The server could not connect to validation target during http-01 challenge. #1359

ShadowcasterIT · 2023-04-23T14:49:17Z

ShadowcasterIT
Apr 23, 2023

I am trying to use acme.sh with a step-ca server but am encountering the following error during the http-01 challenge "The server could not connect to validation target" followed by "Unacceptable anti-replay nonce".

Acme.sh command:

acme.sh --issue -d test.com --webroot /var/www/html --server     https://10.6.18.10:8443/acme/acme/directory --insecure --apache --debug 2 --use-wget

Server output below:

INFO[6084]                                               duration="142.85µs" duration-ns=142850 fields.time="2023-04-23T14:15:48Z" method=GET name=ca path=/acme/acme/directory protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jr574b3p8mls77pog response="{\"newNonce\":\"https://10.6.18.10:8443/acme/acme/new-nonce\",\"newAccount\":\"https://10.6.18.10:8443/acme/acme/new-account\",\"newOrder\":\"https://10.6.18.10:8443/acme/acme/new-order\",\"revokeCert\":\"https://10.6.18.10:8443/acme/acme/revoke-cert\",\"keyChange\":\"https://10.6.18.10:8443/acme/acme/key-change\"}" size=297 status=200 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=
INFO[6087]                                               duration=43.845494ms duration-ns=43845494 fields.time="2023-04-23T14:15:51Z" method=HEAD name=ca nonce=T1FpcE9zam52QVNIUER6dWVQQ1o5M0NWR3REZEp4NDg path=/acme/acme/new-nonce protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jr5v4b3p8mls77pp0 size=0 status=200 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=
INFO[6088]                                               duration=258.061687ms duration-ns=258061687 fields.time="2023-04-23T14:15:51Z" method=POST name=ca nonce=RUNBRDRhTUpWd0N3bGMxV3U2RUpvN0V1aGlLNEJqVEg path=/acme/acme/new-order protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jr5v4b3p8mls77ppg response="{\"id\":\"Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6\",\"status\":\"pending\",\"expires\":\"2023-04-24T14:15:52Z\",\"identifiers\":[{\"type\":\"dns\",\"value\":\"test.com\"}],\"notBefore\":\"2023-04-23T14:14:52Z\",\"notAfter\":\"2023-04-24T14:15:52Z\",\"authorizations\":[\"https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs\"],\"finalize\":\"https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6/finalize\"}" size=402 status=201 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=
INFO[6089]                                               duration=73.679694ms duration-ns=73679694 fields.time="2023-04-23T14:15:52Z" method=POST name=ca nonce=V3dXMW11M2hNVWJsT0FTb25GZ3BZd2FpSGpJSm5wMzg path=/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jr674b3p8mls77pq0 response="{\"identifier\":{\"type\":\"dns\",\"value\":\"test.com\"},\"status\":\"pending\",\"challenges\":[{\"type\":\"dns-01\",\"status\":\"pending\",\"token\":\"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5\",\"url\":\"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/rwm6p4rrmlQhJw6o2SokuOpySF3xdzKT\"},{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5\",\"url\":\"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo\"},{\"type\":\"tls-alpn-01\",\"status\":\"pending\",\"token\":\"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5\",\"url\":\"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/g6jJnuCTGnjcK40674J7Ya1drDv3SHJw\"}],\"wildcard\":false,\"expires\":\"2023-04-24T14:15:52Z\"}" size=733 status=200 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=
INFO[6120]                                               duration=30.097751565s duration-ns=30097751565 fields.time="2023-04-23T14:15:54Z" method=POST name=ca nonce=T0o0WVBydWxWc0xmY3lLMDZXTEpLUEpJVFdMZ1dGaFk path=/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jr6n4b3p8mls77pqg response="{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5\",\"url\":\"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo\",\"error\":{\"type\":\"urn:ietf:params:acme:error:connection\",\"detail\":\"The server could not connect to validation target\"}}" size=317 status=200 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=
WARN[6121]                                               duration=42.864979ms duration-ns=42864979 error="nonce V3dXMW11M2hNVWJsT0FTb25GZ3BZd2FpSGpJSm5wMzg not found" fields.time="2023-04-23T14:16:25Z" method=POST name=ca nonce=STZBbjN3c3lVajFNRnBNV3pjWkZ5OHlJMEZYRllTMWI path=/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jref4b3p8mls77pr0 response="{\"type\":\"urn:ietf:params:acme:error:badNonce\",\"detail\":\"Unacceptable anti-replay nonce\"}" size=89 status=400 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=
INFO[6153]                                               duration=30.226957518s duration-ns=30226957518 fields.time="2023-04-23T14:16:26Z" method=POST name=ca nonce=b0JnN0pyVlg0dndQb1YydWRzQVE5WGNtOVl4a2ZPVDg path=/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jren4b3p8mls77prg response="{\"type\":\"http-01\",\"status\":\"pending\",\"token\":\"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5\",\"url\":\"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo\",\"error\":{\"type\":\"urn:ietf:params:acme:error:connection\",\"detail\":\"The server could not connect to validation target\"}}" size=317 status=200 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=
WARN[6154]                                               duration=44.590763ms duration-ns=44590763 error="nonce STZBbjN3c3lVajFNRnBNV3pjWkZ5OHlJMEZYRllTMWI not found" fields.time="2023-04-23T14:16:57Z" method=POST name=ca nonce=M3hUU3NnT3dvdG1IbnlVQkIwRjJhdk1aYWRPamVVSmk path=/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo protocol=HTTP/1.1 referer= remote-address=10.6.18.11 request-id=ch2jrmf4b3p8mls77ps0 response="{\"type\":\"urn:ietf:params:acme:error:badNonce\",\"detail\":\"Unacceptable anti-replay nonce\"}" size=89 status=400 user-agent="acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)" user-id=

ACME.sh output

[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='zerossl.com,zerossl'
[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='letsencrypt.org,letsencrypt'
[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='letsencrypt.org_test,letsencrypt_test,letsencrypttest'
[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='buypass.com,buypass'
[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='buypass.com_test,buypass_test,buypasstest'
[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='ssl.com,sslcom'
[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='google.com,google'
[Sun Apr 23 02:15:48 PM UTC 2023] _selectServer try snames='google.com_test,googletest,google_test'
[Sun Apr 23 02:15:48 PM UTC 2023] Lets find script dir.
[Sun Apr 23 02:15:48 PM UTC 2023] _SCRIPT_='/root/.acme.sh/acme.sh'
[Sun Apr 23 02:15:48 PM UTC 2023] _script='/root/.acme.sh/acme.sh'
[Sun Apr 23 02:15:48 PM UTC 2023] _script_home='/root/.acme.sh'
[Sun Apr 23 02:15:48 PM UTC 2023] Using config home:/root/.acme.sh
[Sun Apr 23 02:15:48 PM UTC 2023] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.0.6
[Sun Apr 23 02:15:48 PM UTC 2023] Using server: https://10.6.18.10:8443/acme/acme/directory
[Sun Apr 23 02:15:48 PM UTC 2023] Running cmd: issue
[Sun Apr 23 02:15:48 PM UTC 2023] _main_domain='test.com'
[Sun Apr 23 02:15:48 PM UTC 2023] _alt_domains='no'
[Sun Apr 23 02:15:48 PM UTC 2023] Using config home:/root/.acme.sh
[Sun Apr 23 02:15:48 PM UTC 2023] ACME_DIRECTORY='https://10.6.18.10:8443/acme/acme/directory'
[Sun Apr 23 02:15:48 PM UTC 2023] _ACME_SERVER_HOST='10.6.18.10'
[Sun Apr 23 02:15:48 PM UTC 2023] _ACME_SERVER_PATH='acme/acme/directory'
[Sun Apr 23 02:15:48 PM UTC 2023] DOMAIN_PATH='/root/.acme.sh/test.com_ecc'
[Sun Apr 23 02:15:48 PM UTC 2023] '/var/www/html,apache' does not contain 'dns'
[Sun Apr 23 02:15:48 PM UTC 2023] Le_NextRenewTime
[Sun Apr 23 02:15:48 PM UTC 2023] Using ACME_DIRECTORY: https://10.6.18.10:8443/acme/acme/directory
[Sun Apr 23 02:15:48 PM UTC 2023] _init api for server: https://10.6.18.10:8443/acme/acme/directory
[Sun Apr 23 02:15:48 PM UTC 2023] GET
[Sun Apr 23 02:15:48 PM UTC 2023] url='https://10.6.18.10:8443/acme/acme/directory'
[Sun Apr 23 02:15:48 PM UTC 2023] timeout=
[Sun Apr 23 02:15:48 PM UTC 2023] _WGET='wget -q -d  --content-on-error  --no-check-certificate '
Setting --content-on-error (contentonerror) to 1
Setting --check-certificate (checkcertificate) to 0
Setting --user-agent (useragent) to acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --server-response (serverresponse) to 1
Setting --output-document (outputdocument) to -
DEBUG output created by Wget 1.21.2 on linux-gnu.

Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
Created socket 3.
Releasing 0x0000563b16e9b290 (new refcount 0).
Deleting unused 0x0000563b16e9b290.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x0000563b16e9bc90
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
GET /acme/acme/directory HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive

---request end---

---response begin---
HTTP/1.1 200 OK
Content-Type: application/json
Date: Sun, 23 Apr 2023 14:15:48 GMT
Content-Length: 297

---response end---
  HTTP/1.1 200 OK
  Content-Type: application/json
  Date: Sun, 23 Apr 2023 14:15:48 GMT
  Content-Length: 297
Registered socket 3 for persistent reuse.
[Sun Apr 23 02:15:48 PM UTC 2023] options='/^[^ ][^ ]/d; /^ *$/d'
[Sun Apr 23 02:15:48 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:48 PM UTC 2023] options='s/^  //g'
[Sun Apr 23 02:15:48 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:48 PM UTC 2023] ret='0'
[Sun Apr 23 02:15:48 PM UTC 2023] response='{"newNonce":"https://10.6.18.10:8443/acme/acme/new-nonce","newAccount":"https://10.6.18.10:8443/acme/acme/new-account","newOrder":"https://10.6.18.10:8443/acme/acme/new-order","revokeCert":"https://10.6.18.10:8443/acme/acme/revoke-cert","keyChange":"https://10.6.18.10:8443/acme/acme/key-change"}'
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_KEY_CHANGE='https://10.6.18.10:8443/acme/acme/key-change'
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_NEW_AUTHZ
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_NEW_ORDER='https://10.6.18.10:8443/acme/acme/new-order'
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_NEW_ACCOUNT='https://10.6.18.10:8443/acme/acme/new-account'
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_REVOKE_CERT='https://10.6.18.10:8443/acme/acme/revoke-cert'
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_AGREEMENT
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_NEW_NONCE='https://10.6.18.10:8443/acme/acme/new-nonce'
[Sun Apr 23 02:15:49 PM UTC 2023] Using CA: https://10.6.18.10:8443/acme/acme/directory
[Sun Apr 23 02:15:49 PM UTC 2023] _on_before_issue
[Sun Apr 23 02:15:49 PM UTC 2023] _chk_main_domain='test.com'
[Sun Apr 23 02:15:49 PM UTC 2023] _chk_alt_domains
[Sun Apr 23 02:15:49 PM UTC 2023] '/var/www/html,apache' does not contain 'no'
[Sun Apr 23 02:15:49 PM UTC 2023] Le_LocalAddress
[Sun Apr 23 02:15:49 PM UTC 2023] d='test.com'
[Sun Apr 23 02:15:49 PM UTC 2023] Check for domain='test.com'
[Sun Apr 23 02:15:49 PM UTC 2023] _currentRoot='/var/www/html'
[Sun Apr 23 02:15:49 PM UTC 2023] d
[Sun Apr 23 02:15:49 PM UTC 2023] '/var/www/html,apache' contains 'apache'
[Sun Apr 23 02:15:49 PM UTC 2023] Using config home:/root/.acme.sh
[Sun Apr 23 02:15:49 PM UTC 2023] ACME_DIRECTORY='https://10.6.18.10:8443/acme/acme/directory'
[Sun Apr 23 02:15:49 PM UTC 2023] _ACME_SERVER_HOST='10.6.18.10'
[Sun Apr 23 02:15:49 PM UTC 2023] _ACME_SERVER_PATH='acme/acme/directory'
[Sun Apr 23 02:15:49 PM UTC 2023] httpdconfname='apache2.conf'
[Sun Apr 23 02:15:49 PM UTC 2023] httpdroot='/etc/apache2'
[Sun Apr 23 02:15:50 PM UTC 2023] httpdconf='/etc/apache2/apache2.conf'
[Sun Apr 23 02:15:50 PM UTC 2023] httpdconfname='apache2.conf'
[Sun Apr 23 02:15:50 PM UTC 2023] Checking if there is an error in the apache config file before starting.
[Sun Apr 23 02:15:50 PM UTC 2023] OK
[Sun Apr 23 02:15:50 PM UTC 2023] Backup apache config file='/etc/apache2/apache2.conf'
[Sun Apr 23 02:15:50 PM UTC 2023] JFYI, Config file /etc/apache2/apache2.conf is backuped to /root/.acme.sh/apache2.conf
[Sun Apr 23 02:15:50 PM UTC 2023] In case there is an error that can not be restored automatically, you may try restore it yourself.
[Sun Apr 23 02:15:50 PM UTC 2023] The backup file will be deleted on success, just forget it.
[Sun Apr 23 02:15:50 PM UTC 2023] apacheVer='2.4.52'
[Sun Apr 23 02:15:50 PM UTC 2023] _saved_account_key_hash='6NGC58m86WZnwKG36itOKkp4tAhOwOUZMU8BdQoJykU='
[Sun Apr 23 02:15:50 PM UTC 2023] _saved_account_key_hash is not changed, skip register account.
[Sun Apr 23 02:15:50 PM UTC 2023] Read key length:ec-256
[Sun Apr 23 02:15:50 PM UTC 2023] _createcsr
[Sun Apr 23 02:15:50 PM UTC 2023] domain='test.com'
[Sun Apr 23 02:15:50 PM UTC 2023] domainlist
[Sun Apr 23 02:15:50 PM UTC 2023] csrkey='/root/.acme.sh/test.com_ecc/test.com.key'
[Sun Apr 23 02:15:50 PM UTC 2023] csr='/root/.acme.sh/test.com_ecc/test.com.csr'
[Sun Apr 23 02:15:50 PM UTC 2023] csrconf='/root/.acme.sh/test.com_ecc/test.com.csr.conf'
[Sun Apr 23 02:15:50 PM UTC 2023] Single domain='test.com'
[Sun Apr 23 02:15:50 PM UTC 2023] seg='test'
[Sun Apr 23 02:15:50 PM UTC 2023] _is_idn_d='test.com'
[Sun Apr 23 02:15:50 PM UTC 2023] _idn_temp
[Sun Apr 23 02:15:50 PM UTC 2023] _is_idn_d='test.com'
[Sun Apr 23 02:15:50 PM UTC 2023] _idn_temp
[Sun Apr 23 02:15:50 PM UTC 2023] _csr_cn='test.com'
[Sun Apr 23 02:15:50 PM UTC 2023] seg='test'
[Sun Apr 23 02:15:50 PM UTC 2023] Getting domain auth token for each domain
[Sun Apr 23 02:15:50 PM UTC 2023] seg='test'
[Sun Apr 23 02:15:50 PM UTC 2023] _is_idn_d='test.com'
[Sun Apr 23 02:15:50 PM UTC 2023] _idn_temp
[Sun Apr 23 02:15:50 PM UTC 2023] d
[Sun Apr 23 02:15:50 PM UTC 2023] _identifiers='{"type":"dns","value":"test.com"}'
[Sun Apr 23 02:15:51 PM UTC 2023] _notBefore
[Sun Apr 23 02:15:51 PM UTC 2023] _notAfter
[Sun Apr 23 02:15:51 PM UTC 2023] url='https://10.6.18.10:8443/acme/acme/new-order'
[Sun Apr 23 02:15:51 PM UTC 2023] payload='{"identifiers": [{"type":"dns","value":"test.com"}]}'
[Sun Apr 23 02:15:51 PM UTC 2023] EC key
[Sun Apr 23 02:15:51 PM UTC 2023] Get nonce with HEAD. ACME_NEW_NONCE='https://10.6.18.10:8443/acme/acme/new-nonce'
[Sun Apr 23 02:15:51 PM UTC 2023] HEAD
[Sun Apr 23 02:15:51 PM UTC 2023] _post_url='https://10.6.18.10:8443/acme/acme/new-nonce'
[Sun Apr 23 02:15:51 PM UTC 2023] body
[Sun Apr 23 02:15:51 PM UTC 2023] _postContentType='application/jose+json'
[Sun Apr 23 02:15:51 PM UTC 2023] _WGET='wget -q -d  --content-on-error  --no-check-certificate  --read-timeout=3.0  --tries=2  '
Setting --content-on-error (contentonerror) to 1
Setting --check-certificate (checkcertificate) to 0
Setting --read-timeout (readtimeout) to 3.0
Setting --tries (tries) to 2
Setting --spider (spider) to 1
Setting --server-response (serverresponse) to 1
Setting --output-document (outputdocument) to -
Setting --user-agent (useragent) to acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to Content-Type: application/jose+json
Setting --post-data (postdata) to
Setting --method (method) to POST
Setting --body-data (bodydata) to
DEBUG output created by Wget 1.21.2 on linux-gnu.

Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
Created socket 3.
Releasing 0x0000564d27bb7e70 (new refcount 0).
Deleting unused 0x0000564d27bb7e70.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x0000564d27bb8470
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
HEAD /acme/acme/new-nonce HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive
Content-Type: application/jose+json
Content-Length: 0

---request end---
[BODY data: ]

---response begin---
HTTP/1.1 200 OK
Cache-Control: no-store
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Replay-Nonce: T1FpcE9zam52QVNIUER6dWVQQ1o5M0NWR3REZEp4NDg
Date: Sun, 23 Apr 2023 14:15:51 GMT

---response end---
  HTTP/1.1 200 OK
  Cache-Control: no-store
  Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
  Replay-Nonce: T1FpcE9zam52QVNIUER6dWVQQ1o5M0NWR3REZEp4NDg
  Date: Sun, 23 Apr 2023 14:15:51 GMT
Registered socket 3 for persistent reuse.
[Sun Apr 23 02:15:51 PM UTC 2023] options='/^[^ ][^ ]/d; /^ *$/d'
[Sun Apr 23 02:15:51 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:51 PM UTC 2023] options='s/^  //g'
[Sun Apr 23 02:15:51 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:51 PM UTC 2023] _ret='0'
[Sun Apr 23 02:15:51 PM UTC 2023] _headers='subject: CN=Step Online CA
issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh


HTTP/1.1 200 OK
Cache-Control: no-store
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Replay-Nonce: T1FpcE9zam52QVNIUER6dWVQQ1o5M0NWR3REZEp4NDg
Date: Sun, 23 Apr 2023 14:15:51 GMT'
[Sun Apr 23 02:15:51 PM UTC 2023] _CACHED_NONCE='T1FpcE9zam52QVNIUER6dWVQQ1o5M0NWR3REZEp4NDg'
[Sun Apr 23 02:15:51 PM UTC 2023] nonce='T1FpcE9zam52QVNIUER6dWVQQ1o5M0NWR3REZEp4NDg'
[Sun Apr 23 02:15:51 PM UTC 2023] POST
[Sun Apr 23 02:15:51 PM UTC 2023] _post_url='https://10.6.18.10:8443/acme/acme/new-order'
[Sun Apr 23 02:15:51 PM UTC 2023] body='{"protected": "eyJub25jZSI6ICJUMUZwY0U5emFtNTJRVk5JVUVSNmRXVlFRMW81TTBOV1IzUkVaRXA0TkRnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InRlc3QuY29tIn1dfQ", "signature": "l3xsvDV26003aOKdyLlJuSXke_XUNRqwMEvnufDvMAW0Nk8qkkKPcf0R3taRIJh3GFO9Fwl09FSVewyhjer_jg"}'
[Sun Apr 23 02:15:51 PM UTC 2023] _postContentType='application/jose+json'
[Sun Apr 23 02:15:51 PM UTC 2023] Http already initialized.
[Sun Apr 23 02:15:51 PM UTC 2023] _WGET='wget -q -d  --content-on-error  --no-check-certificate '
Setting --content-on-error (contentonerror) to 1
Setting --check-certificate (checkcertificate) to 0
Setting --server-response (serverresponse) to 1
Setting --output-document (outputdocument) to -
Setting --user-agent (useragent) to acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to Content-Type: application/jose+json
Setting --post-data (postdata) to {"protected": "eyJub25jZSI6ICJUMUZwY0U5emFtNTJRVk5JVUVSNmRXVlFRMW81TTBOV1IzUkVaRXA0TkRnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InRlc3QuY29tIn1dfQ", "signature": "l3xsvDV26003aOKdyLlJuSXke_XUNRqwMEvnufDvMAW0Nk8qkkKPcf0R3taRIJh3GFO9Fwl09FSVewyhjer_jg"}
Setting --method (method) to POST
Setting --body-data (bodydata) to {"protected": "eyJub25jZSI6ICJUMUZwY0U5emFtNTJRVk5JVUVSNmRXVlFRMW81TTBOV1IzUkVaRXA0TkRnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InRlc3QuY29tIn1dfQ", "signature": "l3xsvDV26003aOKdyLlJuSXke_XUNRqwMEvnufDvMAW0Nk8qkkKPcf0R3taRIJh3GFO9Fwl09FSVewyhjer_jg"}
DEBUG output created by Wget 1.21.2 on linux-gnu.

Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
Created socket 3.
Releasing 0x000055a35fc3d540 (new refcount 0).
Deleting unused 0x000055a35fc3d540.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x000055a35fc3df60
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
POST /acme/acme/new-order HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive
Content-Type: application/jose+json
Content-Length: 487

---request end---
[BODY data: {"protected": "eyJub25jZSI6ICJUMUZwY0U5emFtNTJRVk5JVUVSNmRXVlFRMW81TTBOV1IzUkVaRXA0TkRnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6InRlc3QuY29tIn1dfQ", "signature": "l3xsvDV26003aOKdyLlJuSXke_XUNRqwMEvnufDvMAW0Nk8qkkKPcf0R3taRIJh3GFO9Fwl09FSVewyhjer_jg"}]

---response begin---
HTTP/1.1 201 Created
Cache-Control: no-store
Content-Type: application/json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Location: https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6
Replay-Nonce: RUNBRDRhTUpWd0N3bGMxV3U2RUpvN0V1aGlLNEJqVEg
Date: Sun, 23 Apr 2023 14:15:52 GMT
Content-Length: 402

---response end---
  HTTP/1.1 201 Created
  Cache-Control: no-store
  Content-Type: application/json
  Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
  Location: https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6
  Replay-Nonce: RUNBRDRhTUpWd0N3bGMxV3U2RUpvN0V1aGlLNEJqVEg
  Date: Sun, 23 Apr 2023 14:15:52 GMT
  Content-Length: 402
Registered socket 3 for persistent reuse.
[Sun Apr 23 02:15:52 PM UTC 2023] options='/^[^ ][^ ]/d; /^ *$/d'
[Sun Apr 23 02:15:52 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:52 PM UTC 2023] options='s/^  //g'
[Sun Apr 23 02:15:52 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:52 PM UTC 2023] _ret='0'
[Sun Apr 23 02:15:52 PM UTC 2023] responseHeaders='subject: CN=Step Online CA
issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh


HTTP/1.1 201 Created
Cache-Control: no-store
Content-Type: application/json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Location: https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6
Replay-Nonce: RUNBRDRhTUpWd0N3bGMxV3U2RUpvN0V1aGlLNEJqVEg
Date: Sun, 23 Apr 2023 14:15:52 GMT
Content-Length: 402'
[Sun Apr 23 02:15:52 PM UTC 2023] code='201'
[Sun Apr 23 02:15:52 PM UTC 2023] original='{"id":"Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6","status":"pending","expires":"2023-04-24T14:15:52Z","identifiers":[{"type":"dns","value":"test.com"}],"notBefore":"2023-04-23T14:14:52Z","notAfter":"2023-04-24T14:15:52Z","authorizations":["https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs"],"finalize":"https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6/finalize"}'
[Sun Apr 23 02:15:52 PM UTC 2023] response='{"id":"Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6","status":"pending","expires":"2023-04-24T14:15:52Z","identifiers":[{"type":"dns","value":"test.com"}],"notBefore":"2023-04-23T14:14:52Z","notAfter":"2023-04-24T14:15:52Z","authorizations":["https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs"],"finalize":"https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6/finalize"}'
[Sun Apr 23 02:15:52 PM UTC 2023] Le_LinkOrder='https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6'
[Sun Apr 23 02:15:52 PM UTC 2023] Le_OrderFinalize='https://10.6.18.10:8443/acme/acme/order/Vsa5ldf5X8YKWUhMPyG0ZIjXWg7hL2Z6/finalize'
[Sun Apr 23 02:15:52 PM UTC 2023] _authorizations_seg='https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs'
[Sun Apr 23 02:15:52 PM UTC 2023] _authz_url='https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs'
[Sun Apr 23 02:15:52 PM UTC 2023] url='https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs'
[Sun Apr 23 02:15:52 PM UTC 2023] payload
[Sun Apr 23 02:15:52 PM UTC 2023] Use cached jwk for file: /root/.acme.sh/ca/10.6.18.10/acme/acme/directory/account.key
[Sun Apr 23 02:15:52 PM UTC 2023] Use _CACHED_NONCE='RUNBRDRhTUpWd0N3bGMxV3U2RUpvN0V1aGlLNEJqVEg'
[Sun Apr 23 02:15:52 PM UTC 2023] nonce='RUNBRDRhTUpWd0N3bGMxV3U2RUpvN0V1aGlLNEJqVEg'
[Sun Apr 23 02:15:52 PM UTC 2023] POST
[Sun Apr 23 02:15:52 PM UTC 2023] _post_url='https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs'
[Sun Apr 23 02:15:52 PM UTC 2023] body='{"protected": "eyJub25jZSI6ICJSVU5CUkRSaFRVcFdkME4zYkdNeFYzVTJSVXB2TjBWMWFHbExORUpxVkVnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYXV0aHovdFBzMVlsTmRPTWFoa05NSGlSRkhZYVNiQ0loQ0kzRnMiLCAiYWxnIjogIkVTMjU2IiwgImtpZCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYWNjb3VudC9BVTVvN1Q3Yjh3ZE1BTVJPelNIbDJ6c1l0aFpJaE1sSiJ9", "payload": "", "signature": "fsZCqjfNcoSO-7KQA3RIKMpUSIeVnGDSnFRk5uJwri-Ai87rzth2la3R8S6X-n9j8P2z6E-SmBFDyEh1HS21iA"}'
[Sun Apr 23 02:15:52 PM UTC 2023] _postContentType='application/jose+json'
[Sun Apr 23 02:15:52 PM UTC 2023] Http already initialized.
[Sun Apr 23 02:15:52 PM UTC 2023] _WGET='wget -q -d  --content-on-error  --no-check-certificate '
Setting --content-on-error (contentonerror) to 1
Setting --check-certificate (checkcertificate) to 0
Setting --server-response (serverresponse) to 1
Setting --output-document (outputdocument) to -
Setting --user-agent (useragent) to acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to Content-Type: application/jose+json
Setting --post-data (postdata) to {"protected": "eyJub25jZSI6ICJSVU5CUkRSaFRVcFdkME4zYkdNeFYzVTJSVXB2TjBWMWFHbExORUpxVkVnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYXV0aHovdFBzMVlsTmRPTWFoa05NSGlSRkhZYVNiQ0loQ0kzRnMiLCAiYWxnIjogIkVTMjU2IiwgImtpZCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYWNjb3VudC9BVTVvN1Q3Yjh3ZE1BTVJPelNIbDJ6c1l0aFpJaE1sSiJ9", "payload": "", "signature": "fsZCqjfNcoSO-7KQA3RIKMpUSIeVnGDSnFRk5uJwri-Ai87rzth2la3R8S6X-n9j8P2z6E-SmBFDyEh1HS21iA"}
Setting --method (method) to POST
Setting --body-data (bodydata) to {"protected": "eyJub25jZSI6ICJSVU5CUkRSaFRVcFdkME4zYkdNeFYzVTJSVXB2TjBWMWFHbExORUpxVkVnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYXV0aHovdFBzMVlsTmRPTWFoa05NSGlSRkhZYVNiQ0loQ0kzRnMiLCAiYWxnIjogIkVTMjU2IiwgImtpZCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYWNjb3VudC9BVTVvN1Q3Yjh3ZE1BTVJPelNIbDJ6c1l0aFpJaE1sSiJ9", "payload": "", "signature": "fsZCqjfNcoSO-7KQA3RIKMpUSIeVnGDSnFRk5uJwri-Ai87rzth2la3R8S6X-n9j8P2z6E-SmBFDyEh1HS21iA"}
DEBUG output created by Wget 1.21.2 on linux-gnu.

Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
Created socket 3.
Releasing 0x000056263f3813a0 (new refcount 0).
Deleting unused 0x000056263f3813a0.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x000056263f381da0
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
POST /acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive
Content-Type: application/jose+json
Content-Length: 455

---request end---
[BODY data: {"protected": "eyJub25jZSI6ICJSVU5CUkRSaFRVcFdkME4zYkdNeFYzVTJSVXB2TjBWMWFHbExORUpxVkVnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYXV0aHovdFBzMVlsTmRPTWFoa05NSGlSRkhZYVNiQ0loQ0kzRnMiLCAiYWxnIjogIkVTMjU2IiwgImtpZCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvYWNjb3VudC9BVTVvN1Q3Yjh3ZE1BTVJPelNIbDJ6c1l0aFpJaE1sSiJ9", "payload": "", "signature": "fsZCqjfNcoSO-7KQA3RIKMpUSIeVnGDSnFRk5uJwri-Ai87rzth2la3R8S6X-n9j8P2z6E-SmBFDyEh1HS21iA"}]

---response begin---
HTTP/1.1 200 OK
Cache-Control: no-store
Content-Type: application/json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Location: https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs
Replay-Nonce: V3dXMW11M2hNVWJsT0FTb25GZ3BZd2FpSGpJSm5wMzg
Date: Sun, 23 Apr 2023 14:15:52 GMT
Content-Length: 733

---response end---
  HTTP/1.1 200 OK
  Cache-Control: no-store
  Content-Type: application/json
  Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
  Location: https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs
  Replay-Nonce: V3dXMW11M2hNVWJsT0FTb25GZ3BZd2FpSGpJSm5wMzg
  Date: Sun, 23 Apr 2023 14:15:52 GMT
  Content-Length: 733
Registered socket 3 for persistent reuse.
[Sun Apr 23 02:15:53 PM UTC 2023] options='/^[^ ][^ ]/d; /^ *$/d'
[Sun Apr 23 02:15:53 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:53 PM UTC 2023] options='s/^  //g'
[Sun Apr 23 02:15:53 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:15:53 PM UTC 2023] _ret='0'
[Sun Apr 23 02:15:53 PM UTC 2023] responseHeaders='subject: CN=Step Online CA
issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh


HTTP/1.1 200 OK
Cache-Control: no-store
Content-Type: application/json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Location: https://10.6.18.10:8443/acme/acme/authz/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs
Replay-Nonce: V3dXMW11M2hNVWJsT0FTb25GZ3BZd2FpSGpJSm5wMzg
Date: Sun, 23 Apr 2023 14:15:52 GMT
Content-Length: 733'
[Sun Apr 23 02:15:53 PM UTC 2023] code='200'
[Sun Apr 23 02:15:53 PM UTC 2023] original='{"identifier":{"type":"dns","value":"test.com"},"status":"pending","challenges":[{"type":"dns-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/rwm6p4rrmlQhJw6o2SokuOpySF3xdzKT"},{"type":"http-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo"},{"type":"tls-alpn-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/g6jJnuCTGnjcK40674J7Ya1drDv3SHJw"}],"wildcard":false,"expires":"2023-04-24T14:15:52Z"}'
[Sun Apr 23 02:15:53 PM UTC 2023] response='{"identifier":{"type":"dns","value":"test.com"},"status":"pending","challenges":[{"type":"dns-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/rwm6p4rrmlQhJw6o2SokuOpySF3xdzKT"},{"type":"http-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo"},{"type":"tls-alpn-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/g6jJnuCTGnjcK40674J7Ya1drDv3SHJw"}],"wildcard":false,"expires":"2023-04-24T14:15:52Z"}'
[Sun Apr 23 02:15:53 PM UTC 2023] response='{"identifier":{"type":"dns","value":"test.com"},"status":"pending","challenges":[{"type":"dns-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/rwm6p4rrmlQhJw6o2SokuOpySF3xdzKT"},{"type":"http-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo"},{"type":"tls-alpn-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/g6jJnuCTGnjcK40674J7Ya1drDv3SHJw"}],"wildcard":false,"expires":"2023-04-24T14:15:52Z"}'
[Sun Apr 23 02:15:53 PM UTC 2023] _d='test.com'
[Sun Apr 23 02:15:53 PM UTC 2023] _authorizations_map='test.com,{"identifier":{"type":"dns","value":"test.com"},"status":"pending","challenges":[{"type":"dns-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/rwm6p4rrmlQhJw6o2SokuOpySF3xdzKT"},{"type":"http-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo"},{"type":"tls-alpn-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/g6jJnuCTGnjcK40674J7Ya1drDv3SHJw"}],"wildcard":false,"expires":"2023-04-24T14:15:52Z"}
'
[Sun Apr 23 02:15:53 PM UTC 2023] d='test.com'
[Sun Apr 23 02:15:53 PM UTC 2023] Getting webroot for domain='test.com'
[Sun Apr 23 02:15:53 PM UTC 2023] _w='/var/www/html'
[Sun Apr 23 02:15:53 PM UTC 2023] _currentRoot='/var/www/html'
[Sun Apr 23 02:15:53 PM UTC 2023] _is_idn_d='test.com'
[Sun Apr 23 02:15:53 PM UTC 2023] _idn_temp
[Sun Apr 23 02:15:53 PM UTC 2023] _candidates='test.com,{"identifier":{"type":"dns","value":"test.com"},"status":"pending","challenges":[{"type":"dns-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/rwm6p4rrmlQhJw6o2SokuOpySF3xdzKT"},{"type":"http-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo"},{"type":"tls-alpn-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/g6jJnuCTGnjcK40674J7Ya1drDv3SHJw"}],"wildcard":false,"expires":"2023-04-24T14:15:52Z"}'
[Sun Apr 23 02:15:53 PM UTC 2023] response='{"identifier":{"type":"dns","value":"test.com"},"status":"pending","challenges":[{"type":"dns-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/rwm6p4rrmlQhJw6o2SokuOpySF3xdzKT"},{"type":"http-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo"},{"type":"tls-alpn-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/g6jJnuCTGnjcK40674J7Ya1drDv3SHJw"}],"wildcard":false,"expires":"2023-04-24T14:15:52Z"}'
[Sun Apr 23 02:15:53 PM UTC 2023] entry='"type":"http-01","status":"pending","token":"5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5","url":"https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo"'
[Sun Apr 23 02:15:53 PM UTC 2023] token='5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5'
[Sun Apr 23 02:15:53 PM UTC 2023] uri='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:15:53 PM UTC 2023] keyauthorization='5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5.9G8wb_NZ8KLlvw9zi9p44V4h2R2MKrRvvTwo2cj3Ffo'
[Sun Apr 23 02:15:53 PM UTC 2023] dvlist='test.com#5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5.9G8wb_NZ8KLlvw9zi9p44V4h2R2MKrRvvTwo2cj3Ffo#https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo#http-01#/var/www/html'
[Sun Apr 23 02:15:53 PM UTC 2023] d
[Sun Apr 23 02:15:53 PM UTC 2023] vlist='test.com#5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5.9G8wb_NZ8KLlvw9zi9p44V4h2R2MKrRvvTwo2cj3Ffo#https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo#http-01#/var/www/html,'
[Sun Apr 23 02:15:53 PM UTC 2023] d='test.com'
[Sun Apr 23 02:15:53 PM UTC 2023] ok, let's start to verify
[Sun Apr 23 02:15:53 PM UTC 2023] Verifying: test.com
[Sun Apr 23 02:15:53 PM UTC 2023] d='test.com'
[Sun Apr 23 02:15:53 PM UTC 2023] keyauthorization='5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5.9G8wb_NZ8KLlvw9zi9p44V4h2R2MKrRvvTwo2cj3Ffo'
[Sun Apr 23 02:15:53 PM UTC 2023] uri='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:15:53 PM UTC 2023] _currentRoot='/var/www/html'
[Sun Apr 23 02:15:53 PM UTC 2023] wellknown_path='/var/www/html/.well-known/acme-challenge'
[Sun Apr 23 02:15:53 PM UTC 2023] writing token:5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5 to /var/www/html/.well-known/acme-challenge/5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5
[Sun Apr 23 02:15:53 PM UTC 2023] Trigger domain validation.
[Sun Apr 23 02:15:53 PM UTC 2023] _t_url='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:15:53 PM UTC 2023] _t_key_authz='5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5.9G8wb_NZ8KLlvw9zi9p44V4h2R2MKrRvvTwo2cj3Ffo'
[Sun Apr 23 02:15:53 PM UTC 2023] _t_vtype='http-01'
[Sun Apr 23 02:15:53 PM UTC 2023] url='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:15:53 PM UTC 2023] payload='{}'
[Sun Apr 23 02:15:53 PM UTC 2023] Use cached jwk for file: /root/.acme.sh/ca/10.6.18.10/acme/acme/directory/account.key
[Sun Apr 23 02:15:53 PM UTC 2023] Use _CACHED_NONCE='V3dXMW11M2hNVWJsT0FTb25GZ3BZd2FpSGpJSm5wMzg'
[Sun Apr 23 02:15:53 PM UTC 2023] nonce='V3dXMW11M2hNVWJsT0FTb25GZ3BZd2FpSGpJSm5wMzg'
[Sun Apr 23 02:15:54 PM UTC 2023] POST
[Sun Apr 23 02:15:54 PM UTC 2023] _post_url='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:15:54 PM UTC 2023] body='{"protected": "eyJub25jZSI6ICJWM2RYTVcxMU0yaE5WV0pzVDBGVGIyNUdaM0JaZDJGcFNHcEpTbTV3TXpnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "LazNjQpGIp5R_H_40KohKJMWmlQUgK6ivYxYC0QGKLryJtWBaRL-XRCAJRNJQkG-SiSXcWvPDNTnpmisjkpWzg"}'
[Sun Apr 23 02:15:54 PM UTC 2023] _postContentType='application/jose+json'
[Sun Apr 23 02:15:54 PM UTC 2023] Http already initialized.
[Sun Apr 23 02:15:54 PM UTC 2023] _WGET='wget -q -d  --content-on-error  --no-check-certificate '
[Sun Apr 23 02:16:25 PM UTC 2023] wget returns 8, the server returns a 'Bad request' response, lets process the response later.
Setting --content-on-error (contentonerror) to 1
Setting --check-certificate (checkcertificate) to 0
Setting --server-response (serverresponse) to 1
Setting --output-document (outputdocument) to -
Setting --user-agent (useragent) to acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to Content-Type: application/jose+json
Setting --post-data (postdata) to {"protected": "eyJub25jZSI6ICJWM2RYTVcxMU0yaE5WV0pzVDBGVGIyNUdaM0JaZDJGcFNHcEpTbTV3TXpnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "LazNjQpGIp5R_H_40KohKJMWmlQUgK6ivYxYC0QGKLryJtWBaRL-XRCAJRNJQkG-SiSXcWvPDNTnpmisjkpWzg"}
Setting --method (method) to POST
Setting --body-data (bodydata) to {"protected": "eyJub25jZSI6ICJWM2RYTVcxMU0yaE5WV0pzVDBGVGIyNUdaM0JaZDJGcFNHcEpTbTV3TXpnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "LazNjQpGIp5R_H_40KohKJMWmlQUgK6ivYxYC0QGKLryJtWBaRL-XRCAJRNJQkG-SiSXcWvPDNTnpmisjkpWzg"}
DEBUG output created by Wget 1.21.2 on linux-gnu.

Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
Created socket 3.
Releasing 0x00005628943fe8c0 (new refcount 0).
Deleting unused 0x00005628943fe8c0.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x00005628943ff2c0
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
POST /acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive
Content-Type: application/jose+json
Content-Length: 508

---request end---
[BODY data: {"protected": "eyJub25jZSI6ICJWM2RYTVcxMU0yaE5WV0pzVDBGVGIyNUdaM0JaZDJGcFNHcEpTbTV3TXpnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "LazNjQpGIp5R_H_40KohKJMWmlQUgK6ivYxYC0QGKLryJtWBaRL-XRCAJRNJQkG-SiSXcWvPDNTnpmisjkpWzg"}]
Closed 3/SSL 0x00005628943ff2c0
Created socket 3.
Releasing 0x0000562894410d00 (new refcount 0).
Deleting unused 0x0000562894410d00.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x00005628943ff270
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
POST /acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive
Content-Type: application/jose+json
Content-Length: 508

---request end---
[BODY data: {"protected": "eyJub25jZSI6ICJWM2RYTVcxMU0yaE5WV0pzVDBGVGIyNUdaM0JaZDJGcFNHcEpTbTV3TXpnIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "LazNjQpGIp5R_H_40KohKJMWmlQUgK6ivYxYC0QGKLryJtWBaRL-XRCAJRNJQkG-SiSXcWvPDNTnpmisjkpWzg"}]

---response begin---
HTTP/1.1 400 Bad Request
Cache-Control: no-store
Content-Type: application/problem+json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Replay-Nonce: STZBbjN3c3lVajFNRnBNV3pjWkZ5OHlJMEZYRllTMWI
Date: Sun, 23 Apr 2023 14:16:25 GMT
Content-Length: 89

---response end---
  HTTP/1.1 400 Bad Request
  Cache-Control: no-store
  Content-Type: application/problem+json
  Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
  Replay-Nonce: STZBbjN3c3lVajFNRnBNV3pjWkZ5OHlJMEZYRllTMWI
  Date: Sun, 23 Apr 2023 14:16:25 GMT
  Content-Length: 89
Registered socket 3 for persistent reuse.
[Sun Apr 23 02:16:25 PM UTC 2023] options='/^[^ ][^ ]/d; /^ *$/d'
[Sun Apr 23 02:16:25 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:16:25 PM UTC 2023] options='s/^  //g'
[Sun Apr 23 02:16:25 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:16:25 PM UTC 2023] _ret='0'
[Sun Apr 23 02:16:25 PM UTC 2023] responseHeaders='subject: CN=Step Online CA
issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

subject: CN=Step Online CA
issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh


HTTP/1.1 400 Bad Request
Cache-Control: no-store
Content-Type: application/problem+json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Replay-Nonce: STZBbjN3c3lVajFNRnBNV3pjWkZ5OHlJMEZYRllTMWI
Date: Sun, 23 Apr 2023 14:16:25 GMT
Content-Length: 89'
[Sun Apr 23 02:16:25 PM UTC 2023] code='400'
[Sun Apr 23 02:16:25 PM UTC 2023] original='{"type":"urn:ietf:params:acme:error:badNonce","detail":"Unacceptable anti-replay nonce"}'
[Sun Apr 23 02:16:25 PM UTC 2023] response='{"type":"urn:ietf:params:acme:error:badNonce","detail":"Unacceptable anti-replay nonce"}'
[Sun Apr 23 02:16:25 PM UTC 2023] test.com:Challenge error: {"type":"urn:ietf:params:acme:error:badNonce","detail":"Unacceptable anti-replay nonce"}
[Sun Apr 23 02:16:25 PM UTC 2023] Debugging, skip removing: /var/www/html/.well-known/acme-challenge/5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5
[Sun Apr 23 02:16:25 PM UTC 2023] pid
[Sun Apr 23 02:16:25 PM UTC 2023] Using config home:/root/.acme.sh
[Sun Apr 23 02:16:25 PM UTC 2023] ACME_DIRECTORY='https://10.6.18.10:8443/acme/acme/directory'
[Sun Apr 23 02:16:25 PM UTC 2023] _ACME_SERVER_HOST='10.6.18.10'
[Sun Apr 23 02:16:25 PM UTC 2023] _ACME_SERVER_PATH='acme/acme/directory'
[Sun Apr 23 02:16:25 PM UTC 2023] httpdconfname='apache2.conf'
[Sun Apr 23 02:16:25 PM UTC 2023] httpdroot='/etc/apache2'
[Sun Apr 23 02:16:25 PM UTC 2023] httpdconf='/etc/apache2/apache2.conf'
[Sun Apr 23 02:16:26 PM UTC 2023] httpdconfname='apache2.conf'
[Sun Apr 23 02:16:26 PM UTC 2023] Restored: /etc/apache2/apache2.conf.
[Sun Apr 23 02:16:26 PM UTC 2023] Restored successfully.
[Sun Apr 23 02:16:26 PM UTC 2023] No need to restore nginx, skip.
[Sun Apr 23 02:16:26 PM UTC 2023] _clearupdns
[Sun Apr 23 02:16:26 PM UTC 2023] dns_entries
[Sun Apr 23 02:16:26 PM UTC 2023] skip dns.
[Sun Apr 23 02:16:26 PM UTC 2023] _on_issue_err
[Sun Apr 23 02:16:26 PM UTC 2023] Please check log file for more details: /root/.acme.sh/acme.sh.log
[Sun Apr 23 02:16:26 PM UTC 2023] _chk_vlist='test.com#5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5.9G8wb_NZ8KLlvw9zi9p44V4h2R2MKrRvvTwo2cj3Ffo#https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo#http-01#/var/www/html,'
[Sun Apr 23 02:16:26 PM UTC 2023] start to deactivate authz
[Sun Apr 23 02:16:26 PM UTC 2023] Trigger domain validation.
[Sun Apr 23 02:16:26 PM UTC 2023] _t_url='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:16:26 PM UTC 2023] _t_key_authz='5FqvNWsF32F1YGqrAO0XAnszTEHuJzn5.9G8wb_NZ8KLlvw9zi9p44V4h2R2MKrRvvTwo2cj3Ffo'
[Sun Apr 23 02:16:26 PM UTC 2023] _t_vtype
[Sun Apr 23 02:16:26 PM UTC 2023] url='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:16:26 PM UTC 2023] payload='{}'
[Sun Apr 23 02:16:26 PM UTC 2023] Use cached jwk for file: /root/.acme.sh/ca/10.6.18.10/acme/acme/directory/account.key
[Sun Apr 23 02:16:26 PM UTC 2023] Use _CACHED_NONCE='STZBbjN3c3lVajFNRnBNV3pjWkZ5OHlJMEZYRllTMWI'
[Sun Apr 23 02:16:26 PM UTC 2023] nonce='STZBbjN3c3lVajFNRnBNV3pjWkZ5OHlJMEZYRllTMWI'
[Sun Apr 23 02:16:26 PM UTC 2023] POST
[Sun Apr 23 02:16:26 PM UTC 2023] _post_url='https://10.6.18.10:8443/acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo'
[Sun Apr 23 02:16:26 PM UTC 2023] body='{"protected": "eyJub25jZSI6ICJTVFpCYmpOM2MzbFZhakZOUm5CTlYzcGpXa1o1T0hsSk1FWllSbGxUTVdJIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "__g0TL8gjoTEASBhiuB_J6dAWY0zmxwdGkhXc3ZSc6JReAeOq2D0MvtDjFnvDdZnUtQHNKrN6vcWk5AgN-QomA"}'
[Sun Apr 23 02:16:26 PM UTC 2023] _postContentType='application/jose+json'
[Sun Apr 23 02:16:26 PM UTC 2023] Http already initialized.
[Sun Apr 23 02:16:26 PM UTC 2023] _WGET='wget -q -d  --content-on-error  --no-check-certificate '
[Sun Apr 23 02:16:57 PM UTC 2023] wget returns 8, the server returns a 'Bad request' response, lets process the response later.
Setting --content-on-error (contentonerror) to 1
Setting --check-certificate (checkcertificate) to 0
Setting --server-response (serverresponse) to 1
Setting --output-document (outputdocument) to -
Setting --user-agent (useragent) to acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to
Setting --header (header) to Content-Type: application/jose+json
Setting --post-data (postdata) to {"protected": "eyJub25jZSI6ICJTVFpCYmpOM2MzbFZhakZOUm5CTlYzcGpXa1o1T0hsSk1FWllSbGxUTVdJIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "__g0TL8gjoTEASBhiuB_J6dAWY0zmxwdGkhXc3ZSc6JReAeOq2D0MvtDjFnvDdZnUtQHNKrN6vcWk5AgN-QomA"}
Setting --method (method) to POST
Setting --body-data (bodydata) to {"protected": "eyJub25jZSI6ICJTVFpCYmpOM2MzbFZhakZOUm5CTlYzcGpXa1o1T0hsSk1FWllSbGxUTVdJIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "__g0TL8gjoTEASBhiuB_J6dAWY0zmxwdGkhXc3ZSc6JReAeOq2D0MvtDjFnvDdZnUtQHNKrN6vcWk5AgN-QomA"}
DEBUG output created by Wget 1.21.2 on linux-gnu.

