Signing a CSR for LNBits

darkv0rt3x (OP)

Hero Member

Offline

Activity: 1204
Merit: 658

I rather die on my feet than to live on my knees

Signing a CSR for LNBits

November 14, 2021, 11:16:52 AM

Merited by Pmalek (2), ABCbits (1), dkbit98 (1)

#1

Hello.

This thread is following this other thread I created a few days ago.

I'm now trying to create my own CSR (for LNBits) and sign it with acme.sh script.
But as usual, I like to try things manually and understand what is going on in each step. Obviously this creates problems to me. :p. But I guess that's the way we learn better.

So, at this point, I created a CSR using openssl, like this:

Private key

Code:

openssl ecparam -genkey -name secp521r1 -out ec-priv-key.pem

CSR

Code:

openssl req -new -key ec-priv-key.pem -out ec-csr.pem -subj "/C=AR/ST=test/L=SomePlace/O=Bitcoin/CN=mydomain.ddns.net/OU=BMK/emailAddress=mydomainmov@protonmail.com"

Code:

./acme.sh --signcsr -csr /path/to/my/csr.pem -w ~/Downloads/lnbits/

This is the output I get (some parts changed for privacy):
Note: I also changed the acme.sh script to retry the process only 5 times instead of the default 30 times to make the output shorter!

Code:

