http://xyz.spdns.eu/.well-known/acme-challenge/
[smarthome@SmartHomeNG ~]$ sudo certbot certonly --webroot -w /var/www/html -d xyz.spdns.eu Saving debug log to /var/log/letsencrypt/letsencrypt.log Obtaining a new certificate An unexpected error occurred: There were too many requests of a given type :: Error creating new authz :: Too many invalid authorizations recently. Please see the logfiles in /var/log/letsencrypt for more details.
2017-09-20 09:58:21,740:DEBUG:certbot.main:Root logging level set at 20
2017-09-20 09:58:21,771:INFO:certbot.main:Saving debug log to /var/log/letsencrypt/letsencrypt.log
2017-09-20 09:58:21,801:DEBUG:certbot.main:certbot version: 0.10.2
2017-09-20 09:58:21,804:DEBUG:certbot.main:Arguments: ['--webroot', '-w', '/var/www/html', '-d', 'xyz.spdns.eu']
2017-09-20 09:58:21,831:DEBUG:certbot.main:Discovered plugins: PluginsRegistry(PluginEntryPoint#webroot,PluginEntryPoint#null,PluginEntryPoint#manual,PluginEntryPoint#standalone)
2017-09-20 09:58:21,842:DEBUG:certbot.plugins.selection:Requested authenticator webroot and installer None
2017-09-20 09:58:21,855:DEBUG:certbot.plugins.selection:Single candidate plugin: * webroot
Description: Place files in webroot directory
Interfaces: IAuthenticator, IPlugin
Entry point: webroot = certbot.plugins.webroot:Authenticator
Initialized: <certbot.plugins.webroot.Authenticator object at 0xb3be8670>
Prep: True
2017-09-20 09:58:21,884:DEBUG:certbot.plugins.selection:Selected authenticator <certbot.plugins.webroot.Authenticator object at 0xb3be8670> and installer None
2017-09-20 09:58:22,011:DEBUG:certbot.main:Picked account: <Account(22b2db6d218460e2ecf750b9300c6cad)>
2017-09-20 09:58:22,046:DEBUG:root:Sending GET request to https://acme-v01.api.letsencrypt.org/directory.
2017-09-20 09:58:22,164:DEBUG:requests.packages.urllib3.connectionpool:Starting new HTTPS connection (1): acme-v01.api.letsencrypt.org
2017-09-20 09:58:22,926:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "GET /directory HTTP/1.1" 200 561
2017-09-20 09:58:22,947:DEBUG:acme.client:Received response:
HTTP 200
Server: nginx
Content-Type: application/json
Content-Length: 561
Replay-Nonce: bIIkzD0iOistngz3wRO_edKI-OOEcCFBz64VlEN5tEI
X-Frame-Options: DENY
Strict-Transport-Security: max-age=604800
Expires: Wed, 20 Sep 2017 09:58:22 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 20 Sep 2017 09:58:22 GMT
Connection: keep-alive
{
"guJnyq1c2jI": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
"key-change": "https://acme-v01.api.letsencrypt.org/acme/key-change",
"meta": {
"terms-of-service": "https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf"
},
"new-authz": "https://acme-v01.api.letsencrypt.org/acme/new-authz",
"new-cert": "https://acme-v01.api.letsencrypt.org/acme/new-cert",
"new-reg": "https://acme-v01.api.letsencrypt.org/acme/new-reg",
"revoke-cert": "https://acme-v01.api.letsencrypt.org/acme/revoke-cert"
}
2017-09-20 09:58:22,962:INFO:certbot.main:Obtaining a new certificate
2017-09-20 09:58:22,969:DEBUG:root:Requesting fresh nonce
2017-09-20 09:58:22,972:DEBUG:root:Sending HEAD request to https://acme-v01.api.letsencrypt.org/acme/new-authz.
