Acme sh zerossl github. acme_sh development by creating an account on GitHub.
Acme sh zerossl github. No config was changed, but the renew failed today.
Acme sh zerossl github Reload to refresh your session. sh couldn't renew it. Not sure if the cronjob also automatically uses the unifi deploy hook again. This Home Assistant addon uses acme. sh 证书一键申请脚本. Search the existing issues. GitHub Gist: instantly share code, notes, and snippets. I am using an EC-384 certificate Debug log I cannot provide full information due to its sensitive nature, but I can provide a censored I have done: make sure you are able to repro it on the latest released version. Presto generato! Create a environment variable for your Hi. I'm getting an error: Can not find dns api hook for: dns_azure I've checked the existing issues and the wiki. domain. 6 acme. sh =my@example. com" --dns dns_ali --accountconf You signed in with another tab or window. I’m using the following command: acme. cd /you path/. 我已经等待了将近5分钟，并且进行了重试 如图 Debug log [Sun 19 May 2024 07:57:19 PM CST] Order status is processing, lets sleep and retry. Sign up for a free GitHub account to open an issue and contact its maintainers and the community. Hello, I'm facing a problem with acme. set a proper default for Le_API in the _initpath() function, or; use a proper default in the _getCAShortName() function; The source of the problem is that each host. sh now using ZeroSSL by default (rather than LetsEncrypt) so a step is needed to set-up the ZeroSSL environment. 1-42661 Update 4 After I check the log with code, it 命令使用: acme,sh --issue -d docs. sh. Github comment do not support too long text(maximum is 65536 characters). 0/0 & GitHub is where people build software. Navigation Menu Toggle navigation. MYDOMAIN -d api. 不要用zerossl，切换回acme. com) parameter and this Since yesterday ZeroSSL sent 504 errors: 504 Gateway Time-out Anybody know what happened? Hello! Since yesterday ZeroSSL sent 504 errors: 504 Gateway Time-out Anybody know what happened? Sign up for a free GitHub account to open an issue and contact its maintainers and the community. net -k ec-521 --debug If I issue an RSA cert everything works fine. Use curl command,not the wget one. GitHub community articles Repositories. letsencrypt unifi ubiquiti unifi-controller zerossl acme-sh unifi-dream-machine Updated Aug 4, 2024; Saved searches Use saved searches to filter your results more quickly acme. I issued today with zerossl and letsencrypt successfully. sh should revert back to lets encrypt, as all LE certs are free. Despite following the required steps and ensuring DNS records are correctly se 总之，我用ZeroSSL签发证书时，只要带上--ocsp参数签发下来的证书，正常配置到Nginx里并启用OCSP装订后，就没法通过CT查询，过几天都没法通过。 acmesh-official / acme. sh --issue --dns dns_namesil Skip to content. Using wget: wget -O - https://get. Manage SSL / TLS certificates with acme. Notifications You must be 通过Github Action + acme. I'm wondering if something has changed between ACME. Subsequent attempts also failed, but after staring at the debug log a bit, it seemed to me that it was an issue with So is there any inbuilt acme. sh/README. MYDOMAIN --dns dns_azure --server zerossl --force --debug 2 Closing this because it's a duplication of #4911 The text was updated successfully, but these errors were encountered: Steps to reproduce Run acme. In my case I'm trying to setup an LXC container on my PVE box for reverse proxy usage. Simple, powerful and very easy to use. Unlike many other popular clients (which tend to default to using Let's Encrypt), acme. sh --upgrade更新到最新脚本版本，并未通过关键字搜索找到同类问题 Steps to reproduce 我的证书通过DNS API模式生成 You signed in with another tab or window. sh will change default CA to ZeroSSL on August-1st 2021. sh and ZeroSSL? Saved searches Use saved searches to filter your results more quickly acme. sh command to check they're correct without actually issuing a SSL certificate? You can call acme. c Oh. sh --upgrade If it's still not working, please Saved searches Use saved searches to filter your results more quickly You signed in with another tab or window. sh \ --signcsr \ --csr csf_file. Try to issue a cert using netcup DNS api. I am getting the same issue. sh now default to zerossl which fails, especially if you've been using LetsEncrypt for a while. More than 100 million people use GitHub to discover, fork, and contribute to over 420 million projects. Sign up for GitHub By ZeroSSL doesn’t support iPAddress via acme. sh/zerossl to issue cert on a server. ：DNS API 配置，指定使用的 DNS 提供商进行验证。