Gistum

J'ai finalement réussi à résoudre mon problème ! J'ai joué la commande de génération du certificat : Avec '--set-default-ca --server letsencrypt' dans un 1er temps Puis '--server letsencrypt' seulement (probablement redondant avec la 1ère commande)

J'ai refait la manipulation plusieurs fois (au moins 3!), et toujours le même problème. A quel niveau se situerait le problème ?

Bonjour! J'ai suivi le tuto et essayé de générer mes certificats (section 2D) sans succès. Ce que j'ai déjà fait: Créé plusieurs fois la clé API (avec et sans restriction IP) Essayé de générer le certificat pour mydomain.com seulement De ce que je comprends des logs, la connexion à l'API semble ok, par contre l'API n'arrive pas à créer le record TXT coté OVH. Si quelqu'un peut éclairer ma lanterne 🙂 Voici les logs [Sun Feb 6 13:34:32 UTC 2022] Running cmd: issue [Sun Feb 6 13:34:32 UTC 2022] _main_domain='mydomain.com' [Sun Feb 6 13:34:32 UTC 2022] _alt_domains='*.mydomain.com' [Sun Feb 6 13:34:32 UTC 2022] Using config home:/acme.sh [Sun Feb 6 13:34:32 UTC 2022] default_acme_server='https://acme-v02.api.letsencrypt.org/directory' [Sun Feb 6 13:34:32 UTC 2022] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory' [Sun Feb 6 13:34:32 UTC 2022] DOMAIN_PATH='/acme.sh/mydomain.com' [Sun Feb 6 13:34:32 UTC 2022] Le_NextRenewTime [Sun Feb 6 13:34:32 UTC 2022] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory [Sun Feb 6 13:34:32 UTC 2022] _init api for server: https://acme-v02.api.letsencrypt.org/directory [Sun Feb 6 13:34:32 UTC 2022] GET [Sun Feb 6 13:34:32 UTC 2022] url='https://acme-v02.api.letsencrypt.org/directory' [Sun Feb 6 13:34:32 UTC 2022] timeout= [Sun Feb 6 13:34:32 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:33 UTC 2022] ret='0' [Sun Feb 6 13:34:33 UTC 2022] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change' [Sun Feb 6 13:34:33 UTC 2022] ACME_NEW_AUTHZ [Sun Feb 6 13:34:33 UTC 2022] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order' [Sun Feb 6 13:34:33 UTC 2022] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct' [Sun Feb 6 13:34:33 UTC 2022] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert' [Sun Feb 6 13:34:33 UTC 2022] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf' [Sun Feb 6 13:34:33 UTC 2022] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce' [Sun Feb 6 13:34:33 UTC 2022] Using CA: https://acme-v02.api.letsencrypt.org/directory [Sun Feb 6 13:34:33 UTC 2022] _on_before_issue [Sun Feb 6 13:34:33 UTC 2022] _chk_main_domain='mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] _chk_alt_domains='*.mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] Le_LocalAddress [Sun Feb 6 13:34:33 UTC 2022] d='mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] Check for domain='mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] _currentRoot='dns_ovh' [Sun Feb 6 13:34:33 UTC 2022] d='*.mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] Check for domain='*.mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] _currentRoot='dns_ovh' [Sun