2017-09-20 09:58:23,232:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "HEAD /acme/new-authz HTTP/1.1" 405 0
2017-09-20 09:58:23,251:DEBUG:acme.client:Received response:
HTTP 405
Server: nginx
Content-Type: application/problem+json
Content-Length: 91
Allow: POST
Replay-Nonce: wKA41HqUO00meRmfeUZj0UjoAI5NuptZt_Xu6XYTiSI
Expires: Wed, 20 Sep 2017 09:58:23 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 20 Sep 2017 09:58:23 GMT
Connection: keep-alive
2017-09-20 09:58:23,254:DEBUG:acme.client:Storing nonce: wKA41HqUO00meRmfeUZj0UjoAI5NuptZt_Xu6XYTiSI
2017-09-20 09:58:23,262:DEBUG:acme.client:JWS payload:
{
"identifier": {
"type": "dns",
"value": "xyz.spdns.eu"
},
"resource": "new-authz"
}
2017-09-20 09:58:23,394:DEBUG:root:Sending POST request to https://acme-v01.api.letsencrypt.org/acme/new-authz:
{
"header": {
"alg": "RS256",
"jwk": {
"e": "AQAB",
"kty": "RSA",
"n": "t8oWtRjTYAtfTAnBlxMHLG6Nf_K8-2afez7VW08-qUhcfu0nTyxAiplE_zVW11xQbPfUSOEA7UT-U5dh7etLJjmdbEZNU9lzeRt4ZnPCsk8D4Nu04QsRMMDiy8HZiLhU5GzPKKrYeXbQA4URl-Fw-0JhrXs3AKqYGyKjD9aDt2JHn0nfaHtXgQtToWWkVFUkmG1kERScwWHCLNvYR2Z_mJRDBHCDfdc4qEgDccMUoWwc-BXicRhe7VuX8yG55Y5ZOn5vBg2mkoenYlNfKf6NhoxqCdHZ3VxkJI2qF2YK-8_dQwqfcokmeeYsHEgxTxBFFPU4HWKIWW0l9Sj55vwImw"
}
},
"protected": "eyJub25jZSI6ICJ3S0E0MUhxVU8wMG1lUm1mZVVaajBVam9BSTVOdXB0WnRfWHU2WFlUaVNJIn0",
"payload": "ewogICJpZGVudGlmaWVyIjogewogICAgInR5cGUiOiAiZG5zIiwgCiAgICAidmFsdWUiOiAic21hcnR2aXN1MzYuc3BkbnMuZXUiCiAgfSwgCiAgInJlc291cmNlIjogIm5ldy1hdXRoeiIKfQ",
"signature": "Wvfc-XHWNaW078CDu90QCJuz7N3KtJOHuFYWGe2AIJg5gx9WIqEbLlj1sjGBLLXQMkVmGX8MSUYkb9m6YfRZkE5wRRrIc0fZrmwqw3BlAywu6GyZM2L8A8NpjS8ZbxdGwkQt-CqFpj952QvE1sXdp-ixNxyssxH-HMwSw72FS6PYLJ8_tgcqH2GYuIinKmMhCc6Ye3pI-H3Pdq72_wXv2TChmKH_ndVmgTaNy-TdUqCTvvtbBA_ZGwPcg--yUkqCuGG9TKwz3A4iUhaKLHNoX_HSFsn3iaAo7IhY-JEmb_MgZEUm65u8GhXnnRmFYeqyHxfly2YVOwCq74dUJjkQIQ"
}
2017-09-20 09:58:23,816:DEBUG:requests.packages.urllib3.connectionpool:https://acme-v01.api.letsencrypt.org:443 "POST /acme/new-authz HTTP/1.1" 429 144
2017-09-20 09:58:23,836:DEBUG:acme.client:Received response:
HTTP 429
Server: nginx
Content-Type: application/problem+json
Content-Length: 144
Boulder-Requester: 21550092
Replay-Nonce: 51SUPmbaTCADXhq3QCUEFqmtUslGGBdLB0TA7nrqhtY
Expires: Wed, 20 Sep 2017 09:58:23 GMT
Cache-Control: max-age=0, no-cache, no-store
Pragma: no-cache
Date: Wed, 20 Sep 2017 09:58:23 GMT
Connection: close
{
"type": "urn:acme:error:rateLimited",
"detail": "Error creating new authz :: Too many invalid authorizations recently.",
"status": 429
}
2017-09-20 09:58:23,840:DEBUG:acme.client:Storing nonce: 51SUPmbaTCADXhq3QCUEFqmtUslGGBdLB0TA7nrqhtY
2017-09-20 09:58:23,862:DEBUG:certbot.main:Exiting abnormally:
Traceback (most recent call last):
File "/usr/bin/certbot", line 11, in <module>
load_entry_point('certbot==0.10.2', 'console_scripts', 'certbot')()
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 849, in main
return config.func(config, plugins)
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 626, in obtain_cert
action, _ = _auth_from_available(le_client, config, domains, certname, lineage)
File "/usr/lib/python2.7/dist-packages/certbot/main.py", line 107, in _auth_from_available
lineage = le_client.obtain_and_enroll_certificate(domains, certname)
File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 291, in obtain_and_enroll_certificate
certr, chain, key, _ = self.obtain_certificate(domains)
File "/usr/lib/python2.7/dist-packages/certbot/client.py", line 262, in obtain_certificate
self.config.allow_subset_of_names)
File "/usr/lib/python2.7/dist-packages/certbot/auth_handler.py", line 67, in get_authorizations
domain, self.account.regr.new_authzr_uri)
File "/usr/lib/python2.7/dist-packages/acme/client.py", line 216, in request_domain_challenges
typ=messages.IDENTIFIER_FQDN, value=domain), new_authzr_uri)
File "/usr/lib/python2.7/dist-packages/acme/client.py", line 196, in request_challenges
new_authz)
File "/usr/lib/python2.7/dist-packages/acme/client.py", line 671, in post
return self._post_once(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/acme/client.py", line 684, in _post_once
return self._check_response(response, content_type=content_type)
File "/usr/lib/python2.7/dist-packages/acme/client.py", line 570, in _check_response
raise messages.Error.from_json(jobj)
Error: urn:acme:error:rateLimited :: There were too many requests of a given type :: Error creating new authz :: Too many invalid authorizations recently.
