SSL 证书申请失败 #5451

vlssu · 2023-08-14T05:42:50Z

vlssu
Aug 14, 2023

联系方式

vlssu@vlssu.com

1Panel 版本

1.5.0

问题描述

申请SSL证书时总是失败不管是 xxxx.com、*.xxxx.com、xxx.xxxx.com 都是失败的

重现步骤

一台新的服务器，直接运行安装脚本安装的1.5.0版本，然后web服务装一下，并且增加 DNSpod ，通过DNS账号直接去申请（同样的账户在宝塔中能申请）

期待的正确结果

成功的申请到ssl证书，不管是泛域名子域名还是顶级域名

附加信息

zhengkunwang223 · 2023-08-14T05:59:39Z

zhengkunwang223
Aug 14, 2023
Collaborator

网站是反向代理然后用 HTTP 模式申请的证书吗

0 replies

vlssu · 2023-08-14T06:04:23Z

vlssu
Aug 14, 2023
Author

网站是反向代理然后用 HTTP 模式申请的证书吗

忘记补充了，抱歉，是通过DNS账户申请的

0 replies

zhengkunwang223 · 2023-08-14T06:06:59Z

zhengkunwang223
Aug 14, 2023
Collaborator

网站是反向代理然后用 HTTP 模式申请的证书吗

忘记补充了，抱歉，是通过DNS账户申请的

现在的错误应该是申请失败次数过多被限制了
可以新建一个 acme 账号然后申请一下贴一下错误图

0 replies

vlssu · 2023-08-14T06:12:47Z

vlssu
Aug 14, 2023
Author

网站是反向代理然后用 HTTP 模式申请的证书吗

忘记补充了，抱歉，是通过DNS账户申请的

现在的错误应该是申请失败次数过多被限制了可以新建一个 acme 账号然后申请一下贴一下错误图

服务内部错误: error: one or more domains had a problem: [*.xxxx.com] time limit exceeded: last error: could not determine authoritative nameservers

我间隔2天都是如此。而且不管是搭建了好久的还是新搭建出来的都有这个问题

0 replies

Muska-Ami · 2023-08-17T14:24:24Z

Muska-Ami
Aug 17, 2023

同样的问题，我用的是CloudFlare账号，API令牌是全局令牌不存在权限问题，无论如何都请求失败，服务器在美国应该不会有网络问题，之前在v1.2申请也不成功，现在v1.5也不行

0 replies

WyattYung · 2023-09-04T08:18:59Z

WyattYung
Sep 4, 2023

我的cloudflare 也是這樣

0 replies

97668589 · 2023-09-26T01:35:00Z

97668589
Sep 26, 2023

同样的问题，错误6003，请问怎么解决

0 replies

Azhc · 2023-09-27T02:03:41Z

Azhc
Sep 27, 2023

我也是6003的问题

0 replies

huangzhongzhang · 2023-10-27T01:46:09Z

huangzhongzhang
Oct 27, 2023

同样的问题……

0 replies

lainbo · 2023-11-28T07:07:05Z

lainbo
Nov 28, 2023

我也是Cloudflare 6003的问题，跟进一下~

0 replies

JanYork · 2023-12-07T14:31:14Z

JanYork
Dec 7, 2023

我也是，阿里云，服务内部错误: error: one or more domains had a problem: [xxxx.com] [xxxx.com] acme: error presenting token: alicloud: zone net. not found in AliDNS for domain xxxx.com

