Unable to update challenge :: authorization must be pending

[Ben-Cho]

Hello everyone,

I have a really simple setup with a nginx container, the jwilder reverse proxy and the companion container and I can't make it work. The challenge fail and I have no idea why.

docker-compose :

version: '2.4'
networks:
  proxy_network:
    driver: bridge
services:
  web_server:
    image: jwilder/nginx-proxy
    container_name: web_server
    restart: on-failure
    ports:
      - '80:80'
      - '443:443'
    volumes:
      - $HOME/docker_volumes/nginx/conf.d:/etc/nginx/conf.d
      - $HOME/docker_volumes/nginx/vhost.d:/etc/nginx/vhost.d
      - $HOME/docker_volumes/nginx/certs:/etc/nginx/certs:ro
      - $HOME/docker_volumes/nginx/html:/usr/share/nginx/html
      - /var/run/docker.sock:/tmp/docker.sock:ro
    networks:
      - proxy_network
    environment:
      - SSL_POLICY=Mozilla-Modern
  letsencrypt:
    image: jrcs/letsencrypt-nginx-proxy-companion
    container_name: web_server_le
    volumes_from:
      - web_server
    depends_on:
      - web_server
    volumes:
      - $HOME/docker_volumes/nginx/certs:/etc/nginx/certs/:rw
      - /var/run/docker.sock:/var/run/docker.sock:ro
    networks:
      - proxy_network
    environment:
      - NGINX_PROXY_CONTAINER=web_server
  web_demo_dev:
    image: nginx:1.19.9
    container_name: web_demo_dev
    restart: unless-stopped
    expose:
      - 1203
    volumes:
      - $HOME/docker_volumes/web_demo_dev/build/web:/usr/share/nginx/html
    networks:
      - proxy_network
    environment:
      - TZ=Europe/Paris
      - VIRTUAL_HOST=webdemo.myurl.app
      - LETSENCRYPT_HOST=webdemo.myurl.app
      - [email protected]

The error from the companion container is "Unable to update challenge :: authorization must be pending"
Can someone tell me what can be blocking the challenge from completing ?
I already checked, ports 80 and 443 are open and the url is accessible from the outside.

What bothers me the most is that I have another VM where this setup is running perfectly fine.
I've been stuck on this for a few days now so any help would be greatly appreciated !

The full logs from the companion container are as follow (I've put it all in case someone see something I didn't) :

Debug: checking /etc/nginx/certs/webdemo.myurl.app ownership and permissions.
Debug: numeric ID of user root is 0.
Debug: numeric ID of group root is 0.
Reloading nginx proxy (web_server)...
2021/09/06 12:24:34 Generated '/etc/nginx/conf.d/default.conf' from 3 containers
2021/09/06 12:24:34 [notice] 77#77: signal process started
Calling acme.sh --issue with the following parameters : --log /dev/null --debug 2 --server https://acme-v02.api.letsencrypt.org/directory --config-home /etc/acme.sh/[email protected] --webroot /usr/share/nginx/html --keylength 4096 --cert-file /etc/nginx/certs/webdemo.myurl.app/cert.pem --key-file /etc/nginx/certs/webdemo.myurl.app/key.pem --ca-file /etc/nginx/certs/webdemo.myurl.app/chain.pem --fullchain-file /etc/nginx/certs/webdemo.myurl.app/fullchain.pem --always-force-new-domain-key --force --domain webdemo.myurl.app
Creating/renewal webdemo.myurl.app certificates... (webdemo.myurl.app)
[Mon Sep  6 12:24:34 CEST 2021] _selectServer try snames='letsencrypt.org,letsencrypt'
[Mon Sep  6 12:24:34 CEST 2021] _selectServer try snames='letsencrypt.org_test,letsencrypt_test,letsencrypttest'
[Mon Sep  6 12:24:34 CEST 2021] _selectServer try snames='buypass.com,buypass'
[Mon Sep  6 12:24:34 CEST 2021] _selectServer try snames='buypass.com_test,buypass_test,buypasstest'
[Mon Sep  6 12:24:34 CEST 2021] _selectServer try snames='zerossl.com,zerossl'
[Mon Sep  6 12:24:34 CEST 2021] _is_idn_d='webdemo.myurl.app'
[Mon Sep  6 12:24:34 CEST 2021] _idn_temp
[Mon Sep  6 12:24:34 CEST 2021] Lets find script dir.