参见acme. The template dosen't include curl by default,so I chose the wget way. Generating them individually works (but I end with two separate sets of certs, and I would prefer ju Saved searches Use saved searches to filter your results more quickly You signed in with another tab or window. sh to publish ZeroSSL, so most of these users will be notified by email as well. sh # Clean the docker environment tests/teardown. Sign in Product GitHub Copilot. html; 前言：acme. Purely written in Shell with no dependencies on python. sh --issue --dns dns_azure -d unifi. sh I've followed the Synology NAS Guide in the Wiki to deploy a certificate configured the cron job. A pure Unix shell script implementing ACME client protocol - History for Change default CA to ZeroSSL · acmesh-official/acme. sh" > /dev/null. sh version : 3. sh to work. 使用python通过acme. Pick a username acme. domain --ecc --force --debug 2 acme. Debug log It seems that some users have chosen acme. Bash, dash and sh compatible. sh, the clearest fix would be to either:. sh:latest container_name: acme. Getting domain cert by python, through the api of acme. Two things were going on 1) I had changed my DNS provider for the domain being renewed and that change was not yet reflected in the config file (most likely due to the second issue); 2) my script I run to call --issue was passing --keylength and --always-force-new-domain-key after each domain (-d domain. sh | sh -s acme. sh的接口获取域名证书 - ssldog-com/acme2py Details Using acme-3. ' There's a clumsy workaround: perf As you can see below, acme. e. For getting SSL, another Starting from August-1st 2021, acme. Starting from August-1st 2021, acme. Today, the certificate I initially created had expired in DSM. Edit: you don't use any custom domain or Thanks for this. sh Wiki 我发现，只要使用注册过ZeroSSL的邮箱账号来颁发证书，这个证书就会自动显示到这个邮箱注册的ZeroSSL管理后台上 Steps to reproduce 我先执行了以下命令： $ acme. You signed in with another tab or window. sh/acme. 一般情况下如果你使用了 dns_ali 作为 DNS API，那么 alicdn 会直接使用 Ali_Key 和 Ali_Secret 作为阿里云 CDN 的密钥。 之前没有开启二次认证用了好长时间没问题。上个月开启二次验证后无法安装证书。 2024. sh register on a vcenter host after a clean install acme. I have installed Bind 9 (9. I had to do some fixes in my Bind 9 DNS after understand subdomain reading parts of the book DNS and Bind. For some of my domains, e. All commands together You signed in with another tab or window. sh --install-cronjob. As for now, if no server is provided, or you have not --set-default-ca yet, acme. com, I first get this [Mon Jan 10 19:40:09 UTC 2022] d='takinganimeseriously. acme. sh --issue --dns dns_ali -d example. sh You signed in with another tab or window. log This is just to notify the developers that this change broke my live site. sh --issue -w /app/web --server zerossl -d www. g. com" --debug 2 Debug log root@us-o-arm-1:/. sh to obtain SSL/TLS certificates from ZeroSSL or Let's Encrypt. Install acme. fpires. ZeroSSL CA; neither this variant: acme. sh - ngc7331/docker-derper. Sign up for a free GitHub account to open an issue and contact its maintainers and the community You signed in with another tab or window. [Sun May 28 02:57:13 UTC 2023] responseHeaders='HTTP/2 200 server: nginx date: Sun, 28 May 2023 02:57:1 Steps to reproduce Issue Description I encountered an issue while trying to issue a certificate for my domain using acme. newd acmesh-official / acme. sh setup using zeroSSL and have a domain and wildcard domain set for the certificate. sh --renew -d example. Latest feature DNS alias mode support via the dnschallengealias configuration parameter. sh is written in bash, so it works on any Linux server without special requirements. Acme. sh using docker-compose. sh since a long time without any problem until the last few days. sh --renew --domain my. MYDOMAIN. sh in standalone mode, but am trying to switch to nginx mode and am running into issues. Notifications You must be signed in to New issue Have a question about this project? Sign up for a free GitHub Hi Devs, in light of the recent Let'sencrypt DST Root CA X3 cross-sign expiration, our Italian association would like to try Zerossl certification authority, In reason that ZeroSSL will in theory allow somewhat older devices to still wor 工具：阿里云香港服务器、Lets Encrypt证书，手动DNS验证。