0 replies

wanghe-fit2cloud · 2023-12-13T08:55:16Z

wanghe-fit2cloud
Dec 13, 2023
Maintainer

v1.9.0 版本已发布。

0 replies

vlssu · 2023-12-13T09:55:35Z

vlssu
Dec 13, 2023
Author

这是日志，好像还是不可以？我用的腾讯的

2023/12/13 17:26:13 开始申请证书,域名 [xxx.com,*.xxx.com] 申请方式 [DNS 自动] DNS 账号 [1305300729] 厂商 [DnsPod]
2023/12/13 17:26:13 [INFO] [xxx.com, *.xxx.com] acme: Obtaining bundled SAN certificate
2023/12/13 17:26:14 [INFO] [*.xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956686
2023/12/13 17:26:14 [INFO] [xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956696
2023/12/13 17:26:14 [INFO] [*.xxx.com] acme: use dns-01 solver
2023/12/13 17:26:14 [INFO] [xxx.com] acme: Could not find solver for: tls-alpn-01
2023/12/13 17:26:14 [INFO] [xxx.com] acme: Could not find solver for: http-01
2023/12/13 17:26:14 [INFO] [xxx.com] acme: use dns-01 solver
2023/12/13 17:26:14 [INFO] [*.xxx.com] acme: Preparing to solve DNS-01
2023/12/13 17:26:14 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:14 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:15 [INFO] [xxx.com] acme: Preparing to solve DNS-01
2023/12/13 17:26:15 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:15 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:16 [INFO] [*.xxx.com] acme: Cleaning DNS-01 challenge
2023/12/13 17:26:16 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:16 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:16 [WARN] [*.xxx.com] acme: cleaning up failed: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com. 
2023/12/13 17:26:16 [INFO] [xxx.com] acme: Cleaning DNS-01 challenge
2023/12/13 17:26:16 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:16 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:17 [WARN] [xxx.com] acme: cleaning up failed: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com. 
2023/12/13 17:26:17 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956686
2023/12/13 17:26:17 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956696
2023/12/13 17:26:18 申请  [xxx.com] 证书失败, error: one or more domains had a problem:
[*.xxx.com] [*.xxx.com] acme: error presenting token: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com.
[xxx.com] [xxx.com] acme: error presenting token: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com.

0 replies

zhengkunwang223 · 2023-12-13T10:01:06Z

zhengkunwang223
Dec 13, 2023
Collaborator

这是日志，好像还是不可以？我用的腾讯的

2023/12/13 17:26:13 开始申请证书,域名 [xxx.com,*.xxx.com] 申请方式 [DNS 自动] DNS 账号 [1305300729] 厂商 [DnsPod]
2023/12/13 17:26:13 [INFO] [xxx.com, *.xxx.com] acme: Obtaining bundled SAN certificate
2023/12/13 17:26:14 [INFO] [*.xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956686
2023/12/13 17:26:14 [INFO] [xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956696
2023/12/13 17:26:14 [INFO] [*.xxx.com] acme: use dns-01 solver
2023/12/13 17:26:14 [INFO] [xxx.com] acme: Could not find solver for: tls-alpn-01
2023/12/13 17:26:14 [INFO] [xxx.com] acme: Could not find solver for: http-01
2023/12/13 17:26:14 [INFO] [xxx.com] acme: use dns-01 solver
2023/12/13 17:26:14 [INFO] [*.xxx.com] acme: Preparing to solve DNS-01
2023/12/13 17:26:14 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:14 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:15 [INFO] [xxx.com] acme: Preparing to solve DNS-01
2023/12/13 17:26:15 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:15 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:16 [INFO] [*.xxx.com] acme: Cleaning DNS-01 challenge
2023/12/13 17:26:16 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:16 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:16 [WARN] [*.xxx.com] acme: cleaning up failed: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com. 
2023/12/13 17:26:16 [INFO] [xxx.com] acme: Cleaning DNS-01 challenge
2023/12/13 17:26:16 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:16 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:17 [WARN] [xxx.com] acme: cleaning up failed: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com. 
2023/12/13 17:26:17 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956686
2023/12/13 17:26:17 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956696
2023/12/13 17:26:18 申请  [xxx.com] 证书失败, error: one or more domains had a problem:
[*.xxx.com] [*.xxx.com] acme: error presenting token: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com.
[xxx.com] [xxx.com] acme: error presenting token: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com.