$ ../.acme.sh/./acme.sh --signcsr --csr ec-csr.pem -w ~/Downloads/lnbits/ --debug 2
[Sun 14 Nov 11:02:16 GMT 2021] Lets find script dir.
[Sun 14 Nov 11:02:16 GMT 2021] _SCRIPT_='../.acme.sh/./acme.sh'
[Sun 14 Nov 11:02:16 GMT 2021] _script='/home/myusername/.acme.sh/acme.sh'
[Sun 14 Nov 11:02:16 GMT 2021] _script_home='/home/myusername/.acme.sh'
[Sun 14 Nov 11:02:16 GMT 2021] Using default home:/home/myusername/.acme.sh
[Sun 14 Nov 11:02:16 GMT 2021] Using config home:/home/myusername/.acme.sh
[Sun 14 Nov 11:02:16 GMT 2021] LE_WORKING_DIR='/home/myusername/.acme.sh'
https://github.com/acmesh-official/acme.sh
v3.0.2
[Sun 14 Nov 11:02:16 GMT 2021] Running cmd: signcsr
[Sun 14 Nov 11:02:16 GMT 2021] _csrsubj='mydomain.ddns.net'
[Sun 14 Nov 11:02:16 GMT 2021] _csrsubj='mydomain.ddns.net'
[Sun 14 Nov 11:02:16 GMT 2021] _dnsAltnames
[Sun 14 Nov 11:02:16 GMT 2021] AltNames doesn't contain subject
[Sun 14 Nov 11:02:16 GMT 2021] _csrdomainlist
[Sun 14 Nov 11:02:16 GMT 2021] _outcsr='Certificate Request:
    Data:
        Version: 1 (0x0)
        Subject: C = AR, ST = test, L = myLocation, O = Bitcoin, CN = mydomain.ddns.net, OU = BMK, emailAddress = mydomainmov@protonmail.com
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (521 bit)
                pub:
                    04:01:b1:bc:5f:c6:ff:be:bc:00:0d:d3:93:bc:68:
                    2b:f3:45:ed:4e:33:f4:5a:c5:a7:44:80:ba:a9:e5:
                    e1:f8:93:4d:1e:e3:3d:da:58:f4:2d:e1:bb:65:6d:
                    f8:38:12:09:a4:55:03:d4:32:4d:d6:7f:96:99:4c:
                    1d:a3:98:c8:fd:f5:6f:01:e1:66:86:14:cc:3c:d5:
                    ec:08:20:31:d9:aa:90:58:d3:f9:a3:ca:62:45:b6:
                    aa:e2:77:56:17:75:ba:b5:7e:d2:2b:a9:58:89:c0:
                    ee:90:af:27:bc:f1:23:38:a5:c7:d5:a4:4d:1f:ed:
                    a0:2c:cf:11:68:46:be:45:b4:c8:a1:78:3b
                ASN1 OID: secp521r1
                NIST CURVE: P-521
        Attributes:
            a0:00
    Signature Algorithm: ecdsa-with-SHA256
         30:81:88:02:42:01:cc:0c:d5:6f:fb:eb:db:1d:ed:d3:4e:f1:
         80:a0:55:2e:4c:bb:a6:74:0c:35:c7:d0:4b:b3:02:df:64:88:
         df:0d:4b:d2:67:5b:ec:cf:8f:f9:52:92:97:c3:e0:dd:a8:66:
         92:dc:44:73:3b:ec:6c:48:ff:1b:01:33:ed:00:d0:2f:a8:02:
         42:01:36:bc:21:6e:1b:fc:a3:cf:23:bd:33:6a:ea:fb:c8:8c:
         9b:c4:18:0f:2f:83:1a:80:04:45:8f:99:85:b3:b6:6f:b6:ff:
         6e:7e:0e:90:b4:84:5b:38:12:bc:99:ee:3e:dc:ae:8e:8e:c8:
         07:8d:1b:90:a2:e5:e2:bc:26:9d:b1:8a:2c'
[Sun 14 Nov 11:02:16 GMT 2021] ECC CSR
[Sun 14 Nov 11:02:16 GMT 2021] Using config home:/home/myusername/.acme.sh
[Sun 14 Nov 11:02:16 GMT 2021] default_acme_server
[Sun 14 Nov 11:02:16 GMT 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sun 14 Nov 11:02:16 GMT 2021] _ACME_SERVER_HOST='acme.zerossl.com'
[Sun 14 Nov 11:02:16 GMT 2021] _ACME_SERVER_PATH='v2/DV90'
[Sun 14 Nov 11:02:16 GMT 2021] DOMAIN_PATH='/home/myusername/.acme.sh/mydomain.ddns.net_ecc'
[Sun 14 Nov 11:02:17 GMT 2021] Copy csr to: /home/myusername/.acme.sh/mydomain.ddns.net_ecc/mydomain.ddns.net.csr
[Sun 14 Nov 11:02:17 GMT 2021] _main_domain='mydomain.ddns.net'
[Sun 14 Nov 11:02:17 GMT 2021] _alt_domains
[Sun 14 Nov 11:02:17 GMT 2021] Using config home:/home/myusername/.acme.sh
[Sun 14 Nov 11:02:17 GMT 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sun 14 Nov 11:02:17 GMT 2021] _ACME_SERVER_HOST='acme.zerossl.com'
[Sun 14 Nov 11:02:17 GMT 2021] _ACME_SERVER_PATH='v2/DV90'
[Sun 14 Nov 11:02:17 GMT 2021] '/home/myusername/Downloads/lnbits/' does not contain 'dns'
