Solved: Setup seems to be stuck on Trying to issue automatic TLS certificate

[grandm1961]

Probably your server can not connect to acme-v02.api.letsencrypt.org. Which resolves through aliases to:

ca80a1adb12a4fbdac5ffcbc944e9a61.pacloudflare.com has address 172.65.32.248
ca80a1adb12a4fbdac5ffcbc944e9a61.pacloudflare.com has IPv6 address 2606:4700:60:0:f53d:5624:85c7:3a2c

You will need to check how acme-v02.api.letsencrypt.org resolves from your end and try curl to connect to the IPs.

Just a guess.



I guess you hade reasons for it, and it is done not for investigating the issue with certificates)
Anyway I don't see anything wrong in the output you provided.

I got it coming with the following lines on my end:

+ /usr/local/bin/lego --path /usr/local/directadmin/data/.lego --dns.resolvers 2001:4860:4860::8888 --accept-tos --server https://acme-v02.api.letsencrypt.org/directory --email [email protected] --key-type ec256 --http --http.webroot /var/www/html --domains server.domain.com run --no-bundle '--preferred-chain=ISRG Root X1'
2025/08/13 08:27:36 No key found for account [email protected]. Generating a P256 key.
2025/08/13 08:27:36 Saved key to /usr/local/directadmin/data/.lego/accounts/acme-v02.api.letsencrypt.org/[email protected]/keys/[email protected]
2025/08/13 08:27:36 [INFO] acme: Registering account for [email protected]
!!!! HEADS UP !!!!

Your account credentials have been saved in your
configuration directory at "/usr/local/directadmin/data/.lego/accounts".

You should make a secure backup of this folder now. This
configuration directory will also contain certificates and
private keys obtained from the ACME server so making regular
backups of this folder is ideal.

So the next step for you would be to debug /usr/local/bin/lego.

The mentioned /usr/local/bin/lego command returns:

2025/08/13 08:29:52 [INFO] [server.domain.com] acme: Obtaining SAN certificate
2025/08/13 08:29:53 [INFO] [server.domain.com] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/2592297456/568229644346
2025/08/13 08:29:53 [INFO] [server.domain.com] acme: authorization already valid; skipping challenge
2025/08/13 08:29:53 [INFO] [server.domain.com] acme: Validations succeeded; requesting certificates
2025/08/13 08:29:54 [INFO] [server.domain.com] Server responded with a certificate for the preferred certificate chains "ISRG Root X1".

on my end. Something is definitely wrong. The /usr/local/bin/lego is a binary file, but you can use strace to see what the command is doing at the moment.

well this is what strace is showing me, and I have no clue at all.

strace lego


execve("/usr/local/bin/lego", ["lego"], 0x7ffcbc6017f0 /* 30 vars */) = 0

arch_prctl(ARCH_SET_FS, 0x6bcef70)      = 0

sched_getaffinity(0, 8192, [0 1 2 3 4 5 6 7]) = 8

openat(AT_FDCWD, "/sys/kernel/mm/transparent_hugepage/hpage_pmd_size", O_RDONLY) = 3

