZj9eHRQusUFyIaI5oSPJqhryfDBQdR8OTdGCyplc’
[Thu 26 Dec 2019 04:52:46 AM UTC] POST
[Thu 26 Dec 2019 04:52:46 AM UTC] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397’
[Thu 26 Dec 2019 04:52:46 AM UTC] body=‘{“protected”: “eyJub25jZSI6ICIwMDAyMlZWWmo5ZUhSUXVzVUZ5SWFJNW9TUEpxaHJ5ZkRCUWRSOE9UZEdDeXBsYyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMTkzNDA2ODM5NyIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvNzQ1NDM4MTYifQ”, “payload”: “”, “signature”: “hgHFxU5Si0acgUuXbZqmGS46O8A9-mv57wNqs_99exOWOTQlv61yFTrYm18LGSALvdB5GUMnxMh0e0djS4eew02DgcBPdHTkkaJADD90N0-UhiT8Ze1eHFg1BG6bR-Ylwy9NJWf6x2Oz0U9hWk5qxUnqNRR6uuzLgCNE4wJP7XPWHAzuWfbOQhNaW9bai2-qKEI1ofhnOumcPgxj0ne8t8ALZezjDjTSQ4xJbMWEZnNv8GuthE9_iI9FfGZ8NX0Q0QsLngO_qwRdGYjNli-0sOwIUgNuQlrbugJlcAJr9uSOofuIExKCHm2CQ14Nc8OdzXKVq5gzm0EeqcGRN_M0ig”}’
[Thu 26 Dec 2019 04:52:46 AM UTC] _postContentType=‘application/jose+json’
[Thu 26 Dec 2019 04:52:46 AM UTC] Http already initialized.
[Thu 26 Dec 2019 04:52:46 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g ’
[Thu 26 Dec 2019 04:52:47 AM UTC] _ret=‘0’
[Thu 26 Dec 2019 04:52:47 AM UTC] responseHeaders=‘HTTP/2 200
server: nginx
date: Thu, 26 Dec 2019 04:52:46 GMT
content-type: application/json
content-length: 793
boulder-requester: 74543816
cache-control: public, max-age=0, no-cache
link: https://acme-v02.api.letsencrypt.org/directory;rel=“index”
replay-nonce: 0001wsQPuTFIYRuN7O_cE5bkCzOOC2kqwiYWurj2g4K2YxQ
x-frame-options: DENY
strict-transport-security: max-age=604800
’
[Thu 26 Dec 2019 04:52:47 AM UTC] code=‘200’
[Thu 26 Dec 2019 04:52:47 AM UTC] original=’{
“identifier”: {
“type”: “dns”,
“value”: “bbs.antivte.com”
},
“status”: “pending”,
“expires”: “2020-01-02T04:52:45Z”,
“challenges”: [
{
“type”: “http-01”,
“status”: “pending”,
“url”: “https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw”,
“token”: “IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”
},
{
“type”: “dns-01”,
“status”: “pending”,
“url”: “https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/gXLsCw”,
“token”: “IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”
},
{
“type”: “tls-alpn-01”,
“status”: “pending”,
“url”: “https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/-lKEXw”,
“token”: “IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”
}
]
}’
[Thu 26 Dec 2019 04:52:47 AM UTC] response=‘{“identifier”:{“type”:“dns”,“value”:“bbs.antivte.com”},“status”:“pending”,“expires”:“2020-01-02T04:52:45Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/gXLsCw”,“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/-lKEXw”,“token”:"IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”}]}’
[Thu 26 Dec 2019 04:52:47 AM UTC] response=‘{“identifier”:{“type”:“dns”,“value”:“bbs.antivte.com”},“status”:“pending”,“expires”:“2020-01-02T04:52:45Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/gXLsCw”,“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/-lKEXw”,“token”:"IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”}]}’
[Thu 26 Dec 2019 04:52:47 AM UTC] _d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:47 AM UTC] _authorizations_map=‘bbs.antivte.com,{“identifier”:{“type”:“dns”,“value”:“bbs.antivte.com”},“status”:“pending”,“expires”:“2020-01-02T04:52:45Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/gXLsCw”,“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/-lKEXw”,“token”:"IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”}]}
’
[Thu 26 Dec 2019 04:52:47 AM UTC] d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:47 AM UTC] Getting webroot for domain=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:47 AM UTC] _w=’/var/www/discourse/public’
[Thu 26 Dec 2019 04:52:47 AM UTC] _currentRoot=‘/var/www/discourse/public’
[Thu 26 Dec 2019 04:52:47 AM UTC] _is_idn_d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:47 AM UTC] _idn_temp
[Thu 26 Dec 2019 04:52:47 AM UTC] _candindates=‘bbs.antivte.com,{“identifier”:{“type”:“dns”,“value”:“bbs.antivte.com”},“status”:“pending”,“expires”:“2020-01-02T04:52:45Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/gXLsCw”,“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/-lKEXw”,“token”:"IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”}]}’
