acme用cf的api老是申请不了zerossl的证书……
2023/12/24 08:57:46
无语了，怎么弄都报错：Error, can not get domain token "type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/vOhhkai3nxopCFgfcsoiYw","status":"invalid","error":{
这个dns01怎么查都没查到解决方法，只好来问问雕大的mjj们了！
详细错误log：
666:~$ export CF_Token="lsdkfjlsdkjflksdjflksj5dfs"
export CF_Account_ID="jfxlskdjflksdjdsfsdffsdff"
export CF_Zone_ID="sdfsdf8e2fsdfsdff"
666:~$ acme.sh --issue --dns dns_cf -d 11223344.xyz -d *.11223344.xyz --debug 2
[Fri 22 Dec 2023 09:53:27 PM HKT] Lets find script dir.
[Fri 22 Dec 2023 09:53:27 PM HKT] _SCRIPT_='/home/666/.acme.sh/acme.sh'
[Fri 22 Dec 2023 09:53:27 PM HKT] _script='/home/666/.acme.sh/acme.sh'
[Fri 22 Dec 2023 09:53:27 PM HKT] _script_home='/home/666/.acme.sh'
[Fri 22 Dec 2023 09:53:27 PM HKT] Using config home:/home/666/.acme.sh
[Fri 22 Dec 2023 09:53:27 PM HKT] LE_WORKING_DIR='/home/666/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.0.8
[Fri 22 Dec 2023 09:53:27 PM HKT] Running cmd: issue
[Fri 22 Dec 2023 09:53:27 PM HKT] _main_domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _alt_domains='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] Using config home:/home/666/.acme.sh
[Fri 22 Dec 2023 09:53:27 PM HKT] default_acme_server
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Fri 22 Dec 2023 09:53:27 PM HKT] _ACME_SERVER_HOST='acme.zerossl.com'
[Fri 22 Dec 2023 09:53:27 PM HKT] _ACME_SERVER_PATH='v2/DV90'
[Fri 22 Dec 2023 09:53:27 PM HKT] DOMAIN_PATH='/home/666/.acme.sh/11223344.xyz_ecc'
[Fri 22 Dec 2023 09:53:27 PM HKT] 'dns_cf' does not contain 'dns'
[Fri 22 Dec 2023 09:53:27 PM HKT] Le_NextRenewTime
[Fri 22 Dec 2023 09:53:27 PM HKT] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Fri 22 Dec 2023 09:53:27 PM HKT] _init api for server: https://acme.zerossl.com/v2/DV90
[Fri 22 Dec 2023 09:53:27 PM HKT] GET
[Fri 22 Dec 2023 09:53:27 PM HKT] url='https://acme.zerossl.com/v2/DV90'
[Fri 22 Dec 2023 09:53:27 PM HKT] timeout=
[Fri 22 Dec 2023 09:53:27 PM HKT] _CURL='curl --silent --dump-header /home/666/.acme.sh/http.header -L --trace-ascii /tmp/tmp.uTjPdUdPhc -g '
[Fri 22 Dec 2023 09:53:27 PM HKT] ret='0'
[Fri 22 Dec 2023 09:53:27 PM HKT] response='{
"newNonce": "https://acme.zerossl.com/v2/DV90/newNonce",
"newAccount": "https://acme.zerossl.com/v2/DV90/newAccount",
"newOrder": "https://acme.zerossl.com/v2/DV90/newOrder",
"revokeCert": "https://acme.zerossl.com/v2/DV90/revokeCert",
"keyChange": "https://acme.zerossl.com/v2/DV90/keyChange",
"meta": {
"termsOfService": "https://secure.trust-provider.com/repository/docs/Legacy/20230516_Certificate_Subscriber_Agreement_v_2_6_click.pdf",
"website": "https://zerossl.com",
"caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"],
"externalAccountRequired": true
}
}'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_AUTHZ
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20230516_Certificate_Subscriber_Agreement_v_2_6_click.pdf'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Fri 22 Dec 2023 09:53:27 PM HKT] Using CA: https://acme.zerossl.com/v2/DV90
[Fri 22 Dec 2023 09:53:27 PM HKT] _on_before_issue
[Fri 22 Dec 2023 09:53:27 PM HKT] _chk_main_domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _chk_alt_domains='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] 'dns_cf' does not contain 'no'
[Fri 22 Dec 2023 09:53:27 PM HKT] Le_LocalAddress
[Fri 22 Dec 2023 09:53:27 PM HKT] d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] Check for domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _currentRoot='dns_cf'
[Fri 22 Dec 2023 09:53:27 PM HKT] d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] Check for domain='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _currentRoot='dns_cf'
[Fri 22 Dec 2023 09:53:27 PM HKT] d
[Fri 22 Dec 2023 09:53:27 PM HKT] 'dns_cf' does not contain 'apache'
[Fri 22 Dec 2023 09:53:27 PM HKT] _saved_account_key_hash='ZWPQfjdslkjflkYMGm1LYRLWu+vgbcsfsdfszjdjslknsoeR2A='
[Fri 22 Dec 2023 09:53:27 PM HKT] _saved_account_key_hash is not changed, skip register account.