[Mon Sep  6 12:24:34 CEST 2021] _SCRIPT_='/app/acme.sh'
[Mon Sep  6 12:24:34 CEST 2021] _script='/app/acme.sh'
[Mon Sep  6 12:24:34 CEST 2021] _script_home='/app'
[Mon Sep  6 12:24:34 CEST 2021] Using default home:/root/.acme.sh
[Mon Sep  6 12:24:34 CEST 2021] Using config home:/etc/acme.sh/[email protected]
[Mon Sep  6 12:24:34 CEST 2021] LE_WORKING_DIR='/root/.acme.sh'
https://github.com/acmesh-official/acme.sh
v2.8.8
[Mon Sep  6 12:24:34 CEST 2021] Using server: https://acme-v02.api.letsencrypt.org/directory
[Mon Sep  6 12:24:34 CEST 2021] Running cmd: issue
[Mon Sep  6 12:24:34 CEST 2021] _main_domain='webdemo.myurl.app'
[Mon Sep  6 12:24:34 CEST 2021] _alt_domains='no'
[Mon Sep  6 12:24:34 CEST 2021] Using config home:/etc/acme.sh/[email protected]
[Mon Sep  6 12:24:34 CEST 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon Sep  6 12:24:34 CEST 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Mon Sep  6 12:24:34 CEST 2021] DOMAIN_PATH='/etc/acme.sh/[email protected]/webdemo.myurl.app'
[Mon Sep  6 12:24:34 CEST 2021] '/usr/share/nginx/html' does not contain 'dns'
[Mon Sep  6 12:24:34 CEST 2021] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
[Mon Sep  6 12:24:34 CEST 2021] _init api for server: https://acme-v02.api.letsencrypt.org/directory
[Mon Sep  6 12:24:34 CEST 2021] GET
[Mon Sep  6 12:24:34 CEST 2021] url='https://acme-v02.api.letsencrypt.org/directory'
[Mon Sep  6 12:24:34 CEST 2021] timeout=
[Mon Sep  6 12:24:34 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.dK0b2wNxXJ '
[Mon Sep  6 12:24:35 CEST 2021] ret='0'
[Mon Sep  6 12:24:35 CEST 2021] response='{
  "caalGKqymak": "https://community.letsencrypt.org/t/adding-random-entries-to-the-directory/33417",
  "keyChange": "https://acme-v02.api.letsencrypt.org/acme/key-change",
  "meta": {
    "caaIdentities": [
      "letsencrypt.org"
    ],
    "termsOfService": "https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf",
    "website": "https://letsencrypt.org"
  },
  "newAccount": "https://acme-v02.api.letsencrypt.org/acme/new-acct",
  "newNonce": "https://acme-v02.api.letsencrypt.org/acme/new-nonce",
  "newOrder": "https://acme-v02.api.letsencrypt.org/acme/new-order",
  "revokeCert": "https://acme-v02.api.letsencrypt.org/acme/revoke-cert"
}'
[Mon Sep  6 12:24:35 CEST 2021] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
[Mon Sep  6 12:24:35 CEST 2021] ACME_NEW_AUTHZ
[Mon Sep  6 12:24:35 CEST 2021] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon Sep  6 12:24:35 CEST 2021] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
[Mon Sep  6 12:24:35 CEST 2021] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
[Mon Sep  6 12:24:35 CEST 2021] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Mon Sep  6 12:24:35 CEST 2021] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Mon Sep  6 12:24:35 CEST 2021] ACME_VERSION='2'
[Mon Sep  6 12:24:35 CEST 2021] Le_NextRenewTime
[Mon Sep  6 12:24:35 CEST 2021] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Mon Sep  6 12:24:35 CEST 2021] _on_before_issue
[Mon Sep  6 12:24:35 CEST 2021] _chk_main_domain='webdemo.myurl.app'
[Mon Sep  6 12:24:35 CEST 2021] _chk_alt_domains
[Mon Sep  6 12:24:35 CEST 2021] '/usr/share/nginx/html' does not contain 'no'
[Mon Sep  6 12:24:35 CEST 2021] Le_LocalAddress
[Mon Sep  6 12:24:35 CEST 2021] d='webdemo.myurl.app'
[Mon Sep  6 12:24:35 CEST 2021] Check for domain='webdemo.myurl.app'
[Mon Sep  6 12:24:35 CEST 2021] _currentRoot='/usr/share/nginx/html'
[Mon Sep  6 12:24:35 CEST 2021] d
[Mon Sep  6 12:24:35 CEST 2021] '/usr/share/nginx/html' does not contain 'apache'
[Mon Sep  6 12:24:35 CEST 2021] _saved_account_key_hash='jSWwtiO0PaKOvVwZoc4IzwcCoZhzPMfBv12KD9jpXtE='
[Mon Sep  6 12:24:35 CEST 2021] _saved_account_key_hash is not changed, skip register account.
[Mon Sep  6 12:24:35 CEST 2021] Read key length:4096
[Mon Sep  6 12:24:35 CEST 2021] Creating domain key
[Mon Sep  6 12:24:35 CEST 2021] Using config home:/etc/acme.sh/[email protected]
[Mon Sep  6 12:24:35 CEST 2021] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
[Mon Sep  6 12:24:35 CEST 2021] _ACME_SERVER_HOST='acme-v02.api.letsencrypt.org'
[Mon Sep  6 12:24:35 CEST 2021] _createkey for file:/etc/acme.sh/[email protected]/webdemo.myurl.app/webdemo.myurl.app.key
[Mon Sep  6 12:24:35 CEST 2021] Use length 4096
[Mon Sep  6 12:24:35 CEST 2021] Using RSA: 4096
[Mon Sep  6 12:24:37 CEST 2021] The domain key is here: /etc/acme.sh/[email protected]/webdemo.myurl.app/webdemo.myurl.app.key
[Mon Sep  6 12:24:37 CEST 2021] _createcsr
[Mon Sep  6 12:24:37 CEST 2021] domain='webdemo.myurl.app'
[Mon Sep  6 12:24:37 CEST 2021] domainlist
[Mon Sep  6 12:24:37 CEST 2021] csrkey='/etc/acme.sh/[email protected]/webdemo.myurl.app/webdemo.myurl.app.key'
[Mon Sep  6 12:24:37 CEST 2021] csr='/etc/acme.sh/[email protected]/webdemo.myurl.app/webdemo.myurl.app.csr'
[Mon Sep  6 12:24:37 CEST 2021] csrconf='/etc/acme.sh/[email protected]/webdemo.myurl.app/webdemo.myurl.app.csr.conf'
[Mon Sep  6 12:24:37 CEST 2021] Single domain='webdemo.myurl.app'
[Mon Sep  6 12:24:37 CEST 2021] _is_idn_d='webdemo.myurl.app'
[Mon Sep  6 12:24:37 CEST 2021] _idn_temp
[Mon Sep  6 12:24:37 CEST 2021] _is_idn_d='webdemo.myurl.app'
[Mon Sep  6 12:24:37 CEST 2021] _idn_temp
[Mon Sep  6 12:24:37 CEST 2021] _csr_cn='webdemo.myurl.app'
[Mon Sep  6 12:24:37 CEST 2021] Getting domain auth token for each domain
[Mon Sep  6 12:24:37 CEST 2021] _is_idn_d='webdemo.myurl.app'