[Thu 26 Dec 2019 04:52:47 AM UTC] response=‘{“identifier”:{“type”:“dns”,“value”:“bbs.antivte.com”},“status”:“pending”,“expires”:“2020-01-02T04:52:45Z”,“challenges”:[{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“dns-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/gXLsCw”,“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”},{“type”:“tls-alpn-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/-lKEXw”,“token”:"IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”}]}’
[Thu 26 Dec 2019 04:52:47 AM UTC] entry=‘“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:"IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”’
[Thu 26 Dec 2019 04:52:47 AM UTC] token=‘IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M’
[Thu 26 Dec 2019 04:52:47 AM UTC] uri=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw’
[Thu 26 Dec 2019 04:52:47 AM UTC] keyauthorization=‘IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M.QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M’
[Thu 26 Dec 2019 04:52:47 AM UTC] dvlist=‘bbs.antivte.com#IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M.QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M#https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw#http-01#/var/www/discourse/public’
[Thu 26 Dec 2019 04:52:47 AM UTC] d
[Thu 26 Dec 2019 04:52:47 AM UTC] vlist=‘bbs.antivte.com#IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M.QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M#https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw#http-01#/var/www/discourse/public,’
[Thu 26 Dec 2019 04:52:47 AM UTC] d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:47 AM UTC] ok, let’s start to verify
[Thu 26 Dec 2019 04:52:47 AM UTC] Verifying: bbs.antivte.com
[Thu 26 Dec 2019 04:52:47 AM UTC] d=‘bbs.antivte.com’
[Thu 26 Dec 2019 04:52:47 AM UTC] keyauthorization=‘IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M.QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M’
[Thu 26 Dec 2019 04:52:47 AM UTC] uri=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw’
[Thu 26 Dec 2019 04:52:47 AM UTC] _currentRoot=‘/var/www/discourse/public’
[Thu 26 Dec 2019 04:52:47 AM UTC] wellknown_path=‘/var/www/discourse/public/.well-known/acme-challenge’
[Thu 26 Dec 2019 04:52:47 AM UTC] writing token:IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M to /var/www/discourse/public/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M
[Thu 26 Dec 2019 04:52:47 AM UTC] Changing owner/group of .well-known to discourse:discourse
[Thu 26 Dec 2019 04:52:47 AM UTC] Trigger domain validation.
[Thu 26 Dec 2019 04:52:47 AM UTC] _t_url=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw’
[Thu 26 Dec 2019 04:52:47 AM UTC] _t_key_authz=‘IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M.QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M’
[Thu 26 Dec 2019 04:52:47 AM UTC] _t_vtype=‘http-01’
[Thu 26 Dec 2019 04:52:47 AM UTC] url=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw’
[Thu 26 Dec 2019 04:52:47 AM UTC] payload=‘{}’
[Thu 26 Dec 2019 04:52:47 AM UTC] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key
[Thu 26 Dec 2019 04:52:47 AM UTC] Use _CACHED_NONCE=‘0001wsQPuTFIYRuN7O_cE5bkCzOOC2kqwiYWurj2g4K2YxQ’
[Thu 26 Dec 2019 04:52:47 AM UTC] nonce=‘0001wsQPuTFIYRuN7O_cE5bkCzOOC2kqwiYWurj2g4K2YxQ’
[Thu 26 Dec 2019 04:52:47 AM UTC] POST
[Thu 26 Dec 2019 04:52:47 AM UTC] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw’
[Thu 26 Dec 2019 04:52:47 AM UTC] body=‘{“protected”: “eyJub25jZSI6ICIwMDAxd3NRUHVURklZUnVON09fY0U1YmtDek9PQzJrcXdpWVd1cmoyZzRLMll4USIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMTkzNDA2ODM5Ny9MU2hSSHciLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0Lzc0NTQzODE2In0”, “payload”: “e30”, “signature”: “iLhXlf3XDE6RqQuDbAfA4MYTXONqCXxgI8SeGwhBNn1BW0dz4EhYoG-GrE5SrXiNuwflkbLEmvDEMZSTgeuqDM3MIMaE-qw2fF2XrZVCf1madkWlKlwi8BYwiz-7ebFWatv8bAHsDSA_l-XC5eT1c4M3-sRsy6RyqPUxzUhvHzwUa4ePDJf0nmvpDq_iQB6mBf-VaqNUtqdhHIpb-Pz7qDDxIhxMcfDVuxKOjX3mf1KvggGSJbVBTffaBGc58vtuXBXAPNlpXbEPXMQBJcYjRJX_cwCRgYakRj1pBj39uVqHK096Qc30N9ALS18gHj5iTYqsWZzRlnYg5zYPO137zA”}’
[Thu 26 Dec 2019 04:52:47 AM UTC] _postContentType=‘application/jose+json’
[Thu 26 Dec 2019 04:52:47 AM UTC] Http already initialized.
