I am trying to test master-master replication between two server by referring to this tutorial: Configure a galera cluster
The first node was started normally after executing galera_new_cluster & get wsrep_cluster_size = 1, but when executed systemctl start mysql for second node, I got an error as listed below.
Job for mariadb.service failed because the control process exited with error code. See "systemctl status mariadb.service" and "journalctl -xe" for details.
Error from "systemctl status mariadb.service":
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: gcs/src/gcs_core.cpp:gcs_core_open():208: Failed to open backend connection: -110 (Connection timed out)
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: gcs/src/gcs.cpp:gcs_open():1458: Failed to open channel 'test_cluster' at 'gcomm://206.189.37.50,206.189.39.149': -110 (Connection timed out)
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: gcs connect failed: Connection timed out
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: wsrep::connect(gcomm://206.189.37.50,206.189.39.149) failed: 7
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] Aborting
Jul 18 08:03:56 mariadb-s2 systemd[1]: mariadb.service: Main process exited, code=exited, status=1/FAILURE
Jul 18 08:03:56 mariadb-s2 systemd[1]: Failed to start MariaDB 10.1.34 database server.
Jul 18 08:03:56 mariadb-s2 systemd[1]: mariadb.service: Unit entered failed state.
Jul 18 08:03:56 mariadb-s2 systemd[1]: mariadb.service: Failed with result 'exit-code'.
Error from "journalctl -xe":
Jul 18 08:03:22 mariadb-s2 mysqld[7734]: WSREP: Recovered position 5820583f-8a43-11e8-8c80-9e4cdd04427e:0
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] /usr/sbin/mysqld (mysqld 10.1.34-MariaDB-1~xenial) starting as process 7956 ...
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Read nil XID from storage engines, skipping position init
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: wsrep_load(): loading provider library '/usr/lib/galera/libgalera_smm.so'
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: wsrep_load(): Galera 25.3.23(r3789) by Codership Oy <info#codership.com> loaded successfully.
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: CRC-32C: using hardware acceleration.
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Found saved state: 5820583f-8a43-11e8-8c80-9e4cdd04427e:-1, safe_to_bootstrap: 1
Jul 18 08:03:22 mariadb-s2 mysqld[7734]: WSREP: Recovered position 5820583f-8a43-11e8-8c80-9e4cdd04427e:0
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] /usr/sbin/mysqld (mysqld 10.1.34-MariaDB-1~xenial) starting as process 7956 ...
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Read nil XID from storage engines, skipping position init
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: wsrep_load(): loading provider library '/usr/lib/galera/libgalera_smm.so'
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: wsrep_load(): Galera 25.3.23(r3789) by Codership Oy <info#codership.com> loaded successfully.
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: CRC-32C: using hardware acceleration.
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Found saved state: 5820583f-8a43-11e8-8c80-9e4cdd04427e:-1, safe_to_bootstrap: 1
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Passing config to GCS: base_dir = /var/lib/mysql/; base_host = 206.189.39.149; base_port = 4567; cert.log_conflicts = no; debug = no; evs.auto_evi
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Assign initial position for certification: 0, protocol version: -1
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: wsrep_sst_grab()
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Start replication
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Setting initial position to 5820583f-8a43-11e8-8c80-9e4cdd04427e:0
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: protonet asio version 0
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: Using CRC-32C for message checksums.
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: backend: asio
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: gcomm thread scheduling priority set to other:0
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Warning] WSREP: access file(/var/lib/mysql//gvwstate.dat) failed(No such file or directory)
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: restore pc from disk failed
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: GMCast version 0
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') listening at tcp://0.0.0.0:4567
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') multicast: , ttl: 1
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: EVS version 0
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: gcomm: connecting to group 'test_cluster', peer '206.189.37.50:,206.189.39.149:'
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection established to 0a4e92b4 tcp://206.189.39.149:4567
Jul 18 08:03:22 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:22 140559072364800 [Warning] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') address 'tcp://206.189.39.149:4567' points to own listening address, blacklisting
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:25 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 00000000 with addr tcp://206.189.37.50:4567 timed out, no messages seen in PT3S
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:25 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 0a4e92b4 with addr tcp://206.189.39.149:4567 timed out, no messages seen in PT3S
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:25 140559072364800 [Warning] WSREP: no nodes coming from prim view, prim not possible
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:25 140559072364800 [Note] WSREP: view(view_id(NON_PRIM,0a4e92b4,1) memb {
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: 0a4e92b4,0
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: } joined {
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: } left {
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: } partitioned {
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: })
Jul 18 08:03:25 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:25 140559072364800 [Warning] WSREP: last inactive check more than PT1.5S ago (PT3.50398S), skipping check
Jul 18 08:03:29 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:29 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 00000000 with addr tcp://206.189.37.50:4567 timed out, no messages seen in PT3S
Jul 18 08:03:34 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:34 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 00000000 with addr tcp://206.189.37.50:4567 timed out, no messages seen in PT3S
Jul 18 08:03:38 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:38 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 00000000 with addr tcp://206.189.37.50:4567 timed out, no messages seen in PT3S
Jul 18 08:03:43 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:43 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 00000000 with addr tcp://206.189.37.50:4567 timed out, no messages seen in PT3S
Jul 18 08:03:47 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:47 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 00000000 with addr tcp://206.189.37.50:4567 timed out, no messages seen in PT3S
Jul 18 08:03:49 mariadb-s2 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=e2:57:b6:36:df:64:ec:38:73:0c:78:30:08:00 SRC=123.249.27.191 DST=206.189.39.149 LEN=40 TOS=0x00 PREC=0x00 TTL=113 ID=256 PROTO=TCP SPT=39069 DPT=8888 WINDOW=16384 RES=0x00 S
Jul 18 08:03:52 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:52 140559072364800 [Note] WSREP: (0a4e92b4, 'tcp://0.0.0.0:4567') connection to peer 00000000 with addr tcp://206.189.37.50:4567 timed out, no messages seen in PT3S
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [Note] WSREP: view((empty))
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: failed to open gcomm backend connection: 110: failed to reach primary view: 110 (Connection timed out)
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: at gcomm/src/pc.cpp:connect():158
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: gcs/src/gcs_core.cpp:gcs_core_open():208: Failed to open backend connection: -110 (Connection timed out)
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: gcs/src/gcs.cpp:gcs_open():1458: Failed to open channel 'test_cluster' at 'gcomm://206.189.37.50,206.189.39.149': -110 (Connection timed out)
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: gcs connect failed: Connection timed out
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] WSREP: wsrep::connect(gcomm://206.189.37.50,206.189.39.149) failed: 7
Jul 18 08:03:55 mariadb-s2 mysqld[7956]: 2018-07-18 8:03:55 140559072364800 [ERROR] Aborting
Jul 18 08:03:56 mariadb-s2 systemd[1]: mariadb.service: Main process exited, code=exited, status=1/FAILURE
Jul 18 08:03:56 mariadb-s2 systemd[1]: Failed to start MariaDB 10.1.34 database server.