read(3, "2097152\n", 20)                = 8

close(3)                                = 0

mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f606b429000
mmap(NULL, 131072, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f606b409000
mmap(NULL, 1048576, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f606b309000
mmap(NULL, 8388608, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f606ab09000
mmap(NULL, 67108864, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6066b09000
mmap(NULL, 536870912, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6046b09000
mmap(NULL, 536870912, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6026b09000
mmap(0xc000000000, 67108864, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xc000000000
mmap(NULL, 33554432, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6024b09000
madvise(0x7f6024b09000, 33554432, MADV_NOHUGEPAGE) = 0
mmap(NULL, 68624, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6024af8000
mmap(0xc000000000, 4194304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xc000000000
mmap(0x7f606b409000, 131072, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f606b409000
mmap(0x7f606b389000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f606b389000
mmap(0x7f606af0f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f606af0f000
mmap(0x7f6068b39000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6068b39000
mmap(0x7f6056c89000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6056c89000
mmap(0x7f6036c89000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f6036c89000
mmap(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f60249f8000
madvise(0x7f60249f8000, 1048576, MADV_NOHUGEPAGE) = 0
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f60249e8000
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f60249d8000
rt_sigprocmask(SIG_SETMASK, NULL, [], 8) = 0
fcntl(0, F_GETFD)                       = 0
fcntl(1, F_GETFD)                       = 0
fcntl(2, F_GETFD)                       = 0
sigaltstack(NULL, {ss_sp=NULL, ss_flags=SS_DISABLE, ss_size=0}) = 0
sigaltstack({ss_sp=0xc000006000, ss_flags=0, ss_size=32768}, NULL) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
gettid()                                = 5918
rt_sigaction(SIGHUP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGHUP, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGINT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGINT, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGQUIT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGQUIT, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGILL, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGILL, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGTRAP, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGTRAP, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGABRT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGABRT, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGBUS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGFPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGFPE, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGUSR1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGUSR1, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGSEGV, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGUSR2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGUSR2, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGPIPE, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGPIPE, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGALRM, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGTERM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGTERM, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGSTKFLT, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGSTKFLT, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGCHLD, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGCHLD, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGURG, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGURG, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGXCPU, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGXCPU, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGXFSZ, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGXFSZ, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGVTALRM, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGVTALRM, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGPROF, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGPROF, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGWINCH, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGWINCH, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGIO, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGIO, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGPWR, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGPWR, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGSYS, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGSYS, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRTMIN, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_1, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_2, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_3, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_3, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_4, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_4, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_5, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_5, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_6, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_6, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_7, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_7, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_8, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_8, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_9, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_9, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_10, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_10, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_11, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_11, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_12, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_12, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_13, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_13, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_14, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_14, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_15, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_15, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_16, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_16, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_17, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_17, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_18, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_18, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_19, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_19, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_20, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_20, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_21, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_21, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_22, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_22, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_23, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_23, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_24, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_24, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_25, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_25, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_26, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_26, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_27, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_27, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_28, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_28, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_29, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_29, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_30, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_30, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_31, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_31, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigaction(SIGRT_32, NULL, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGRT_32, {sa_handler=0x47dac0, sa_mask=~[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x47dc00}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[], [], 8) = 0
clone(child_stack=0xc000086000, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS, tls=0xc0000b4098) = 5919
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, ~[], [], 8) = 0
clone(child_stack=0xc0000ce000, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS, tls=0xc0000b4898) = 5920
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 0
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6024998000
rt_sigprocmask(SIG_SETMASK, ~[], [], 8) = 0
clone(child_stack=0xc0000ca000, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS, tls=0xc0000b5098) = 5922
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bcf020, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable)
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1
prlimit64(0, RLIMIT_NOFILE, NULL, {rlim_cur=1024, rlim_max=512*1024}) = 0
prlimit64(0, RLIMIT_NOFILE, {rlim_cur=524287, rlim_max=512*1024}, NULL) = 0
fcntl(0, F_GETFL)                       = 0x402 (flags O_RDWR|O_APPEND)
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1
fcntl(1, F_GETFL)                       = 0x402 (flags O_RDWR|O_APPEND)
fcntl(2, F_GETFL)                       = 0x402 (flags O_RDWR|O_APPEND)
readlinkat(AT_FDCWD, "/proc/self/exe", "/usr/local/bin/lego", 128) = 19
openat(AT_FDCWD, "/usr/local/bin/lego", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_create1(EPOLL_CLOEXEC)            = 4
eventfd2(0, EFD_CLOEXEC|EFD_NONBLOCK)   = 5
epoll_ctl(4, EPOLL_CTL_ADD, 5, {events=EPOLLIN, data={u32=113180672, u64=113180672}}) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 3, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=3866099713, u64=9178376283995766785}}) = -1 EPERM (Operation not permitted)
fcntl(3, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
fstat(3, {st_mode=S_IFREG|0700, st_size=108761272, ...}) = 0
pread64(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\2\0>\0\1\0\0\0 \326G\0\0\0\0\0"..., 64, 0) = 64
pread64(3, "I\1\302f\17\37D\0\0I\203\375\4~\6A\275\4\0\0\0L\211\320L\211\353L\211\371\277\4"..., 64, 13595159) = 64
pread64(3, "\215\r\214Q+\1H\211\10\203=\2H\340\4\0f\220u\7H\213T$P\353\25\350\222\333h\376"..., 64, 27190318) = 64
pread64(3, "\0\350\265m\222\375H\213\10H\213P\10H\213\204$\320\0\0\0f\17\37D\0\0H\205\322\17\204"..., 64, 40785477) = 64
pread64(3, "\0\0\0\0\08\n\3\0\0\0\0\30\0\0\0\0\0\0\0\2\5\0\0\0\2405\0\340\264\303\0"..., 64, 54380636) = 64
pread64(3, "equest.BuildQueries\0github.com/a"..., 64, 67975795) = 64
pread64(3, "x/cloud/serverless/workflows/v1."..., 64, 81570954) = 64
pread64(3, "\262\4\0\4\0\0\0\r\246\0\0\1\0\0\0\26\0\0\7\0\0\0\0\22\10\0\0\0\0\0\0\27"..., 64, 95166113) = 64
close(3)                                = 0
futex(0xc0000b4948, FUTEX_WAKE_PRIVATE, 1) = 1
mmap(0xc000400000, 4194304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xc000400000
futex(0xc0000b4948, FUTEX_WAKE_PRIVATE, 1) = 1
getrandom("\x1f\xa6\xa8\x91", 4, 0)     = 4
getrandom("\x64\x0a\xf9\xe0\xc4", 5, 0) = 5
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f60248d8000
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bcf020, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000100528, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bcf020, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bcf020, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable)
futex(0xc000100948, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc0000b5148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bd0950, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=100000}) = 0
epoll_pwait(4, [], 128, 0, NULL, 0)     = 0
futex(0xc000100948, FUTEX_WAKE_PRIVATE, 1) = 1
sched_yield()                           = 0
sched_yield()                           = 0