[Thu 26 Dec 2019 04:52:47 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g ’
[Thu 26 Dec 2019 04:52:48 AM UTC] _ret=‘0’
[Thu 26 Dec 2019 04:52:48 AM UTC] responseHeaders=‘HTTP/2 200
server: nginx
date: Thu, 26 Dec 2019 04:52:48 GMT
content-type: application/json
content-length: 185
boulder-requester: 74543816
cache-control: public, max-age=0, no-cache
link: https://acme-v02.api.letsencrypt.org/directory;rel=“index”
link: https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397;rel=“up”
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw
replay-nonce: 0101orbWi92uCZTOWbj0–xl238zJ_lVCupwfti7W9-2Qzc
x-frame-options: DENY
strict-transport-security: max-age=604800
’
[Thu 26 Dec 2019 04:52:48 AM UTC] code=‘200’
[Thu 26 Dec 2019 04:52:48 AM UTC] original=’{
“type”: “http-01”,
“status”: “pending”,
“url”: “https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw”,
“token”: “IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”
}’
[Thu 26 Dec 2019 04:52:48 AM UTC] response=‘{“type”:“http-01”,“status”:“pending”,“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:"IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”}’
[Thu 26 Dec 2019 04:52:48 AM UTC] trigger validation code: 200
[Thu 26 Dec 2019 04:52:48 AM UTC] sleep 2 secs to verify
[Thu 26 Dec 2019 04:52:50 AM UTC] checking
[Thu 26 Dec 2019 04:52:50 AM UTC] url=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw’
[Thu 26 Dec 2019 04:52:50 AM UTC] payload
[Thu 26 Dec 2019 04:52:50 AM UTC] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key
[Thu 26 Dec 2019 04:52:50 AM UTC] Use _CACHED_NONCE=‘0101orbWi92uCZTOWbj0–xl238zJ_lVCupwfti7W9-2Qzc’
[Thu 26 Dec 2019 04:52:50 AM UTC] nonce=‘0101orbWi92uCZTOWbj0–xl238zJ_lVCupwfti7W9-2Qzc’
[Thu 26 Dec 2019 04:52:50 AM UTC] POST
[Thu 26 Dec 2019 04:52:50 AM UTC] _post_url=‘https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw’
[Thu 26 Dec 2019 04:52:50 AM UTC] body=‘{“protected”: “eyJub25jZSI6ICIwMTAxb3JiV2k5MnVDWlRPV2JqMC0teGwyMzh6Sl9sVkN1cHdmdGk3VzktMlF6YyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMTkzNDA2ODM5Ny9MU2hSSHciLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0Lzc0NTQzODE2In0”, “payload”: “”, “signature”: “G4UzMSDRVQvvXplTdXTKGwD8DSExTv6nxDOKE4xhLVvSM5pRr-uJqivsuL6iPQu-Efru4QdgtJ31kg4CVZ_R8aSk-JJRfC31fCYdrBkpFS-_G5BUosoV0CEyH2-IPo1c2TaNviV7QA8nRE3EwBQmI2oWegT5jav5mU4XvdYxjl32ihPHkg06jIggzhnrJJfU2wtHQjUahR6C3mEgcJD4EVci10Df5Vvk4MUWh5YiwvYeyBf4VbOGHHos1nQpin2EKBKgdvcnEfr3HrNLnrL_NVGTOz5I6EmZ2alizEKGEOfMZXip_aII8YZ_AjM_pH8bdEUwBdY6xFN5z53pFrjUZw”}’
[Thu 26 Dec 2019 04:52:50 AM UTC] _postContentType=‘application/jose+json’
[Thu 26 Dec 2019 04:52:50 AM UTC] Http already initialized.
[Thu 26 Dec 2019 04:52:50 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g ’
[Thu 26 Dec 2019 04:52:51 AM UTC] _ret=‘0’
[Thu 26 Dec 2019 04:52:51 AM UTC] responseHeaders=‘HTTP/2 200
server: nginx
date: Thu, 26 Dec 2019 04:52:51 GMT
content-type: application/json
content-length: 1446
boulder-requester: 74543816
cache-control: public, max-age=0, no-cache
link: https://acme-v02.api.letsencrypt.org/directory;rel=“index”
link: https://acme-v02.api.letsencrypt.org/acme/authz-v3/1934068397;rel=“up”
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw
replay-nonce: 0102DQYrXDXyqbQCHTjIWnquZuDokct_c1V7AOj2-L9rskQ
x-frame-options: DENY
strict-transport-security: max-age=604800
’
[Thu 26 Dec 2019 04:52:51 AM UTC] code=‘200’
[Thu 26 Dec 2019 04:52:51 AM UTC] original=’{
“type”: “http-01”,
“status”: “invalid”,
“error”: {
“type”: “urn:ietf:params:acme:error:unauthorized”,
“detail”: “Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]: "\u003c!DOCTYPE html\u003e\n\u003c!–[if lt IE 7]\u003e \u003chtml class=\"no-js ie6 oldie\" lang=\"en-US\"\u003e \u003c![endif]–\u003e\n\u003c!–[if IE 7]\u003e \u003chtml class=\"no-js "”,
“status”: 403
},
“url”: “https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw”,
“token”: “IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,
“validationRecord”: [
{
“url”: “http://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,
“hostname”: “bbs.antivte.com”,
“port”: “80”,
“addressesResolved”: [
“104.27.177.113”,
“104.27.176.113”,
“2606:4700:30::681b:b071”,
“2606:4700:30::681b:b171”
],