[Fri 22 Dec 2023 09:53:27 PM HKT] Read key length:ec-256
[Fri 22 Dec 2023 09:53:27 PM HKT] _createcsr
[Fri 22 Dec 2023 09:53:27 PM HKT] domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] domainlist='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] csrkey='/home/666/.acme.sh/11223344.xyz_ecc/11223344.xyz.key'
[Fri 22 Dec 2023 09:53:27 PM HKT] csr='/home/666/.acme.sh/11223344.xyz_ecc/11223344.xyz.csr'
[Fri 22 Dec 2023 09:53:27 PM HKT] csrconf='/home/666/.acme.sh/11223344.xyz_ecc/11223344.xyz.csr.conf'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] domainlist='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='11223344'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='apr-1.7.4'
[Fri 22 Dec 2023 09:53:27 PM HKT] Multi domain='DNS:11223344.xyz,DNS:*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] _csr_cn='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='11223344'
[Fri 22 Dec 2023 09:53:27 PM HKT] Getting domain auth token for each domain
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='11223344'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='apr-1.7.4'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] d
[Fri 22 Dec 2023 09:53:27 PM HKT] _identifiers='{"type":"dns","value":"11223344.xyz"},{"type":"dns","value":"*.11223344.xyz"}'
[Fri 22 Dec 2023 09:53:27 PM HKT] _notBefore
[Fri 22 Dec 2023 09:53:27 PM HKT] _notAfter
[Fri 22 Dec 2023 09:53:27 PM HKT] =======Begin Send Signed Request=======
[Fri 22 Dec 2023 09:53:27 PM HKT] url='https://acme.zerossl.com/v2/DV90/newOrder'
[Fri 22 Dec 2023 09:53:27 PM HKT] payload='{"identifiers": [{"type":"dns","value":"11223344.xyz"},{"type":"dns","value":"*.11223344.xyz"}]}'
[Fri 22 Dec 2023 09:53:27 PM HKT] EC key
[Fri 22 Dec 2023 09:53:27 PM HKT] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Fri 22 Dec 2023 09:53:27 PM HKT] HEAD
[Fri 22 Dec 2023 09:53:27 PM HKT] _post_url='https://acme.zerossl.com/v2/DV90/newNonce'
[Fri 22 Dec 2023 09:53:27 PM HKT] body
[Fri 22 Dec 2023 09:53:27 PM HKT] _postContentType='application/jose+json'
[Fri 22 Dec 2023 09:53:28 PM HKT] _CURL='curl --silent --dump-header /home/666/.acme.sh/http.header -L --trace-ascii /tmp/tmp.eqzuOoiTHw -g -I '
[Fri 22 Dec 2023 09:53:28 PM HKT] _ret='0'
[Fri 22 Dec 2023 09:53:28 PM HKT] _headers='HTTP/2 200
这个dns01怎么查都没查到解决方法，只好来问问雕大的mjj们了！
详细错误log：
666:~$ export CF_Token="lsdkfjlsdkjflksdjflksj5dfs"
export CF_Account_ID="jfxlskdjflksdjdsfsdffsdff"
export CF_Zone_ID="sdfsdf8e2fsdfsdff"
666:~$ acme.sh --issue --dns dns_cf -d 11223344.xyz -d *.11223344.xyz --debug 2
[Fri 22 Dec 2023 09:53:27 PM HKT] Lets find script dir.