这次90天过期后总是在DNS验证步骤卡住，求指导 [root I have done: make sure you are able to repro it on the latest released version. Saved searches Use saved searches to filter your results more quickly You signed in with another tab or window. conf': No such file or directory grep: /. Actions development by creating an account on GitHub. with NO problems via DNS challenge. The approach taken depends on whether or not the user has a This post will be focusing on issuing a wild card certificate with the acme. If this is the case, ZeroSSL will need to fix it. sh) is a shell script for generating LetsEncrypt SSL certificate. . sh Wiki An unofficial Tailscale Derp server with built-in acme. Zerossl is a Elixir library to automatically manage and refresh your Zerossl certificates natively, without the need for extra applications like acme. com -d "*. In this step you will generate a cert for your server. That answer obviously doesn't work for me, I have the latest version of acme. You only need 3 minutes to learn it. Will update this then. sh . com --server letsencrypt acme. exampledomain. sh register_account using letsencrypt setup webserver to answer the challenge it works acme. sh generates an openssl key file with the wrong type Registering account fails with 'Only RSA or EC key is supported. com --server zerossl nor that variant: acme. Sign up for Steps to reproduce This is a working setup that has been running for 6+ months without issue. Sign failed, can not get Le_LinkCert, retry time limit. sh Run it in apache mode Get the errors: mkdir: /home/. : "fpires. sh (Let's Encrypt, ZeroSSL) for Ubiquiti UbiOS firmwares. [2020年 8月16日 星期日 23时33分55秒 CST] _SCRIPT_= ' /usr/local/bin/acme. I Cannot deploy my cert to synology, the log complain me with password error, I can confirm that password is right. 为什么不使用 ZeroSSL？ 我的需求：ECC+RSA 双证书，且带有 OCSP Must-Staple 扩展标记，服务端开启OCSP Stapling 因为要给证书增加 OCSP Must-Staple 扩展标记，而一旦增加了这个标记，ZeroSSL 颁发的证书就不会内置 CT 信息了，但 OCSP 的响应里有 CT 信息，这就需要服务端开启 OCSP 装订，而要开启 ECC+RSA 双证书的 New versions of acme. TL;DR. Upon checking why the renewal didn't work I found that I had to upgrade acme. Its letsencrypt certificate expired and acme. md at master · acmesh-official/acme. [Sun 19 May 2024 07:57:19 PM CST] _retryafter='15' [Sun 19 由于acme. Saved searches Use saved searches to filter your results more quickly debug mode acme. /acme. The cron job successfully creates a new certificate (when I ran it the cert was newer than the DSM one), but the certificate is not deployed to DSM automatically, so the first DSM cert created by acme expired. sh defaults to ZeroSSL but the certs it creates did not work for me. There are many clients out there but I like this one because it’s pure shell script (with some acme. I do not know if this is a general problem - but have included a way to test for it. sh --issue -d zjhemo. Here is what I found and how I solved it. I came across a problem when trying it in my environment. Just one script to issue, renew and Manage SSL / TLS certificates with acme. I'm using acme. 6. letsencrypt unifi ubiquiti unifi-controller zerossl acme-sh unifi-dream-machine Updated Oct 13, 2024; First introduce my server environment: This is an Oracle Cloud (Singapore) with both ipv4 and ipv6. sh ' [2020年 8月16日 星期日 23时33分55秒 CST] _script= ' /usr/local/bin/acme. sh --set-default-ca --server letsencryp From my testing using ZeroSSL, the acme. Debug info Debug. sh Wiki Trying to migrate from Lets Encrypt to ZeroSSL but been getting error: [Fri Aug 20 02:42:54 UTC 2021] Sign failed, finalize code is not 200. org" "*. Write better code with AI Security. sh works for some domains, fails for others. acme: No such file or directory /home on macOS Catalina is a symlink to /Sy Saved searches Use saved searches to filter your results more quickly 备注：本文是将原作者的两种申请cloudflare证书的方式合在一起，即用global API和局部 API两种。 作者: 毕世平 https://shiping. sh bash See more Full ACME protocol implementation. sh Wiki I can confirm that the CSR generated by the dev branch looks fine. Create your certificates. sh with DNS-01 challenge via ZeroSSL. sh --register-account -m myemail@example. duckdns. sh wiki,无需"export" (必须) ZEROSSL_EAB_KEY_ID：ZeroSSL 的 EAB（External Account Binding）密钥 ID。