“addressUsed”: “2606:4700:30::681b:b071”
},
{
“url”: “https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,
“hostname”: “bbs.antivte.com”,
“port”: “443”,
“addressesResolved”: [
“104.27.177.113”,
“104.27.176.113”,
“2606:4700:30::681b:b071”,
“2606:4700:30::681b:b171”
],
“addressUsed”: “2606:4700:30::681b:b071”
}
]
}’
[Thu 26 Dec 2019 04:52:51 AM UTC] response=‘{“type”:“http-01”,“status”:“invalid”,“error”:{“type”:“urn:ietf:params:acme:error:unauthorized”,“detail”:“Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]: "\u003c!DOCTYPE html\u003e\n\u003c!–[if lt IE 7]\u003e \u003chtml class=\"no-js ie6 oldie\" lang=\"en-US\"\u003e \u003c![endif]–\u003e\n\u003c!–[if IE 7]\u003e \u003chtml class=\"no-js "”,“status”: 403},“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“validationRecord”:[{“url”:“http://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“hostname”:“bbs.antivte.com”,“port”:“80”,“addressesResolved”:[“104.27.177.113”,“104.27.176.113”,“2606:4700:30::681b:b071”,“2606:4700:30::681b:b171”],“addressUsed”:“2606:4700:30::681b:b071”},{“url”:“https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“hostname”:“bbs.antivte.com”,“port”:“443”,“addressesResolved”:[“104.27.177.113”,“104.27.176.113”,“2606:4700:30::681b:b071”,“2606:4700:30::681b:b171”],“addressUsed”:"2606:4700:30::681b:b071”}]}’
[Thu 26 Dec 2019 04:52:51 AM UTC] original=‘{“type”:“http-01”,“status”:“invalid”,“error”:{“type”:“urn:ietf:params:acme:error:unauthorized”,“detail”:“Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]: "\u003c!DOCTYPE html\u003e\n\u003c!–[if lt IE 7]\u003e \u003chtml class=\"no-js ie6 oldie\" lang=\"en-US\"\u003e \u003c![endif]–\u003e\n\u003c!–[if IE 7]\u003e \u003chtml class=\"no-js "”,“status”: 403},“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“validationRecord”:[{“url”:“http://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“hostname”:“bbs.antivte.com”,“port”:“80”,“addressesResolved”:[“104.27.177.113”,“104.27.176.113”,“2606:4700:30::681b:b071”,“2606:4700:30::681b:b171”],“addressUsed”:“2606:4700:30::681b:b071”},{“url”:“https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“hostname”:“bbs.antivte.com”,“port”:“443”,“addressesResolved”:[“104.27.177.113”,“104.27.176.113”,“2606:4700:30::681b:b071”,“2606:4700:30::681b:b171”],“addressUsed”:"2606:4700:30::681b:b071”}]}’
[Thu 26 Dec 2019 04:52:51 AM UTC] response=‘{“type”:“http-01”,“status”:“invalid”,“error”:{“type”:“urn:ietf:params:acme:error:unauthorized”,“detail”:“Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]: "\u003c!DOCTYPE html\u003e\n\u003c!–[if lt IE 7]\u003e \u003chtml class=\"no-js ie6 oldie\" lang=\"en-US\"\u003e \u003c![endif]–\u003e\n\u003c!–[if IE 7]\u003e \u003chtml class=\"no-js "”,“status”: 403},“url”:“https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw",“token”:“IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“validationRecord”:[{“url”:“http://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“hostname”:“bbs.antivte.com”,“port”:“80”,“addressesResolved”:[“104.27.177.113”,“104.27.176.113”,“2606:4700:30::681b:b071”,“2606:4700:30::681b:b171”],“addressUsed”:“2606:4700:30::681b:b071”},{“url”:“https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M”,“hostname”:“bbs.antivte.com”,“port”:“443”,“addressesResolved”:[“104.27.177.113”,“104.27.176.113”,“2606:4700:30::681b:b071”,“2606:4700:30::681b:b171”],“addressUsed”:"2606:4700:30::681b:b071”}]}’
[Thu 26 Dec 2019 04:52:51 AM UTC] error='“error”:{“type”:“urn:ietf:params:acme:error:unauthorized”,“detail”:"Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]: ’
[Thu 26 Dec 2019 04:52:51 AM UTC] errordetail='Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]: ’
[Thu 26 Dec 2019 04:52:51 AM UTC] bbs.antivte.com:Verify error:Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]:
[Thu 26 Dec 2019 04:52:51 AM UTC] Debug: get token url.
[Thu 26 Dec 2019 04:52:51 AM UTC] GET
[Thu 26 Dec 2019 04:52:51 AM UTC] url=‘http://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M’
[Thu 26 Dec 2019 04:52:51 AM UTC] timeout=1
[Thu 26 Dec 2019 04:52:51 AM UTC] Http already initialized.
[Thu 26 Dec 2019 04:52:51 AM UTC] _CURL=‘curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g --connect-timeout 1’