[Mon Sep  6 12:24:37 CEST 2021] _idn_temp
[Mon Sep  6 12:24:37 CEST 2021] d
[Mon Sep  6 12:24:37 CEST 2021] _identifiers='{"type":"dns","value":"webdemo.myurl.app"}'
[Mon Sep  6 12:24:37 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon Sep  6 12:24:37 CEST 2021] payload='{"identifiers": [{"type":"dns","value":"webdemo.myurl.app"}]}'
[Mon Sep  6 12:24:37 CEST 2021] RSA key
[Mon Sep  6 12:24:37 CEST 2021] _URGLY_PRINTF
[Mon Sep  6 12:24:37 CEST 2021] xargs
[Mon Sep  6 12:24:37 CEST 2021] _URGLY_PRINTF
[Mon Sep  6 12:24:37 CEST 2021] xargs
[Mon Sep  6 12:24:37 CEST 2021] Get nonce with HEAD. ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Mon Sep  6 12:24:37 CEST 2021] HEAD
[Mon Sep  6 12:24:37 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
[Mon Sep  6 12:24:37 CEST 2021] body
[Mon Sep  6 12:24:37 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:37 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X  -I  '
[Mon Sep  6 12:24:38 CEST 2021] _ret='0'
[Mon Sep  6 12:24:38 CEST 2021] _headers='HTTP/2 200 
server: nginx
date: Mon, 06 Sep 2021 10:24:38 GMT
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 0001ThzydqEWNA4_ARmMY3PRUsWNLK_vfj9oAb7JIo9B1eg
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:38 CEST 2021] _CACHED_NONCE='0001ThzydqEWNA4_ARmMY3PRUsWNLK_vfj9oAb7JIo9B1eg'
[Mon Sep  6 12:24:38 CEST 2021] nonce='0001ThzydqEWNA4_ARmMY3PRUsWNLK_vfj9oAb7JIo9B1eg'
[Mon Sep  6 12:24:38 CEST 2021] POST
[Mon Sep  6 12:24:38 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
[Mon Sep  6 12:24:38 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMDAxVGh6eWRxRVdOQTRfQVJtTVkzUFJVc1dOTEtfdmZqOW9BYjdKSW85QjFlZyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvbmV3LW9yZGVyIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODI2NzE0NjAifQ", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6IndlYmRlbW9vLmR1bmlhLmFwcCJ9XX0", "signature": "gxrWX9hafOiEWzJS0cLeDzC4hcYEesg80ASBGjKM00QL7t2BpYblEc8Ph7qwM4ZsM_T_3zmJ2wZoHB1EQev9-QVGfTfGfSKNmREnlqTojGDhyWcdxiZc8DtaIIm4OF_NQrySXH3wWAU6uBoy_nuPDZVBi-6jJfgQHZCcMCTlFrCIbTJufWNqHP6frFwHJyuHhqc6QSc0nJJsU0lU4DguZeHvuoHVPbXjXWET-IFtD5OXSEgNTVVpjVAC9Hr_Uemmdo4MZRWsLswf7d2G5dLSoyONt5BkJdFvd0QWjeR71CajB_GroiPvD4nUpYHfJ8Cbkqc1TnRKThW5K_nqY6kxsw"}'
[Mon Sep  6 12:24:38 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:38 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:38 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:39 CEST 2021] _ret='0'
[Mon Sep  6 12:24:39 CEST 2021] responseHeaders='HTTP/2 201 
server: nginx
date: Mon, 06 Sep 2021 10:24:39 GMT
content-type: application/json
content-length: 341
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
location: https://acme-v02.api.letsencrypt.org/acme/order/182671460/22419280930
replay-nonce: 0102sN9HD8oLHDCVerf4JJD7RWW5X0s86HoRVMSRFONxPWw
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:39 CEST 2021] code='201'
[Mon Sep  6 12:24:39 CEST 2021] original='{
  "status": "pending",
  "expires": "2021-09-13T10:24:39Z",
  "identifiers": [
    {
      "type": "dns",
      "value": "webdemo.myurl.app"
    }
  ],
  "authorizations": [
    "https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190"
  ],
  "finalize": "https://acme-v02.api.letsencrypt.org/acme/finalize/182671460/22419280930"
}'
[Mon Sep  6 12:24:39 CEST 2021] response='{"status":"pending","expires":"2021-09-13T10:24:39Z","identifiers":[{"type":"dns","value":"webdemo.myurl.app"}],"authorizations":["https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190"],"finalize":"https://acme-v02.api.letsencrypt.org/acme/finalize/182671460/22419280930"}'
[Mon Sep  6 12:24:39 CEST 2021] Le_LinkOrder='https://acme-v02.api.letsencrypt.org/acme/order/182671460/22419280930'
[Mon Sep  6 12:24:39 CEST 2021] Le_OrderFinalize='https://acme-v02.api.letsencrypt.org/acme/finalize/182671460/22419280930'
[Mon Sep  6 12:24:39 CEST 2021] _authorizations_seg='https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190'
[Mon Sep  6 12:24:39 CEST 2021] _authz_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190'
[Mon Sep  6 12:24:39 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190'
[Mon Sep  6 12:24:39 CEST 2021] payload
[Mon Sep  6 12:24:39 CEST 2021] Use cached jwk for file: /etc/acme.sh/[email protected]/ca/acme-v02.api.letsencrypt.org/account.key
[Mon Sep  6 12:24:39 CEST 2021] Use _CACHED_NONCE='0102sN9HD8oLHDCVerf4JJD7RWW5X0s86HoRVMSRFONxPWw'
[Mon Sep  6 12:24:39 CEST 2021] nonce='0102sN9HD8oLHDCVerf4JJD7RWW5X0s86HoRVMSRFONxPWw'
[Mon Sep  6 12:24:39 CEST 2021] POST
[Mon Sep  6 12:24:39 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190'
[Mon Sep  6 12:24:39 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMTAyc045SEQ4b0xIRENWZXJmNEpKRDdSV1c1WDBzODZIb1JWTVNSRk9OeFBXdyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYXV0aHotdjMvMjg0ODY2NTIxOTAiLCAiYWxnIjogIlJTMjU2IiwgImtpZCI6ICJodHRwczovL2FjbWUtdjAyLmFwaS5sZXRzZW5jcnlwdC5vcmcvYWNtZS9hY2N0LzE4MjY3MTQ2MCJ9", "payload": "", "signature": "y-qu3y92BEHAKeM8z0-Nnq5TcgULu02o-1DzQhS79RziPkAkPV_rDo-sqgx0hSAZ4hn4aRfUELZOQCFtbry6U-46CpuNgUt0CJoXVYMuEwiJbJK9ypJaA4UlY--4eCuTtzLdBRd6drWODs88htMVVjEKUsGO-thjkTImldowahIvUYvVGcNTR2Hrb-k_WRAWvhK9qIYFC35hEmzPJC6H_EJZOqHnFhqmIMlqGbku06nejPrZtJlTd2An3xAMhq71iGMr0b6NJNbcMCDO4MJ7ib4NhoEZF8jq6mUVU1Yy9dYRW-nI81Xew8mn1RRhwtVZK9UK_-g1yzGCkMmm0d4mGw"}'