[smarthome@SmartHomeNG ~]$ sudo certbot certonly --webroot -w /var/www/html -d xyz.spdns.eu Saving debug log to /var/log/letsencrypt/letsencrypt.log Obtaining a new certificate Performing the following challenges: http-01 challenge for xyz.spdns.eu Using the webroot path /var/www/html for all unmatched domains. Waiting for verification... Cleaning up challenges Generating key (2048 bits): /etc/letsencrypt/keys/0000_key-certbot.pem Creating CSR: /etc/letsencrypt/csr/0000_csr-certbot.pem IMPORTANT NOTES: - Congratulations! Your certificate and chain have been saved at /etc/letsencrypt/live/xyz.spdns.eu/fullchain.pem. Your cert will expire on 2017-12-19. To obtain a new or tweaked version of this certificate in the future, simply run certbot again. To non-interactively renew *all* of your certificates, run "certbot renew" - If you like Certbot, please consider supporting our work by: Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate Donating to EFF: https://eff.org/donate-le
# SSL-Redirect & LetsEncrypt Endpoint
server {
listen 80 default_server;
# redirect every requested $host (any, even invalid ones) to its SSL URL
location / {
return 301 https://$host$request_uri;
}
# LetsEncrypt Endpoint
location /.well-known {
alias /var/www/html/.well-known;
}
}
# Sitemap
server {
listen 443 ssl default_server;
access_log /var/log/nginx/sitemap.log combined;
auth_basic "xyz.spdns.eu";
auth_basic_user_file /etc/nginx/htpasswd;
include /etc/nginx/include.d/common;
#add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
location / {
root /var/www/html/sitemap;
index index.html;
}
}
# Alexa
server {
listen 443 ssl;
server_name xyz.spdns.eu;
access_log /var/log/nginx/alexa.log combined;
auth_basic "Alexa";
auth_basic_user_file /etc/nginx/htpasswd.alexa;
include /etc/nginx/include.d/common;
location / {
proxy_pass http://192.168.1.13:9000/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
# Sitemap server { listen 443 ssl default_server; access_log /var/log/nginx/sitemap.log combined; auth_basic "YOUR-HOME.DYNDNS.TLD";
# Alexa server { listen 443 ssl; server_name ALEXA.YOUR-HOME.DYNDNS.TLD; access_log /var/log/nginx/alexa.log combined;
# Sitemap server { listen 443 ssl default_server; access_log /var/log/nginx/sitemap.log combined; auth_basic "xyz.spdns.eu";
# Alexa server { listen 443 ssl; server_name xyz.spdns.eu; access_log /var/log/nginx/alexa.log combined;
upstream php {
server localhost:9090;
}
server {
listen 80 default_server;
server_name smarthome.fritz.box;
satisfy any;
allow 192.168.1.0/24;
allow 192.168.179.0/24;
deny all;
auth_basic "SmartVisu Anmeldung";
auth_basic_user_file /etc/nginx/htpasswd;
root /var/www/html;
index index.php index.html index.htm;
location / {
autoindex on;
}
location ~ \.php$ {
include /etc/nginx/fastcgi_params;
fastcgi_pass 127.0.0.1:9090;
fastcgi_read_timeout 300;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
location /.well-known {
allow all;
}
}
# Visu
server {
listen 443 ssl default_server;
server_name x.domain.de;
auth_basic "x.domain.de";
auth_basic_user_file /etc/nginx/htpasswd;
include /etc/nginx/include.d/common;
root /var/www/html;
index index.php index.html index.htm;
location / {
try_files $uri $uri/ =404;
autoindex on;
}
location ~ \.php$ {
include /etc/nginx/fastcgi_params;
fastcgi_pass 127.0.0.1:9090;
fastcgi_read_timeout 300;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
}
# Alexa
server {
listen 443 ssl;
server_name alexax.domain.de;
access_log /var/log/nginx/alexa.log combined;
auth_basic "Alexa";
auth_basic_user_file /etc/nginx/htpasswd.alexa;
include /etc/nginx/include.d/common;
location / {
proxy_pass http://192.168.179.10:9000/;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
; The address on which to accept FastCGI requests. ; Valid syntaxes are: ; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on ; a specific port; ; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on ; a specific port; ; 'port' - to listen on a TCP socket to all addresses ; (IPv6 and IPv4-mapped) on a specific port; ; '/path/to/unix/socket' - to listen on a unix socket. ; Note: This value is mandatory. ;listen = /run/php/php7.0-fpm.sock listen = 127.0.0.1:9090
dpkg -i | grep php und netstat -tulpen und ps aux | grep php
sudo dpkg -i | grep php dpkg: Fehler: --install benötigt mindestens eine Paket-Archivdatei als Argument Nutzen Sie dpkg --help für Hilfe zur Installation und Deinst. von Paketen[*]; Benutzen Sie »apt« oder »aptitude« für benutzerfreundliches Paketmanagement; Nutzen Sie dpkg -Dhelp für eine Liste von Debug-Flags von dpkg; Nutzen Sie dpkg --force-help für eine Liste von Optionen zum Erzwingen; Nutzen Sie dpkg-deb --help für Hilfe zum Manipulieren von *.deb-Dateien; Optionen mit[*] geben viel aus - schicken Sie es durch »less« oder »more«!