Feb 6 13:34:33 UTC 2022] d [Sun Feb 6 13:34:33 UTC 2022] _saved_account_key_hash is not changed, skip register account. [Sun Feb 6 13:34:33 UTC 2022] Read key length:4096 [Sun Feb 6 13:34:33 UTC 2022] _createcsr [Sun Feb 6 13:34:33 UTC 2022] Multi domain='DNS:mydomain.com,DNS:*.mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] Getting domain auth token for each domain [Sun Feb 6 13:34:33 UTC 2022] d='*.mydomain.com' [Sun Feb 6 13:34:33 UTC 2022] d [Sun Feb 6 13:34:33 UTC 2022] url='https://acme-v02.api.letsencrypt.org/acme/new-order' [Sun Feb 6 13:34:33 UTC 2022] payload='{"identifiers": [{"type":"dns","value":"mydomain.com"},{"type":"dns","value":"*.mydomain.com"}]}' [Sun Feb 6 13:34:33 UTC 2022] RSA key [Sun Feb 6 13:34:33 UTC 2022] HEAD [Sun Feb 6 13:34:33 UTC 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce' [Sun Feb 6 13:34:33 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L -I ' [Sun Feb 6 13:34:33 UTC 2022] _ret='0' [Sun Feb 6 13:34:34 UTC 2022] POST [Sun Feb 6 13:34:34 UTC 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order' [Sun Feb 6 13:34:34 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:34 UTC 2022] _ret='0' [Sun Feb 6 13:34:34 UTC 2022] code='201' [Sun Feb 6 13:34:34 UTC 2022] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/397032700/61713206970' [Sun Feb 6 13:34:34 UTC 2022] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/397032700/61713206970' [Sun Feb 6 13:34:34 UTC 2022] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/75811644850' [Sun Feb 6 13:34:34 UTC 2022] payload [Sun Feb 6 13:34:34 UTC 2022] POST [Sun Feb 6 13:34:34 UTC 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/75811644850' [Sun Feb 6 13:34:34 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:35 UTC 2022] _ret='0' [Sun Feb 6 13:34:35 UTC 2022] code='200' [Sun Feb 6 13:34:35 UTC 2022] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/75811644860' [Sun Feb 6 13:34:35 UTC 2022] payload [Sun Feb 6 13:34:35 UTC 2022] POST [Sun Feb 6 13:34:35 UTC 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/75811644860' [Sun Feb 6 13:34:35 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:35 UTC 2022] _ret='0' [Sun Feb 6 13:34:35 UTC 2022] code='200' [Sun Feb 6 13:34:35 UTC 2022] d='mydomain.com' [Sun Feb 6 13:34:35 UTC 2022] Getting webroot for domain='mydomain.com' [Sun Feb 6 13:34:35 UTC 2022] _w='dns_ovh' [Sun Feb 6 13:34:35 UTC 2022] _currentRoot='dns_ovh' [Sun Feb 6 13:34:35 UTC 2022] entry='"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644860/CAXXGg","token":"Gy_AluOFsvZGvC7oabN52ZBlrzkMGzIn8rHkY9gNTCU"' [Sun Feb 6 13:34:35 UTC 2022] token='Gy_AluOFsvZGvC7oabN52ZBlrzkMGzIn8rHkY9gNTCU' [Sun Feb 6 13:34:35 UTC 2022] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644860/CAXXGg' [Sun Feb 6 13:34:35 UTC 2022] keyauthorization='Gy_AluOFsvZGvC7oabN52ZBlrzkMGzIn8rHkY9gNTCU.TivouRJtsimeyIdgCwbNa6bYSoPZpiUjULdcdXS0Wk8' [Sun Feb 6 13:34:35 UTC 