[Mon Sep  6 12:24:39 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:39 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:39 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:40 CEST 2021] _ret='0'
[Mon Sep  6 12:24:40 CEST 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Mon, 06 Sep 2021 10:24:39 GMT
content-type: application/json
content-length: 799
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 0001P0IcVCXOTNTuQgD_PSZQY8Hk4Ip2wybrOhQ3QOQHMl0
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:40 CEST 2021] code='200'
[Mon Sep  6 12:24:40 CEST 2021] original='{
  "identifier": {
    "type": "dns",
    "value": "webdemo.myurl.app"
  },
  "status": "pending",
  "expires": "2021-09-13T10:24:39Z",
  "challenges": [
    {
      "type": "http-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g",
      "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"
    },
    {
      "type": "dns-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/M18rdg",
      "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"
    },
    {
      "type": "tls-alpn-01",
      "status": "pending",
      "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/3iBkyA",
      "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"
    }
  ]
}'
[Mon Sep  6 12:24:40 CEST 2021] response='{"identifier":{"type":"dns","value":"webdemo.myurl.app"},"status":"pending","expires":"2021-09-13T10:24:39Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/M18rdg","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/3iBkyA","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}]}'
[Mon Sep  6 12:24:40 CEST 2021] response='{"identifier":{"type":"dns","value":"webdemo.myurl.app"},"status":"pending","expires":"2021-09-13T10:24:39Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/M18rdg","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/3iBkyA","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}]}'
[Mon Sep  6 12:24:40 CEST 2021] _d='webdemo.myurl.app'
[Mon Sep  6 12:24:40 CEST 2021] _authorizations_map='webdemo.myurl.app,{"identifier":{"type":"dns","value":"webdemo.myurl.app"},"status":"pending","expires":"2021-09-13T10:24:39Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/M18rdg","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/3iBkyA","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}]}
'
[Mon Sep  6 12:24:40 CEST 2021] d='webdemo.myurl.app'
[Mon Sep  6 12:24:40 CEST 2021] Getting webroot for domain='webdemo.myurl.app'
[Mon Sep  6 12:24:40 CEST 2021] _w='/usr/share/nginx/html'
[Mon Sep  6 12:24:40 CEST 2021] _currentRoot='/usr/share/nginx/html'
[Mon Sep  6 12:24:40 CEST 2021] _is_idn_d='webdemo.myurl.app'
[Mon Sep  6 12:24:40 CEST 2021] _idn_temp
[Mon Sep  6 12:24:40 CEST 2021] _candidates='webdemo.myurl.app,{"identifier":{"type":"dns","value":"webdemo.myurl.app"},"status":"pending","expires":"2021-09-13T10:24:39Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/M18rdg","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/3iBkyA","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}]}'
[Mon Sep  6 12:24:40 CEST 2021] response='{"identifier":{"type":"dns","value":"webdemo.myurl.app"},"status":"pending","expires":"2021-09-13T10:24:39Z","challenges":[{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"dns-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/M18rdg","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"},{"type":"tls-alpn-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/3iBkyA","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}]}'
[Mon Sep  6 12:24:40 CEST 2021] entry='"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"'
[Mon Sep  6 12:24:40 CEST 2021] token='oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw'
[Mon Sep  6 12:24:40 CEST 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:40 CEST 2021] keyauthorization='oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw.gG5neHPEjMaSx2Vr_aYWPevAmRi_P7KPGmjaZ4PRt48'
[Mon Sep  6 12:24:40 CEST 2021] dvlist='webdemo.myurl.app#oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw.gG5neHPEjMaSx2Vr_aYWPevAmRi_P7KPGmjaZ4PRt48#https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g#http-01#/usr/share/nginx/html'
[Mon Sep  6 12:24:40 CEST 2021] d
[Mon Sep  6 12:24:40 CEST 2021] vlist='webdemo.myurl.app#oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw.gG5neHPEjMaSx2Vr_aYWPevAmRi_P7KPGmjaZ4PRt48#https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g#http-01#/usr/share/nginx/html,'
[Mon Sep  6 12:24:40 CEST 2021] d='webdemo.myurl.app'
[Mon Sep  6 12:24:40 CEST 2021] ok, let's start to verify
[Mon Sep  6 12:24:40 CEST 2021] Verifying: webdemo.myurl.app
[Mon Sep  6 12:24:40 CEST 2021] d='webdemo.myurl.app'
[Mon Sep  6 12:24:40 CEST 2021] keyauthorization='oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw.gG5neHPEjMaSx2Vr_aYWPevAmRi_P7KPGmjaZ4PRt48'
[Mon Sep  6 12:24:40 CEST 2021] uri='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:40 CEST 2021] _currentRoot='/usr/share/nginx/html'
[Mon Sep  6 12:24:40 CEST 2021] wellknown_path='/usr/share/nginx/html/.well-known/acme-challenge'
[Mon Sep  6 12:24:40 CEST 2021] writing token:oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw to /usr/share/nginx/html/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw
[Mon Sep  6 12:24:40 CEST 2021] Changing owner/group of .well-known to UNKNOWN:UNKNOWN
[Mon Sep  6 12:24:40 CEST 2021] chown: invalid user: ‘UNKNOWN:UNKNOWN’
[Mon Sep  6 12:24:40 CEST 2021] Trigger domain validation.