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 0
futex(0xc000580148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000580148, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 0
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bd0978, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000580528, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000100148, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
futex(0x6bd0978, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000580528, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000680148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bcf020, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
mmap(NULL, 262144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6024788000
openat(AT_FDCWD, "/etc/resolv.conf", O_RDONLY|O_CLOEXEC) = 3
fcntl(3, F_GETFL)                       = 0x8000 (flags O_RDONLY|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) = 0
epoll_ctl(4, EPOLL_CTL_ADD, 3, {events=EPOLLIN|EPOLLOUT|EPOLLRDHUP|EPOLLET, data={u32=3866099714, u64=9178376283995766786}}) = -1 EPERM (Operation not permitted)
fcntl(3, F_GETFL)                       = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDONLY|O_LARGEFILE) = 0
read(3, "# Generated by NetworkManager\nse"..., 4096) = 115
read(3, "", 3981)                       = 0
close(3)                                = 0
epoll_pwait(4, [], 128, 0, NULL, 0)     = 0
futex(0xc000580148, FUTEX_WAKE_PRIVATE, 1) = 1
sched_yield()                           = 0
mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6024778000
futex(0xc000100948, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
futex(0xc000100948, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000100948, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
futex(0x6bd0978, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000680528, FUTEX_WAKE_PRIVATE, 1) = 1
sched_yield()                           = 0

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 0
futex(0xc000700148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bd0978, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000680528, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000100948, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
futex(0x6bd0978, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000680528, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 824633729920
futex(0xc000700148, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0x6bcf020, FUTEX_WAIT_PRIVATE, 0, NULL) = 0
getpid()                                = 5918
mmap(0xc000800000, 4194304, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xc000800000
epoll_pwait(4, [], 128, 0, NULL, 0)     = 0
futex(0xc000680148, FUTEX_WAKE_PRIVATE, 1) = 1
sched_yield()                           = 0

