{"action":"created","issue":{"url":"https://api.github.com/repos/Neilpang/acme.sh/issues/926","repository_url":"https://api.github.com/repos/Neilpang/acme.sh","labels_url":"https://api.github.com/repos/Neilpang/acme.sh/issues/926/labels{/name}","comments_url":"https://api.github.com/repos/Neilpang/acme.sh/issues/926/comments","events_url":"https://api.github.com/repos/Neilpang/acme.sh/issues/926/events","html_url":"https://github.com/Neilpang/acme.sh/issues/926","id":240229895,"number":926,"title":"[dns mode] Bad Request 400 Unable to update challenge The challenge is not pending","user":{"login":"centminmod","id":5899584,"avatar_url":"https://avatars0.githubusercontent.com/u/5899584?v=3","gravatar_id":"","url":"https://api.github.com/users/centminmod","html_url":"https://github.com/centminmod","followers_url":"https://api.github.com/users/centminmod/followers","following_url":"https://api.github.com/users/centminmod/following{/other_user}","gists_url":"https://api.github.com/users/centminmod/gists{/gist_id}","starred_url":"https://api.github.com/users/centminmod/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/centminmod/subscriptions","organizations_url":"https://api.github.com/users/centminmod/orgs","repos_url":"https://api.github.com/users/centminmod/repos","events_url":"https://api.github.com/users/centminmod/events{/privacy}","received_events_url":"https://api.github.com/users/centminmod/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-07-03T17:24:33Z","updated_at":"2017-07-04T00:28:21Z","closed_at":null,"body":"* acme.sh user reported that acme.sh DNS manual mode no longer works for renewals like they did before while using DNSMadeEasy small business account which doesn't have API access https://community.centminmod.com/posts/51545/ - his domain is .id extension \r\n* I tested acme.sh with Cloudflare DNS mode mode and DNS API mode to confirm at https://community.centminmod.com/posts/51553/ and confirmed manual DNS mode gives same error as user above. Details below of my test my domain was .xyz extension but for privacy set to acme.domain.com dummy replacement for below example.\r\n\r\nTest manual acme.sh DNS mode with Cloudflare DNS and fails like yours does with unable to update challenge bad request 400\r\n\r\n```\r\nacme.sh --issue --dns -d acme.domain.com\r\n[Mon Jul  3 16:42:17 UTC 2017] Creating domain key\r\n[Mon Jul  3 16:42:17 UTC 2017] The domain key is here: /root/.acme.sh/acme.domain.com/acme.domain.com.key\r\n[Mon Jul  3 16:42:17 UTC 2017] Single domain='acme.domain.com'\r\n[Mon Jul  3 16:42:17 UTC 2017] Getting domain auth token for each domain\r\n[Mon Jul  3 16:42:17 UTC 2017] Getting webroot for domain='acme.domain.com'\r\n[Mon Jul  3 16:42:17 UTC 2017] Getting new-authz for domain='acme.domain.com'\r\n[Mon Jul  3 16:42:18 UTC 2017] The new-authz request is ok.