看一下你的 DNS 配置中是否有其他的 TXT 类型的参数有的话删掉

0 replies

zhengkunwang223 · 2023-12-13T10:03:26Z

zhengkunwang223
Dec 13, 2023
Collaborator

这是日志，好像还是不可以？我用的腾讯的

2023/12/13 17:26:13 开始申请证书,域名 [xxx.com,*.xxx.com] 申请方式 [DNS 自动] DNS 账号 [1305300729] 厂商 [DnsPod]
2023/12/13 17:26:13 [INFO] [xxx.com, *.xxx.com] acme: Obtaining bundled SAN certificate
2023/12/13 17:26:14 [INFO] [*.xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956686
2023/12/13 17:26:14 [INFO] [xxx.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956696
2023/12/13 17:26:14 [INFO] [*.xxx.com] acme: use dns-01 solver
2023/12/13 17:26:14 [INFO] [xxx.com] acme: Could not find solver for: tls-alpn-01
2023/12/13 17:26:14 [INFO] [xxx.com] acme: Could not find solver for: http-01
2023/12/13 17:26:14 [INFO] [xxx.com] acme: use dns-01 solver
2023/12/13 17:26:14 [INFO] [*.xxx.com] acme: Preparing to solve DNS-01
2023/12/13 17:26:14 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:14 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:15 [INFO] [xxx.com] acme: Preparing to solve DNS-01
2023/12/13 17:26:15 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:15 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:16 [INFO] [*.xxx.com] acme: Cleaning DNS-01 challenge
2023/12/13 17:26:16 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:16 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:16 [WARN] [*.xxx.com] acme: cleaning up failed: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com. 
2023/12/13 17:26:16 [INFO] [xxx.com] acme: Cleaning DNS-01 challenge
2023/12/13 17:26:16 [INFO] Found CNAME entry for "_acme-challenge.xxx.com.": "xxxx5hj.xxx.com.cdn.dnsv1.com.cn."
2023/12/13 17:26:16 [INFO] Found CNAME entry for "xxxx5hj.xxx.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2023/12/13 17:26:17 [WARN] [xxx.com] acme: cleaning up failed: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com. 
2023/12/13 17:26:17 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956686
2023/12/13 17:26:17 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/293204956696
2023/12/13 17:26:18 申请  [xxx.com] 证书失败, error: one or more domains had a problem:
[*.xxx.com] [*.xxx.com] acme: error presenting token: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com.
[xxx.com] [xxx.com] acme: error presenting token: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com.

看一下你的 DNS 配置中是否有其他的 TXT 类型的参数有的话删掉
确认子域名已经配置到 DNS 中例如 x.x.x.x.com 这个域名

0 replies

lainbo · 2023-12-14T12:34:39Z

lainbo
Dec 14, 2023

确实可能需要再次确认一下，我出现了使用相同DNS账户，在相同的颁发组织申请，香港机器上申请过程极其慢(30分钟起)，但是日本机器上就非常快(10秒左右)的情况

0 replies

zhengkunwang223 · 2023-12-14T13:06:34Z

zhengkunwang223
Dec 14, 2023
Collaborator

确实可能需要再次确认一下，我出现了使用相同DNS账户，在相同的颁发组织申请，香港机器上申请过程极其慢(30分钟起)，但是日本机器上就非常快(10秒左右)的情况

这个可能跟你的机器的位置有关可能 DNS 生效的区域和时间不同本质上是不断的去请求 DNS 厂商查看 DNS 是否生效

0 replies

LReion · 2023-12-15T14:31:50Z

LReion
Dec 15, 2023

我发现了一个方法可以解决这个问题，我原来用的是Global API Token，当我创建一个区域DNS令牌，然后填入这个令牌就可以申请成功了。

0 replies

vlssu · 2023-12-21T02:06:02Z

vlssu
Dec 21, 2023
Author

我突然发现，我使用dns账号的验证方式，用的dnspod，但是域名的操作日志上并没有新增删减。
然后我的域名解析上是有泛解析的 *.xxx.com，他每次验证的时候都在前面加了 _acme-challenge,但因为没有新增记录继续验证_acme-challenge.xxx.com，自然就解析到了泛域名上的dns内容，就导致日志看起来怪怪的。
归根结底就是没有新增dns记录导致的这个问题

0 replies

zhengkunwang223 · 2023-12-21T03:13:24Z

zhengkunwang223
Dec 21, 2023
Collaborator

我突然发现，我使用dns账号的验证方式，用的dnspod，但是域名的操作日志上并没有新增删减。然后我的域名解析上是有泛解析的 *.xxx.com，他每次验证的时候都在前面加了 _acme-challenge,但因为没有新增记录继续验证_acme-challenge.xxx.com，自然就解析到了泛域名上的dns内容，就导致日志看起来怪怪的。归根结底就是没有新增dns记录导致的这个问题