[Mon Sep  6 12:24:40 CEST 2021] _t_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:40 CEST 2021] _t_key_authz='oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw.gG5neHPEjMaSx2Vr_aYWPevAmRi_P7KPGmjaZ4PRt48'
[Mon Sep  6 12:24:40 CEST 2021] _t_vtype='http-01'
[Mon Sep  6 12:24:40 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:40 CEST 2021] payload='{}'
[Mon Sep  6 12:24:40 CEST 2021] Use cached jwk for file: /etc/acme.sh/[email protected]/ca/acme-v02.api.letsencrypt.org/account.key
[Mon Sep  6 12:24:40 CEST 2021] Use _CACHED_NONCE='0001P0IcVCXOTNTuQgD_PSZQY8Hk4Ip2wybrOhQ3QOQHMl0'
[Mon Sep  6 12:24:40 CEST 2021] nonce='0001P0IcVCXOTNTuQgD_PSZQY8Hk4Ip2wybrOhQ3QOQHMl0'
[Mon Sep  6 12:24:40 CEST 2021] POST
[Mon Sep  6 12:24:40 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:40 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMDAxUDBJY1ZDWE9UTlR1UWdEX1BTWlFZOEhrNElwMnd5YnJPaFEzUU9RSE1sMCIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg0ODY2NTIxOTAvNnBMSzhnIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODI2NzE0NjAifQ", "payload": "e30", "signature": "qzkI-EprX4aWl11LmxZ3PVW7Mdf_ByiXdxGr3ml4F64y6LJ93QaZCdcIHFBjI_Pt-NbD_Az_Kd21u8F1olz1OZMbv3ZJB3fJg_EIAYq8DM2Rvh5ybCoJyPY36dopKdPU_8GG6KHtdPBr6VPzbYHJzAPlA36932XsPR_k8WUQKypr1wRRAXIZgG8yWjMGq2Pj0XKZnl_P0_CkjhV7EbdyDQ1e5Yu0BkNUcA08_hOw7lTyUSSkieuXG46BnltOCdboa2JcQDmAg-I1BEotWeXZlEcB4LeBKkfOiKKBhE78Iae7x0qYVEzbw09fWUYqXKT66jeLaWwOaFISBc_JXXixsg"}'
[Mon Sep  6 12:24:40 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:40 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:40 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:41 CEST 2021] _ret='0'
[Mon Sep  6 12:24:41 CEST 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Mon, 06 Sep 2021 10:24:41 GMT
content-type: application/json
content-length: 186
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g
replay-nonce: 0002SRpNsDWxFvTGwrlE6875BGiCWvg6tbZ6Yzoz4ht_SAQ
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:41 CEST 2021] code='200'
[Mon Sep  6 12:24:41 CEST 2021] original='{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g",
  "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"
}'
[Mon Sep  6 12:24:41 CEST 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:41 CEST 2021] trigger validation code: 200
[Mon Sep  6 12:24:41 CEST 2021] sleep 2 secs to verify
[Mon Sep  6 12:24:43 CEST 2021] checking
[Mon Sep  6 12:24:43 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:43 CEST 2021] payload
[Mon Sep  6 12:24:43 CEST 2021] Use cached jwk for file: /etc/acme.sh/[email protected]/ca/acme-v02.api.letsencrypt.org/account.key
[Mon Sep  6 12:24:43 CEST 2021] Use _CACHED_NONCE='0002SRpNsDWxFvTGwrlE6875BGiCWvg6tbZ6Yzoz4ht_SAQ'
[Mon Sep  6 12:24:43 CEST 2021] nonce='0002SRpNsDWxFvTGwrlE6875BGiCWvg6tbZ6Yzoz4ht_SAQ'
[Mon Sep  6 12:24:43 CEST 2021] POST
[Mon Sep  6 12:24:43 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:43 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMDAyU1JwTnNEV3hGdlRHd3JsRTY4NzVCR2lDV3ZnNnRiWjZZem96NGh0X1NBUSIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg0ODY2NTIxOTAvNnBMSzhnIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODI2NzE0NjAifQ", "payload": "", "signature": "WKStyT67E9uPR5BZ45jhRkvcKW_QX3FhStH6-M_tfqGiI0ZHG4MEX1hQ16isFAYzcF6KyVVqjIH6CxAfJ-2IhS-bjtInuhgnLl6bUDKYtBlrNjtmFhGSzG3BYIxorgunNn1YRpbwVPmdmlShZAZyrDES998G7ugHoB75kO5dfshaD4vaCFzPhX3KOV_-39MXziNF3KzZBt0i5eyuA63ZbhFYHicCgw-mgOYdb_AWxoL_GWGnAenS7G3VAEkqQFlBagtqI4l1Wn6-wFH0-EKNalozJcsAImIdDKEU9X8G98gWl5YAygK4DwPYKvPzgVnMO7qDx79J1-iFfVfLvRw_EA"}'
[Mon Sep  6 12:24:43 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:43 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:43 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:44 CEST 2021] _ret='0'
[Mon Sep  6 12:24:44 CEST 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Mon, 06 Sep 2021 10:24:44 GMT
content-type: application/json
content-length: 186
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g
replay-nonce: 010171hGWKHRfCUiPpHARrpYu17CozAmM7H1yGhkJ_TQTSo
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:44 CEST 2021] code='200'
[Mon Sep  6 12:24:44 CEST 2021] original='{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g",
  "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"
}'
[Mon Sep  6 12:24:44 CEST 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:44 CEST 2021] original='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:44 CEST 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:44 CEST 2021] Pending
[Mon Sep  6 12:24:44 CEST 2021] sleep 2 secs to verify
[Mon Sep  6 12:24:46 CEST 2021] checking
[Mon Sep  6 12:24:46 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:46 CEST 2021] payload
[Mon Sep  6 12:24:46 CEST 2021] Use cached jwk for file: /etc/acme.sh/[email protected]/ca/acme-v02.api.letsencrypt.org/account.key
[Mon Sep  6 12:24:46 CEST 2021] Use _CACHED_NONCE='010171hGWKHRfCUiPpHARrpYu17CozAmM7H1yGhkJ_TQTSo'
[Mon Sep  6 12:24:46 CEST 2021] nonce='010171hGWKHRfCUiPpHARrpYu17CozAmM7H1yGhkJ_TQTSo'
[Mon Sep  6 12:24:46 CEST 2021] POST