\r\n[Mon Jul  3 16:42:18 UTC 2017] Add the following TXT record:\r\n[Mon Jul  3 16:42:18 UTC 2017] Domain: '_acme-challenge.acme.domain.com'\r\n[Mon Jul  3 16:42:18 UTC 2017] TXT value: 'Vq4ZU6r-dJvta9dWO5MyF6W0YjQib2_38PUvS2bt3iM'\r\n[Mon Jul  3 16:42:18 UTC 2017] Please be aware that you prepend _acme-challenge. before your domain\r\n[Mon Jul  3 16:42:18 UTC 2017] so the resulting subdomain will be: _acme-challenge.acme.domain.com\r\n[Mon Jul  3 16:42:18 UTC 2017] Please add the TXT records to the domains, and retry again.\r\n[Mon Jul  3 16:42:18 UTC 2017] Please check log file for more details: /root/centminlogs/acmetool.sh-debug-log-230617-112548.log\r\n```\r\n\r\ncheck TXT DNS record\r\n\r\n```\r\ndig -t txt +short _acme-challenge.acme.domain.com  \r\n\"Vq4ZU6r-dJvta9dWO5MyF6W0YjQib2_38PUvS2bt3iM\"\r\n```\r\n\r\nrenew\r\n\r\n```\r\nacme.sh --renew -d acme.domain.com\r\n[Mon Jul  3 16:49:52 UTC 2017] Renew: 'acme.domain.com'\r\n[Mon Jul  3 16:49:52 UTC 2017] Single domain='acme.domain.com'\r\n[Mon Jul  3 16:49:52 UTC 2017] Getting domain auth token for each domain\r\n[Mon Jul  3 16:49:52 UTC 2017] Verifying:acme.domain.com\r\n[Mon Jul  3 16:49:53 UTC 2017] acme.domain.com:Challenge error: {\"type\":\"urn:acme:error:malformed\",\"detail\":\"Unable to update challenge :: The challenge is not pending.\",\"status\": 400}\r\n[Mon Jul  3 16:49:53 UTC 2017] Please check log file for more details: /root/centminlogs/acmetool.sh-debug-log-230617-112548.log\r\n```\r\n\r\nThe debug log seems to cycle through all my issued acme.sh issued domains even the webroot issued ones making it kind of messy to view ? Anyway of debug logging that is only for the specific domain at hand ?\r\n\r\nI believe this is the relevant parts of debug log `/root/centminlogs/acmetool.sh-debug-log-230617-112548.log`\r\n\r\n```\r\n[Mon Jul  3 16:55:36 UTC 2017] LE_WORKING_DIR='/root/.acme.sh'\r\n[Mon Jul  3 16:55:36 UTC 2017] Using config home:/root/.acme.sh\r\n[Mon Jul  3 16:55:36 UTC 2017] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org'\r\n[Mon Jul  3 16:55:36 UTC 2017] DOMAIN_PATH='/root/.acme.sh/acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] Renew: 'acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] Using config home:/root/.acme.sh\r\n[Mon Jul  3 16:55:36 UTC 2017] _ACME_SERVER_HOST='acme-v01.api.letsencrypt.org'\r\n[Mon Jul  3 16:55:36 UTC 2017] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory\r\n[Mon Jul  3 16:55:36 UTC 2017] _init api for server: https://acme-v01.api.letsencrypt.org/directory\r\n[Mon Jul  3 16:55:36 UTC 2017] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'\r\n[Mon Jul  3 16:55:36 UTC 2017] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'\r\n[Mon Jul  3 16:55:36 UTC 2017] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'\r\n[Mon Jul  3 16:55:36 UTC 2017] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'\r\n[Mon Jul  3 16:55:36 UTC 2017] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'\r\n[Mon Jul  3 16:55:36 UTC 2017] Le_NextRenewTime\r\n[Mon Jul  3 16:55:36 UTC 2017] _on_before_issue\r\n[Mon Jul  3 16:55:36 UTC 2017] 'dns' does