[Fri 22 Dec 2023 09:53:27 PM HKT] _SCRIPT_='/home/666/.acme.sh/acme.sh'
[Fri 22 Dec 2023 09:53:27 PM HKT] _script='/home/666/.acme.sh/acme.sh'
[Fri 22 Dec 2023 09:53:27 PM HKT] _script_home='/home/666/.acme.sh'
[Fri 22 Dec 2023 09:53:27 PM HKT] Using config home:/home/666/.acme.sh
[Fri 22 Dec 2023 09:53:27 PM HKT] LE_WORKING_DIR='/home/666/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.0.8
[Fri 22 Dec 2023 09:53:27 PM HKT] Running cmd: issue
[Fri 22 Dec 2023 09:53:27 PM HKT] _main_domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _alt_domains='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] Using config home:/home/666/.acme.sh
[Fri 22 Dec 2023 09:53:27 PM HKT] default_acme_server
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Fri 22 Dec 2023 09:53:27 PM HKT] _ACME_SERVER_HOST='acme.zerossl.com'
[Fri 22 Dec 2023 09:53:27 PM HKT] _ACME_SERVER_PATH='v2/DV90'
[Fri 22 Dec 2023 09:53:27 PM HKT] DOMAIN_PATH='/home/666/.acme.sh/11223344.xyz_ecc'
[Fri 22 Dec 2023 09:53:27 PM HKT] 'dns_cf' does not contain 'dns'
[Fri 22 Dec 2023 09:53:27 PM HKT] Le_NextRenewTime
[Fri 22 Dec 2023 09:53:27 PM HKT] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Fri 22 Dec 2023 09:53:27 PM HKT] _init api for server: https://acme.zerossl.com/v2/DV90
[Fri 22 Dec 2023 09:53:27 PM HKT] GET
[Fri 22 Dec 2023 09:53:27 PM HKT] url='https://acme.zerossl.com/v2/DV90'
[Fri 22 Dec 2023 09:53:27 PM HKT] timeout=
[Fri 22 Dec 2023 09:53:27 PM HKT] _CURL='curl --silent --dump-header /home/666/.acme.sh/http.header -L --trace-ascii /tmp/tmp.uTjPdUdPhc -g '
[Fri 22 Dec 2023 09:53:27 PM HKT] ret='0'
[Fri 22 Dec 2023 09:53:27 PM HKT] response='{
"newNonce": "https://acme.zerossl.com/v2/DV90/newNonce",
"newAccount": "https://acme.zerossl.com/v2/DV90/newAccount",
"newOrder": "https://acme.zerossl.com/v2/DV90/newOrder",
"revokeCert": "https://acme.zerossl.com/v2/DV90/revokeCert",
"keyChange": "https://acme.zerossl.com/v2/DV90/keyChange",
"meta": {
"termsOfService": "https://secure.trust-provider.com/repository/docs/Legacy/20230516_Certificate_Subscriber_Agreement_v_2_6_click.pdf",
"website": "https://zerossl.com",
"caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"],
"externalAccountRequired": true
}
}'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_AUTHZ
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20230516_Certificate_Subscriber_Agreement_v_2_6_click.pdf'
[Fri 22 Dec 2023 09:53:27 PM HKT] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Fri 22 Dec 2023 09:53:27 PM HKT] Using CA: https://acme.zerossl.com/v2/DV90
[Fri 22 Dec 2023 09:53:27 PM HKT] _on_before_issue
[Fri 22 Dec 2023 09:53:27 PM HKT] _chk_main_domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _chk_alt_domains='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] 'dns_cf' does not contain 'no'
[Fri 22 Dec 2023 09:53:27 PM HKT] Le_LocalAddress
[Fri 22 Dec 2023 09:53:27 PM HKT] d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] Check for domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _currentRoot='dns_cf'
[Fri 22 Dec 2023 09:53:27 PM HKT] d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] Check for domain='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _currentRoot='dns_cf'
[Fri 22 Dec 2023 09:53:27 PM HKT] d
[Fri 22 Dec 2023 09:53:27 PM HKT] 'dns_cf' does not contain 'apache'
[Fri 22 Dec 2023 09:53:27 PM HKT] _saved_account_key_hash='ZWPQfjdslkjflkYMGm1LYRLWu+vgbcsfsdfszjdjslknsoeR2A='
[Fri 22 Dec 2023 09:53:27 PM HKT] _saved_account_key_hash is not changed, skip register account.