(当CA=zerossl时必须) Saved searches Use saved searches to filter your results more quickly Steps to reproduce I use ubuntu20. com, *. I want to find out why it doesn't work because I've tested it on another server and it does work, but I can't find the difference that causes it to fail. Steps to reproduce I have no idea how to reproduce it I am running "/root/. My account is admin and 2FA-OTP is disabled. com --yes-I-know-dns-manual-mode-enough-go-ahead-please 执行报错 目的是更新ssl证书，手动已修改 DNS的txt认证 Saved searches Use saved searches to filter your results more quickly Here is the output: root@XC:/srv/www/jzq# acme. Right now the only option i acme. acme_sh development by creating an account on GitHub. sh with acme. acme. GitHub is where people build software. sh把默认的CA从letsencrypt改成zerossl,导致一键脚本安装证书失败。为了避免麻烦,仍旧把server指到letsencrypt - Hamiltonxx/trojan- Based on my short review of acme. sh --register-account --server zerossl --eab-kid 5L9lcVs24mnRsqEQRsFv2MwA --eab-hmac-key MDEjdsyfV Saved searches Use saved searches to filter your results more quickly Hello, Steps to reproduce When I issue a ZeroSSL cert with acme. com. sh --register-account --server zerossl --eab-kid xxxxxxxxxxxx Acme even created a cronjob for you which you can check here crontab -l 47 0 * * * "/root/. sh defaults to the ZeroSSL certificate authority for ACME (acme. If it's missing for some reason just run acme. Saved searches Use saved searches to filter your results more quickly Hi, One of my certificates expired, so I went to check why. It would be good to add configuration to the module to allow selecting of the different CAs. sh --register-account --server zerossl --eab-kid xxxxxxxxxxxx --eab-hmac-key xx Steps to reproduce Registering f. If this is the issue you can try with the new code from this PR, which greatly improves the detection of the host and the record. Alas, it turns out that the CA server code I'm using does not yet support IP Addresses in the SAN when doing ACME, even though it supports them fine when using other cert signing channels. sh --issue --log --dns dns_dp -d "xxxxx. sh --renew -d my. com --force --debug 2 getting . de, for the debug log with the additions --debug 2 --log log. Stick to Let's Encrypt. Saved searches Use saved searches to filter your results more quickly I also have acme. Configuration Tested with the dns_oci configuration but It should work, the dnsEnvVariables can be configured with any environment required for acme. Contribute to Misaka-blog/acme-script development by creating an account on GitHub. Contribute to Pigeonszz/ACME. txt. Popular acme client written as unix shell script. Saved searches Use saved searches to filter your results more quickly Steps to reproduce 到了自动renew的时间没有成功，于是手动执行renew命令，依旧失败 证书之前是dns模式生成的 Debug log acme. 0), any pre-existing certs will still be renewed Steps to reproduce Try to renew an existing ZeroSSL certificate, that has successfully renewed before. sh是一个非常好用的用来申请证书的脚本，它开源在Github，它极大地降低了申请证书的难度，支持使用cloudflare api等众多api来申请证书。 I tried to issue a new certificate today, but I messed up my nginx config so the issuing failed initially. Notifications You must be signed in to change New issue Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community. sh --update-account --server zerossl, and check the exit code of the command. Follow their code on GitHub. 0. I had originally setup acme. sh has 3 repositories available. 0, in which the default CA will use ZeroSSL instead. Also acme. When I try to revoke it from the webgui it says I cannot do it from there and must use the acme. com' I took some liberty in assuming the main team maintaining acme recommends using ZeroSSL for the contextual message. sh --list shows the new extended dates, I copied the files as I did before, restarted my Nodejs server, but clients still see the old, expired certificate Tried more than 10 times over different time periods. sh successfully verifies the requested domain name with the dns API (ClouDNS), and even starts talking to the CA, yet something breaks. tld After a few seconds I was presented with the following error: [Mon Feb 26 14 Steps to reproduce we use Dns manual mode to renew cert, configuration we renew 7 days in advance, and it works well but certificate content not updated even if retry many times the certificate is about to expire it works when delete ori Saved searches Use saved searches to filter your results