not contain 'no'\r\n[Mon Jul  3 16:55:36 UTC 2017] Le_LocalAddress\r\n[Mon Jul  3 16:55:36 UTC 2017] Check for domain='acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] _currentRoot='dns'\r\n[Mon Jul  3 16:55:36 UTC 2017] 'dns' does not contain 'apache'\r\n[Mon Jul  3 16:55:36 UTC 2017] _saved_account_key_hash='3db0b61zF47fPe60n85GO1oJX7W36JqvMkaQNlSoYLg='\r\n[Mon Jul  3 16:55:36 UTC 2017] _saved_account_key_hash is not changed, skip register account.\r\n[Mon Jul  3 16:55:36 UTC 2017] Read key length:\r\n[Mon Jul  3 16:55:36 UTC 2017] _createcsr\r\n[Mon Jul  3 16:55:36 UTC 2017] domain='acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] domainlist\r\n[Mon Jul  3 16:55:36 UTC 2017] csrkey='/root/.acme.sh/acme.domain.com/acme.domain.com.key'\r\n[Mon Jul  3 16:55:36 UTC 2017] csr='/root/.acme.sh/acme.domain.com/acme.domain.com.csr'\r\n[Mon Jul  3 16:55:36 UTC 2017] csrconf='/root/.acme.sh/acme.domain.com/acme.domain.com.csr.conf'\r\n[Mon Jul  3 16:55:36 UTC 2017] Single domain='acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] _is_idn_d='acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] _idn_temp\r\n[Mon Jul  3 16:55:36 UTC 2017] _csr_cn='acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] Getting domain auth token for each domain\r\n[Mon Jul  3 16:55:36 UTC 2017] ok, let's start to verify\r\n[Mon Jul  3 16:55:36 UTC 2017] Verifying:acme.domain.com\r\n[Mon Jul  3 16:55:36 UTC 2017] d='acme.domain.com'\r\n[Mon Jul  3 16:55:36 UTC 2017] keyauthorization='q-3k5sQLIYObhqGzYFSu7_Pad7c6goKMvta-wzl5uok.06TEsEF-kUOQYBkr0ntOnFFefOND-b2v20Yr5x9lZr8'\r\n[Mon Jul  3 16:55:36 UTC 2017] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978'\r\n[Mon Jul  3 16:55:36 UTC 2017] _currentRoot='dns'\r\n[Mon Jul  3 16:55:36 UTC 2017] tigger domain validation.\r\n[Mon Jul  3 16:55:36 UTC 2017] _t_url='https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978'\r\n[Mon Jul  3 16:55:36 UTC 2017] _t_key_authz='q-3k5sQLIYObhqGzYFSu7_Pad7c6goKMvta-wzl5uok.06TEsEF-kUOQYBkr0ntOnFFefOND-b2v20Yr5x9lZr8'\r\n[Mon Jul  3 16:55:36 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978'\r\n[Mon Jul  3 16:55:36 UTC 2017] payload='{\"resource\": \"challenge\", \"keyAuthorization\": \"q-3k5sQLIYObhqGzYFSu7_Pad7c6goKMvta-wzl5uok.06TEsEF-kUOQYBkr0ntOnFFefOND-b2v20Yr5x9lZr8\"}'\r\n[Mon Jul  3 16:55:36 UTC 2017] RSA key\r\n[Mon Jul  3 16:55:36 UTC 2017] Get nonce. ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'\r\n[Mon Jul  3 16:55:36 UTC 2017] GET\r\n[Mon Jul  3 16:55:36 UTC 2017] url='https://acme-v01.api.letsencrypt.org/directory'\r\n[Mon Jul  3 16:55:36 UTC 2017] timeout\r\n[Mon Jul  3 16:55:36 UTC 2017] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header '\r\n[Mon Jul  3 16:55:36 UTC 2017] ret='0'\r\n[Mon Jul  3 16:55:36 UTC 2017] _headers='HTTP/1.1 200 OK\r\nServer: nginx\r\nContent-Type: application/json\r\nContent-Length: 352\r\nBoulder-Request-Id: CCgdPzahIob6NSM0BK7-IOSxSa0aF2YIzM9BuAPLah4\r\nReplay-Nonce: eAOgLetkVZYRcxPLbtea6bV56yvp8Bz5hzx1AXjYjhQ\r\nX-Frame-Options: DENY\r\nStrict-Transport-Security: max-age=604800\r\nExpires: Mon, 03 Jul 2017 16:55:36 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Mon, 03 Jul 2017 16:55:36 GMT\r\nConnection: keep-alive\r\n'\r\n[Mon Jul  3 16:55:36 UTC 2017] _CACHED_NONCE='eAOgLetkVZYRcxPLbtea6bV56yvp8Bz5hzx1AXjYjhQ'\r\n[Mon Jul  3 16:55:36 UTC 2017] nonce='eAOgLetkVZYRcxPLbtea6bV56yvp8Bz5hzx1AXjYjhQ'\r\n[Mon Jul  3 16:55:36 UTC 2017] POST\r\n[Mon Jul  3 16:55:36 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978'\r\n[Mon Jul  3 16:55:36 UTC 2017] body='{\"header\": {\"alg\": \"RS256\", \"jwk\": {\"e\": \"AQAB\", \"kty\": \"RSA\", \"n\": \"xi7G_Harkx6NAClbZeVv-qmOwXlXUnBXL56WhKZhFY3OjC_gJjRnOcLHJdZe4V-OVFdHr-EizRXm0chTfNV6BFOOEq8lvW1b9HjNB0_a_52weYc3-ucQ3CwyZonLjf5hfrXhyN3pbYuvx76fxiTIsJCLUhoa0MT5HvH-ktj3GtYDMynGwSpiZCcbMT7tOYfB9W0UsOzfyyMXKCO884ASaISDtZLKQd0GKVCAfkQqLiY7VarTsdmGXlwIbTkdQv0-zx7b6JpgC0Znz87Gl6Wla_niHUviEA2BV4T8gkOCp6ilgHmdTwH0zsgL98VgRbY0u6nu7Tq1YTUWjrqqHuL5uQ\"}}, \"protected\": \"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\", \"payload\": \"eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJxLTNrNXNRTElZT2JocUd6WUZTdTdfUGFkN2M2Z29LTXZ0YS13emw1dW9rLjA2VEVzRUYta1VPUVlCa3IwbnRPbkZGZWZPTkQtYjJ2MjBZcjV4OWxacjgifQ\", \"signature\": \"FJfeZfzO0N75efKan8xeGp_AjkIjhw-PZrLqYrOzYq_QbzF6kj-2BjFn-4zRhccZAEyqc56PDu6dO-eQmPdNC7negMNf529EjHMlasFeC-0hKVcVZMPFNEG1t3DwhUbKmU_K40q-yWCmEmpIbXX8QrZBU3enP1Dca8NshkmVf-IduNbbFsFM0MMmJ7ou9xKo9MMuj-b6R0P41NXXZH1ChH7SngzXuzFVVFT5xb5QXZPq0VdhVN3d05Pg-guTblSiXh5IFdoBf7GCmMClTNYaOwdO6S79psNDE735YrecINkIjFfOoRWZeO39yoEIn63ThA30vAMxzDzFogQY7LvhAw\"}'\r\n[Mon Jul  3 16:55:36 UTC 2017] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header '\r\n[Mon Jul  3 16:55:37 UTC 2017] _ret='0'\r\n[Mon Jul  3 16:55:37 UTC 2017] original='{\r\n  \"type\": \"urn:acme:error:malformed\",\r\n  \"detail\": \"Unable to update challenge :: The challenge is not pending.\",\r\n  \"status\": 400\r\n}'\r\n[Mon Jul  3 16:55:37 UTC 2017] responseHeaders='HTTP/1.1 100 Continue\r\nExpires: Mon, 03 Jul 2017 16:55:36 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\n\r\nHTTP/1.1 400 Bad Request\r\nServer: nginx\r\nContent-Type: application/problem+json\r\nContent-Length: 132\r\nBoulder-Request-Id: pE3_J600Tgj20Q1oPueiIY1YH4p8h-bh5PFgfiSi0kc\r\nBoulder-Requester: 11928979\r\nReplay-Nonce: 2ulwoNkJOR13Oln9BUiqjqnw8WsWuO3nOxGvgoD5hY4\r\nExpires: Mon, 03 Jul 2017 16:55:37 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Mon, 03 Jul 2017 16:55:37 GMT\r\nConnection: close\r\n'\r\n[Mon Jul  3 16:55:37 UTC 2017] response='{\"type\":\"urn:acme:error:malformed\",\"detail\":\"Unable to update challenge :: The challenge is not pending.\",\"status\": 400}'\r\n[Mon Jul  3 16:55:37 UTC 2017] code='400'\r\n[Mon Jul  3 16:55:37 UTC 2017] acme.domain.com:Challenge error: {\"type\":\"urn:acme:error:malformed\",\"detail\":\"Unable to update challenge :: The challenge is not pending.