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 0
sched_yield()                           = 0
rt_sigprocmask(SIG_SETMASK, ~[], [], 8) = 0
clone(child_stack=0xc000712000, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS, tls=0xc000831098) = 5928
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0xc000700148, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
futex(0xc000600148, FUTEX_WAKE_PRIVATE, 1) = 0
sched_yield()                           = 0
futex(0xc000831148, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
futex(0x6bd0978, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000700528, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000600148, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
futex(0x6bd0978, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000700528, FUTEX_WAKE_PRIVATE, 1) = 1
futex(0xc000831148, FUTEX_WAKE_PRIVATE, 1) = 1

--- SIGURG {si_signo=SIGURG, si_code=SI_TKILL, si_pid=5918, si_uid=0} ---

rt_sigreturn({mask=[]})                 = 1
sched_yield()                           = 0
futex(0x6bcf020, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable)
newfstatat(AT_FDCWD, "lego", 0xc0009ef6f8, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, ".", {st_mode=S_IFDIR|0550, st_size=183, ...}, 0) = 0
newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0550, st_size=183, ...}, 0) = 0
newfstatat(AT_FDCWD, "/root/.lego", 0xc0009efd78, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/root/.lego", 0xc0009efe48, 0) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "/root", {st_mode=S_IFDIR|0550, st_size=183, ...}, 0) = 0
mkdirat(AT_FDCWD, "/root/.lego", 0700)  = 0
write(1, "NAME:", 5NAME:)                    = 5
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   lego - Let's Encrypt client w"..., 44   lego - Let's Encrypt client written in Go) = 44
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "USAGE:", 6USAGE:)                   = 6
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   lego [global options] command"..., 50   lego [global options] command [command options]) = 50
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "VERSION:", 8VERSION:)                 = 8
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   4.23.1-SNAPSHOT-3f6293fe", 27   4.23.1-SNAPSHOT-3f6293fe) = 27
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "COMMANDS:", 9COMMANDS:)                = 9
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   run      Register an account,"..., 70   run      Register an account, then create and install a certificate) = 70
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   revoke   Revoke a certificate", 32   revoke   Revoke a certificate) = 32
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   renew    Renew a certificate", 31   renew    Renew a certificate) = 31
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   dnshelp  Shows additional hel"..., 63   dnshelp  Shows additional help for the '--dns' global option) = 63
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   list     Display certificates"..., 58   list     Display certificates and accounts information.) = 58
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   help, h  Shows a list of comm"..., 60   help, h  Shows a list of commands or help for one command) = 60
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "GLOBAL OPTIONS:", 15GLOBAL OPTIONS:)         = 15
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
write(1, "   --domains value, -d value [ -"..., 58   --domains value, -d value [ --domains value, -d value ]) = 58
write(1, "      ", 6      )                   = 6
write(1, "Add a domain to the process. Can"..., 61Add a domain to the process. Can be specified multiple times.) = 61
write(1, "\n", 1
)                       = 1
write(1, "   --server value, -s value", 27   --server value, -s value) = 27
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "     ", 5     )                    = 5
write(1, "CA hostname (and optionally :por"..., 204CA hostname (and optionally :port). The server certificate must be trusted in order to avoid further modifications to the client. (default: "[URL]https://acme-v02.api.letsencrypt.org/directory[/URL]") [$LEGO_SERVER]) = 204
write(1, "\n", 1
)                       = 1
write(1, "   --accept-tos, -a", 19   --accept-tos, -a)     = 19
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "     ", 5     )                    = 5
write(1, "By setting this flag to true you"..., 118By setting this flag to true you indicate that you accept the current Let's Encrypt terms of service. (default: false)) = 118
write(1, "\n", 1
)                       = 1
write(1, "   --email value, -m value", 26   --email value, -m value) = 26
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "      ", 6      )                   = 6