2022] dvlist='mydomain.com#Gy_AluOFsvZGvC7oabN52ZBlrzkMGzIn8rHkY9gNTCU.TivouRJtsimeyIdgCwbNa6bYSoPZpiUjULdcdXS0Wk8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644860/CAXXGg#dns-01#dns_ovh' [Sun Feb 6 13:34:35 UTC 2022] d='*.mydomain.com' [Sun Feb 6 13:34:35 UTC 2022] Getting webroot for domain='*.mydomain.com' [Sun Feb 6 13:34:35 UTC 2022] _w='dns_ovh' [Sun Feb 6 13:34:35 UTC 2022] _currentRoot='dns_ovh' [Sun Feb 6 13:34:35 UTC 2022] entry='"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644850/4mpNdQ","token":"dab1PckgOcTU0tx0IYdK5Dkal09SgurxFRUcvzIfnhM"' [Sun Feb 6 13:34:35 UTC 2022] token='dab1PckgOcTU0tx0IYdK5Dkal09SgurxFRUcvzIfnhM' [Sun Feb 6 13:34:35 UTC 2022] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644850/4mpNdQ' [Sun Feb 6 13:34:35 UTC 2022] keyauthorization='dab1PckgOcTU0tx0IYdK5Dkal09SgurxFRUcvzIfnhM.TivouRJtsimeyIdgCwbNa6bYSoPZpiUjULdcdXS0Wk8' [Sun Feb 6 13:34:35 UTC 2022] dvlist='*.mydomain.com#dab1PckgOcTU0tx0IYdK5Dkal09SgurxFRUcvzIfnhM.TivouRJtsimeyIdgCwbNa6bYSoPZpiUjULdcdXS0Wk8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644850/4mpNdQ#dns-01#dns_ovh' [Sun Feb 6 13:34:36 UTC 2022] d [Sun Feb 6 13:34:36 UTC 2022] vlist='mydomain.com#Gy_AluOFsvZGvC7oabN52ZBlrzkMGzIn8rHkY9gNTCU.TivouRJtsimeyIdgCwbNa6bYSoPZpiUjULdcdXS0Wk8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644860/CAXXGg#dns-01#dns_ovh,*.mydomain.com#dab1PckgOcTU0tx0IYdK5Dkal09SgurxFRUcvzIfnhM.TivouRJtsimeyIdgCwbNa6bYSoPZpiUjULdcdXS0Wk8#https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644850/4mpNdQ#dns-01#dns_ovh,' [Sun Feb 6 13:34:36 UTC 2022] d='mydomain.com' [Sun Feb 6 13:34:36 UTC 2022] _d_alias [Sun Feb 6 13:34:36 UTC 2022] txtdomain='_acme-challenge.mydomain.com' [Sun Feb 6 13:34:36 UTC 2022] txt='Ao0Wh1J1JBtbL1WwZq_kXNZzUzCXv_uMuwUK5QgjNQ4' [Sun Feb 6 13:34:36 UTC 2022] d_api='/root/.acme.sh/dnsapi/dns_ovh.sh' [Sun Feb 6 13:34:36 UTC 2022] Found domain api file: /root/.acme.sh/dnsapi/dns_ovh.sh [Sun Feb 6 13:34:36 UTC 2022] Adding txt value: Ao0Wh1J1JBtbL1WwZq_kXNZzUzCXv_uMuwUK5QgjNQ4 for domain: _acme-challenge.mydomain.com [Sun Feb 6 13:34:36 UTC 2022] Using OVH endpoint: ovh-eu [Sun Feb 6 13:34:36 UTC 2022] OVH_API='https://eu.api.ovh.com/1.0' [Sun Feb 6 13:34:36 UTC 2022] Checking authentication [Sun Feb 6 13:34:36 UTC 2022] domain [Sun Feb 6 13:34:36 UTC 2022] GET [Sun Feb 6 13:34:36 UTC 2022] url='https://eu.api.ovh.com/1.0/auth/time' [Sun Feb 6 13:34:36 UTC 2022] timeout=30 [Sun Feb 6 13:34:36 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L --connect-timeout 30' [Sun Feb 6 13:34:36 UTC 2022] ret='0' [Sun Feb 6 13:34:36 UTC 2022] _ovh_p='[hidden](please add '--output-insecure' to see this value)' [Sun Feb 6 13:34:36 UTC 2022] GET [Sun Feb 6 13:34:36 UTC 2022] url='https://eu.api.ovh.com/1.0/domain' [Sun Feb 6 13:34:36 UTC 2022] timeout= [Sun Feb 6 13:34:36 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:36 UTC 2022] ret='0' [Sun Feb 6 13:34:36 UTC 2022] Consumer key is ok. [Sun Feb 6 13:34:36 UTC 2022] First detect the root zone [Sun Feb 6 13:34:36 UTC 2022] domain/zone/_acme-challenge.mydomain.com [Sun Feb 6 13:34:36 UTC 2022] GET [Sun Feb 6 13:34:36 UTC 2022] url='https://eu.api.ovh.com/1.0/auth/time' [Sun Feb 6 13:34:36 UTC 2022] timeout=30 [Sun Feb 6 13:34:36 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L --connect-timeout 30' [Sun Feb 6 13:34:36 UTC 2022] ret='0' [Sun Feb 6 13:34:36 UTC 2022] _ovh_p='[hidden](please add '--output-insecure' to see this value)' [Sun Feb 6 13:34:36 UTC 2022] GET [Sun Feb 6 13:34:36 UTC 2022] url='https://eu.api.ovh.com/1.0/domain/zone/_acme-challenge.mydomain.com' [Sun Feb 6 13:34:36 UTC 2022] timeout= [Sun Feb 6 13:34:36 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:36 UTC 2022] ret='0' [Sun Feb 6 13:34:36 UTC 2022] _sub_domain='_acme-challenge' [Sun Feb 6 13:34:36 UTC 2022] _domain='_acme-challenge.mydomain.com' [Sun Feb 6 13:34:36 UTC 2022] Adding record [Sun Feb 6 13:34:36 UTC 2022] domain/zone/_acme-challenge.mydomain.com/record [Sun Feb 6 13:34:36 UTC 2022] GET [Sun Feb 6 13:34:36 UTC 2022] url='https://eu.api.ovh.com/1.0/auth/time' [Sun Feb 6 13:34:36 UTC 2022] timeout=30 [Sun Feb 6 13:34:36 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L --connect-timeout 30' [Sun Feb 6 13:34:36 UTC 2022] ret='0' [Sun Feb 6 13:34:36 UTC 2022] _ovh_p='[hidden](please add '--output-insecure' to see this value)' [Sun Feb 6 13:34:36 UTC 2022] data='{"fieldType":"TXT","subDomain":"_acme-challenge","target":"Ao0Wh1J1JBtbL1WwZq_kXNZzUzCXv_uMuwUK5QgjNQ4","ttl":60}' [Sun Feb 6 13:34:36 UTC 2022] POST [Sun Feb 6 13:34:36 UTC 2022] _post_url='https://eu.api.ovh.com/1.0/domain/zone/_acme-challenge.mydomain.com/record' [Sun Feb 6 13:34:36 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:36 UTC 2022] _ret='0' [Sun Feb 6 13:34:36 UTC 2022] Add txt record error. [Sun Feb 6 13:34:36 UTC 2022] Error add txt for domain:_acme-challenge.mydomain.com [Sun Feb 6 13:34:36 UTC 2022] _on_issue_err [Sun Feb 6 13:34:36 UTC 2022] Please check log file for more details: /acme.sh/acme.sh.log [Sun Feb 6 13:34:36 UTC 2022] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644860/CAXXGg' [Sun Feb 6 13:34:36 UTC 2022] payload='{}' [Sun Feb 6 13:34:36 UTC 2022] POST [Sun Feb 6 13:34:36 UTC 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644860/CAXXGg' [Sun Feb 6 13:34:36 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:37 UTC 2022] _ret='0' [Sun Feb 6 13:34:37 UTC 2022] code='200' [Sun Feb 6 13:34:37 UTC 2022] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644850/4mpNdQ' [Sun Feb 6 13:34:37 UTC 2022] payload='{}' [Sun Feb 6 13:34:37 UTC 2022] POST [Sun Feb 6 13:34:37 UTC 2022] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/75811644850/4mpNdQ' [Sun Feb 6 13:34:37 UTC 2022] _CURL='curl --silent --dump-header /acme.sh/http.header -L ' [Sun Feb 6 13:34:38 UTC 2022] _ret='0' [Sun Feb 6 13:34:38 UTC 2022] code='200' [Sun Feb 6 13:34:38 UTC 2022] pid [Sun Feb 6 13:34:38 UTC 2022] No need to restore nginx, skip. [Sun Feb 6 13:34:38 UTC 2022] _clearupdns [Sun Feb 6 13:34:38 UTC 2022] dns_entries [Sun Feb 6 13:34:38 UTC 2022] skip dns