\",\"status\": 400}\r\n[Mon Jul  3 16:55:37 UTC 2017] Skip for removelevel:\r\n[Mon Jul  3 16:55:37 UTC 2017] pid\r\n[Mon Jul  3 16:55:37 UTC 2017] No need to restore nginx, skip.\r\n[Mon Jul  3 16:55:37 UTC 2017] _clearupdns\r\n[Mon Jul  3 16:55:37 UTC 2017] skip dns.\r\n[Mon Jul  3 16:55:37 UTC 2017] _on_issue_err\r\n[Mon Jul  3 16:55:37 UTC 2017] Please check log file for more details: /root/centminlogs/acmetool.sh-debug-log-230617-112548.log\r\n[Mon Jul  3 16:55:37 UTC 2017] _chk_vlist='acme.domain.com#q-3k5sQLIYObhqGzYFSu7_Pad7c6goKMvta-wzl5uok.06TEsEF-kUOQYBkr0ntOnFFefOND-b2v20Yr5x9lZr8#https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978#dns-01#dns,'\r\n[Mon Jul  3 16:55:37 UTC 2017] start to deactivate authz\r\n[Mon Jul  3 16:55:37 UTC 2017] tigger domain validation.\r\n[Mon Jul  3 16:55:37 UTC 2017] _t_url='https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978'\r\n[Mon Jul  3 16:55:37 UTC 2017] _t_key_authz='q-3k5sQLIYObhqGzYFSu7_Pad7c6goKMvta-wzl5uok.06TEsEF-kUOQYBkr0ntOnFFefOND-b2v20Yr5x9lZr8'\r\n[Mon Jul  3 16:55:37 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978'\r\n[Mon Jul  3 16:55:37 UTC 2017] payload='{\"resource\": \"challenge\", \"keyAuthorization\": \"q-3k5sQLIYObhqGzYFSu7_Pad7c6goKMvta-wzl5uok.06TEsEF-kUOQYBkr0ntOnFFefOND-b2v20Yr5x9lZr8\"}'\r\n[Mon Jul  3 16:55:37 UTC 2017] Use cached jwk for file: /root/.acme.sh/ca/acme-v01.api.letsencrypt.org/account.key\r\n[Mon Jul  3 16:55:37 UTC 2017] Use _CACHED_NONCE='2ulwoNkJOR13Oln9BUiqjqnw8WsWuO3nOxGvgoD5hY4'\r\n[Mon Jul  3 16:55:37 UTC 2017] nonce='2ulwoNkJOR13Oln9BUiqjqnw8WsWuO3nOxGvgoD5hY4'\r\n[Mon Jul  3 16:55:37 UTC 2017] POST\r\n[Mon Jul  3 16:55:37 UTC 2017] url='https://acme-v01.api.letsencrypt.org/acme/challenge/G43UEC8WtiLgem4l3aG65_TWt3S6VC3TypB3GqR_5aw/1471976978'\r\n[Mon Jul  3 16:55:37 UTC 2017] body='{\"header\": {\"alg\": \"RS256\", \"jwk\": {\"e\": \"AQAB\", \"kty\": \"RSA\", \"n\": \"xi7G_Harkx6NAClbZeVv-qmOwXlXUnBXL56WhKZhFY3OjC_gJjRnOcLHJdZe4V-OVFdHr-EizRXm0chTfNV6BFOOEq8lvW1b9HjNB0_a_52weYc3-ucQ3CwyZonLjf5hfrXhyN3pbYuvx76fxiTIsJCLUhoa0MT5HvH-ktj3GtYDMynGwSpiZCcbMT7tOYfB9W0UsOzfyyMXKCO884ASaISDtZLKQd0GKVCAfkQqLiY7VarTsdmGXlwIbTkdQv0-zx7b6JpgC0Znz87Gl6Wla_niHUviEA2BV4T8gkOCp6ilgHmdTwH0zsgL98VgRbY0u6nu7Tq1YTUWjrqqHuL5uQ\"}}, \"protected\": \"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\", \"payload\": \"eyJyZXNvdXJjZSI6ICJjaGFsbGVuZ2UiLCAia2V5QXV0aG9yaXphdGlvbiI6ICJxLTNrNXNRTElZT2JocUd6WUZTdTdfUGFkN2M2Z29LTXZ0YS13emw1dW9rLjA2VEVzRUYta1VPUVlCa3IwbnRPbkZGZWZPTkQtYjJ2MjBZcjV4OWxacjgifQ\", \"signature\": \"famL7zApUzeAotU9XpQnZnyucQdaB_oEDtjDqjtQVJpjeInqA5ZUmbvOOZfC-5pjJHyYCGfO-GQfJ7KYDcMF2vd2jtp4yZXTiD5lUf6IzF6nrxt3zOFXJO7RVOe51kWSa7OllQ_e1kSlUDG9eLWAjJ6d2AXcNbLLg3brXoxJ504wb_o2ntdc6waZIRBI-GzYURfZnOKU0dYP1-WfKuMVBoqUy3UfM7cd3R602P9d_M4_Spu5gXk6ISnvgxhLWB7Y4aUQDKSiV05WkAhHTJOZFdm7ng3O_UZPm4dtzCzof5RoQxtMixf3YKkzEr6xnp11genf8-Je9GEufVL1olIjSA\"}'\r\n[Mon Jul  3 16:55:37 UTC 2017] _CURL='curl -L --silent --dump-header /root/.acme.sh/http.header '\r\n[Mon Jul  3 16:55:37 UTC 2017] _ret='0'\r\n[Mon Jul  3 16:55:37 UTC 2017] original='{\r\n  \"type\": \"urn:acme:error:malformed\",\r\n  \"detail\": \"Unable to update challenge :: The challenge is not pending.