bbs.antivte.com | 521: Web server is down body{margin:0;padding:0}

Error 521 Ray ID: 54b072a03614ddd3 • 2019-12-26 04:52:51 UTC

Web server is down

You

Browser

Working
Singapore

Cloudflare

Working
bbs.antivte.com

Host

Error

What happened?

The web server is not returning a connection. As a result, the web page is not displaying.

What can I do?

If you are a visitor of this website:

Please try again in a few minutes.

If you are the owner of this website:

Contact your hosting provider letting them know your web server is not responding. Additional troubleshooting information.

Cloudflare Ray ID: 54b072a03614ddd3 • Your IP: 128.199.246.56 • Performance & security by Cloudflare

[Thu 26 Dec 2019 04:52:51 AM UTC] ret='0' [Thu 26 Dec 2019 04:52:51 AM UTC] Debugging, skip removing: /var/www/discourse/public/.well-known [Thu 26 Dec 2019 04:52:51 AM UTC] pid [Thu 26 Dec 2019 04:52:51 AM UTC] No need to restore nginx, skip. [Thu 26 Dec 2019 04:52:51 AM UTC] _clearupdns [Thu 26 Dec 2019 04:52:51 AM UTC] dns_entries [Thu 26 Dec 2019 04:52:51 AM UTC] skip dns. [Thu 26 Dec 2019 04:52:51 AM UTC] _on_issue_err [Thu 26 Dec 2019 04:52:51 AM UTC] Please add '--debug' or '--log' to check more details. [Thu 26 Dec 2019 04:52:51 AM UTC] See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh [Thu 26 Dec 2019 04:52:51 AM UTC] _chk_vlist='bbs.antivte.com#IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M.QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M#https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw#http-01#/var/www/discourse/public,' [Thu 26 Dec 2019 04:52:51 AM UTC] start to deactivate authz [Thu 26 Dec 2019 04:52:51 AM UTC] Trigger domain validation. [Thu 26 Dec 2019 04:52:52 AM UTC] _t_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw' [Thu 26 Dec 2019 04:52:52 AM UTC] _t_key_authz='IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M.QzZDTO50oWOyXvU_zdMh7jx3NMWWZdgpZ5bWAEKhS5M' [Thu 26 Dec 2019 04:52:52 AM UTC] _t_vtype [Thu 26 Dec 2019 04:52:52 AM UTC] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw' [Thu 26 Dec 2019 04:52:52 AM UTC] payload='{}' [Thu 26 Dec 2019 04:52:52 AM UTC] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/account.key [Thu 26 Dec 2019 04:52:52 AM UTC] Use _CACHED_NONCE='0102DQYrXDXyqbQCHTjIWnquZuDokct_c1V7AOj2-L9rskQ' [Thu 26 Dec 2019 04:52:52 AM UTC] nonce='0102DQYrXDXyqbQCHTjIWnquZuDokct_c1V7AOj2-L9rskQ' [Thu 26 Dec 2019 04:52:52 AM UTC] POST [Thu 26 Dec 2019 04:52:52 AM UTC] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/1934068397/LShRHw' [Thu 26 Dec 2019 04:52:52 AM UTC] body='{"protected": "eyJub25jZSI6ICIwMTAyRFFZclhEWHlxYlFDSFRqSVducXVadURva2N0X2MxVjdBT2oyLUw5cnNrUSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMTkzNDA2ODM5Ny9MU2hSSHciLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0Lzc0NTQzODE2In0", "payload": "e30", "signature": "igOVATkPfSpNRp5SMfIJ6V7X-a5h2M2S3l-spWXoM7K5m6sznoXsHerqL_PhcD22hYxGdkflu3QYaYCVd7D0jOcrbWX4w8KyeKFyVRQboJHj5_z0aeaPrXOFzoFuofgKTMU5UcisjFWvN5TbKrR-FGSP2gcLOA1XDuzuiWH791Zyw-i0cJp8oLuIglHuhwpS6dLezYkq8wFAfXKyO961BKsZ3o2ioG_vay6jQVEfnjxI72Hbsd5KJdkG_bQ84rRCdbGYoDh38Q-YAIZlDhm10iCrEARAltgnr0JICl4lrlKJA7ONYlloG6tJIrpgpl30NdmNiAROYlFYyqNK2QTp_Q"}' [Thu 26 Dec 2019 04:52:52 AM UTC] _postContentType='application/jose+json' [Thu 26 Dec 2019 04:52:52 AM UTC] Http already initialized. [Thu 26 Dec 2019 04:52:52 AM UTC] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header --trace-ascii /tmp/tmp.ZISJb4pUto -g ' [Thu 26 Dec 2019 04:52:53 AM UTC] _ret='0' [Thu 26 Dec 2019 04:52:53 AM UTC] responseHeaders='HTTP/2 400 server: nginx date: Thu, 26 Dec 2019 04:52:52 GMT content-type: application/problem+json content-length: 144 boulder-requester: 74543816 cache-control: public, max-age=0, no-cache link: ;rel="index" replay-nonce: 0001uzKVPUnkkwsWQ1sqfu1khlNSQEYHgiKCGy_Lb2VeS20 ' [Thu 26 Dec 2019 04:52:53 AM UTC] code='400' [Thu 26 Dec 2019 04:52:53 AM UTC] original='{ "type": "urn:ietf:params:acme:error:malformed", "detail": "Unable to update challenge :: authorization must be pending", "status": 400 }' [Thu 26 Dec 2019 04:52:53 AM UTC] response='{ "type": "urn:ietf:params:acme:error:malformed", "detail": "Unable to update challenge :: authorization must be pending", "status": 400 }' [Thu 26 Dec 2019 04:52:53 AM UTC] Diagnosis versions: openssl:openssl OpenSSL 1.1.1d 10 Sep 2019 apache: apache doesn't exists. nginx: nginx version: nginx/1.17.4 built by gcc 8.3.0 (Debian 8.3.0-6) built with OpenSSL 1.1.1d 10 Sep 2019 TLS SNI support enabled configure arguments: --with-cc-opt='-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -Wdate-time -D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations' --with-ld-opt='-Wl,-Bsymbolic-functions -fPIE -pie -Wl,-z,relro -Wl,-z,now' --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf --http-log-path=/var/log/nginx/access.log --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-ipv6 --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_auth_request_module --with-http_addition_module --with-http_dav_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_v2_module --with-http_sub_module --with-stream --with-stream_ssl_module --with-mail --with-mail_ssl_module --with-threads --add-module=/tmp/ngx_brotli socat: socat by Gerhard Rieger and contributors - see www.dest-unreach.org Usage: socat [options] options: -V print