我用了国内的 DNSPOD 申请了单域名二级域名泛域名都没有问题日志里都有添加删除 TXT 的记录，你的 DNS 中是不是已经有 TXT 记录

0 replies

vlssu · 2023-12-21T06:38:51Z

vlssu
Dec 21, 2023
Author

我突然发现，我使用dns账号的验证方式，用的dnspod，但是域名的操作日志上并没有新增删减。然后我的域名解析上是有泛解析的 *.xxx.com，他每次验证的时候都在前面加了 _acme-challenge,但因为没有新增记录继续验证_acme-challenge.xxx.com，自然就解析到了泛域名上的dns内容，就导致日志看起来怪怪的。归根结底就是没有新增dns记录导致的这个问题

我用了国内的 DNSPOD 申请了单域名二级域名泛域名都没有问题日志里都有添加删除 TXT 的记录，你的 DNS 中是不是已经有 TXT 记录

就这一条记录，而且是企业邮箱需要加的一项

0 replies

zhengkunwang223 · 2023-12-21T10:29:10Z

zhengkunwang223
Dec 21, 2023
Collaborator

我突然发现，我使用dns账号的验证方式，用的dnspod，但是域名的操作日志上并没有新增删减。然后我的域名解析上是有泛解析的 *.xxx.com，他每次验证的时候都在前面加了 _acme-challenge,但因为没有新增记录继续验证_acme-challenge.xxx.com，自然就解析到了泛域名上的dns内容，就导致日志看起来怪怪的。归根结底就是没有新增dns记录导致的这个问题

我用了国内的 DNSPOD 申请了单域名二级域名泛域名都没有问题日志里都有添加删除 TXT 的记录，你的 DNS 中是不是已经有 TXT 记录

就这一条记录，而且是企业邮箱需要加的一项

我试了一下有 TXT 记录也没问题所以这个问题可能还得再观察观察

0 replies

vlssu · 2024-01-16T15:38:58Z

vlssu
Jan 16, 2024
Author

@zhengkunwang223
https://go-acme.github.io/lego/dns/dnspod/
我发现他的文档中说，弃用了dnspod
所以你可能得改成 tencentcloud

0 replies

vlssu · 2024-02-25T07:46:00Z

vlssu
Feb 25, 2024
Author

2024/02/25 15:30:25 开始申请证书,域名 [*.XXXX.com] 申请方式 [DNS 自动] DNS 账号 [1panel] 厂商 [TencentCloud]
2024/02/25 15:30:25 [INFO] [*.XXXX.com] acme: Obtaining bundled SAN certificate
2024/02/25 15:30:26 [INFO] [*.XXXX.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/XXXXXXXXXX
2024/02/25 15:30:26 [INFO] [*.XXXX.com] acme: use dns-01 solver
2024/02/25 15:30:26 [INFO] [*.XXXX.com] acme: Preparing to solve DNS-01
2024/02/25 15:30:26 [INFO] Found CNAME entry for "_acme-challenge.XXXX.com.": "ab3a845b.XXXX.com.cdn.dnsv1.com.cn."
2024/02/25 15:30:26 [INFO] Found CNAME entry for "ab3a845b.XXXX.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2024/02/25 15:30:27 [INFO] [*.XXXX.com] acme: Cleaning DNS-01 challenge
2024/02/25 15:30:27 [INFO] Found CNAME entry for "_acme-challenge.XXXX.com.": "ab3a845b.XXXX.com.cdn.dnsv1.com.cn."
2024/02/25 15:30:27 [INFO] Found CNAME entry for "ab3a845b.XXXX.com.cdn.dnsv1.com.cn.": "ciwc7cuz.slt.sched.tdnsv8.com."
2024/02/25 15:30:27 [WARN] [*.XXXX.com] acme: cleaning up failed: tencentcloud: failed to get hosted zone: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com. 
2024/02/25 15:30:28 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/XXXXXXXXXX
2024/02/25 15:30:28 申请  [*.XXXX.com] 证书失败, error: one or more domains had a problem:
[*.XXXX.com] [*.XXXX.com] acme: error presenting token: tencentcloud: failed to get hosted zone: zone tdnsv8.com. not found in dnspod for domain ciwc7cuz.slt.sched.tdnsv8.com.

