Suddently I get issues with one of my accounts in Cyberpanel, one of my domains give me:
NET::ERR_CERT_AUTHORITY_INVALID
I tried all of here: How to fix SSL issues in CyberPanel - 03 - SSL - CyberPanel Community
Fix permissions
Checked A Record
ACME Client Verification
ModSecurity Blocking
I made a debugging but I don’t know where is the issue,…
Could someone give some help with this?
login as: root
[email protected]’s password:
Last login: Thu Jul 1 11:45:45 2021 from 33.red-XX-XX-XXX.staticip.rima-tde.net
This server has installed CyberPanel.
Visit https://www.cyberpanel.net
Forum https://forums.cyberpanel.net
Log in https://XXX.XXX.XX.XXX:8090
Current Server time : 2021-07-01 12:25:26.
Current Load average: 0.02, 0.12, 0.09
Current CPU usage : 1.29849%.
Current RAM usage : 714/3785MB (18.86%).
Current Disk usage : 18/38GB (49%).
System uptime : 9 days, 3 hours, 45 minutes.
Enjoy your accelerated Internet by CyberPanel.
[root@cloud ~]# /root/.acme.sh/acme.sh --issue -d mydomain.com -d www.mydomain.com --cert-file /etc/letsencrypt/live/mydomain.com/cert.pem --key-file /etc/letsencrypt/live/mydomain.comprivkey.pem --fullchain-file /etc/letsencrypt/live/mydomain.com/fullchain.pem -w /home/mydomain.com/public_html --force --debug
[Thu Jul 1 12:25:39 EDT 2021] Lets find script dir.
[Thu Jul 1 12:25:39 EDT 2021] SCRIPT=‘/root/.acme.sh/acme.sh’
[Thu Jul 1 12:25:39 EDT 2021] _script=‘/root/.acme.sh/acme.sh’
[Thu Jul 1 12:25:39 EDT 2021] _script_home=‘/root/.acme.sh’
[Thu Jul 1 12:25:39 EDT 2021] Using config home:/root/.acme.sh
GitHub - acmesh-official/acme.sh: A pure Unix shell script implementing ACME client protocol
v3.0.0
[Thu Jul 1 12:25:39 EDT 2021] Running cmd: issue
[Thu Jul 1 12:25:39 EDT 2021] _main_domain=‘mydomain.com’
[Thu Jul 1 12:25:39 EDT 2021] _alt_domains=‘www.mydomain.com’
[Thu Jul 1 12:25:39 EDT 2021] Using config home:/root/.acme.sh
[Thu Jul 1 12:25:39 EDT 2021] default_acme_server
[Thu Jul 1 12:25:39 EDT 2021] ACME_DIRECTORY=‘https://acme.zerossl.com/v2/DV90’
[Thu Jul 1 12:25:39 EDT 2021] DOMAIN_PATH=‘/root/.acme.sh/mydomain.com’
[Thu Jul 1 12:25:39 EDT 2021] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Thu Jul 1 12:25:39 EDT 2021] _init api for server: https://acme.zerossl.com/v2/DV90
[Thu Jul 1 12:25:39 EDT 2021] GET
[Thu Jul 1 12:25:39 EDT 2021] url=‘https://acme.zerossl.com/v2/DV90’
[Thu Jul 1 12:25:39 EDT 2021] timeout=
[Thu Jul 1 12:25:39 EDT 2021] _CURL=‘curl --silent --dump-header /root/.acme.sh/http.header -L -g ’
[Thu Jul 1 12:25:40 EDT 2021] ret=‘0’
[Thu Jul 1 12:25:40 EDT 2021] ACME_KEY_CHANGE=‘https://acme.zerossl.com/v2/DV90/keyChange’
[Thu Jul 1 12:25:40 EDT 2021] ACME_NEW_AUTHZ
[Thu Jul 1 12:25:40 EDT 2021] ACME_NEW_ORDER=‘https://acme.zerossl.com/v2/DV90/newOrder’
[Thu Jul 1 12:25:40 EDT 2021] ACME_NEW_ACCOUNT=‘https://acme.zerossl.com/v2/DV90/newAccount’
[Thu Jul 1 12:25:40 EDT 2021] ACME_REVOKE_CERT=‘https://acme.zerossl.com/v2/DV90/revokeCert’
[Thu Jul 1 12:25:40 EDT 2021] ACME_AGREEMENT=‘https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf’
[Thu Jul 1 12:25:40 EDT 2021] ACME_NEW_NONCE=‘https://acme.zerossl.com/v2/DV90/newNonce’