version and feature information to stdout, and exit -h|-? print a help text describing command line options and addresses -hh like -h, plus a list of all common address option names -hhh like -hh, plus a list of all available address option names -d increase verbosity (use up to 4 times; 2 are recommended) -D analyze file descriptors before loop -ly[facility] log to syslog, using facility (default is daemon) -lf log to file -ls log to stderr (default if no other log) -lm[facility] mixed log mode (stderr during initialization, then syslog) -lp set the program name used for logging -lu use microseconds for logging timestamps -lh add hostname to log messages -v verbose data traffic, text -x verbose data traffic, hexadecimal -b set data buffer size (8192) -s sloppy (continue on error) -t wait seconds before closing second channel -T total inactivity timeout in seconds -u unidirectional mode (left to right) -U unidirectional mode (right to left) -g do not check option groups -L try to obtain lock, or fail -W try to obtain lock, or wait -4 prefer IPv4 if version is not explicitly specified -6 prefer IPv6 if version is not explicitly specified bi-address: pipe[,] groups=FD,FIFO !! single-address: [,] address-head: abstract-client: groups=FD,SOCKET,RETRY,UNIX abstract-connect: groups=FD,SOCKET,RETRY,UNIX abstract-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,UNIX abstract-recv: groups=FD,SOCKET,RETRY,UNIX abstract-recvfrom: groups=FD,SOCKET,CHILD,RETRY,UNIX abstract-sendto: groups=FD,SOCKET,RETRY,UNIX create: groups=FD,REG,NAMED exec: groups=FD,FIFO,SOCKET,EXEC,FORK,TERMIOS,PTY,PARENT,UNIX fd: groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP gopen: groups=FD,FIFO,CHR,BLK,REG,SOCKET,NAMED,OPEN,TERMIOS,UNIX interface: groups=FD,SOCKET ip-datagram:: groups=FD,SOCKET,RANGE,IP4,IP6 ip-recv: groups=FD,SOCKET,RANGE,IP4,IP6 ip-recvfrom: groups=FD,SOCKET,CHILD,RANGE,IP4,IP6 ip-sendto:: groups=FD,SOCKET,IP4,IP6 ip4-datagram:: groups=FD,SOCKET,RANGE,IP4 ip4-recv: groups=FD,SOCKET,RANGE,IP4 ip4-recvfrom: groups=FD,SOCKET,CHILD,RANGE,IP4 ip4-sendto:: groups=FD,SOCKET,IP4 ip6-datagram:: groups=FD,SOCKET,RANGE,IP6 ip6-recv: groups=FD,SOCKET,RANGE,IP6 ip6-recvfrom: groups=FD,SOCKET,CHILD,RANGE,IP6 ip6-sendto:: groups=FD,SOCKET,IP6 open: groups=FD,FIFO,CHR,BLK,REG,NAMED,OPEN,TERMIOS openssl:: groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,OPENSSL openssl-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,IP6,TCP,OPENSSL pipe: groups=FD,FIFO,NAMED,OPEN proxy::: groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,HTTP pty groups=FD,NAMED,TERMIOS,PTY sctp-connect:: groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,SCTP sctp-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,IP6,SCTP sctp4-connect:: groups=FD,SOCKET,CHILD,RETRY,IP4,SCTP sctp4-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,SCTP sctp6-connect:: groups=FD,SOCKET,CHILD,RETRY,IP6,SCTP sctp6-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP6,SCTP socket-connect::: groups=FD,SOCKET,CHILD,RETRY socket-datagram:::: groups=FD,SOCKET,RANGE socket-listen::: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE socket-recv:::: groups=FD,SOCKET,RANGE socket-recvfrom:::: groups=FD,SOCKET,CHILD,RANGE socket-sendto:::: groups=FD,SOCKET socks4::: groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,SOCKS4 socks4a::: groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP,SOCKS4 stderr groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP stdin groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP stdio groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP stdout groups=FD,FIFO,CHR,BLK,REG,SOCKET,TERMIOS,UNIX,IP4,IP6,UDP,TCP,SCTP system: groups=FD,FIFO,SOCKET,EXEC,FORK,TERMIOS,PTY,PARENT,UNIX tcp-connect:: groups=FD,SOCKET,CHILD,RETRY,IP4,IP6,TCP tcp-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,IP6,TCP tcp4-connect:: groups=FD,SOCKET,CHILD,RETRY,IP4,TCP tcp4-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP4,TCP tcp6-connect:: groups=FD,SOCKET,CHILD,RETRY,IP6,TCP tcp6-listen: groups=FD,SOCKET,LISTEN,CHILD,RETRY,RANGE,IP6,TCP tun[:/] groups=FD,CHR,NAMED,OPEN,INTERFACE udp-connect:: groups=FD,SOCKET,IP4,IP6,UDP udp-datagram:: groups=FD,SOCKET,RANGE,IP4,IP6,UDP udp-listen: groups=FD,SOCKET,LISTEN,CHILD,RANGE,IP4,IP6,UDP udp-recv: groups=FD,SOCKET,RANGE,IP4,IP6,UDP udp-recvfrom: groups=FD,SOCKET,CHILD,RANGE,IP4,IP6,UDP udp-sendto:: groups=FD,SOCKET,IP4,IP6,UDP udp4-connect:: groups=FD,SOCKET,IP4,UDP udp4-datagram:: groups=FD,SOCKET,RANGE,IP4,UDP udp4-listen: groups=FD,SOCKET,LISTEN,CHILD,RANGE,IP4,UDP udp4-recv: groups=FD,SOCKET,RANGE,IP4,UDP udp4-recvfrom:: groups=FD,SOCKET,CHILD,RANGE,IP4,UDP udp4-sendto:: groups=FD,SOCKET,IP4,UDP udp6-connect:: groups=FD,SOCKET,IP6,UDP udp6-datagram:: groups=FD,SOCKET,RANGE,IP6,UDP udp6-listen: groups=FD,SOCKET,LISTEN,CHILD,RANGE,IP6,UDP udp6-recv: groups=FD,SOCKET,RANGE,IP6,UDP udp6-recvfrom: groups=FD,SOCKET,CHILD,RANGE,IP6,UDP udp6-sendto:: groups=FD,SOCKET,IP6,UDP unix-client: groups=FD,SOCKET,NAMED,RETRY,UNIX unix-connect: groups=FD,SOCKET,NAMED,RETRY,UNIX unix-listen: groups=FD,SOCKET,NAMED,LISTEN,CHILD,RETRY,UNIX unix-recv: groups=FD,SOCKET,NAMED,RETRY,UNIX unix-recvfrom: groups=FD,SOCKET,NAMED,CHILD,RETRY,UNIX unix-sendto: groups=FD,SOCKET,NAMED,RETRY,UNIX root@docker-s-1vcpu-2gb-sgp1-01-app:/shared/letsencrypt#
2