[Fri 22 Dec 2023 09:53:27 PM HKT] Read key length:ec-256
[Fri 22 Dec 2023 09:53:27 PM HKT] _createcsr
[Fri 22 Dec 2023 09:53:27 PM HKT] domain='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] domainlist='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] csrkey='/home/666/.acme.sh/11223344.xyz_ecc/11223344.xyz.key'
[Fri 22 Dec 2023 09:53:27 PM HKT] csr='/home/666/.acme.sh/11223344.xyz_ecc/11223344.xyz.csr'
[Fri 22 Dec 2023 09:53:27 PM HKT] csrconf='/home/666/.acme.sh/11223344.xyz_ecc/11223344.xyz.csr.conf'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] domainlist='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='11223344'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='apr-1.7.4'
[Fri 22 Dec 2023 09:53:27 PM HKT] Multi domain='DNS:11223344.xyz,DNS:*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] _csr_cn='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='11223344'
[Fri 22 Dec 2023 09:53:27 PM HKT] Getting domain auth token for each domain
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='11223344'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] seg='apr-1.7.4'
[Fri 22 Dec 2023 09:53:27 PM HKT] _is_idn_d='*.11223344.xyz'
[Fri 22 Dec 2023 09:53:27 PM HKT] _idn_temp
[Fri 22 Dec 2023 09:53:27 PM HKT] d
[Fri 22 Dec 2023 09:53:27 PM HKT] _identifiers='{"type":"dns","value":"11223344.xyz"},{"type":"dns","value":"*.11223344.xyz"}'
[Fri 22 Dec 2023 09:53:27 PM HKT] _notBefore
[Fri 22 Dec 2023 09:53:27 PM HKT] _notAfter
[Fri 22 Dec 2023 09:53:27 PM HKT] =======Begin Send Signed Request=======
[Fri 22 Dec 2023 09:53:27 PM HKT] url='https://acme.zerossl.com/v2/DV90/newOrder'
[Fri 22 Dec 2023 09:53:27 PM HKT] payload='{"identifiers": [{"type":"dns","value":"11223344.xyz"},{"type":"dns","value":"*.11223344.xyz"}]}'
[Fri 22 Dec 2023 09:53:27 PM HKT] EC key
[Fri 22 Dec 2023 09:53:27 PM HKT] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Fri 22 Dec 2023 09:53:27 PM HKT] HEAD
[Fri 22 Dec 2023 09:53:27 PM HKT] _post_url='https://acme.zerossl.com/v2/DV90/newNonce'
[Fri 22 Dec 2023 09:53:27 PM HKT] body
[Fri 22 Dec 2023 09:53:27 PM HKT] _postContentType='application/jose+json'
[Fri 22 Dec 2023 09:53:28 PM HKT] _CURL='curl --silent --dump-header /home/666/.acme.sh/http.header -L --trace-ascii /tmp/tmp.eqzuOoiTHw -g -I '
[Fri 22 Dec 2023 09:53:28 PM HKT] _ret='0'
[Fri 22 Dec 2023 09:53:28 PM HKT] _headers='HTTP/2 200