Configuration of Node 1:
[mysqld]
binlog_format=ROW
default-storage-engine=innodb
innodb_autoinc_lock_mode=2
bind-address=0.0.0.0
# Galera Provider Configuration
wsrep_on=ON
wsrep_provider=/usr/lib/galera/libgalera_smm.so
# Galera Cluster Configuration
wsrep_cluster_name="test_cluster"
wsrep_cluster_address="gcomm://206.189.37.50,206.189.39.149"
# Galera Synchronization Configuration
wsrep_sst_method=rsync
# Galera Node Configuration
wsrep_node_address="206.189.37.50"
wsrep_node_name="node1"
Configuration of Node 2:
[mysqld]
binlog_format=ROW
default-storage-engine=innodb
innodb_autoinc_lock_mode=2
bind-address=0.0.0.0
# Galera Provider Configuration
wsrep_on=ON
wsrep_provider=/usr/lib/galera/libgalera_smm.so
# Galera Cluster Configuration
wsrep_cluster_name="test_cluster"
wsrep_cluster_address="gcomm://206.189.37.50,206.189.39.149"
# Galera Synchronization Configuration
wsrep_sst_method=rsync
# Galera Node Configuration
wsrep_node_address="206.189.39.149"
wsrep_node_name="node2"
I had referred to many similar question in Stack Overflow, but none of the suggestions help. I still getting the same error.
The logs show that the Ubuntu Firewall (UFW) is active so it’s likely that the connections get blocked by the firewall.
To see if this is the problem, you can run ufw disable. If replication works with ufw disabled, make sure you add rules to allow
Connections from node1’s ip to tcp port 4567 on node2 and node2’s ip to tcp port 4567 on node1.
After you’ve added the rules check the output of ufw list and if everything is fine, run ufw enable to reactivate the firewall.
You can run man ufw to learn more about UFW configuration.
I'm currently using Symfony 3.4.8 with up to date dependencies.
In production, symfony creates "prod?" directory :
drwxrwxrwx 4 www-data www-data 434 Apr 20 10:26 .
drwxr-xr-x 4 www-data www-data 45 Apr 20 10:21 ..
-rw-rw-rw- 1 www-data www-data 165 Apr 20 10:26 annotations.map
drwxrwxrwx 2 www-data www-data 15K Apr 20 10:26 ContainerDcnvgsr
-rw-rw-rw- 1 www-data www-data 106K Apr 20 10:26 srcProd?DebugProjectContainerCompiler.log
-rw-rw-rw- 1 www-data www-data 628 Apr 20 10:26 srcProd?DebugProjectContainerDeprecations.log
-rw-rw-rw- 1 www-data www-data 784 Apr 20 10:26 srcProd?DebugProjectContainer.php
-rw-rw-rw- 1 www-data www-data 21K Apr 20 10:26 srcProd?DebugProjectContainer.php.meta
-rw-rw-rw- 1 www-data www-data 347K Apr 20 10:21 srcProd?DebugProjectContainer.xml
-rw-rw-rw- 1 www-data www-data 21K Apr 20 10:21 srcProd?DebugProjectContainer.xml.meta
drwxrwxrwx 2 www-data www-data 0 Apr 20 10:21 vich_uploader
var/cache directory :
drwxr-xr-x 4 www-data www-data 45 Apr 20 10:21 .
drwxr-xr-x 4 www-data www-data 44 Apr 19 11:38 ..
drwxr-xr-x 9 www-data www-data 556 Apr 19 11:42 prod
drwxrwxrwx 4 www-data www-data 434 Apr 20 10:26 prod?
public directory :
drwxr-xr-x 3 www-data www-data 104 Apr 19 11:39 build
drwxr-xr-x 2 www-data www-data 27 Apr 19 11:38 bundles
drwxrwxrwx 2 www-data www-data 98 Apr 19 09:27 imports
-rw-rw-rw- 1 www-data www-data 1242 Apr 19 09:27 index.php
Most of users have the following error :
(1/1) FatalThrowableError
Parse error: syntax error, unexpected
'DebugProjectContainer' (T_STRING), expecting ',' or ')'
The app works for few users with the correct "prod" cache directory and no error.
How can I fix this ?
There was a special character (^M) at the end of each line in the .env file due to a bad copy/paste.
¯\_(ツ)_/¯
I try to install my own boulder server to issue internal authority certificates.
I set up the boulder server from https://github.com/letsencrypt/boulder in docker.
Also acme.sh on the another server for issue certificates.
Unfortunately, acme.sh gives me this error, and I don't know what could be wrong:
Debug from acme.sh:
letsencrypt#boulderacme:~$ .acme.sh/acme.sh --issue -d suitecrm.office.mojeip.cz --home /home/letsencrypt/.acme.sh -w /home/letsencrypt/webroot --server http://boulder.office.mojeip.cz:4000/directory --renew --force --log --debug 2
[Thu Nov 9 13:07:42 UTC 2017] Lets find script dir.