write(1, "Email used for registration and "..., 63Email used for registration and recovery contact. [$LEGO_EMAIL]) = 63
write(1, "\n", 1
)                       = 1
write(1, "   --csr value, -c value", 24   --csr value, -c value) = 24
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "Certificate signing request file"..., 71Certificate signing request filename, if an external CSR is to be used.) = 71
write(1, "\n", 1
)                       = 1
write(1, "   --eab", 8   --eab)                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "Use External Account Binding for"..., 110Use External Account Binding for account registration. Requires --kid and --hmac. (default: false) [$LEGO_EAB]) = 110
write(1, "\n", 1
)                       = 1
write(1, "   --kid value", 14   --kid value)          = 14
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "  ", 2  )                       = 2
write(1, "Key identifier from External CA."..., 83Key identifier from External CA. Used for External Account Binding. [$LEGO_EAB_KID]) = 83
write(1, "\n", 1
)                       = 1
write(1, "   --hmac value", 15   --hmac value)         = 15
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, " ", 1 )                        = 1
write(1, "MAC key from External CA. Should"..., 134MAC key from External CA. Should be in Base64 URL Encoding without padding format. Used for External Account Binding. [$LEGO_EAB_HMAC]) = 134
write(1, "\n", 1
)                       = 1
write(1, "   --key-type value, -k value", 29   --key-type value, -k value) = 29
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "   ", 3   )                      = 3
write(1, "Key type to use for private keys"..., 113Key type to use for private keys. Supported: rsa2048, rsa3072, rsa4096, rsa8192, ec256, ec384. (default: "ec256")) = 113
write(1, "\n", 1
)                       = 1
write(1, "   --filename value", 19   --filename value)     = 19
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "     ", 5     )                    = 5
write(1, "(deprecated) Filename of the gen"..., 51(deprecated) Filename of the generated certificate.) = 51
write(1, "\n", 1
)                       = 1
write(1, "   --path value", 15   --path value)         = 15
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, " ", 1 )                        = 1
write(1, "Directory to use for storing the"..., 76Directory to use for storing the data. (default: "/root/.lego") [$LEGO_PATH]) = 76
write(1, "\n", 1
)                       = 1
write(1, "   --http", 9   --http)                = 9
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "       ", 7       )                  = 7
write(1, "Use the HTTP-01 challenge to sol"..., 108Use the HTTP-01 challenge to solve challenges. Can be mixed with other types of challenges. (default: false)) = 108
write(1, "\n", 1
)                       = 1
write(1, "   --http.port value", 20   --http.port value)    = 20
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "    ", 4    )                     = 4
write(1, "Set the port and interface to us"..., 129Set the port and interface to use for HTTP-01 based challenges to listen on. Supported: interface:port or :port. (default: ":80")) = 129
write(1, "\n", 1
)                       = 1
write(1, "   --http.delay value", 21   --http.delay value)   = 21
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "   ", 3   )                      = 3
write(1, "Delay between the starts of the "..., 129Delay between the starts of the HTTP server (use for HTTP-01 based challenges) and the validation of the challenge. (default: 0s)) = 129
write(1, "\n", 1
)                       = 1
write(1, "   --http.proxy-header value", 28   --http.proxy-header value) = 28
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "    ", 4    )                     = 4
write(1, "Validate against this HTTP heade"..., 113Validate against this HTTP header when solving HTTP-01 based challenges behind a reverse proxy. (default: "Host")) = 113
write(1, "\n", 1
)                       = 1
write(1, "   --http.webroot value", 23   --http.webroot value) = 23
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, " ", 1 )                        = 1
write(1, "Set the webroot folder to use fo"..., 246Set the webroot folder to use for HTTP-01 based challenges to write directly to the .well-known/acme-challenge file. This disables the built-in server and expects the given directory to be publicly served with access to .well-known/acme-challenge) = 246
write(1, "\n", 1
)                       = 1
write(1, "   --http.memcached-host value ["..., 62   --http.memcached-host value [ --http.memcached-host value ]) = 62
write(1, "  ", 2  )                       = 2