이 문제의 가장 흔한 원인은 도메인이 서버 IP 주소를 가리키지 않는 경우입니다. 서브도메인의 A 레코드가 서버 IP 주소를 가리키도록 설정되어 있는지 확인하셨나요?

3

암호화 제한을 실제로 적용하는 것 같네요. A 레코드는 이미 설정되어 있고, 이건 제가 익숙한 부분입니다. 또한 이전 성공적인 설치 당시의 구 도메인 설정도 존재합니다. 도메인은 변경하지 않았습니다.

그만두겠습니다. 도메인을 변경했는데 이제 작동합니다.

4

백업에서 복구해 봤나요? 이런 오류가 떠요.
불러올 수 없음 /categories.json

5

이는 별개의 문제일 수 있습니다. 카테고리 로딩이 안 된다는 불만을 제기하는 다른 게시글을 확인했습니다. 이 관련해서는 포럼에서 관련 주제를 검색해 보실 수 있습니다.

Let’s Encrypt의 경우, 동일한 (서브)도메인당 주당 5~7개의 인증서만 허용하며, 테스트 환경에서는 이 한도를 쉽게 초과할 수 있습니다.

6

방금 약 1시간 후(UTC 07:45)에 확인해 보니 사이트가 오프라인 상태입니다. 연결이 되지 않습니다. “521: Web server is down” 오류가 표시됩니다. bbs.antivte.com을 입력했을 때 bloodclot.antivte.com으로 리다이렉트되었습니다. 아마도 리다이렉트 오류, DNS 오류, 또는 www 서브도메인이 아닌 하나의 도메인에만 인증서를 생성한 것 같습니다.

community.LetsEncrypt.org에 가서 도메인에 대한 테스트를 실행해 보고, 사용했던 명령어를 그대로 사용하면 문제가 어디에 있는지 확인될 것입니다. Cloudfair(Cloudflare)를 사용하고 있는 것 같습니다. Cloudfair와 사용 중인 CA 클라이언트(Certbot, Apache 등) 설정에 대해 구체적인 안내를 받을 수 있을 것입니다.

무엇을 하든, 인증서를 삭제해서는 절대 안 됩니다. 이는 항상 강조되는 금기사항입니다.

Let’s Encrypt의 테스트 환경에는 한도가 없습니다. 실제 인증서를 발급하지 않기 때문입니다. 그것이 테스트 매개변수의 전체적인 목적입니다… 하지만 명령어에 테스트 스위치를 포함해야 합니다. 그렇지 않으면 클라이언트가 새로운 인증서를 발급받거나 갱신하려는 시도로 오해할 수 있습니다. 한 가지 더… 5회 실패 시도 한도에 도달하더라도, 이는 1시간 동안만 적용됩니다. 1시간이 지나면 다시 테스트할 수 있습니다. :wink:

7

알려 드리고 싶은 정보가 있습니다.
이 BBS 도메인을 한 달간 운영해 왔습니다. 지난 이틀 동안은 수동으로 삭제하고 새 인스턴스를 설치해 보았죠. CA 문제로 한동안 막혀 있었습니다. 결국 기존 BBS 도메인은 포기했습니다. 며칠 뒤에 다시 시도해 볼지도 모르겠네요.
지금 테스트하시는 순간에는 bloodclot을 위한 새 인스턴스를 실행 중이며, Cloudflare를 통해 기존 BBS를 bloodclot으로 리다이렉트하고 있습니다.

8

bbs.antivte.com에서 빠르게 시도해 봤는데, 여전히 안 됩니다. CA 문제가 동일합니다.

9

안녕하세요 @JimPas님, 명확히 하기 위해 말씀드리자면, discourse-setup(또는 discourse의 다른 지원 설치 방법)는 Staging 모드가 아닌 Production 모드에서 letsencrypt를 사용합니다. Production 모드에는 한도 제한이 적용되지만, Staging 모드에는 적용되지 않습니다. discourse 설치 과정에서 Staging 환경을 Production 환경 대신 사용할 수 있는 토글 옵션은 없습니다.

제가 '테스트’라고 말씀드린 것은 letsencrypt Staging 모드를 의미하는 것이 아니라, 사용자가 discourse-docker를 실제로 테스트하기 위해 매주 여러 번 서버를 삭제하고 다시 설치하는 상황을 의미합니다. letsencrypt Staging은 여기서는 다소 관련이 적습니다.

10

…그렇다면 정확히 어떤 "CA 문제"인가요? 여기에서의 논의가 왜 레이트 리밋(rate limit)에 대해 이야기하는지 모르겠습니다. 게시하신 내용에는 레이트 리밋 문제와 관련된 어떤 표시도 없으며, 해당 도메인에 대한 Google의 투명성 보고서에서도 문제가 될 만한 사항을 보여주지 않습니다. 12월 6일에 이 이름으로 4개의 동일한 인증서가 발급되었지만, (1) 한도는 4개가 아니라 5개이며, (2) 해당 한도는 주당 기준이며, 해당 인증서가 발급된 지 거의 3주가 지났습니다.

그렇게 생각하게 된 근거는 무엇인가요? 게시하신 로그 출력에서 이를 시사하는 내용은 전혀 보이지 않기 때문입니다. 해당 출력은 서버가 올바른 검증 토큰을 제공하지 않아 검증이 실패했음을 보여줄 뿐입니다.