[Mon Sep  6 12:24:46 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:46 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMTAxNzFoR1dLSFJmQ1VpUHBIQVJycFl1MTdDb3pBbU03SDF5R2hrSl9UUVRTbyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg0ODY2NTIxOTAvNnBMSzhnIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODI2NzE0NjAifQ", "payload": "", "signature": "0a6x-ajDAZoG-w6bbQtrmVKOf41ZVbaNzfo9Nuy6jMBQh8pNgLYwod989qPeAWWVOIDaRhPhO6xMZqyfyGKwenIxdsKwVaTy98_MlCBgf4mM5inMLAy-uG9g3DfnTdYbFc_lscR5bsPbA_E1e3OZHQ4HdvZQoVTcqqo4PE9Cmq_Y1LlynATnrYhylaNjEjk15zbNcP3onjRGkDp5MYXT5BYxdelf-fEe1iNdbeQ6wuT8nOZEmclc9Tl4uOqiLkTNO4QfuyWa3PpoKuz8YKren_vXDtWU0kbuvAY5NveuHnYBnUntbcAZDbh9X6n8j9aqnGD2X2Er2AcmXrG786I8eg"}'
[Mon Sep  6 12:24:46 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:46 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:46 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:47 CEST 2021] _ret='0'
[Mon Sep  6 12:24:47 CEST 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Mon, 06 Sep 2021 10:24:46 GMT
content-type: application/json
content-length: 186
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g
replay-nonce: 0002T4o7KIlIz09cpj4-lXiJtuxrnIkUaIAQqRWz9jYOVSw
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:47 CEST 2021] code='200'
[Mon Sep  6 12:24:47 CEST 2021] original='{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g",
  "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"
}'
[Mon Sep  6 12:24:47 CEST 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:47 CEST 2021] original='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:47 CEST 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:47 CEST 2021] Pending
[Mon Sep  6 12:24:47 CEST 2021] sleep 2 secs to verify
[Mon Sep  6 12:24:49 CEST 2021] checking
[Mon Sep  6 12:24:49 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:49 CEST 2021] payload
[Mon Sep  6 12:24:49 CEST 2021] Use cached jwk for file: /etc/acme.sh/[email protected]/ca/acme-v02.api.letsencrypt.org/account.key
[Mon Sep  6 12:24:49 CEST 2021] Use _CACHED_NONCE='0002T4o7KIlIz09cpj4-lXiJtuxrnIkUaIAQqRWz9jYOVSw'
[Mon Sep  6 12:24:49 CEST 2021] nonce='0002T4o7KIlIz09cpj4-lXiJtuxrnIkUaIAQqRWz9jYOVSw'
[Mon Sep  6 12:24:49 CEST 2021] POST
[Mon Sep  6 12:24:49 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:49 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMDAyVDRvN0tJbEl6MDljcGo0LWxYaUp0dXhybklrVWFJQVFxUld6OWpZT1ZTdyIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg0ODY2NTIxOTAvNnBMSzhnIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODI2NzE0NjAifQ", "payload": "", "signature": "ol-z5L5a_EojyAFe0XBKCAeNgnkwkPbAqdVzketRQ9sQuX0twcwCYG-4k9_N4WlK22ByIxtwE7Tf4KxE8nbWYaDAbLTU0JHy1HLOsy6l-tWfuLkc5qCU7l3OA8mg5FQsEWouRXgO90UJp4fJv3AL0GR26nPwdCxzM8jwcjGl4N8EpLDJRTN0yCeKU90Dk-nrr6XvIv-TDXq71BH34gDhqZBeJ-6yg7tGZMYdUUpbt_BM7XJqI-TXChk4fwk2vlwFf8IsHlMC_3pF__x8SXT5MgB9v_48DfKou3K4sNUXx-cWWZr078XQgtTxR7PQ1Uhat5RN8iqYSN16cF1upo4xfA"}'
[Mon Sep  6 12:24:49 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:49 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:49 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:49 CEST 2021] _ret='0'
[Mon Sep  6 12:24:49 CEST 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Mon, 06 Sep 2021 10:24:49 GMT
content-type: application/json
content-length: 186
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g
replay-nonce: 00015i6G1YPFPOFZH9hkXdogcEmnfNxdq0EcPxEFlt5sp24
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:49 CEST 2021] code='200'
[Mon Sep  6 12:24:49 CEST 2021] original='{
  "type": "http-01",
  "status": "pending",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g",
  "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"
}'
[Mon Sep  6 12:24:49 CEST 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:49 CEST 2021] original='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:49 CEST 2021] response='{"type":"http-01","status":"pending","url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw"}'
[Mon Sep  6 12:24:49 CEST 2021] Pending
[Mon Sep  6 12:24:49 CEST 2021] sleep 2 secs to verify
[Mon Sep  6 12:24:51 CEST 2021] checking
[Mon Sep  6 12:24:51 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:51 CEST 2021] payload
[Mon Sep  6 12:24:51 CEST 2021] Use cached jwk for file: /etc/acme.sh/[email protected]/ca/acme-v02.api.letsencrypt.org/account.key
[Mon Sep  6 12:24:51 CEST 2021] Use _CACHED_NONCE='00015i6G1YPFPOFZH9hkXdogcEmnfNxdq0EcPxEFlt5sp24'
[Mon Sep  6 12:24:51 CEST 2021] nonce='00015i6G1YPFPOFZH9hkXdogcEmnfNxdq0EcPxEFlt5sp24'
[Mon Sep  6 12:24:52 CEST 2021] POST
[Mon Sep  6 12:24:52 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:52 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMDAxNWk2RzFZUEZQT0ZaSDloa1hkb2djRW1uZk54ZHEwRWNQeEVGbHQ1c3AyNCIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg0ODY2NTIxOTAvNnBMSzhnIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODI2NzE0NjAifQ", "payload": "", "signature": "zOWQd_jxdSseV1eEdkfI3TylbWSYcZQcdgLSPQulLyL1Q4-4RaqiPrq_mM1Kc33q9LgfDYTR_sBM6X6iVF9lj1zM2DFdMENeoJ-l_x-FYNk478JGbrivu0bPWOa_IxwwisFnWMS_VSwmCHJgWxABEIUeIj4CUlrH6nsbH_cShdqiOQFXrjAzf8ou6lVHXRdg7Ca2-qV76SXYycaLDcNSJ2sbRvn3r-ddewUH3sXqOJbi21sbnfzcqf6jvpB587LoMoBhANqd5_2s4Vnjj0smBtHh5MyBFB5gX2ToR4g8m6fTsuunjkinpcE_UQagWNViA_n_3FKh8Qj7-TZLHj_x-g"}'