[Sun 14 Nov 11:02:17 GMT 2021] Le_NextRenewTime
[Sun 14 Nov 11:02:17 GMT 2021] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Sun 14 Nov 11:02:17 GMT 2021] _init api for server: https://acme.zerossl.com/v2/DV90
[Sun 14 Nov 11:02:17 GMT 2021] Retrying GET
[Sun 14 Nov 11:02:17 GMT 2021] GET
[Sun 14 Nov 11:02:17 GMT 2021] url='https://acme.zerossl.com/v2/DV90'
[Sun 14 Nov 11:02:17 GMT 2021] timeout=
[Sun 14 Nov 11:02:17 GMT 2021] displayError='1'
[Sun 14 Nov 11:02:17 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.jZ7KYjjUqF '
[Sun 14 Nov 11:02:19 GMT 2021] ret='0'
[Sun 14 Nov 11:02:19 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:19 GMT 2021] response='{
  "newNonce": "https://acme.zerossl.com/v2/DV90/newNonce",
  "newAccount": "https://acme.zerossl.com/v2/DV90/newAccount",
  "newOrder": "https://acme.zerossl.com/v2/DV90/newOrder",
  "revokeCert": "https://acme.zerossl.com/v2/DV90/revokeCert",
  "keyChange": "https://acme.zerossl.com/v2/DV90/keyChange",
  "meta": {
    "termsOfService": "https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf",
    "website": "https://zerossl.com",
    "caaIdentities": ["sectigo.com", "trust-provider.com", "usertrust.com", "comodoca.com", "comodo.com"],
    "externalAccountRequired": true
  }
}'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_AUTHZ
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf'
[Sun 14 Nov 11:02:19 GMT 2021] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Sun 14 Nov 11:02:19 GMT 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Sun 14 Nov 11:02:19 GMT 2021] _on_before_issue
[Sun 14 Nov 11:02:19 GMT 2021] _chk_main_domain='mydomain.ddns.net'
[Sun 14 Nov 11:02:19 GMT 2021] _chk_alt_domains
[Sun 14 Nov 11:02:19 GMT 2021] '/home/myusername/Downloads/lnbits/' does not contain 'no'
[Sun 14 Nov 11:02:19 GMT 2021] Le_LocalAddress
[Sun 14 Nov 11:02:20 GMT 2021] d='mydomain.ddns.net'
[Sun 14 Nov 11:02:20 GMT 2021] Check for domain='mydomain.ddns.net'
[Sun 14 Nov 11:02:20 GMT 2021] _currentRoot='/home/myusername/Downloads/lnbits/'
[Sun 14 Nov 11:02:20 GMT 2021] d
[Sun 14 Nov 11:02:20 GMT 2021] '/home/myusername/Downloads/lnbits/' does not contain 'apache'
[Sun 14 Nov 11:02:20 GMT 2021] _saved_account_key_hash='V6tW0gEGvQo/bzlcA+laKjHsPJz92PU9Z0u8hq57IFE='
[Sun 14 Nov 11:02:20 GMT 2021] _saved_account_key_hash is not changed, skip register account.
[Sun 14 Nov 11:02:20 GMT 2021] Signing from existing CSR.
[Sun 14 Nov 11:02:20 GMT 2021] Getting domain auth token for each domain
[Sun 14 Nov 11:02:20 GMT 2021] _is_idn_d='mydomain.ddns.net'
[Sun 14 Nov 11:02:20 GMT 2021] _idn_temp
[Sun 14 Nov 11:02:20 GMT 2021] d
[Sun 14 Nov 11:02:20 GMT 2021] _identifiers='{"type":"dns","value":"mydomain.ddns.net"}'
[Sun 14 Nov 11:02:20 GMT 2021] url='https://acme.zerossl.com/v2/DV90/newOrder'
[Sun 14 Nov 11:02:20 GMT 2021] payload='{"identifiers": [{"type":"dns","value":"mydomain.ddns.net"}]}'
[Sun 14 Nov 11:02:20 GMT 2021] RSA key
[Sun 14 Nov 11:02:20 GMT 2021] Get nonce with HEAD. ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Sun 14 Nov 11:02:20 GMT 2021] Retrying post
[Sun 14 Nov 11:02:20 GMT 2021] HEAD
[Sun 14 Nov 11:02:20 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/newNonce'
[Sun 14 Nov 11:02:20 GMT 2021] body
[Sun 14 Nov 11:02:20 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:20 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT  -I  '
[Sun 14 Nov 11:02:22 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:22 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:22 GMT 2021] _headers='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:22 GMT