[Thu Nov 9 13:07:42 UTC 2017] _SCRIPT_='.acme.sh/acme.sh'
[Thu Nov 9 13:07:42 UTC 2017] _script='/home/letsencrypt/.acme.sh/acme.sh'
[Thu Nov 9 13:07:42 UTC 2017] _script_home='/home/letsencrypt/.acme.sh'
[Thu Nov 9 13:07:42 UTC 2017] Using config home:/home/letsencrypt/.acme.sh
[Thu Nov 9 13:07:42 UTC 2017] LE_WORKING_DIR='/home/letsencrypt/.acme.sh'
https://github.com/Neilpang/acme.sh
v2.7.4
[Thu Nov 9 13:07:42 UTC 2017] Using server: http://boulder.office.mojeip.cz:4000/directory
[Thu Nov 9 13:07:42 UTC 2017] Using config home:/home/letsencrypt/.acme.sh
[Thu Nov 9 13:07:42 UTC 2017] ACME_DIRECTORY='http://boulder.office.mojeip.cz:4000/directory'
[Thu Nov 9 13:07:42 UTC 2017] _ACME_SERVER_HOST='boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] DOMAIN_PATH='/home/letsencrypt/.acme.sh/suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] Renew: 'suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] Using config home:/home/letsencrypt/.acme.sh
[Thu Nov 9 13:07:42 UTC 2017] ACME_DIRECTORY='http://boulder.office.mojeip.cz:4000/directory'
[Thu Nov 9 13:07:42 UTC 2017] _ACME_SERVER_HOST='boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] Using ACME_DIRECTORY: http://boulder.office.mojeip.cz:4000/directory
[Thu Nov 9 13:07:42 UTC 2017] _init api for server: http://boulder.office.mojeip.cz:4000/directory
[Thu Nov 9 13:07:42 UTC 2017] GET
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz:4000/directory'
[Thu Nov 9 13:07:42 UTC 2017] timeout
[Thu Nov 9 13:07:42 UTC 2017] _CURL='curl -L --silent --dump-header /home/letsencrypt/.acme.sh/http.header --trace-ascii /tmp/tmp.O7gBfsu6LG '
[Thu Nov 9 13:07:42 UTC 2017] ret='0'
[Thu Nov 9 13:07:42 UTC 2017] response='{
"36iqcXcTwfE": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"key-change": "http://boulder.office.mojeip.cz:4000/acme/key-change",
"meta": {
"terms-of-service": "http://boulder:4000/terms/v1"
},
"new-authz": "http://boulder.office.mojeip.cz:4000/acme/new-authz",
"new-cert": "http://boulder.office.mojeip.cz:4000/acme/new-cert",
"new-reg": "http://boulder.office.mojeip.cz:4000/acme/new-reg",
"revoke-cert": "http://boulder.office.mojeip.cz:4000/acme/revoke-cert"
}'
[Thu Nov 9 13:07:42 UTC 2017] ACME_KEY_CHANGE='http://boulder.office.mojeip.cz:4000/acme/key-change'
[Thu Nov 9 13:07:42 UTC 2017] ACME_NEW_AUTHZ='http://boulder.office.mojeip.cz:4000/acme/new-authz'
[Thu Nov 9 13:07:42 UTC 2017] ACME_NEW_ORDER='http://boulder.office.mojeip.cz:4000/acme/new-cert'
[Thu Nov 9 13:07:42 UTC 2017] ACME_NEW_ACCOUNT='http://boulder.office.mojeip.cz:4000/acme/new-reg'
[Thu Nov 9 13:07:42 UTC 2017] ACME_REVOKE_CERT='http://boulder.office.mojeip.cz:4000/acme/revoke-cert'
[Thu Nov 9 13:07:42 UTC 2017] Le_NextRenewTime
[Thu Nov 9 13:07:42 UTC 2017] _on_before_issue
[Thu Nov 9 13:07:42 UTC 2017] '/home/letsencrypt/webroot' does not contain 'no'
[Thu Nov 9 13:07:42 UTC 2017] Le_LocalAddress
[Thu Nov 9 13:07:42 UTC 2017] Check for domain='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _currentRoot='/home/letsencrypt/webroot'
[Thu Nov 9 13:07:42 UTC 2017] '/home/letsencrypt/webroot' does not contain 'apache'
[Thu Nov 9 13:07:42 UTC 2017] _saved_account_key_hash='6sRegKo+srPDgaOnCejKyf7wkccpEtngrddGwl0xyho='
[Thu Nov 9 13:07:42 UTC 2017] _saved_account_key_hash is not changed, skip register account.
[Thu Nov 9 13:07:42 UTC 2017] Read key length:
[Thu Nov 9 13:07:42 UTC 2017] _createcsr
[Thu Nov 9 13:07:42 UTC 2017] domain='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] domainlist
[Thu Nov 9 13:07:42 UTC 2017] csrkey='/home/letsencrypt/.acme.sh/suitecrm.office.mojeip.cz/suitecrm.office.mojeip.cz.key'
[Thu Nov 9 13:07:42 UTC 2017] csr='/home/letsencrypt/.acme.sh/suitecrm.office.mojeip.cz/suitecrm.office.mojeip.cz.csr'
[Thu Nov 9 13:07:42 UTC 2017] csrconf='/home/letsencrypt/.acme.sh/suitecrm.office.mojeip.cz/suitecrm.office.mojeip.cz.csr.conf'
[Thu Nov 9 13:07:42 UTC 2017] Single domain='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _is_idn_d='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _idn_temp
[Thu Nov 9 13:07:42 UTC 2017] _csr_cn='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] Getting domain auth token for each domain
[Thu Nov 9 13:07:42 UTC 2017] Getting webroot for domain='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _w='/home/letsencrypt/webroot'
[Thu Nov 9 13:07:42 UTC 2017] _currentRoot='/home/letsencrypt/webroot'
[Thu Nov 9 13:07:42 UTC 2017] Getting new-authz for domain='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _init api for server: http://boulder.office.mojeip.cz:4000/directory
[Thu Nov 9 13:07:42 UTC 2017] ACME_KEY_CHANGE='http://boulder.office.mojeip.cz:4000/acme/key-change'
[Thu Nov 9 13:07:42 UTC 2017] ACME_NEW_AUTHZ='http://boulder.office.mojeip.cz:4000/acme/new-authz'
[Thu Nov 9 13:07:42 UTC 2017] ACME_NEW_ORDER='http://boulder.office.mojeip.cz:4000/acme/new-cert'
[Thu Nov 9 13:07:42 UTC 2017] ACME_NEW_ACCOUNT='http://boulder.office.mojeip.cz:4000/acme/new-reg'
[Thu Nov 9 13:07:42 UTC 2017] ACME_REVOKE_CERT='http://boulder.office.mojeip.cz:4000/acme/revoke-cert'
[Thu Nov 9 13:07:42 UTC 2017] Try new-authz for the 0 time.