\",\r\n  \"status\": 400\r\n}'\r\n[Mon Jul  3 16:55:37 UTC 2017] responseHeaders='HTTP/1.1 100 Continue\r\nExpires: Mon, 03 Jul 2017 16:55:37 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\n\r\nHTTP/1.1 400 Bad Request\r\nServer: nginx\r\nContent-Type: application/problem+json\r\nContent-Length: 132\r\nBoulder-Request-Id: a13K19JZ7LlLXU14ffTtCrumI-z8JkgajVf1Z1EY_3I\r\nBoulder-Requester: 11928979\r\nReplay-Nonce: PBGtw-tRDLeT6RZvsTJJYAkcDPwfKsWUxnHlwFpc2UU\r\nExpires: Mon, 03 Jul 2017 16:55:37 GMT\r\nCache-Control: max-age=0, no-cache, no-store\r\nPragma: no-cache\r\nDate: Mon, 03 Jul 2017 16:55:37 GMT\r\nConnection: close\r\n'\r\n[Mon Jul  3 16:55:37 UTC 2017] response='{\"type\":\"urn:acme:error:malformed\",\"detail\":\"Unable to update challenge :: The challenge is not pending.\",\"status\": 400}'\r\n[Mon Jul  3 16:55:37 UTC 2017] code='400'\r\n\r\n```\r\n\r\nAnd tested acme.sh DNS mode with Cloudflare API https://github.com/Neilpang/acme.sh/tree/master/dnsapi#1-use-cloudflare-domain-api-to-automatically-issue-cert\r\n\r\n```\r\nacme.sh --issue --dns dns_cf -d acme.domain.com\r\n```\r\n\r\n```\r\nacme.sh --issue --dns dns_cf -d acme.domain.com\r\n[Mon Jul  3 16:29:09 UTC 2017] Creating domain key\r\n[Mon Jul  3 16:29:10 UTC 2017] The domain key is here: /root/.acme.sh/acme.domain.com/acme.domain.com.key\r\n[Mon Jul  3 16:29:10 UTC 2017] Single domain='acme.domain.com'\r\n[Mon Jul  3 16:29:10 UTC 2017] Getting domain auth token for each domain\r\n[Mon Jul  3 16:29:10 UTC 2017] Getting webroot for domain='acme.domain.com'\r\n[Mon Jul  3 16:29:10 UTC 2017] Getting new-authz for domain='acme.domain.com'\r\n[Mon Jul  3 16:29:10 UTC 2017] The new-authz request is ok.\r\n[Mon Jul  3 16:29:10 UTC 2017] Found domain api file: /root/.acme.sh/dnsapi/dns_cf.sh\r\n[Mon Jul  3 16:29:11 UTC 2017] Adding record\r\n[Mon Jul  3 16:29:13 UTC 2017] Added, OK\r\n[Mon Jul  3 16:29:13 UTC 2017] Sleep 120 seconds for the txt records to take effect\r\n[Mon Jul  3 16:31:14 UTC 2017] Verifying:acme.domain.com\r\n[Mon Jul  3 16:31:17 UTC 2017] Success\r\n[Mon Jul  3 16:31:18 UTC 2017] Verify finished, start to sign.\r\n[Mon Jul  3 16:31:19 UTC 2017] Cert success.\r\n-----BEGIN CERTIFICATE-----\r\nMIIFCTCCA/GgAwIBAgISA1QimhOTje1PWDN4Zri2wRXDMA0GCSqGSIb3DQEBCwUA\r\n.... snipped ....