[Mon Sep  6 12:24:52 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:52 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:52 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:52 CEST 2021] _ret='0'
[Mon Sep  6 12:24:52 CEST 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Mon, 06 Sep 2021 10:24:52 GMT
content-type: application/json
content-length: 800
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz-v3/28486652190>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g
replay-nonce: 0101GoEypqgwrZc1jTkDKRYe1Jnf2KPK9bjaFg2ZHKXme00
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Mon Sep  6 12:24:52 CEST 2021] code='200'
[Mon Sep  6 12:24:52 CEST 2021] original='{
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:ietf:params:acme:error:connection",
    "detail": "Fetching http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw: Timeout during connect (likely firewall problem)",
    "status": 400
  },
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g",
  "token": "oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw",
  "validationRecord": [
    {
      "url": "http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw",
      "hostname": "webdemo.myurl.app",
      "port": "80",
      "addressesResolved": [
        "my.real.ip.adress"
      ],
      "addressUsed": "my.real.ip.adress"
    }
  ],
  "validated": "2021-09-06T10:24:41Z"
}'
[Mon Sep  6 12:24:52 CEST 2021] response='{"type":"http-01","status":"invalid","error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw: Timeout during connect (likely firewall problem)","status": 400},"url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw","validationRecord":[{"url":"http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw","hostname":"webdemo.myurl.app","port":"80","addressesResolved":["my.real.ip.adress"],"addressUsed":"my.real.ip.adress"}],"validated":"2021-09-06T10:24:41Z"}'
[Mon Sep  6 12:24:52 CEST 2021] original='{"type":"http-01","status":"invalid","error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw: Timeout during connect (likely firewall problem)","status": 400},"url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw","validationRecord":[{"url":"http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw","hostname":"webdemo.myurl.app","port":"80","addressesResolved":["my.real.ip.adress"],"addressUsed":"my.real.ip.adress"}],"validated":"2021-09-06T10:24:41Z"}'
[Mon Sep  6 12:24:52 CEST 2021] response='{"type":"http-01","status":"invalid","error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw: Timeout during connect (likely firewall problem)","status": 400},"url":"https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g","token":"oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw","validationRecord":[{"url":"http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw","hostname":"webdemo.myurl.app","port":"80","addressesResolved":["my.real.ip.adress"],"addressUsed":"my.real.ip.adress"}],"validated":"2021-09-06T10:24:41Z"}'
[Mon Sep  6 12:24:52 CEST 2021] error='"error":{"type":"urn:ietf:params:acme:error:connection","detail":"Fetching http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw: Timeout during connect (likely firewall problem)","status": 400'
[Mon Sep  6 12:24:52 CEST 2021] errordetail='Fetching http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw: Timeout during connect (likely firewall problem)'
[Mon Sep  6 12:24:52 CEST 2021] webdemo.myurl.app:Verify error:Fetching http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw: Timeout during connect (likely firewall problem)
[Mon Sep  6 12:24:52 CEST 2021] Debug: get token url.
[Mon Sep  6 12:24:52 CEST 2021] GET
[Mon Sep  6 12:24:52 CEST 2021] url='http://webdemo.myurl.app/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw'
[Mon Sep  6 12:24:52 CEST 2021] timeout=1
[Mon Sep  6 12:24:52 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:52 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X  --connect-timeout 1'
[Mon Sep  6 12:24:53 CEST 2021] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 28
[Mon Sep  6 12:24:53 CEST 2021] Here is the curl dump log:
[Mon Sep  6 12:24:53 CEST 2021] == Info:   Trying my.real.ip.adress:80...
== Info: After 999ms connect time, move on!
== Info: connect to my.real.ip.adress port 80 failed: Operation timed out
== Info: Connection timeout after 1001 ms
== Info: Closing connection 0
[Mon Sep  6 12:24:53 CEST 2021] ret='28'
[Mon Sep  6 12:24:53 CEST 2021] Debugging, skip removing: /usr/share/nginx/html/.well-known/acme-challenge/oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw
[Mon Sep  6 12:24:53 CEST 2021] pid
[Mon Sep  6 12:24:53 CEST 2021] No need to restore nginx, skip.
[Mon Sep  6 12:24:53 CEST 2021] _clearupdns
[Mon Sep  6 12:24:53 CEST 2021] dns_entries
[Mon Sep  6 12:24:53 CEST 2021] skip dns.
[Mon Sep  6 12:24:53 CEST 2021] _on_issue_err
[Mon Sep  6 12:24:53 CEST 2021] Please check log file for more details: /dev/null
[Mon Sep  6 12:24:53 CEST 2021] _chk_vlist='webdemo.myurl.app#oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw.gG5neHPEjMaSx2Vr_aYWPevAmRi_P7KPGmjaZ4PRt48#https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g#http-01#/usr/share/nginx/html,'
[Mon Sep  6 12:24:53 CEST 2021] start to deactivate authz
[Mon Sep  6 12:24:53 CEST 2021] Trigger domain validation.