[Thu Nov 9 13:07:42 UTC 2017] _is_idn_d='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _idn_temp
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz:4000/acme/new-authz'
[Thu Nov 9 13:07:42 UTC 2017] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "suitecrm.office.mojeip.cz"}}'
[Thu Nov 9 13:07:42 UTC 2017] RSA key
[Thu Nov 9 13:07:42 UTC 2017] Get nonce. ACME_DIRECTORY='http://boulder.office.mojeip.cz:4000/directory'
[Thu Nov 9 13:07:42 UTC 2017] GET
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz:4000/directory'
[Thu Nov 9 13:07:42 UTC 2017] timeout
[Thu Nov 9 13:07:42 UTC 2017] _CURL='curl -L --silent --dump-header /home/letsencrypt/.acme.sh/http.header --trace-ascii /tmp/tmp.g5Cb3ROx3f '
[Thu Nov 9 13:07:42 UTC 2017] ret='0'
[Thu Nov 9 13:07:42 UTC 2017] _headers='HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json
Replay-Nonce: OrPVpfcC3bi2zbnIhpJYWL9g7GBiYs2k76RLlnSeakM
Date: Thu, 09 Nov 2017 13:07:42 GMT
Content-Length: 510
'
[Thu Nov 9 13:07:42 UTC 2017] _CACHED_NONCE='OrPVpfcC3bi2zbnIhpJYWL9g7GBiYs2k76RLlnSeakM'
[Thu Nov 9 13:07:42 UTC 2017] nonce='OrPVpfcC3bi2zbnIhpJYWL9g7GBiYs2k76RLlnSeakM'
[Thu Nov 9 13:07:42 UTC 2017] POST
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz:4000/acme/new-authz'
[Thu Nov 9 13:07:42 UTC 2017] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "uKV5BlCeMeXa69r3leWJkO3-_XsbnkK87DRh_qPFjJOm4jYXTObgMt4FtCqwQl8cgcYoYmXm7zDLaK-zP2tgykVV_5CrzVpgbpZxVo9lmE_DXujdfNb24yIPQi34NEzTUQIrtghPIxIHPw9Tdq0faWNjQztN0c69as2XolTO1TyQ949SOl8GT4eU6wbWyg14vQGL2linu7bE9Gnmws7kXL6ABeK4BwxzHU4lrjZ7ZoDPVRzWIpazcoHlBMcOEj8C7dhmIvduP_slB2GzYi-hwhtVvao8FDJmQNGhMyohnYk_v7PjJgxNMKz1H7-KgDpvEBpwKC98Ot34B83mK5wvxw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJuZXctYXV0aHoiLCAiaWRlbnRpZmllciI6IHsidHlwZSI6ICJkbnMiLCAidmFsdWUiOiAic3VpdGVjcm0ub2ZmaWNlLm5pYy5jeiJ9fQ", "signature": "TTb0-ghjFif0Up03XNilRA3KR49TSCongQSBw2ewFUucXipah9Pa5RI_kDD0sE0rYiiCW75Og7fpzwOX6rRn6TAJeYrY_hmyOhaqW3szQjeocH365WxdmFTJbmV9M9LgAVRubB2rQcLFxAwg0IGbbEhOKTVV-zvmS39ZA_2XvcmJR6nkrPgzfxzGcSTz1aFlTZH8GKCwBXBy6K8FULZ4wUnOb7C2LV_oqpAyDwEez1oj4s_nCmGM-CxCopgeNgcpY_yZymz7WVvHQLo082iUTBzzoZrbipQiDGUIjVio29io93b-ZDzFPZu-3nqq__TdYh20ZupCyK952A9629aMOg"}'
[Thu Nov 9 13:07:42 UTC 2017] _CURL='curl -L --silent --dump-header /home/letsencrypt/.acme.sh/http.header --trace-ascii /tmp/tmp.2WomWqkuZB '
[Thu Nov 9 13:07:42 UTC 2017] _ret='0'
[Thu Nov 9 13:07:42 UTC 2017] original='{
"identifier": {
"type": "dns",
"value": "suitecrm.office.mojeip.cz"
},
"status": "pending",
"expires": "2017-11-16T09:38:04Z",
"challenges": [
{
"type": "dns-01",
"status": "pending",
"uri": "http://boulder.office.mojeip.cz:4000/acme/challenge/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs/7",
"token": "Ac_6ziNyuvskTZn_kqNC6hpYW_KBE34adHt2QmGQyYo"
},
{
"type": "http-01",
"status": "pending",
"uri": "http://boulder.office.mojeip.cz:4000/acme/challenge/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs/8",
"token": "lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk"
},
{
"type": "tls-sni-01",
"status": "pending",
"uri": "http://boulder.office.mojeip.cz:4000/acme/challenge/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs/9",
"token": "ckfZdVql-_SAX7zF5JkEoRqYbkGDy12pwBe2gj066aE"
}
],
"combinations": [
[
1
],
[
0
],
[
2
]
]
}'
[Thu Nov 9 13:07:42 UTC 2017] responseHeaders='HTTP/1.1 100 Continue
HTTP/1.1 201 Created
Boulder-Requester: 2
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json
Link: <http://boulder.office.mojeip.cz:4000/acme/new-cert>;rel="next"
Location: http://boulder.office.mojeip.cz:4000/acme/authz/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs
Replay-Nonce: sheBkr-biOxnzow70bnB8rMgEwxdh9gtTxpo8Vtdruk
Date: Thu, 09 Nov 2017 13:07:42 GMT
Content-Length: 964
'
[Thu Nov 9 13:07:42 UTC 2017] response='{"identifier":{"type":"dns","value":"suitecrm.office.mojeip.cz"},"status":"pending","expires":"2017-11-16T09:38:04Z","challenges":[{"type":"dns-01","status":"pending","uri":"http://boulder.office.mojeip.cz:4000/acme/challenge/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs/7","token":"Ac_6ziNyuvskTZn_kqNC6hpYW_KBE34adHt2QmGQyYo"},{"type":"http-01","status":"pending","uri":"http://boulder.office.mojeip.cz:4000/acme/challenge/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs/8","token":"lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk"},{"type":"tls-sni-01","status":"pending","uri":"http://boulder.office.mojeip.cz:4000/acme/challenge/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs/9","token":"ckfZdVql-_SAX7zF5JkEoRqYbkGDy12pwBe2gj066aE"}],"combinations":[[1],[0],[2]]}'
[Thu Nov 9 13:07:42 UTC 2017] code='201'
[Thu Nov 9 13:07:42 UTC 2017] The new-authz request is ok.