content-type: application/octet-stream
replay-nonce: maFTbGKMO3DWHXMvLr0Qh51_ju1lXvlvMQFUSIvKKVU
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:22 GMT 2021] _CACHED_NONCE='maFTbGKMO3DWHXMvLr0Qh51_ju1lXvlvMQFUSIvKKVU'
[Sun 14 Nov 11:02:22 GMT 2021] nonce='maFTbGKMO3DWHXMvLr0Qh51_ju1lXvlvMQFUSIvKKVU'
[Sun 14 Nov 11:02:22 GMT 2021] Retrying post
[Sun 14 Nov 11:02:22 GMT 2021] POST
[Sun 14 Nov 11:02:22 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/newOrder'
[Sun 14 Nov 11:02:22 GMT 2021] body='{"protected": "eyJub25jZSI6ICJtYUZUYkdLTU8zRFdIWE12THIwUWg1MV9qdTFsWHZsdk1RRlVTSXZLS1ZVIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9uZXdPcmRlciIsICJhbGciOiAiUlMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS56ZXJvc3NsLmNvbS92Mi9EVjkwL2FjY291bnQvZWZCNmNMR0x6R2tlbkE4b2NaM2xJQSJ9", "payload": "eyJpZGVudGlmaWVycyI6IFt7InR5cGUiOiJkbnMiLCJ2YWx1ZSI6ImNyeXB0bzRuNHJrLmRkbnMubmV0In1dfQ", "signature": "oKzDRkf0P_73Ya2zVHprZrbfIOTRQhu7GpyBbUWESJ-lBiyx7YmkAkSAOGbnvcYEyutfA5Kddmf3C9MXWQGHV9GbAS3h6v_2DDVu32vwdf6v8FaSd101flPLNMOlpDc2xfzcFKuaMyQaCLbmhdbNhVaRmTaSyEeGip-6UOZC8Y2le38qtQ5QJl8lo6tzabTDhH0zCkSaDuJbG2VhYFYijyHyCIpbAVy415GgNAgKXgmcSjyvD5P5Ey2d3wIjDYb5QPFftexujx1XbM-3VJRrGlb-EkTl_iU2Xsq02QiHFq4sMQ1YUj9XRRatVZHsXumwT69IFs3O8EDJ1ZjqIeRGbQ"}'
[Sun 14 Nov 11:02:22 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:22 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:22 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:24 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:24 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:24 GMT 2021] responseHeaders='HTTP/2 201 
server: nginx
date: Sun, 14 Nov 2021 11:02:24 GMT
content-type: application/json
content-length: 282
status: 
replay-nonce: GfR-qRv9QuL6pZ3s-SWmaDjHJuyV_yEZebZ9osqkEYk
cache-control: max-age=0, no-cache, no-store
access-control-allow-origin: *
location: https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw
cache-control: max-age=-1
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:24 GMT 2021] code='201'
[Sun 14 Nov 11:02:24 GMT 2021] original='{"status":"pending","expires":"2022-02-12T11:02:24Z","identifiers":[{"type":"dns","value":"mydomain.ddns.net"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ"],"finalize":"https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw/finalize"}'
[Sun 14 Nov 11:02:24 GMT 2021] response='{"status":"pending","expires":"2022-02-12T11:02:24Z","identifiers":[{"type":"dns","value":"mydomain.ddns.net"}],"authorizations":["https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ"],"finalize":"https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw/finalize"}'
[Sun 14 Nov 11:02:24 GMT 2021] Le_LinkOrder='https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw'
[Sun 14 Nov 11:02:24 GMT 2021] Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/0xMkZZ0V6QuGVq-wWomsxw/finalize'
[Sun 14 Nov 11:02:24 GMT 2021] _authorizations_seg='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:24 GMT 2021] _authz_url='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:24 GMT 2021] url='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:24 GMT 2021] payload
[Sun 14 Nov 11:02:24 GMT 2021] Use cached jwk for file: /home/myusername/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:25 GMT 2021] Use _CACHED_NONCE='GfR-qRv9QuL6pZ3s-SWmaDjHJuyV_yEZebZ9osqkEYk'
[Sun 14 Nov 11:02:25 GMT 2021] nonce='GfR-qRv9QuL6pZ3s-SWmaDjHJuyV_yEZebZ9osqkEYk'
[Sun 14 Nov 11:02:25 GMT 2021] Retrying post