\r\nTZ3QL7RPDYaCI7BfqL0hT/8ymgBo+qxdzhf/urBvuBrumtvSijT4EnWHtaicqUJ2\r\nREs+r9/aASCPupkxyMpuDeFpxRYWKmHVB6OyO40a+vUyIMbl8NF7v9EgzV+GhTYX\r\nVLNnsjXNa4QVZ/ZW7Pfcp+otqH6mH5BNne7ftVi30QurUI1W4dOjRl+Qjq/L\r\n-----END CERTIFICATE-----\r\n[Mon Jul  3 16:31:19 UTC 2017] Your cert is in  /root/.acme.sh/acme.domain.com/acme.domain.com.cer \r\n[Mon Jul  3 16:31:19 UTC 2017] Your cert key is in  /root/.acme.sh/acme.domain.com/acme.domain.com.key \r\n[Mon Jul  3 16:31:19 UTC 2017] The intermediate CA cert is in  /root/.acme.sh/acme.domain.com/ca.cer \r\n[Mon Jul  3 16:31:19 UTC 2017] And the full chain certs is there:  /root/.acme.sh/acme.domain.com/fullchain.cer\r\n```\r\n\r\ntry renewal\r\n\r\n```\r\nacme.sh --force --renew -d acme.domain.com  \r\n[Mon Jul  3 16:35:16 UTC 2017] Renew: 'acme.domain.com'\r\n[Mon Jul  3 16:35:16 UTC 2017] Single domain='acme.domain.com'\r\n[Mon Jul  3 16:35:16 UTC 2017] Getting domain auth token for each domain\r\n[Mon Jul  3 16:35:16 UTC 2017] Getting webroot for domain='acme.domain.com'\r\n[Mon Jul  3 16:35:16 UTC 2017] Getting new-authz for domain='acme.domain.com'\r\n[Mon Jul  3 16:35:17 UTC 2017] The new-authz request is ok.\r\n[Mon Jul  3 16:35:17 UTC 2017] acme.domain.com is already verified, skip dns-01.\r\n[Mon Jul  3 16:35:17 UTC 2017] Verify finished, start to sign.\r\n[Mon Jul  3 16:35:18 UTC 2017] Cert success.\r\n-----BEGIN CERTIFICATE-----\r\nMIIFCTCCA/GgAwIBAgISAyFwwf5yMENuPrd80svZqS48MA0GCSqGSIb3DQEBCwUA\r\n... snipped ...\r\nDLsK/YkSLzjwpbspLhdmdYiUz+TVbgoEg30lWsXZhjSOWqz5Ni5mZDbadqCJFXvR\r\n6kRK+caq83ksh8rM/5xuhXdWJ+t/D1nOZCc/BjfOLghZCeNxBaeVpwPBvbcn\r\n-----END CERTIFICATE-----\r\n[Mon Jul  3 16:35:18 UTC 2017] Your cert is in  /root/.acme.sh/acme.domain.com/acme.domain.com.cer \r\n[Mon Jul  3 16:35:18 UTC 2017] Your cert key is in  /root/.acme.sh/acme.domain.com/acme.domain.com.key \r\n[Mon Jul  3 16:35:18 UTC 2017] The intermediate CA cert is in  /root/.acme.sh/acme.domain.com/ca.cer \r\n[Mon Jul  3 16:35:18 UTC 2017] And the full chain certs is there:  /root/.acme.sh/acme.domain.com/fullchain.cer\r\n```"},"comment":{"url":"https://api.github.com/repos/Neilpang/acme.sh/issues/comments/312753962","html_url":"https://github.com/Neilpang/acme.sh/issues/926#issuecomment-312753962","issue_url":"https://api.github.com/repos/Neilpang/acme.sh/issues/926","id":312753962,"user":{"login":"Neilpang","id":8305679,"avatar_url":"https://avatars1.githubusercontent.com/u/8305679?v=3","gravatar_id":"","url":"https://api.github.com/users/Neilpang","html_url":"https://github.com/Neilpang","followers_url":"https://api.github.com/users/Neilpang/followers","following_url":"https://api.github.com/users/Neilpang/following{/other_user}","gists_url":"https://api.github.com/users/Neilpang/gists{/gist_id}","starred_url":"https://api.github.com/users/Neilpang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Neilpang/subscriptions","organizations_url":"https://api.github.com/users/Neilpang/orgs","repos_url":"https://api.github.com/users/Neilpang/repos","events_url":"https://api.github.com/users/Neilpang/events{/privacy}","received_events_url":"https://api.github.com/users/Neilpang/received_events","type":"User","site_admin":false},"created_at":"2017-07-04T00:28:21Z","updated_at":"2017-07-04T00:28:21Z","body":"Sorry,  it was broken by my fixes last weekend, on 2017/7/1\r\nit's fixed now.\r\n\r\nThanks.\r\n"}}
{"actor":{"display_login":"Neilpang"}}