[Thu Nov 9 13:07:42 UTC 2017] entry='"type":"http-01","status":"pending","uri":"http://boulder.office.mojeip.cz:4000/acme/challenge/g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs/8","token":"lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk"'
[Thu Nov 9 13:07:42 UTC 2017] token='lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk'
[Thu Nov 9 13:07:42 UTC 2017] uri='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] keyauthorization='lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM'
[Thu Nov 9 13:07:42 UTC 2017] dvlist='suitecrm.office.mojeip.cz#lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM#http://boulder.office.mojeip.cz#http-01#/home/letsencrypt/webroot'
[Thu Nov 9 13:07:42 UTC 2017] vlist='suitecrm.office.mojeip.cz#lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM#http://boulder.office.mojeip.cz#http-01#/home/letsencrypt/webroot,'
[Thu Nov 9 13:07:42 UTC 2017] ok, let's start to verify
[Thu Nov 9 13:07:42 UTC 2017] Verifying:suitecrm.office.mojeip.cz
[Thu Nov 9 13:07:42 UTC 2017] d='suitecrm.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] keyauthorization='lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM'
[Thu Nov 9 13:07:42 UTC 2017] uri='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _currentRoot='/home/letsencrypt/webroot'
[Thu Nov 9 13:07:42 UTC 2017] wellknown_path='/home/letsencrypt/webroot/.well-known/acme-challenge'
[Thu Nov 9 13:07:42 UTC 2017] writing token:lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk to /home/letsencrypt/webroot/.well-known/acme-challenge/lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk
[Thu Nov 9 13:07:42 UTC 2017] Changing owner/group of .well-known to letsencrypt:letsencrypt
[Thu Nov 9 13:07:42 UTC 2017] tigger domain validation.
[Thu Nov 9 13:07:42 UTC 2017] _t_url='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _t_key_authz='lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM'
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] payload='{"resource": "challenge", "keyAuthorization": "lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM"}'
[Thu Nov 9 13:07:42 UTC 2017] Use cached jwk for file: /home/letsencrypt/.acme.sh/ca/boulder.office.mojeip.cz/account.key
[Thu Nov 9 13:07:42 UTC 2017] Use _CACHED_NONCE='sheBkr-biOxnzow70bnB8rMgEwxdh9gtTxpo8Vtdruk'
[Thu Nov 9 13:07:42 UTC 2017] nonce='sheBkr-biOxnzow70bnB8rMgEwxdh9gtTxpo8Vtdruk'
[Thu Nov 9 13:07:42 UTC 2017] POST
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "uKV5BlCeMeXa69r3leWJkO3-_XsbnkK87DRh_qPFjJOm4jYXTObgMt4FtCqwQl8cgcYoYmXm7zDLaK-zP2tgykVV_5CrzVpgbpZxVo9lmE_DXujdfNb24yIPQi34NEzTUQIrtghPIxIHPw9Tdq0faWNjQztN0c69as2XolTO1TyQ949SOl8GT4eU6wbWyg14vQGL2linu7bE9Gnmws7kXL6ABeK4BwxzHU4lrjZ7ZoDPVRzWIpazcoHlBMcOEj8C7dhmIvduP_slB2GzYi-hwhtVvao8FDJmQNGhMyohnYk_v7PjJgxNMKz1H7-KgDpvEBpwKC98Ot34B83mK5wvxw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJsVmhfRmFVcEJEbC01T2pySmFFMnNtOE1MNUJvWmZlSmJOeTdfMWlhQ0ZrLnB1WW9saW5FOGhZenItRThZM2Rwckg5ZWVJUEE1SnkwMFB0dTBkRUdQck0ifQ", "signature": "L3en-T8m3jGU2JKvm1Kks7KKdRkhf1fD-rOy_grtbZBmhb_gPHBvjadV4wlbDJxkVKIiczHEykfx50LhLIs6vYcUMRo52c6lGITEwRTGBeBgGl30umh7FC1iUVnRh4sqoJeQfI3DkO07bB4qdQaqstefI5MgRLsOJs82AkuQ0iv8P6s7AV5gq9yfDSaUtTrzIR_7BaCFEUbefzZc6ZXmaBQsdX0YRWGwGh0IPQKpzNEmgjpA_G_ZKMHZTXUzGAZ61TBl2iW7R6AMEI75JAkJkXxLhJPg_Xz7WrKy_CJ1EB0uNuAiVHZwc1w8XvXUw19o5T9fErT99QZBHVdLdwzT3g"}'
[Thu Nov 9 13:07:42 UTC 2017] _CURL='curl -L --silent --dump-header /home/letsencrypt/.acme.sh/http.header --trace-ascii /tmp/tmp.sTCSOrbo8o '
[Thu Nov 9 13:07:42 UTC 2017] _ret='0'
[Thu Nov 9 13:07:42 UTC 2017] original='<h1>This is server: boulder.office.mojeip.cz </h1>'
[Thu Nov 9 13:07:42 UTC 2017] responseHeaders='HTTP/1.1 100 Continue
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Thu, 09 Nov 2017 13:07:42 GMT
Content-Type: text/html
Content-Length: 48
Last-Modified: Thu, 09 Nov 2017 09:28:34 GMT
Connection: keep-alive
ETag: "5a041fc2-30"
Accept-Ranges: bytes
'
[Thu Nov 9 13:07:42 UTC 2017] response='<h1>This is server: boulder.office.mojeip.cz </h1>'
[Thu Nov 9 13:07:42 UTC 2017] code='200'
[Thu Nov 9 13:07:42 UTC 2017] suitecrm.office.mojeip.cz:Challenge error: <h1>This is server: boulder.office.mojeip.cz </h1>
[Thu Nov 9 13:07:42 UTC 2017] Debugging, skip removing: /home/letsencrypt/webroot/.well-known/acme-challenge/lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk
[Thu Nov 9 13:07:42 UTC 2017] pid
[Thu Nov 9 13:07:42 UTC 2017] No need to restore nginx, skip.
[Thu Nov 9 13:07:42 UTC 2017] _clearupdns
[Thu Nov 9 13:07:42 UTC 2017] skip dns.
[Thu Nov 9 13:07:42 UTC 2017] _on_issue_err
[Thu Nov 9 13:07:42 UTC 2017] Please check log file for more details: /home/letsencrypt/.acme.sh/acme.sh.log
[Thu Nov 9 13:07:42 UTC 2017] _chk_vlist='suitecrm.office.mojeip.cz#lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM#http://boulder.office.mojeip.cz#http-01#/home/letsencrypt/webroot,'
[Thu Nov 9 13:07:42 UTC 2017] start to deactivate authz
[Thu Nov 9 13:07:42 UTC 2017] tigger domain validation.