more quickly Contribute to wernerhp/ha. no idea why this change was made, but really is a bad one - unless you now work for zerossl. Mi output from ```. sh (Let's Encrypt, ZeroSSL) for Ubiquiti UbiOS firmwares The acme. 04 which is installed on a virtual machine on Synology NAS. com --server zerossl --debug [2020年 8月16日 星期日 23时33分55秒 CST] Lets find script dir. The idea would be to give lazy people (like me) -- who may have expected a hands-off Let's Encrypt style setup and who have no real reason to do anything more complex -- an easy way to accomplish that (think of the 'helpful' git Saved searches Use saved searches to filter your results more quickly Steps to reproduce acme. Steps to reproduce ${ When using acme. Debug lo acme. sh/account. sh# acme. conf file is missing the new Le_API config assignment, and the Le_API variable is left undefined in the acme. Topics Trending The email address for ZeroSSL registration: ACME_SH_DNSAPI: The API used to pass DNS challenge, see official docs: ACME_SH_CA: 已经更新到最新版，使用dnspod+zerossl申请证书时，一直在重复Lets finalize the order. sh" --log --debug 2 everything seems to work, success after success and then it gets stuck on 'processing' status Debu That should be line 90 and where it might be stuck is here I assume the while loop is the issue here, since you say there is no output after "The record we are going to use is _acme-challenge". sh folder, restarted the session, then registered a new account. You switched accounts on another tab or window. Note: I am running acme. I had gotten a new domain and so I just retried issuing new certs ( newdomain. sh --upgrade acme. touch: cannot touch '/. sh ' [2020年 8月16日 I solved my problem. Using curl: curl https://get. sh 自动申请证书. Let's Encrypt or ZeroSSL ACME Command Line client written in PHP - acmephp/acmephp # Create the Docker environment required for the suite sudo tests/setup. sh"/acme. sh --renew -d XXX. Steps to reproduce I'm simply trying to issue a pretty standard ec-521 cert using the ZeroSSL default CA: . You signed out in another tab or window. DNS configuration: I use Cloudflare: 1. sh --register-account --server zerossl --eab-kid ***** --eab-hmac-key **** --debug Trying to run the following bash acme. Steps to reproduce Issue a cert successfully in DNS mode acme. Steps to reproduce Based on the wiki of docker, I make a docker compose yaml name: acmesh services: acme. I did an acme. When I is Saved searches Use saved searches to filter your results more quickly You signed in with another tab or window. sh 一直没有处理关于阿里云 CDN 的 PR，导致 acme. Saved searches Use saved searches to filter your results more quickly Saved searches Use saved searches to filter your results more quickly A pure Unix shell script implementing ACME client protocol - History for Change default CA to ZeroSSL · acmesh-official/acme. 3. Find and fix vulnerabilities Sign up for a free GitHub account to open an issue and contact its maintainers and the community. Saved searches Use saved searches to filter your results more quickly This Home Assistant addon uses acme. sh 无法自动部署证书到阿里云 CDN。 因此，acme-bot 参考原 PR 提供了一个 alicdn 的部署钩子，用于自动部署证书到阿里云 CDN。. sh register_account zerossl edit webserver answer to add new account thumbprint e A pure Unix shell script implementing ACME client protocol - Change default CA to ZeroSSL · acmesh-official/acme. addon. Clone repo cd /tmp/ git clone ht 已经按照如下说明完成EAB注册，并设置默认CA为 zerossl， acme. sh, wget, and dns_ispman (custom dnsapi) to renew expired ZeroSSL certs as I have done many time without issue. I hope they get here. See the debug log Saved searches Use saved searches to filter your results more quickly Steps to reproduce On macOS Catalina: become root Install acme. Alternatively, ZeroSSL could easily interpret a request for a certificate based on a private key they already know and have issued certificate earlier, as a request for renewal. I've run --renew, got new TXT string, changed the record in my DNS settings basically I followed all the steps I did before (except --issue), running --renew again ended with Success, acme. Steps to reproduce just run acme. sh as a 您好，我在使用DNSPod时遇到了Key验证失败的问题，接口返回的信息是”The login token ID is invalid Solved. com -d *. sh sudo -i sudo apt-get install git bc wget curl socat 2. I am sure firewalld is closed, and the outbound and inbound rules are set to allow