这回使用了腾讯云依旧如此

并且我看了操作日志，只读取了域名列表，其他的操作一概没有

0 replies

basilbai · 2024-04-26T02:58:52Z

basilbai
Apr 26, 2024

我腾讯云也碰到了申请SSL失败的问题

2024/04/26 10:27:49 开始申请证书,域名 [xxxxxx.cn] 申请方式 [DNS 自动] DNS 账号 [腾讯云] 厂商 [TencentCloud]
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Obtaining bundled SAN certificate
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343105284747
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Could not find solver for: tls-alpn-01
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Could not find solver for: http-01
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: use dns-01 solver
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Preparing to solve DNS-01
2024/04/26 10:28:42 [INFO] [xxxxxx.cn] acme: Waiting for DNS record propagation.
2024/04/26 10:30:57 [INFO] [xxxxxx.cn] acme: Checking DNS record propagation using [114.114.114.114:53 8.8.8.8:53]
2024/04/26 10:31:27 [INFO] Wait for propagation [timeout: 30m0s, interval: 30s]
2024/04/26 10:31:27 [INFO] retry due to: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/chall-v3/343105284747/xVpyTQ :: urn:ietf:params:acme:error:badNonce :: JWS has an invalid anti-replay nonce: "O0afatDIgijJoAvvyaQTjBemxZXfAF_P4XwSO9ljJ-xZd9NGHMc"
2024/04/26 10:32:13 [INFO] [xxxxxx.cn] acme: Cleaning DNS-01 challenge
2024/04/26 10:32:15 [INFO] Skipping deactivating of valid auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343096160457
2024/04/26 10:32:15 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343105284747
2024/04/26 10:32:16 申请  [xxxxxx.cn] 证书失败, error: one or more domains had a problem:
[xxxxxx.cn] acme: error: 400 :: urn:ietf:params:acme:error:dns :: During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.xxxxxx.cn
 
2024/04/26 10:37:51 [INFO] [xxxxxx.cn] acme: Trying to solve DNS-01
2024/04/26 10:37:51 [INFO] [xxxxxx.cn] acme: Checking DNS record propagation using [114.114.114.114:53 8.8.8.8:53]
2024/04/26 10:38:21 [INFO] Wait for propagation [timeout: 30m0s, interval: 30s]
2024/04/26 10:38:22 [INFO] [xxxxxx.cn] acme: Cleaning DNS-01 challenge
2024/04/26 10:38:24 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343105284747
2024/04/26 10:38:24 申请  [xxxxxx.cn] 证书失败, error: one or more domains had a problem:
[xxxxxx.cn] failed to initiate challenge: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/chall-v3/343105284747/xVpyTQ :: urn:ietf:params:acme:error:malformed :: Unable to update challenge :: authorization must be pending

在腾讯云控制台日志发现有新增txt记录和删除操作

0 replies

ChishFoxcat · 2024-04-28T12:58:05Z

ChishFoxcat
Apr 28, 2024

我腾讯云也碰到了申请SSL失败的问题

2024/04/26 10:27:49 开始申请证书,域名 [xxxxxx.cn] 申请方式 [DNS 自动] DNS 账号 [腾讯云] 厂商 [TencentCloud]
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Obtaining bundled SAN certificate
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343105284747
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Could not find solver for: tls-alpn-01
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Could not find solver for: http-01
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: use dns-01 solver
2024/04/26 10:27:49 [INFO] [xxxxxx.cn] acme: Preparing to solve DNS-01
2024/04/26 10:28:42 [INFO] [xxxxxx.cn] acme: Waiting for DNS record propagation.
2024/04/26 10:30:57 [INFO] [xxxxxx.cn] acme: Checking DNS record propagation using [114.114.114.114:53 8.8.8.8:53]
2024/04/26 10:31:27 [INFO] Wait for propagation [timeout: 30m0s, interval: 30s]
2024/04/26 10:31:27 [INFO] retry due to: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/chall-v3/343105284747/xVpyTQ :: urn:ietf:params:acme:error:badNonce :: JWS has an invalid anti-replay nonce: "O0afatDIgijJoAvvyaQTjBemxZXfAF_P4XwSO9ljJ-xZd9NGHMc"
2024/04/26 10:32:13 [INFO] [xxxxxx.cn] acme: Cleaning DNS-01 challenge
2024/04/26 10:32:15 [INFO] Skipping deactivating of valid auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343096160457
2024/04/26 10:32:15 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343105284747
2024/04/26 10:32:16 申请  [xxxxxx.cn] 证书失败, error: one or more domains had a problem:
[xxxxxx.cn] acme: error: 400 :: urn:ietf:params:acme:error:dns :: During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.xxxxxx.cn
 