[Thu Nov 9 13:07:42 UTC 2017] _t_url='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] _t_key_authz='lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM'
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] payload='{"resource": "challenge", "keyAuthorization": "lVh_FaUpBDl-5OjrJaE2sm8ML5BoZfeJbNy7_1iaCFk.puYolinE8hYzr-E8Y3dprH9eeIPA5Jy00Ptu0dEGPrM"}'
[Thu Nov 9 13:07:42 UTC 2017] Use cached jwk for file: /home/letsencrypt/.acme.sh/ca/boulder.office.mojeip.cz/account.key
[Thu Nov 9 13:07:42 UTC 2017] Get nonce. ACME_DIRECTORY='http://boulder.office.mojeip.cz:4000/directory'
[Thu Nov 9 13:07:42 UTC 2017] GET
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz:4000/directory'
[Thu Nov 9 13:07:42 UTC 2017] timeout
[Thu Nov 9 13:07:42 UTC 2017] _CURL='curl -L --silent --dump-header /home/letsencrypt/.acme.sh/http.header --trace-ascii /tmp/tmp.wFz2IqISdA '
[Thu Nov 9 13:07:42 UTC 2017] ret='0'
[Thu Nov 9 13:07:42 UTC 2017] _headers='HTTP/1.1 200 OK
Cache-Control: public, max-age=0, no-cache
Content-Type: application/json
Replay-Nonce: lcwvWZqCg5QiOFij_0U5mf430ZSYXTy1VqNl6BF11GM
Date: Thu, 09 Nov 2017 13:07:42 GMT
Content-Length: 510
'
[Thu Nov 9 13:07:42 UTC 2017] _CACHED_NONCE='lcwvWZqCg5QiOFij_0U5mf430ZSYXTy1VqNl6BF11GM'
[Thu Nov 9 13:07:42 UTC 2017] nonce='lcwvWZqCg5QiOFij_0U5mf430ZSYXTy1VqNl6BF11GM'
[Thu Nov 9 13:07:42 UTC 2017] POST
[Thu Nov 9 13:07:42 UTC 2017] url='http://boulder.office.mojeip.cz'
[Thu Nov 9 13:07:42 UTC 2017] body='{"header": {"alg": "RS256", "jwk": {"e": "AQAB", "kty": "RSA", "n": "uKV5BlCeMeXa69r3leWJkO3-_XsbnkK87DRh_qPFjJOm4jYXTObgMt4FtCqwQl8cgcYoYmXm7zDLaK-zP2tgykVV_5CrzVpgbpZxVo9lmE_DXujdfNb24yIPQi34NEzTUQIrtghPIxIHPw9Tdq0faWNjQztN0c69as2XolTO1TyQ949SOl8GT4eU6wbWyg14vQGL2linu7bE9Gnmws7kXL6ABeK4BwxzHU4lrjZ7ZoDPVRzWIpazcoHlBMcOEj8C7dhmIvduP_slB2GzYi-hwhtVvao8FDJmQNGhMyohnYk_v7PjJgxNMKz1H7-KgDpvEBpwKC98Ot34B83mK5wvxw"}}, "protected": "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", "payload": "eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJsVmhfRmFVcEJEbC01T2pySmFFMnNtOE1MNUJvWmZlSmJOeTdfMWlhQ0ZrLnB1WW9saW5FOGhZenItRThZM2Rwckg5ZWVJUEE1SnkwMFB0dTBkRUdQck0ifQ", "signature": "mPhsVHif7ClJptITMmIv7fgLk09cx6nvG4xiLv5LCH3te2C6NCxf6WjhzqCPoEu8LqXThb0wlY8FDYlfr87R8JW4K7dcV18vlqNbXmfUa7Ahu8aFGtIx_sAn_5pQ50r8MKI6R0snWRKRG7r0Lgx4w0UyrhcT1z7P4bWF4QAyZc1HMVRwHdVf5TRBx9I1C-2qwInsFUfSWyHOICWzQ3nBSHXGfTIa9h7rItstHOGnxf3s8OUvkxtaBjgXkvqHAOGIs6URg8dW5wvMrDNufmOa_zSkkriL8lnl9CfAnMCFULHYqU5_eZ_mN_xIJZMVJFfIywWuRxEj3JKX73CF78OtnQ"}'
[Thu Nov 9 13:07:42 UTC 2017] _CURL='curl -L --silent --dump-header /home/letsencrypt/.acme.sh/http.header --trace-ascii /tmp/tmp.SOBuN1Ym4O '
[Thu Nov 9 13:07:42 UTC 2017] _ret='0'
[Thu Nov 9 13:07:42 UTC 2017] original='<h1>This is server: boulder.office.mojeip.cz </h1>'
[Thu Nov 9 13:07:42 UTC 2017] responseHeaders='HTTP/1.1 100 Continue
HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Thu, 09 Nov 2017 13:07:42 GMT
Content-Type: text/html
Content-Length: 48
Last-Modified: Thu, 09 Nov 2017 09:28:34 GMT
Connection: keep-alive
ETag: "5a041fc2-30"
Accept-Ranges: bytes
'
[Thu Nov 9 13:07:42 UTC 2017] response='<h1>This is server: boulder.office.mojeip.cz </h1>'
[Thu Nov 9 13:07:42 UTC 2017] code='200'
[Thu Nov 9 13:07:42 UTC 2017] '/home/letsencrypt/webroot' does not contain 'dns'
[Thu Nov 9 13:07:42 UTC 2017] Diagnosis versions:
openssl:openssl
OpenSSL 1.1.0f 25 May 2017
apache:
apache doesn't exists.
nginx:
nginx doesn't exists.