11

여기

root@docker-s-1vcpu-2gb-sgp1-01:/var/discourse# docker logs app
run-parts: executing /etc/runit/1.d/00-ensure-links
run-parts: executing /etc/runit/1.d/00-fix-var-logs
run-parts: executing /etc/runit/1.d/anacron
run-parts: executing /etc/runit/1.d/cleanup-pids
Cleaning stale PID files
run-parts: executing /etc/runit/1.d/copy-env
run-parts: executing /etc/runit/1.d/letsencrypt
[Thu 26 Dec 2019 09:28:22 AM UTC] Single domain='bbs.antivte.com'
[Thu 26 Dec 2019 09:28:22 AM UTC] Getting domain auth token for each domain
[Thu 26 Dec 2019 09:28:24 AM UTC] Create new order error. Le_OrderFinalize not found. {
  "type": "urn:ietf:params:acme:error:rateLimited",
  "detail": "Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/",
  "status": 429
}
[Thu 26 Dec 2019 09:28:24 AM UTC] Please check log file for more details: /shared/letsencrypt/acme.sh.log
Error loading file ca.cer
[Thu 26 Dec 2019 09:28:25 AM UTC] Single domain='bbs.antivte.com'
[Thu 26 Dec 2019 09:28:25 AM UTC] Getting domain auth token for each domain
[Thu 26 Dec 2019 09:28:27 AM UTC] Create new order error. Le_OrderFinalize not found. {
  "type": "urn:ietf:params:acme:error:rateLimited",
  "detail": "Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/",
  "status": 429
}
[Thu 26 Dec 2019 09:28:27 AM UTC] Please check log file for more details: /shared/letsencrypt/acme.sh.log
[Thu 26 Dec 2019 09:28:28 AM UTC] Installing key to:/shared/ssl/bbs.antivte.com.key
[Thu 26 Dec 2019 09:28:28 AM UTC] Installing full chain to:/shared/ssl/bbs.antivte.com.cer
cat: /shared/letsencrypt/bbs.antivte.com/fullchain.cer: No such file or directory
[Thu 26 Dec 2019 09:28:29 AM UTC] Single domain='bbs.antivte.com'
[Thu 26 Dec 2019 09:28:29 AM UTC] Getting domain auth token for each domain
[Thu 26 Dec 2019 09:28:31 AM UTC] Create new order error. Le_OrderFinalize not found. {
  "type": "urn:ietf:params:acme:error:rateLimited",
  "detail": "Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/",
  "status": 429
}
[Thu 26 Dec 2019 09:28:31 AM UTC] Please check log file for more details: /shared/letsencrypt/acme.sh.log
Error loading file ca.cer
[Thu 26 Dec 2019 09:28:32 AM UTC] Single domain='bbs.antivte.com'
[Thu 26 Dec 2019 09:28:33 AM UTC] Getting domain auth token for each domain
[Thu 26 Dec 2019 09:28:35 AM UTC] Create new order error. Le_OrderFinalize not found. {
  "type": "urn:ietf:params:acme:error:rateLimited",
  "detail": "Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/rate-limits/",
  "status": 429
}
[Thu 26 Dec 2019 09:28:35 AM UTC] Please check log file for more details: /shared/letsencrypt/acme.sh.log
[Thu 26 Dec 2019 09:28:35 AM UTC] Installing key to:/shared/ssl/bbs.antivte.com_ecc.key
[Thu 26 Dec 2019 09:28:35 AM UTC] Installing full chain to:/shared/ssl/bbs.antivte.com_ecc.cer
cat: /shared/letsencrypt/bbs.antivte.com_ecc/fullchain.cer: No such file or directory
Error loading file ca.cer
Error loading file ca.cer
Started runsvdir, PID is 2031
ok: run: redis: (pid 2045) 0s
chgrp: invalid group: ‘syslog’
ok: run: postgres: (pid 2039) 0s
nginx: [emerg] cannot load certificate "/shared/ssl/bbs.antivte.com.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
rsyslogd: imklog: cannot open kernel log (/proc/kmsg): Operation not permitted.
rsyslogd: activation of module imklog failed [v8.1901.0 try https://www.rsyslog.com/e/2145 ]
supervisor pid: 2040 unicorn pid: 2066
nginx: [emerg] cannot load certificate "/shared/ssl/bbs.antivte.com.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
nginx: [emerg] cannot load certificate "/shared/ssl/bbs.antivte.com.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
nginx: [emerg] cannot load certificate "/shared/ssl/bbs.antivte.com.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
nginx: [emerg] cannot load certificate "/shared/ssl/bbs.antivte.com.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
nginx: [emerg] cannot load certificate "/shared/ssl/bbs.antivte.com.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
nginx: [emerg] cannot load certificate "/shared/ssl/bbs.antivte.com.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)
12

네, 이것은 인증 실패에 대한 레이트 리밋(rate limit)이며, 호스트명별, 계정별, 시간당 5회 실패까지 허용됩니다. 게시하신 로그 스니펫은 거의 4시간 전 것이므로 이미 리셋되었습니다. 문제는 검증이 왜 실패하는 것이며, OP에서 게시하신 로그 중 관련 부분은 다음과 같습니다:

[Thu 26 Dec 2019 04:52:51 AM UTC] original='{
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:ietf:params:acme:error:unauthorized",
    "detail": "Invalid response from https://bbs.antivte.com/.well-known/acme-challenge/IwOr1RVa3fenfKBxQH6Kq7x2zh8T4zWgyfImWOWzJ-M [2606:4700:30::681b:b071]: \"\u003c!DOCTYPE html\u003e\\n\u003c!--[if lt IE 7]\u003e \u003chtml class=\\\"no-js ie6 oldie\\\" lang=\\\"en-US\\\"\u003e \u003c![endif]--\u003e\\n\u003c!--[if IE 7]\u003e    \u003chtml class=\\\"no-js \"",
    "status": 403
  },

서버(또는 Cloudflare)가 검증 요청에 대해 403을 반환하고 있습니다. 먼저 해당 도메인에 대해 Cloudflare를 비활성화하고 다시 시도해 보시는 것을 권장합니다.

레이트 리밋은 혼란스러울 수 있지만, 여기에서 잘 문서화되어 있습니다:

13

비활성화라는 것은 무엇을 의미합니까? 다른 DNS 관리자를 사용해야 하나요?

14

제가 말씀드린 그대로입니다. 모든 “cloudflare” 관련 설정을 비활성화하세요. DNS 페이지에서 구름 아이콘이 주황색이 아니라 회색이어야 합니다. DNS 호스트를 변경할 이유는 없습니다.

15

하지만 DNS 설정이 없다면 도메인이 Discourse 컨테이너가 실행 중인 내 서버를 가리킬 수 있습니다.

16

네, 정확히 거기를 가리켜야 합니다.

17

어쨌든 dnspod 같은 DNS 관리 도구가 하나 더 필요해.

18

그게 질문인가요, 아니면 진술인가요? 질문이라면, 다른 DNS 호스트가 필요한 이유는 전혀 없습니다. 특히 Discourse와 관련된 이유라면 더더욱요.

19

참고로, DigitalOcean을 통해 서버를 지정할 수 있는 것 같습니다.