2024/04/26 10:37:51 [INFO] [xxxxxx.cn] acme: Trying to solve DNS-01
2024/04/26 10:37:51 [INFO] [xxxxxx.cn] acme: Checking DNS record propagation using [114.114.114.114:53 8.8.8.8:53]
2024/04/26 10:38:21 [INFO] Wait for propagation [timeout: 30m0s, interval: 30s]
2024/04/26 10:38:22 [INFO] [xxxxxx.cn] acme: Cleaning DNS-01 challenge
2024/04/26 10:38:24 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/343105284747
2024/04/26 10:38:24 申请  [xxxxxx.cn] 证书失败, error: one or more domains had a problem:
[xxxxxx.cn] failed to initiate challenge: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/chall-v3/343105284747/xVpyTQ :: urn:ietf:params:acme:error:malformed :: Unable to update challenge :: authorization must be pending

在腾讯云控制台日志发现有新增txt记录和删除操作

我也是经常遇到，但是错误五花八门

有时候是你这种里的错误
有时候就是成功里夹杂着错误

2024/04/28 20:39:34 开始申请证书,域名 [xxx.cn,*.xxx.cn] 申请方式 [DNS 自动] DNS 账号 [腾讯云] 厂商 [TencentCloud]
2024/04/28 20:39:34 [INFO] [xxx.cn, *.xxx.cn] acme: Obtaining bundled SAN certificate
2024/04/28 20:39:34 [INFO] retry due to: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:badNonce :: JWS has an invalid anti-replay nonce: "GDpsvN1zBi6mXrqyWCqalD_LSYyKkvWCK8Vynotps5XQDoKRsxY"
2024/04/28 20:39:36 [INFO] [*.xxx.cn] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/uid
2024/04/28 20:39:36 [INFO] [xxx.cn] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/uid
2024/04/28 20:39:36 [INFO] [*.xxx.cn] acme: use dns-01 solver
2024/04/28 20:39:36 [INFO] [xxx.cn] acme: Could not find solver for: tls-alpn-01
2024/04/28 20:39:36 [INFO] [xxx.cn] acme: Could not find solver for: http-01
2024/04/28 20:39:36 [INFO] [xxx.cn] acme: use dns-01 solver
2024/04/28 20:39:36 [INFO] [*.xxx.cn] acme: Preparing to solve DNS-01
2024/04/28 20:39:36 [INFO] [xxx.cn] acme: Preparing to solve DNS-01
2024/04/28 20:39:37 [INFO] [*.xxx.cn] acme: Trying to solve DNS-01
2024/04/28 20:39:37 [INFO] [*.xxx.cn] acme: Checking DNS record propagation using [192.168.1.10:53 192.168.1.20:53]
2024/04/28 20:40:07 [INFO] Wait for propagation [timeout: 30m0s, interval: 30s]
2024/04/28 20:40:13 [INFO] [*.xxx.cn] The server validated our request
2024/04/28 20:40:13 [INFO] [xxx.cn] acme: Trying to solve DNS-01
2024/04/28 20:40:13 [INFO] [xxx.cn] acme: Checking DNS record propagation using [192.168.1.10:53 192.168.1.20:53]
2024/04/28 20:40:43 [INFO] Wait for propagation [timeout: 30m0s, interval: 30s]
2024/04/28 20:40:51 [INFO] [xxx.cn] The server validated our request
2024/04/28 20:40:51 [INFO] [*.xxx.cn] acme: Cleaning DNS-01 challenge
2024/04/28 20:40:53 [INFO] [xxx.cn] acme: Cleaning DNS-01 challenge
2024/04/28 20:40:54 [INFO] [xxx.cn, *.xxx.cn] acme: Validations succeeded; requesting certificates
2024/04/28 20:40:55 [INFO] [xxx.cn] Server responded with a certificate.
2024/04/28 20:40:55 申请 [xxx.cn,*.xxx.cn] 证书成功！！