[Mon Sep  6 12:24:53 CEST 2021] _t_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:53 CEST 2021] _t_key_authz='oMJSOzmcr7b-FAtpapB3OCH1LUlWNW1MyoZ5auqtVfw.gG5neHPEjMaSx2Vr_aYWPevAmRi_P7KPGmjaZ4PRt48'
[Mon Sep  6 12:24:53 CEST 2021] _t_vtype
[Mon Sep  6 12:24:53 CEST 2021] url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:53 CEST 2021] payload='{}'
[Mon Sep  6 12:24:53 CEST 2021] Use cached jwk for file: /etc/acme.sh/[email protected]/ca/acme-v02.api.letsencrypt.org/account.key
[Mon Sep  6 12:24:54 CEST 2021] Use _CACHED_NONCE='0101GoEypqgwrZc1jTkDKRYe1Jnf2KPK9bjaFg2ZHKXme00'
[Mon Sep  6 12:24:54 CEST 2021] nonce='0101GoEypqgwrZc1jTkDKRYe1Jnf2KPK9bjaFg2ZHKXme00'
[Mon Sep  6 12:24:54 CEST 2021] POST
[Mon Sep  6 12:24:54 CEST 2021] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall-v3/28486652190/6pLK8g'
[Mon Sep  6 12:24:54 CEST 2021] body='{"protected": "eyJub25jZSI6ICIwMTAxR29FeXBxZ3dyWmMxalRrREtSWWUxSm5mMktQSzliamFGZzJaSEtYbWUwMCIsICJ1cmwiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvY2hhbGwtdjMvMjg0ODY2NTIxOTAvNnBMSzhnIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLXYwMi5hcGkubGV0c2VuY3J5cHQub3JnL2FjbWUvYWNjdC8xODI2NzE0NjAifQ", "payload": "e30", "signature": "CzlkbcGqaBIzlTFzpej1macUV3i8QB622RjSf2sc8EiEfJpbdR4dtHL9_hDk8rsNmbz_KND_HmWu3W8NKh4YpTVX3DGvzkVx0cD5koNgYhIxApl_Fevv9xgz9Vh5w8RhO8PzYsYf2jG2fLXAqTeR19s7WcSKuk1MmOD_DVBrev1se8CvRwaeUoL2kirhrBU28b-R6d9E1UQF7qEeMao06Aogz50BNjMKP8_sGb7tOUk-qStHNGkJpG-xOiNfXUgenX6EGvt2_kSSkHQ4sTgp4QFn-fcjkS-8sLM3LiQYop9avqpJQj4jWXc1kMWb-nbcOVIY2vRFXgF612wHqKPFHg"}'
[Mon Sep  6 12:24:54 CEST 2021] _postContentType='application/jose+json'
[Mon Sep  6 12:24:54 CEST 2021] Http already initialized.
[Mon Sep  6 12:24:54 CEST 2021] _CURL='curl --silent --dump-header /etc/acme.sh/[email protected]/http.header  -L  --trace-ascii /tmp/tmp.E1tNNf1Q2X '
[Mon Sep  6 12:24:54 CEST 2021] _ret='0'
[Mon Sep  6 12:24:54 CEST 2021] responseHeaders='HTTP/2 400 
server: nginx
date: Mon, 06 Sep 2021 10:24:54 GMT
content-type: application/problem+json
content-length: 144
boulder-requester: 182671460
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: 0001IBmQc4V9Uf7ryme6Cg2PhPwWmv3rw34Zax7f0l0DPm4
'
[Mon Sep  6 12:24:54 CEST 2021] code='400'
[Mon Sep  6 12:24:54 CEST 2021] original='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
[Mon Sep  6 12:24:54 CEST 2021] response='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
[Mon Sep  6 12:24:54 CEST 2021] Diagnosis versions: 
openssl:openssl
OpenSSL 1.1.1k  25 Mar 2021
apache:
apache doesn't exist.
nginx:
nginx doesn't exist.
socat:
socat by Gerhard Rieger and contributors - see www.dest-unreach.org
socat version 1.7.4.1 on Jan 14 2021 05:30:29
   running on Linux version #53~18.04.1-Ubuntu SMP Thu Jul 15 11:32:10 UTC 2021, release 5.4.0-1049-gcp, machine x86_64
features:
  #define WITH_STDIO 1
  #define WITH_FDNUM 1
  #define WITH_FILE 1
  #define WITH_CREAT 1
  #define WITH_GOPEN 1
  #define WITH_TERMIOS 1
  #define WITH_PIPE 1
  #define WITH_UNIX 1
  #define WITH_ABSTRACT_UNIXSOCKET 1
  #define WITH_IP4 1
  #define WITH_IP6 1
  #define WITH_RAWIP 1
  #define WITH_GENERICSOCKET 1
  #define WITH_INTERFACE 1
  #define WITH_TCP 1
  #define WITH_UDP 1
  #define WITH_SCTP 1
  #define WITH_LISTEN 1
  #define WITH_SOCKS4 1
  #define WITH_SOCKS4A 1
  #define WITH_VSOCK 1
  #define WITH_PROXY 1
  #define WITH_SYSTEM 1
  #define WITH_EXEC 1
  #define WITH_READLINE 1
  #define WITH_TUN 1
  #define WITH_PTY 1
  #define WITH_OPENSSL 1
  #undef WITH_FIPS
  #undef WITH_LIBWRAP
  #define WITH_SYCLS 1
  #define WITH_FILAN 1
  #define WITH_RETRY 1
  #define WITH_MSGLEVEL 0 /*debug*/
Symlinked domains: 
Enabled domains: webdemo.myurl.app
Disabled domains:

[Ben-Cho]

I've already done everything in here without success

[Ben-Cho]

Ok issue fixed, for those wondering the VM that I use are hosted on google cloud Plateform (GCP) and even though I openned the ports from inside the instance, I needed to check the http and https checkbox in the firewall settings in GCP console