Reading HSTS entries from /root/.wget-hsts
URI encoding = ‘UTF-8’
Created socket 3.
Releasing 0x000055c80b98a8c0 (new refcount 0).
Deleting unused 0x000055c80b98a8c0.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x000055c80b98b2c0
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
POST /acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive
Content-Type: application/jose+json
Content-Length: 508

---request end---
[BODY data: {"protected": "eyJub25jZSI6ICJTVFpCYmpOM2MzbFZhakZOUm5CTlYzcGpXa1o1T0hsSk1FWllSbGxUTVdJIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "__g0TL8gjoTEASBhiuB_J6dAWY0zmxwdGkhXc3ZSc6JReAeOq2D0MvtDjFnvDdZnUtQHNKrN6vcWk5AgN-QomA"}]
Closed 3/SSL 0x000055c80b98b2c0
Created socket 3.
Releasing 0x000055c80b99cd00 (new refcount 0).
Deleting unused 0x000055c80b99cd00.
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x000055c80b98b270
certificate:
  subject: CN=Step Online CA
  issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

---request begin---
POST /acme/acme/challenge/tPs1YlNdOMahkNMHiRFHYaSbCIhCI3Fs/k2Xm3Tujnb4cG6HZhigQHJpCqn1FAWoo HTTP/1.1
Host: 10.6.18.10:8443
User-Agent: acme.sh/3.0.6 (https://github.com/acmesh-official/acme.sh)
Accept: */*
Accept-Encoding: identity
Connection: Keep-Alive
Content-Type: application/jose+json
Content-Length: 508

---request end---
[BODY data: {"protected": "eyJub25jZSI6ICJTVFpCYmpOM2MzbFZhakZOUm5CTlYzcGpXa1o1T0hsSk1FWllSbGxUTVdJIiwgInVybCI6ICJodHRwczovLzEwLjYuMTguMTA6ODQ0My9hY21lL2FjbWUvY2hhbGxlbmdlL3RQczFZbE5kT01haGtOTUhpUkZIWWFTYkNJaENJM0ZzL2syWG0zVHVqbmI0Y0c2SFpoaWdRSEpwQ3FuMUZBV29vIiwgImFsZyI6ICJFUzI1NiIsICJraWQiOiAiaHR0cHM6Ly8xMC42LjE4LjEwOjg0NDMvYWNtZS9hY21lL2FjY291bnQvQVU1bzdUN2I4d2RNQU1ST3pTSGwyenNZdGhaSWhNbEoifQ", "payload": "e30", "signature": "__g0TL8gjoTEASBhiuB_J6dAWY0zmxwdGkhXc3ZSc6JReAeOq2D0MvtDjFnvDdZnUtQHNKrN6vcWk5AgN-QomA"}]

---response begin---
HTTP/1.1 400 Bad Request
Cache-Control: no-store
Content-Type: application/problem+json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Replay-Nonce: M3hUU3NnT3dvdG1IbnlVQkIwRjJhdk1aYWRPamVVSmk
Date: Sun, 23 Apr 2023 14:16:57 GMT
Content-Length: 89

---response end---
  HTTP/1.1 400 Bad Request
  Cache-Control: no-store
  Content-Type: application/problem+json
  Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
  Replay-Nonce: M3hUU3NnT3dvdG1IbnlVQkIwRjJhdk1aYWRPamVVSmk
  Date: Sun, 23 Apr 2023 14:16:57 GMT
  Content-Length: 89
Registered socket 3 for persistent reuse.
[Sun Apr 23 02:16:57 PM UTC 2023] options='/^[^ ][^ ]/d; /^ *$/d'
[Sun Apr 23 02:16:57 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:16:57 PM UTC 2023] options='s/^  //g'
[Sun Apr 23 02:16:58 PM UTC 2023] Using sed  -i
[Sun Apr 23 02:16:58 PM UTC 2023] _ret='0'
[Sun Apr 23 02:16:58 PM UTC 2023] responseHeaders='subject: CN=Step Online CA
issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh

subject: CN=Step Online CA
issuer:  CN=RespectMyAuthoritigh Intermediate CA,O=RespectMyAuthoritigh


HTTP/1.1 400 Bad Request
Cache-Control: no-store
Content-Type: application/problem+json
Link: <https://10.6.18.10:8443/acme/acme/directory>;rel="index"
Replay-Nonce: M3hUU3NnT3dvdG1IbnlVQkIwRjJhdk1aYWRPamVVSmk
Date: Sun, 23 Apr 2023 14:16:57 GMT
Content-Length: 89'
[Sun Apr 23 02:16:58 PM UTC 2023] code='400'
[Sun Apr 23 02:16:58 PM UTC 2023] original='{"type":"urn:ietf:params:acme:error:badNonce","detail":"Unacceptable anti-replay nonce"}'
[Sun Apr 23 02:16:58 PM UTC 2023] response='{"type":"urn:ietf:params:acme:error:badNonce","detail":"Unacceptable anti-replay nonce"}'
[Sun Apr 23 02:16:58 PM UTC 2023] Diagnosis versions:
openssl:openssl
OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
apache:
Server version: Apache/2.4.52 (Ubuntu)
Server built:   2023-03-08T17:32:01
Server's Module Magic Number: 20120211:121
Server loaded:  APR 1.7.0, APR-UTIL 1.6.1
Compiled using: APR 1.7.0, APR-UTIL 1.6.1
Architecture:   64-bit
Server MPM:     event
  threaded:     yes (fixed thread count)
    forked:     yes (variable process count)
Server compiled with....
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_PROC_PTHREAD_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT="/etc/apache2"
 -D SUEXEC_BIN="/usr/lib/apache2/suexec"
 -D DEFAULT_PIDLOG="/var/run/apache2.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="mime.types"
 -D SERVER_CONFIG_FILE="apache2.conf"
nginx:
nginx doesn't exist.
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.4.1 on Mar 25 2022 09:51:32
   running on Linux version #76-Ubuntu SMP Fri Mar 17 17:19:29 UTC 2023, release 5.15.0-69-generic, machine x86_64
features:
  #define WITH_STDIO 1
  #define WITH_FDNUM 1
  #define WITH_FILE 1
  #define WITH_CREAT 1
  #define WITH_GOPEN 1
  #define WITH_TERMIOS 1
  #define WITH_PIPE 1
  #define WITH_UNIX 1
  #define WITH_ABSTRACT_UNIXSOCKET 1
  #define WITH_IP4 1
  #define WITH_IP6 1
  #define WITH_RAWIP 1
  #define WITH_GENERICSOCKET 1
  #define WITH_INTERFACE 1
  #define WITH_TCP 1
  #define WITH_UDP 1
  #define WITH_SCTP 1
  #define WITH_LISTEN 1
  #define WITH_SOCKS4 1
  #define WITH_SOCKS4A 1
  #define WITH_VSOCK 1
  #define WITH_PROXY 1
  #define WITH_SYSTEM 1
  #define WITH_EXEC 1
  #undef WITH_READLINE
  #define WITH_TUN 1
  #define WITH_PTY 1
  #define WITH_OPENSSL 1
  #undef WITH_FIPS
  #define WITH_LIBWRAP 1
  #define WITH_SYCLS 1
  #define WITH_FILAN 1
  #define WITH_RETRY 1
  #define WITH_MSGLEVEL 0 /*debug*/

Answered by hslatman

Apr 24, 2023

Hi @wlmarion,

Your ACME client is configured to get a certificate for the domain test.com. To complete the challenge and authorize the request, the ACME server will reach out to test.com to look if the correct challenge is presented by the web server. For this, the ACME server needs to be able to resolve test.com and that needs to point at infrastructure you control. The error message you're seeing indicates that the ACME server can't connect to test.com.