socat:
socat by Gerhard Rieger - see www.dest-unreach.org
Usage:
socat [options] <bi-address> <bi-address>
options:
-V print version and feature information to stdout, and exit
-h|-? print a help text describing command line options and addresses
-hh like -h, plus a list of all common address option names
-hhh like -hh, plus a list of all available address option names
-d increase verbosity (use up to 4 times; 2 are recommended)
-D analyze file descriptors before loop
-ly[facility] log to syslog, using facility (default is daemon)
-lf<logfile> log to file
-ls log to stderr (default if no other log)
-lm[facility] mixed log mode (stderr during initialization, then syslog)
-lp<progname> set the program name used for logging
-lu use microseconds for logging timestamps
-lh add hostname to log messages
-v verbose data traffic, text
-x verbose data traffic, hexadecimal
-b<size_t> set data buffer size (8192)
-s sloppy (continue on error)
-t<timeout> wait seconds before closing second channel
-T<timeout> total inactivity timeout in seconds
-u unidirectional mode (left to right)
-U unidirectional mode (right to left)
-g do not check option groups
-L <lockfile> try to obtain lock, or fail
-W <lockfile> try to obtain lock, or wait
-4 prefer IPv4 if version is not explicitly specified
-6 prefer IPv6 if version is not explicitly specified
console on boulder server:
boulder_1 | I131626 boulder-wfe Successful request JSON={"Endpoint":"/directory","Method":"GET","ResponseNonce":"Zg32kE2Vnh1k_YNbDMf7z-EN_9xMSCwEI8QxHsGf25g","UserAgent":"acme.sh/2.7.4 (https://github.com/Neilpang/acme.sh)","Code":0}
boulder_1 | I131626 boulder-wfe Successful request JSON={"Endpoint":"/directory","Method":"HEAD","ResponseNonce":"nNQzqnkdfxiuh4qBnUq1kfgGvagj4z6mf19FZ96knnQ","UserAgent":"acme.sh/2.7.4 (https://github.com/Neilpang/acme.sh)","Code":0}
boulder_1 | I131626 boulder-wfe Successful request JSON={"Endpoint":"/acme/new-authz","Method":"POST","Requester":2,"Contacts":[],"RequestNonce":"nNQzqnkdfxiuh4qBnUq1kfgGvagj4z6mf19FZ96knnQ","ResponseNonce":"NQlEruE9KRKv6wDKlw3sMFI_rqGozSR1WbXGYX4zMPk","UserAgent":"acme.sh/2.7.4 (https://github.com/Neilpang/acme.sh)","Code":0,"Payload":"{\"resource\": \"new-authz\", \"identifier\": {\"type\": \"dns\", \"value\": \"suitecrm.office.nic.cz\"}}","Extra":{"AuthzID":"g_p52tFzTlJdur_jxKu8H3z0nZFFxlXDDXDnpISYOWs","Identifier":{"type":"dns","value":"suitecrm.office.nic.cz"}}}
boulder_1 | I131626 boulder-wfe Successful request JSON={"Endpoint":"/directory","Method":"HEAD","ResponseNonce":"BQ6DpsteiiKgadQ0SxjgWudtjT13X3EIMVksyxvG-e4","UserAgent":"acme.sh/2.7.4 (https://github.com/Neilpang/acme.sh)","Code":0}
Edit:
Hello again,
i just also run for test acmetiny, and I got these error:
letsencrypt#boulderacme:~/acmetiny/acme-tiny$ ./acme_tiny.py --account-key /home/letsencrypt/.acme.sh/suitecrm.office.mojeip.cz/suitecrm.office.mojeip.cz.key --csr /home/letsencrypt/.acme.sh/suitecrm.office.mojeip.cz/suitecrm.office.mojeip.cz.csr --acme-dir /home/letsencrypt/webroot/.well-known/acme-challenge/ --ca http://boulder.office.mojeip.cz:4000
Parsing account key...
Parsing CSR...
Registering account...
Registered!
Verifying suitecrm.office.mojeip.cz...
Traceback (most recent call last):
File "./acme_tiny.py", line 199, in <module>
main(sys.argv[1:])
File "./acme_tiny.py", line 195, in main
signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, log=LOGGER, CA=args.ca)
File "./acme_tiny.py", line 150, in get_crt
domain, challenge_status))
ValueError: suitecrm.office.mojeip.cz challenge did not pass: {u'status': u'invalid', u'validationRecord': [{u'addressesResolved': [u'172.17.0.1'], u'url': u'http://suitecrm.office.mojeip.cz:5002/.well-known/acme-challenge/F6p-IafxaP_QYj6Ve_NMVIZr7vev8wpHvjXtJ3qunpM', u'hostname': u'suitecrm.office.mojeip.cz', u'addressesTried': [], u'addressUsed': u'172.17.0.1', u'port': u'5002'}], u'keyAuthorization': u'F6p-IafxaP_QYj6Ve_NMVIZr7vev8wpHvjXtJ3qunpM.zuwKtqMhCyrE0K9UDAVN1xiHewv-ztzFgwUpUdttZtY', u'uri': u'http://boulder.office.mojeip.cz:4000/acme/challenge/Bnk3Lc9o44ZmYeqBBHBTRgm8q3vEaDthFmFq0ck1vfw/27', u'token': u'F6p-IafxaP_QYj6Ve_NMVIZr7vev8wpHvjXtJ3qunpM', u'error': {u'status': 400, u'type': u'urn:acme:error:connection', u'detail': u'Fetching http://suitecrm.office.mojeip.cz:5002/.well-known/acme-challenge/F6p-IafxaP_QYj6Ve_NMVIZr7vev8wpHvjXtJ3qunpM: Connection refused'}, u'type': u'http-01'}
So maybe is some problem on boulder side. But I still haven't close to right function with it.
It seems like a bug of acme.sh, please report an issue on github.
I will fix it soon.
Thanks.
Closed. This question does not meet Stack Overflow guidelines. It is not currently accepting answers.
This question does not appear to be about a specific programming problem, a software algorithm, or software tools primarily used by programmers. If you believe the question would be on-topic on another Stack Exchange site, you can leave a comment to explain where the question may be able to be answered.
Closed 2 years ago.
Improve this question
I follow the steps to setup a nginx server. After I create example.com.config and symbolic link for each server block in the sites-enabled directory. My nginx can't start.
I can't restart nginx service. It shows the following message when I entered
$sudo systemctl restart nginx.service
Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xe" for details.
$sudo systemctl status nginx.service -l shows the following message.
● nginx.service - nginx - high performance web server
Loaded: loaded (/usr/lib/systemd/system/nginx.service; disabled; vendor preset: disabled)
Active: failed (Result: exit-code) since Mon 2017-06-05 04:26:05 EDT; 1min 27s ago
Docs: http://nginx.org/en/docs/
Process: 4776 ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf (code=exited, status=1/FAILURE)
Process: 11491 ExecStartPre=/usr/sbin/nginx -t -c /etc/nginx/nginx.conf (code=exited, status=1/FAILURE)
Jun 05 04:26:05 localhost.localdomain systemd[1]: Starting nginx - high performance web server...
Jun 05 04:26:05 localhost.localdomain nginx[11491]: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
Jun 05 04:26:05 localhost.localdomain nginx[11491]: nginx: [emerg] open() "/var/run/nginx.pid" failed (13: Permission denied)
Jun 05 04:26:05 localhost.localdomain nginx[11491]: nginx: configuration file /etc/nginx/nginx.conf test failed
Jun 05 04:26:05 localhost.localdomain systemd[1]: nginx.service: control process exited, code=exited status=1
Jun 05 04:26:05 localhost.localdomain systemd[1]: Failed to start nginx - high performance web server.
Jun 05 04:26:05 localhost.localdomain systemd[1]: Unit nginx.service entered failed state.
Jun 05 04:26:05 localhost.localdomain systemd[1]: nginx.service failed.
PS: I am running under CentOS 7 on virtualbox.
Please help me. Thank you.