all protocols to pass (0. Please check A pure Unix shell script implementing ACME client protocol - acme. powellhouse. sh # Run the tests tests/run. This change will only affect the newly created(issued) certs after August-1st (with v3. ️ 1 MaBecker reacted with heart emoji Saved searches Use saved searches to filter your results more quickly Acme. sh --cron --home "/root/. zjhemo. Refer to the WIKI. sh from debian package postinst script there is no HOME set and during installation with a custom home there are some errors printed. sh --issue --dns -d mydomain. acme: Operation not supported chmod: /home/. example. sh the acmephp/testing-ca Docker image needs to be mapped to the host network, you may have ports A pure Unix shell script implementing ACME client protocol - Releases · acmesh-official/acme. csr \ --dns dns_dynu \ --challenge-alias Saved searches Use saved searches to filter your results more quickly 由于 acme. I was using cron to auto-renew but acme. sh (error: could n For anyone else, I ended up uninstalling acme. sh on Github Wiki Install instructions. 11), our network team installed a long time ago. To clarify, if I initially issued a SSL cert using Letsencrypt but on renewal it had to fallback to ZeroSSL, that would override the domains . sh | sh -s email=my@example. ACME. sh on Debian 10 the cert shows up in the ZeroSSL webgui. sh --cron -f --debug 2，总是出现如下错误，，更新不成功 Sign up for a free GitHub account to open an issue and contact its maintainers and the community. I can't renew my certificates or issue new certificates from my reverse proxy. As Let's E won't send any emails about expiry, this fact isn't as clearly visible as in ZeroSSL. sh --signcsr --csr api. sh uses letsencrypt as the default CA. sh script has actually successfully updated the ECC certificate, but deploy-hook synology-dsm uploaded the "original old RSA certificate" instead, resulting in the "expired certificate" issue after deployment. sh client. Synology version: DSM 7. sh: image: neilpang/acme. sh --issue --dns dns_netcup -d tim-grelka. sh --uninstall, then deleted the . It looks like ZeroSSL server is not accepting DNS challenge authentications and its broken. sh --upgrade Then I tried to manually renew the cert: acme. And possibly, you can try https://www1 Saved searches Use saved searches to filter your results more quickly acme. org". sh Public. I upgraded the script as first port of call, but the issue still persists. A pure Unix shell script implementing ACME client protocol - Change default CA to ZeroSSL · acmesh-official/acme. conf file so auto . Guys, I have previously used acme. com" -d "*. sh command-line arguments for --issueand --renewwill hide this fact very effectively. The new default zerossl, allows only THREE 90 day certs on the free plan, You signed in with another tab or window. com --nginx Log: [2021年 12月 13日 星期一 17:51:39 CST] status='processing' [2021年 12月 13日 星期一 17:51:39 CST] Processing, The CA is processing your order, please just wait. sh will release v3. I'm unable to create a ZeroSSL certificate with both DuckDNS domain and Wildcard (i. , takinganimeseriously. date/82. sh --upgrade [Sat Dec 30 13:34:30 CST 2023] Already uptodate! [Sat Dec 30 13:34:3 You signed in with another tab or window. No config was changed, but the renew failed today. 20已通过命令更新最新版本v3. (29/30) [2021年 12月 13日 星期一 17:51:3 OS : Debian 12 (from Azure) Install protocol sudo apt-get install cron sudo mkdir /opt/acme sudo chmod 777 acme sudo mkdir /etc/apache2/key/ sudo chmod 777 /etc/apache2/key/ # Installation de acme. sh doesn't issue certs for domains in Azure DNS (dns_azure). sh Saved searches Use saved searches to filter your results more quickly acme. com --server letsencrypt I did that, but after a few days the site is insecure again, it seems that it loses the certificate, there is a warning of an insecure site, why is it? Saved searches Use saved searches to filter your results more quickly Steps to reproduce. sh v3. c 总之，我用ZeroSSL签发证书时，只要带上--ocsp参数签发下来的证书，正常配置到Nginx里并启用OCSP装订后，就没法通过CT查询，过几天都没法通过。 acmesh-official / acme. xxxxx. Steps to reproduce acme. csr -w api. sh network_mode: host 当我执行更新证书时，执行acme. sh - Saved searches Use saved searches to filter your results more quickly 已经通过 acme. 3 issue certs with zerossl failed. efjqoxanuahosaubgcdxionctkzqxkdmxbazsyqonpdrhkqyvkpkiap