[Thu Jul 1 12:25:40 EDT 2021] Le_NextRenewTime=‘1628484134’
[Thu Jul 1 12:25:40 EDT 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Thu Jul 1 12:25:40 EDT 2021] _on_before_issue
[Thu Jul 1 12:25:40 EDT 2021] _chk_main_domain=‘mydomain.com’
[Thu Jul 1 12:25:40 EDT 2021] _chk_alt_domains=‘www.mydomain.com’
[Thu Jul 1 12:25:40 EDT 2021] Le_LocalAddress
[Thu Jul 1 12:25:40 EDT 2021] d=‘mydomain.com’
[Thu Jul 1 12:25:40 EDT 2021] Check for domain=‘mydomain.com’
[Thu Jul 1 12:25:40 EDT 2021] _currentRoot=’/home/mydomain.com/public_html’
[Thu Jul 1 12:25:40 EDT 2021] d=‘www.mydomain.com
[Thu Jul 1 12:25:40 EDT 2021] Check for domain=‘www.mydomain.com’
[Thu Jul 1 12:25:40 EDT 2021] _currentRoot=’/home/mydomain.com/public_html’
[Thu Jul 1 12:25:40 EDT 2021] d
[Thu Jul 1 12:25:40 EDT 2021] config file is empty, can not read CA_KEY_HASH
[Thu Jul 1 12:25:40 EDT 2021] Using config home:/root/.acme.sh
[Thu Jul 1 12:25:40 EDT 2021] ACME_DIRECTORY=‘https://acme.zerossl.com/v2/DV90’
[Thu Jul 1 12:25:40 EDT 2021] _init api for server: https://acme.zerossl.com/v2/DV90
[Thu Jul 1 12:25:40 EDT 2021] RSA key
[Thu Jul 1 12:25:40 EDT 2021] config file is empty, can not read CA_EAB_KEY_ID
[Thu Jul 1 12:25:40 EDT 2021] config file is empty, can not read CA_EAB_HMAC_KEY
[Thu Jul 1 12:25:40 EDT 2021] config file is empty, can not read CA_EMAIL
[Thu Jul 1 12:25:40 EDT 2021] No EAB credentials found for ZeroSSL, let’s get one
[Thu Jul 1 12:25:40 EDT 2021] acme.sh is using ZeroSSL as default CA now.
[Thu Jul 1 12:25:40 EDT 2021] Please update your account with an email address first.
[Thu Jul 1 12:25:40 EDT 2021] acme.sh --register-account -m [email protected]
[Thu Jul 1 12:25:40 EDT 2021] See: ZeroSSL.com CA · acmesh-official/acme.sh Wiki · GitHub
[Thu Jul 1 12:25:40 EDT 2021] _on_issue_err
[Thu Jul 1 12:25:40 EDT 2021] Please add ‘–debug’ or ‘–log’ to check more details.
[Thu Jul 1 12:25:40 EDT 2021] See: How to debug acme.sh · acmesh-official/acme.sh Wiki · GitHub
[Thu Jul 1 12:25:40 EDT 2021] Diagnosis versions:
openssl:openssl
OpenSSL 1.0.2k-fips 26 Jan 2017
apache:
apache doesn’t exist.
nginx:
nginx doesn’t exist.
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.3.2 on Aug 4 2017 04:57:10
running on Linux version #1 SMP Thu Apr 8 19:51:47 UTC 2021, release 3.10.0-1160.24.1.el7.x86_64, machine x86_64
features:
#define WITH_STDIO 1
#define WITH_FDNUM 1
#define WITH_FILE 1
#define WITH_CREAT 1
#define WITH_GOPEN 1
#define WITH_TERMIOS 1
#define WITH_PIPE 1
#define WITH_UNIX 1
#define WITH_ABSTRACT_UNIXSOCKET 1
#define WITH_IP4 1
#define WITH_IP6 1
#define WITH_RAWIP 1
#define WITH_GENERICSOCKET 1
#define WITH_INTERFACE 1
#define WITH_TCP 1
#define WITH_UDP 1
#define WITH_SCTP 1
#define WITH_LISTEN 1
#define WITH_SOCKS4 1
#define WITH_SOCKS4A 1
#define WITH_PROXY 1
#define WITH_SYSTEM 1
#define WITH_EXEC 1
#define WITH_READLINE 1
#define WITH_TUN 1
#define WITH_PTY 1
#define WITH_OPENSSL 1
#undef WITH_FIPS
#define WITH_LIBWRAP 1
#define WITH_SYCLS 1
#define WITH_FILAN 1
#define WITH_RETRY 1
#define WITH_MSGLEVEL 0 /debug/
[root@cloud ~]#