Here's the output when I run ls -lart /var/run/
total 56
dr-xr-xr-x. 17 root root 233 Jun 2 05:37 ..
drwxr-xr-x. 2 root root 60 Jun 6 01:21 tmpfiles.d
drwxr-xr-x. 3 root root 60 Jun 6 01:21 log
drwxr-xr-x. 2 root root 60 Jun 6 01:21 mount
drwxr-xr-x. 4 root root 120 Jun 6 01:21 initramfs
prw-------. 1 root root 0 Jun 6 01:21 dmeventd-server
prw-------. 1 root root 0 Jun 6 01:21 dmeventd-client
drwx------. 2 root root 80 Jun 6 01:21 lvm
-rw-r--r--. 1 root root 4 Jun 6 01:21 lvmetad.pid
drwxr-xr-x. 2 root root 60 Jun 6 01:21 sysconfig
drwxr-xr-x. 2 root root 40 Jun 6 01:21 samba
drwxr-xr-x. 2 root root 40 Jun 6 01:21 setrans
drwxrwxr-x. 2 root root 40 Jun 6 01:21 netreport
drwxr-xr-x. 2 root root 40 Jun 6 01:21 faillock
drwx------. 2 rpc rpc 40 Jun 6 01:21 rpcbind
drwxr-xr-x. 2 root root 40 Jun 6 01:21 ppp
drwxrwxr-x. 3 root libstoragemgmt 60 Jun 6 01:21 lsm
drwxr-xr-x. 2 root root 40 Jun 6 01:21 spice-vdagentd
drwxr-xr-x. 2 root root 40 Jun 6 01:21 sepermit
drwxr-xr-x. 2 radvd radvd 40 Jun 6 01:21 radvd
drwx--x---. 2 root root 40 Jun 6 01:21 mdadm
drwxr-xr-x. 2 root root 40 Jun 6 01:21 certmonger
drwx--x--x. 2 setroubleshoot setroubleshoot 40 Jun 6 01:21 setroubleshoot
-rw-r--r--. 1 root root 4 Jun 6 01:21 auditd.pid
drwxr-xr-x. 2 root root 60 Jun 6 01:21 dbus
srw-rw-rw-. 1 root root 0 Jun 6 01:21 rpcbind.sock
drwxr-xr-x. 3 root lp 80 Jun 6 01:21 cups
drwxr-xr-x. 2 avahi avahi 80 Jun 6 01:21 avahi-daemon
-rw-------. 1 root root 11 Jun 6 01:21 alsactl.pid
-rw-r--r--. 1 root root 4 Jun 6 01:21 chronyd.pid
-rw-r--r--. 1 root root 4 Jun 6 01:21 ksmtune.pid
drwxr-xr-x. 2 root root 100 Jun 6 01:21 abrt
-rw-------. 1 root root 4 Jun 6 01:21 gssproxy.pid
srw-rw-rw-. 1 root root 0 Jun 6 01:21 gssproxy.sock
-rw-------. 1 root root 0 Jun 6 01:21 xtables.lock
drwxr-x---. 2 root root 40 Jun 6 01:21 firewalld
-rw-r--r--. 1 root root 4 Jun 6 01:21 dhclient-enp0s3.pid
drwxr-xr-x. 2 root root 80 Jun 6 01:21 NetworkManager
-rw-------. 1 root root 5 Jun 6 01:21 sm-notify.pid
drwxr-xr-x. 7 root root 180 Jun 6 01:21 lock
-rw-------. 1 root root 5 Jun 6 01:21 syslogd.pid
-rw-r--r--. 1 root root 5 Jun 6 01:21 sshd.pid
-rw-r--r--. 1 root root 5 Jun 6 01:21 crond.pid
-rw-r--r--. 1 root root 5 Jun 6 01:21 atd.pid
-rw-r--r--. 1 root root 4 Jun 6 01:21 libvirtd.pid
----------. 1 root root 0 Jun 6 01:21 cron.reboot
drwxr-xr-x. 2 root root 60 Jun 6 01:21 tuned
drwxr-xr-x. 6 root root 220 Jun 6 01:21 libvirt
drwxr-xr-x. 2 root root 40 Jun 6 01:21 plymouth
drwx------. 2 root root 40 Jun 6 01:22 udisks2
drwxr-xr-x. 2 root root 80 Jun 6 01:24 console
drwx--x--x. 4 root gdm 120 Jun 6 01:24 gdm
drwxr-xr-x. 3 root root 60 Jun 6 01:24 user
-rw-rw-r--. 1 root utmp 1536 Jun 6 01:24 utmp
drwxr-xr-x. 7 root root 160 Jun 6 01:24 udev
drwxr-xr-x. 17 root root 420 Jun 6 01:25 systemd
drwxr-xr-x. 37 root root 1140 Jun 6 01:25 .
ps -eaf |grep nginx
root 698 685 0 01:21 ? 00:00:00 runsv nginx
root 748 698 0 01:21 ? 00:00:00 svlogd -tt /var/log/gitlab/ngin
root 749 698 0 01:21 ? 00:00:00 nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
gitlab-+ 800 749 0 01:21 ? 00:00:00 nginx: worker process
gitlab-+ 801 749 0 01:21 ? 00:00:00 nginx: cache manager process
yen 6683 3840 0 01:44 pts/0 00:00:00 grep --color=auto nginx
Output of ps -eaf |grep nginx and netstat -tulpn |grep 80 before and after.
Here's the output of ps -eaf |grep nginx
root 669 1 0 21:50 ? 00:00:00 runsvdir -P /opt/gitlab/service log: svlogd: warning: unable to lock directory: /var/log/gitlab/nginx: temporary failure svlogd: fatal: no functional log directories. svlogd: warning: unable to lock directory: /var/log/gitlab/nginx: temporary failure svlogd: fatal: no functional log directories. svlogd: warning: unable to lock directory: /var/log/gitlab/nginx: temporary failure svlogd: fatal: no functional log directories. .....
root 4333 669 0 21:57 ? 00:00:00 runsv nginx
root 4348 4333 0 21:57 ? 00:00:00 svlogd -tt /var/log/gitlab/nginx
root 4374 4333 0 21:57 ? 00:00:00 nginx: master process /opt/gitlab/embedded/sbin/nginx -p /var/opt/gitlab/nginx
gitlab-+ 4381 4374 0 21:57 ? 00:00:00 nginx: worker process
gitlab-+ 4382 4374 0 21:57 ? 00:00:00 nginx: cache manager process
yen 14156 4094 0 23:13 pts/0 00:00:00 grep --color=auto nginx
Check your error log with sudo cat /var/log/nginx/error.log|less
You can also with WinScp by entering the path /var/log/nginx/
In my case had the syntax error.
In my server configuration file I had: server_name {api.mydomain.com};
The correct is: server_name api.mydomain.com;