You'll need to either use a different domain (or an IP) for testing that does resolve on your local network (or at least to infrastructure you control), such as -d <ip-of-acme.sh-host> or change the configuration of the DNS server that t…

View full answer

hslatman · 2023-04-24T15:01:07Z

hslatman
Apr 24, 2023
Collaborator

Hi @wlmarion,

Your ACME client is configured to get a certificate for the domain test.com. To complete the challenge and authorize the request, the ACME server will reach out to test.com to look if the correct challenge is presented by the web server. For this, the ACME server needs to be able to resolve test.com and that needs to point at infrastructure you control. The error message you're seeing indicates that the ACME server can't connect to test.com.

You'll need to either use a different domain (or an IP) for testing that does resolve on your local network (or at least to infrastructure you control), such as -d <ip-of-acme.sh-host> or change the configuration of the DNS server that the ACME server uses (the system default one) to have test.com point to your (internal) infrastructure (the system that runs acme.sh).

We have some documentation on using Smallstep with acme.sh available here.

0 replies

ShadowcasterIT · 2023-04-24T16:32:28Z

ShadowcasterIT
Apr 24, 2023
Author

Hello @hslatman,

I have tried setting dns up a few different ways but seem to end up with the same result. I have tried setting test.com to point back to the step-ca server 10.6.18.10. I have also tried setting it to the acme.sh client 10.6.18.11. I also have a load balancer that can respond to http-01 acme challenges at 10.6.18.50 that I've set test.com dns to. I've pasted my step-ca config below. To my understanding this should mean the step-ca server resolves test.com based on its own dns settings. Below I have the step-ca server resolving test.com to the acme.sh client. The result is the same as above.

Is there something off in my step-ca config? Or could there be another reason this challenge is failing?

Step-ca config

 vi $(step path)/config/ca.json
{
        "root": "/root/.step/certs/root_ca.crt",
        "federatedRoots": null,
        "crt": "/root/.step/certs/intermediate_ca.crt",
        "key": "/root/.step/secrets/intermediate_ca_key",
        "address": "10.6.18.10:8443",
        "insecureAddress": "",
        "dnsNames": [
                "127.0.0.1"
        ],
        "logger": {
                "format": "text"
        },
        "db": {
                "type": "badgerv2",
                "dataSource": "/root/.step/db",
                "badgerFileLoadingMode": ""
        },
        "authority": {
                "provisioners": [
                        {
                                "type": "JWK",
                                "name": "Cman@authoritigh.com",
                                "key": {
                                        "use": "sig",
                                        "kty": "EC",
                                        "kid": "U-oC15eFwS1xMkp-a3bBMlU_HBNmHewbi9cVcujB84w",
                                        "crv": "P-256",
                                        "alg": "ES256",
                                        "x": "pKgyjytKK-8sxVRdESjb0HzFtmfXDqf0paisJCoUK7Q",
                                        "y": "KdDc9y3U8sYNXFHHCN2AOcuESnpKUZRsxuhhSMG4ZDk"
                                },
                                "encryptedKey": "eyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJjdHkiOiJqd2sranNvbiIsImVuYyI6IkEyNTZHQ00iLCJwMmMiOjEwMDAwMCwicDJzIjoiUThXM3JDYnVuNDB3bkkwVkVneG5idyJ9.x6ZpqbotDK2dzhRqbVI1DTPVVLHojPjlfGLr8NXZIGG3xJjRAn-UTQ.D8N78m6lxEJO4dOi.Sftox82NTqkz_3NqVoRN9knf2udOjr4-BCQee1VgYsGRZtqToZb6CvAhzj2sBR80KTvLjis97CG-uYZAleGly0wo1jbesaxdYml751RDSPrE9AgCFcFP4SzC9ntOfZP5SyXYVgKW8E90F_Qm5djOW0v1t7d49gMcF8QYNOBcnYREdN9WMeBd58LnaZwk4ARngeixdHrFbKlo96ywkJ6tm5RGe2JjjUriEMGUzEya4GbkRsG2tZKGpB9EYZzXs15KPit71vzE8Etr9S8QjHUtrBLbRfmMGHMF7WB3VtoLxASYmH5KFYIKGGVX1NFbQI56wFYGM8nAmUGxC-5Ol1M.WAnGL99TjUMkuQcxtJi36g"
                        },
                        {
                                "type": "ACME",
                                "name": "acme"
                        },
                        {
                                "type": "ACME",
                                "name": "TEST",
                                "claims": {
                                        "enableSSHCA": true,
                                        "disableRenewal": false,
                                        "allowRenewalAfterExpiry": false
                                },
                                "options": {
                                        "x509": {},
                                        "ssh": {}
                                }
                        },
                        {
                                "type": "ACME",
                                "name": "TEST1",
                                "claims": {
                                        "enableSSHCA": true,
                                        "disableRenewal": false,
                                        "allowRenewalAfterExpiry": false
                                },
                                "options": {
                                        "x509": {},
                                        "ssh": {}
                                }
                        },
                        {
                                "type": "ACME",
                                "name": "TEST2",
                                "claims": {
                                        "enableSSHCA": true,
                                        "disableRenewal": false,
                                        "allowRenewalAfterExpiry": false
                                },
                                "options": {
                                        "x509": {},
                                        "ssh": {}
                                }
                        }
                ],
                "template": {},
                "backdate": "1m0s"
        },
        "tls": {
                "cipherSuites": [
                        "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
                        "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
                ],
                "minVersion": 1.2,
                "maxVersion": 1.3,
                "renegotiation": false
        },
        "commonName": "Step Online CA"
}

Dig test.com from step-ca server

dig test.com

; <<>> DiG 9.18.12-0ubuntu0.22.04.1-Ubuntu <<>> test.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48453
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: ea658a4e0a8cf516010000006446ad7e3fc12a4a46a73a75 (good)
;; QUESTION SECTION:
;test.com.                      IN      A

;; ANSWER SECTION:
test.com.               604800  IN      A       10.6.18.11

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1) (UDP)
;; WHEN: Mon Apr 24 16:25:34 UTC 2023
;; MSG SIZE  rcvd: 81

1 reply

hslatman Apr 24, 2023
Collaborator

Is it possible the system on which you run acme.sh has an active firewall? If so, is port 80 allowed to be accessed, at least from the ACME server?

If that doesn't resolve (😅) your issue: I've also seen cases where starting step-ca with --resolver <ip:port> works. That would be --resolver 127.0.0.1:53 in your case.

ShadowcasterIT · 2023-04-24T19:50:52Z

ShadowcasterIT
Apr 24, 2023
Author

Hello @hslatman,

Thanks for your help. It kept me focused on the problem. I noticed my curl of test.com was resolving to the ACME server rather than client. I hadn't considered that I never modified the default AAAA record for test.com and left it as ::1. Curl was using this to resolve rather than the A record I set. I deleted the AAAA and now my load balancer can complete successfully.

My linux client trying to use acme.sh is still having issues, but I have some thoughts as to why and can play around with that. I now at least know the step-ca server is working properly.

Thanks again!

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

The server could not connect to validation target during http-01 challenge. #1359

Uh oh!

{{title}}

Uh oh!

Replies: 3 comments 1 reply

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Uh oh!

{{title}}

Uh oh!

Select a reply

Uh oh!

The server could not connect to validation target during http-01 challenge. #1359

Uh oh!

ShadowcasterIT Apr 23, 2023

Acme.sh command:

Server output below:

ACME.sh output

Replies: 3 comments · 1 reply

Uh oh!

Uh oh!

hslatman Apr 24, 2023 Collaborator

Uh oh!

ShadowcasterIT Apr 24, 2023 Author

Step-ca config

Dig test.com from step-ca server

Uh oh!

Uh oh!

hslatman Apr 24, 2023 Collaborator

Uh oh!

ShadowcasterIT Apr 24, 2023 Author

ShadowcasterIT
Apr 23, 2023

Replies: 3 comments 1 reply

hslatman
Apr 24, 2023
Collaborator

ShadowcasterIT
Apr 24, 2023
Author

hslatman Apr 24, 2023
Collaborator

ShadowcasterIT
Apr 24, 2023
Author