write(1, "Set the memcached host(s) to use"..., 113Set the memcached host(s) to use for HTTP-01 based challenges. Challenges will be written to all specified hosts.) = 113
write(1, "\n", 1
)                       = 1
write(1, "   --http.s3-bucket value", 25   --http.s3-bucket value) = 25
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "       ", 7       )                  = 7
write(1, "Set the S3 bucket name to use fo"..., 104Set the S3 bucket name to use for HTTP-01 based challenges. Challenges will be written to the S3 bucket.) = 104
write(1, "\n", 1
)                       = 1
write(1, "   --tls", 8   --tls)                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "Use the TLS-ALPN-01 challenge to"..., 112Use the TLS-ALPN-01 challenge to solve challenges. Can be mixed with other types of challenges. (default: false)) = 112
write(1, "\n", 1
)                       = 1
write(1, "   --tls.port value", 19   --tls.port value)     = 19
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "     ", 5     )                    = 5
write(1, "Set the port and interface to us"..., 134Set the port and interface to use for TLS-ALPN-01 based challenges to listen on. Supported: interface:port or :port. (default: ":443")) = 134
write(1, "\n", 1
)                       = 1
write(1, "   --tls.delay value", 20   --tls.delay value)    = 20
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "    ", 4    )                     = 4
write(1, "Delay between the start of the T"..., 132Delay between the start of the TLS listener (use for TLSALPN-01 based challenges) and the validation of the challenge. (default: 0s)) = 132
write(1, "\n", 1
)                       = 1
write(1, "   --dns value", 14   --dns value)          = 14
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "  ", 2  )                       = 2
write(1, "Solve a DNS-01 challenge using t"..., 137Solve a DNS-01 challenge using the specified provider. Can be mixed with other types of challenges. Run 'lego dnshelp' for help on usage.) = 137
write(1, "\n", 1
)                       = 1
write(1, "   --dns.disable-cp", 19   --dns.disable-cp)     = 19
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "     ", 5     )                    = 5
write(1, "(deprecated) use dns.propagation"..., 70(deprecated) use dns.propagation-disable-ans instead. (default: false)) = 70
write(1, "\n", 1
)                       = 1
write(1, "   --dns.propagation-disable-ans", 32   --dns.propagation-disable-ans) = 32
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "By setting this flag to true, di"..., 138By setting this flag to true, disables the need to await propagation of the TXT record to all authoritative name servers. (default: false)) = 138
write(1, "\n", 1
)                       = 1
write(1, "   --dns.propagation-rns", 24   --dns.propagation-rns) = 24
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "By setting this flag to true, us"..., 124By setting this flag to true, use all the recursive nameservers to check the propagation of the TXT record. (default: false)) = 124
write(1, "\n", 1
)                       = 1
write(1, "   --dns.propagation-wait value", 31   --dns.propagation-wait value) = 31
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, " ", 1 )                        = 1
write(1, "By setting this flag, disables a"..., 123By setting this flag, disables all the propagation checks of the TXT record and uses a wait duration instead. (default: 0s)) = 123
write(1, "\n", 1
)                       = 1
write(1, "   --dns.resolvers value [ --dns"..., 50   --dns.resolvers value [ --dns.resolvers value ]) = 50
write(1, "        ", 8        )                 = 8
write(1, "      ", 6      )                   = 6
write(1, "Set the resolvers to use for per"..., 313Set the resolvers to use for performing (recursive) CNAME resolving and apex domain determination. For DNS-01 challenge verification, the authoritative DNS server is queried directly. Supported: host:port. The default is to use the system resolvers, or Google's DNS resolvers if the system's cannot be determined.) = 313
write(1, "\n", 1
)                       = 1
write(1, "   --http-timeout value", 23   --http-timeout value) = 23
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, " ", 1 )                        = 1
write(1, "Set the HTTP timeout value to a "..., 71Set the HTTP timeout value to a specific value in seconds. (default: 0)) = 71
write(1, "\n", 1
)                       = 1
write(1, "   --tls-skip-verify", 20   --tls-skip-verify)    = 20
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "    ", 4    )                     = 4
write(1, "Skip the TLS verification of the"..., 62Skip the TLS verification of the ACME server. (default: false)) = 62
write(1, "\n", 1
)                       = 1
write(1, "   --dns-timeout value", 22   --dns-timeout value)  = 22