(Es konnten nicht alle Prozesse identifiziert werden; Informationen über nicht-eigene Processe werden nicht angezeigt; Root kann sie anzeigen.) Aktive Internetverbindungen (Nur Server) Proto Recv-Q Send-Q Local Address Foreign Address State Benutzer Inode PID/Program name tcp 0 0 0.0.0.0:9000 0.0.0.0:* LISTEN 1001 11051 477/python3 tcp 0 0 0.0.0.0:139 0.0.0.0:* LISTEN 0 10888 - tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN 0 7154 - tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 0 47790 - tcp 0 0 0.0.0.0:2323 0.0.0.0:* LISTEN 1001 11061 477/python3 tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 10178 - tcp 0 0 0.0.0.0:2424 0.0.0.0:* LISTEN 1001 11060 477/python3 tcp 0 0 0.0.0.0:445 0.0.0.0:* LISTEN 0 10887 - tcp 0 0 192.168.1.13:8383 0.0.0.0:* LISTEN 1001 11055 477/python3 tcp6 0 0 :::139 :::* LISTEN 0 10886 - tcp6 0 0 :::111 :::* LISTEN 0 7161 - tcp6 0 0 :::22 :::* LISTEN 0 10180 - tcp6 0 0 :::445 :::* LISTEN 0 10885 - tcp6 0 0 :::6720 :::* LISTEN 0 7345 - udp 0 0 192.168.1.255:137 0.0.0.0:* 0 10476 - udp 0 0 192.168.1.13:137 0.0.0.0:* 0 10475 - udp 0 0 0.0.0.0:137 0.0.0.0:* 0 10465 - udp 0 0 192.168.1.255:138 0.0.0.0:* 0 10478 - udp 0 0 192.168.1.13:138 0.0.0.0:* 0 10477 - udp 0 0 0.0.0.0:138 0.0.0.0:* 0 10466 - udp 0 0 0.0.0.0:36263 0.0.0.0:* 108 7760 - udp 0 0 0.0.0.0:5353 0.0.0.0:* 108 7758 - udp 0 0 0.0.0.0:806 0.0.0.0:* 0 7153 - udp 0 0 0.0.0.0:68 0.0.0.0:* 0 9367 - udp 0 0 0.0.0.0:3671 0.0.0.0:* 109 10191 - udp 0 0 0.0.0.0:111 0.0.0.0:* 0 7152 - udp 0 0 192.168.1.13:39541 0.0.0.0:* 109 10187 - udp6 0 0 :::56238 :::* 108 7761 - udp6 0 0 :::5353 :::* 108 7759 - udp6 0 0 :::806 :::* 0 7160 - udp6 0 0 :::111 :::* 0 7157 -
smartho+ 7031 0.0 0.4 4764 1892 pts/0 S+ 10:30 0:00 grep --color=auto php
Failed authorization procedure. alexa-xyz.spdns.eu (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://alexa-smartvisu36.spdns.eu/.well-known/acme-challenge/5P7rTK-_KB_T8Yo-WOf4czuqX7r2laSwbc_1NtHueKc: Connect ion refused IMPORTANT NOTES: - The following errors were reported by the server: Domain: alexa-xyz.spdns.eu Type: connection Detail: Fetching http://alexa-xyz.spdns.eu/.well-known/acme-challenge/5P7rTK-_KB_T8Yo-WOf4czuqX7r2laSwbc_1NtHueKc: Connection refused
Kommentar