敏感信息做了处理

有时候申请成功了还是失败 ~~（可能是我不小心多点了几下确认）~~

~~申请证书跟抽奖一样的，绷不住了~~

0 replies

mia0x75 · 2024-05-28T13:29:02Z

mia0x75
May 28, 2024

本机有IPv6的时候，申请失败：

[*.domain.net] propagation: time limit exceeded: last error: read udp [xxxxxxxxxxxx:7a1f]:36442->[2606:4700:58::adf5:3b61]:53: i/o timeout

Cloudflare, TXT已经增加，ZeroSSL

0 replies

zhengkunwang223 · 2024-05-28T13:35:00Z

zhengkunwang223
May 28, 2024
Collaborator

本机有IPv6的时候，申请失败：
[*.domain.net] propagation: time limit exceeded: last error: read udp [xxxxxxxxxxxx:7a1f]:36442->[2606:4700:58::adf5:3b61]:53: i/o timeout
Cloudflare, TXT已经增加，ZeroSSL

你这个错误是因为失败次数过多被限制等限制结束再申请

0 replies

mia0x75 · 2024-05-29T06:44:27Z

mia0x75
May 29, 2024

本机有IPv6的时候，申请失败：
[*.domain.net] propagation: time limit exceeded: last error: read udp [xxxxxxxxxxxx:7a1f]:36442->[2606:4700:58::adf5:3b61]:53: i/o timeout
Cloudflare, TXT已经增加，ZeroSSL
你这个错误是因为失败次数过多被限制等限制结束再申请

很明显错误是 io timeout，关掉 IPv6 马上成功。lego sdk 的问题，看他们的#1984 issue。

0 replies

zhengkunwang223 · 2024-05-29T06:47:04Z

zhengkunwang223
May 29, 2024
Collaborator

本机有IPv6的时候，申请失败：
[*.domain.net] propagation: time limit exceeded: last error: read udp [xxxxxxxxxxxx:7a1f]:36442->[2606:4700:58::adf5:3b61]:53: i/o timeout
Cloudflare, TXT已经增加，ZeroSSL
你这个错误是因为失败次数过多被限制等限制结束再申请
很明显错误是 io timeout，关掉 IPv6 马上成功。lego sdk 的问题，看他们的#1984 issue。

是的这个确实不清楚 lego 是否会增加 disabled-ipv6 的指令

0 replies

SSL 证书申请失败 #5451

联系方式

1Panel 版本

问题描述

重现步骤

期待的正确结果

相关日志输出

附加信息

Replies: 34 comments

zhengkunwang223 Aug 14, 2023 Collaborator

vlssu Aug 14, 2023 Author

zhengkunwang223 Aug 14, 2023 Collaborator

vlssu Aug 14, 2023 Author

wanghe-fit2cloud Dec 13, 2023 Maintainer

vlssu Dec 13, 2023 Author

zhengkunwang223 Dec 13, 2023 Collaborator

zhengkunwang223 Dec 13, 2023 Collaborator

zhengkunwang223 Dec 14, 2023 Collaborator

vlssu Dec 21, 2023 Author

zhengkunwang223 Dec 21, 2023 Collaborator

vlssu Dec 21, 2023 Author

zhengkunwang223 Dec 21, 2023 Collaborator

vlssu Jan 16, 2024 Author

vlssu Feb 25, 2024 Author

zhengkunwang223 May 28, 2024 Collaborator

zhengkunwang223 May 29, 2024 Collaborator

zhengkunwang223
Aug 14, 2023
Collaborator

vlssu
Aug 14, 2023
Author

zhengkunwang223
Aug 14, 2023
Collaborator

vlssu
Aug 14, 2023
Author

wanghe-fit2cloud
Dec 13, 2023
Maintainer

vlssu
Dec 13, 2023
Author

zhengkunwang223
Dec 13, 2023
Collaborator

zhengkunwang223
Dec 13, 2023
Collaborator

zhengkunwang223
Dec 14, 2023
Collaborator

vlssu
Dec 21, 2023
Author

zhengkunwang223
Dec 21, 2023
Collaborator

vlssu
Dec 21, 2023
Author

zhengkunwang223
Dec 21, 2023
Collaborator

vlssu
Jan 16, 2024
Author

vlssu
Feb 25, 2024
Author

zhengkunwang223
May 28, 2024
Collaborator

zhengkunwang223
May 29, 2024
Collaborator