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "  ", 2  )                       = 2
write(1, "Set the DNS timeout value to a s"..., 132Set the DNS timeout value to a specific value in seconds. Used only when performing authoritative name server queries. (default: 10)) = 132
write(1, "\n", 1
)                       = 1
write(1, "   --pem", 8   --pem)                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "Generate an additional .pem (bas"..., 109Generate an additional .pem (base64) file by concatenating the .key and .crt files together. (default: false)) = 109
write(1, "\n", 1
)                       = 1
write(1, "   --pfx", 8   --pfx)                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "Generate an additional .pfx (PKC"..., 138Generate an additional .pfx (PKCS#12) file by concatenating the .key and .crt and issuer .crt files together. (default: false) [$LEGO_PFX]) = 138
write(1, "\n", 1
)                       = 1
write(1, "   --pfx.pass value", 19   --pfx.pass value)     = 19
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "     ", 5     )                    = 5
write(1, "The password used to encrypt the"..., 96The password used to encrypt the .pfx (PCKS#12) file. (default: "changeit") [$LEGO_PFX_PASSWORD]) = 96
write(1, "\n", 1
)                       = 1
write(1, "   --pfx.format value", 21   --pfx.format value)   = 21
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "   ", 3   )                      = 3
write(1, "The encoding format to use when "..., 132The encoding format to use when encrypting the .pfx (PCKS#12) file. Supported: RC2, DES, SHA256. (default: "RC2") [$LEGO_PFX_FORMAT]) = 132
write(1, "\n", 1
)                       = 1
write(1, "   --cert.timeout value", 23   --cert.timeout value) = 23
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, " ", 1 )                        = 1
write(1, "Set the certificate timeout valu"..., 118Set the certificate timeout value to a specific value in seconds. Only used when obtaining certificates. (default: 30)) = 118
write(1, "\n", 1
)                       = 1
write(1, "   --overall-request-limit value", 32   --overall-request-limit value) = 32
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "ACME overall requests limit. (de"..., 42ACME overall requests limit. (default: 18)) = 42
write(1, "\n", 1
)                       = 1
write(1, "   --user-agent value", 21   --user-agent value)   = 21
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "   ", 3   )                      = 3
write(1, "Add to the user-agent sent to th"..., 82Add to the user-agent sent to the CA to identify an application embedding lego-cli) = 82
write(1, "\n", 1
)                       = 1
write(1, "   --help, -h", 13   --help, -h)           = 13
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "   ", 3   )                      = 3
write(1, "show help", 9show help)                = 9
write(1, "\n", 1
)                       = 1
write(1, "   --version, -v", 16   --version, -v)        = 16
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "        ", 8        )                 = 8
write(1, "print the version", 17print the version)       = 17
write(1, "\n", 1
)                       = 1
write(1, "", 0)                         = 0
exit_group(0)                           = ?
+++ exited with 0 +++
+++ exited with 0 +++

 

[grandm1961]

Well directadmin solved it by switching to zerossl, since letsencrypt would’nt work and zerossl does work. but then in my opinion there is a problem either somewhere or with letsencrypt or the automatic setup script or with my own setup. But still no clues on how to solve this one for letsencrypt for the TLS but for normal domains it does make the requests, but not for the server.domain.com. weird but it works for now. now to see if i can get all the domains back online and get that working properly.

 

[zEitEr]

There is a known issue with CloudFlare + Letsencrypt. CloudFlare blocks bots of Letsencrypt. But since the hostname is not proxied over CloudFlare, I would assume, this is not the case. But still might need to be checked.

 

[grandm1961]

I'll check Cloudflare for that.

 

[grandm1961]

Well, I deleted Cloudflare and went were I use to be in the beginning where I also buy my domains of. Now I have to wait that all the propagation works out and hopefully from now on no more problems.

 

[grandm1961]

Well everything is sorted now and all working as it should, could also import the backups, and i switched back again to my original dns service away from cloudflare.

funny thing was that letsencrypt gave me troubles at first install, but switching the TLS to zeroSSL did the trick. And now even letsencrypt worked again as it should be.

So alot of thnx to you guys for helping me out, this is solved now.