[Sun 14 Nov 11:02:25 GMT 2021] POST
[Sun 14 Nov 11:02:25 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ'
[Sun 14 Nov 11:02:25 GMT 2021] body='{"protected": "eyJub25jZSI6ICJHZlItcVJ2OVF1TDZwWjNzLVNXbWFEakhKdXlWX3lFWmViWjlvc3FrRVlrIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9hdXRoei9NWkw3d19ZNUp6Vk5EenBkLUNqbk5RIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "cSy83H2Y_hNj2rsPsCk4og2M6BjMOCUATVkTJg2c0MdBUCA3-83eO8JacZ6xU7RAkjhzUkY39RB8oCWF2TYpQyZjxfFfeZ2dx_azZslo34BA3L3EeZPYiqsCUO-eeSNmC5v2I4ClKYtmYdVFP1BD9ycfqIbthq9aBHZhVztB8MrmJfhmDBy2g9XWnIk2Y63ZiEJ2XjtdGC1S4rYE2HeZOW91g_oFuFoZmNY-Qpx3SN05heQLX8nc2AFegAxWfey3MjL8ZmWKhaTV5mILMEhc_UkOQ6tn3qCyBx0x-M7_iblhacoCyNfdYgjikfQEFTEMfNbk_WWbbNFYjtsRe09f5w"}'
[Sun 14 Nov 11:02:25 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:25 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:25 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:26 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:26 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:26 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:26 GMT
content-type: application/json
content-length: 450
replay-nonce: dRnZ9Ay37l1pAFyhF6EcVtzpL3dCaFXObBPVbiGMRjs
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
retry-after: 5
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:26 GMT 2021] code='200'
[Sun 14 Nov 11:02:26 GMT 2021] original='{"identifier":{"type":"dns","value":"mydomain.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] response='{"identifier":{"type":"dns","value":"mydomain.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] response='{"identifier":{"type":"dns","value":"mydomain.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] _d='mydomain.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] _authorizations_map='mydomain.ddns.net,{"identifier":{"type":"dns","value":"mydomain.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}
'
[Sun 14 Nov 11:02:26 GMT 2021] d='mydomain.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] Getting webroot for domain='mydomain.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] _w='/home/myusername/Downloads/lnbits/'
[Sun 14 Nov 11:02:26 GMT 2021] _currentRoot='/home/myusername/Downloads/lnbits/'
[Sun 14 Nov 11:02:26 GMT 2021] _is_idn_d='mydomain.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] _idn_temp
[Sun 14 Nov 11:02:26 GMT 2021] _candidates='mydomain.ddns.net,{"identifier":{"type":"dns","value":"mydomain.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] response='{"identifier":{"type":"dns","value":"mydomain.ddns.net"},"status":"pending","expires":"2021-12-14T11:02:23Z","challenges":[{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"},{"type":"dns-01","url":"https://acme.zerossl.com/v2/DV90/chall/sMYqy8SUTm9QKFqasKxhlw","status":"pending","token":"w_LpCIkBTOyjveHUfXiXdKftCxZ6y0tkC9r_J-70YzA"}]}'
[Sun 14 Nov 11:02:26 GMT 2021] entry='"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"pending","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"'
[Sun 14 Nov 11:02:26 GMT 2021] token='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE'
[Sun 14 Nov 11:02:26 GMT 2021] uri='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:26 GMT 2021] keyauthorization='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:26 GMT 2021] dvlist='mydomain.ddns.net#nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q#https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A#http-01#/home/myusername/Downloads/lnbits/'
[Sun 14 Nov 11:02:26 GMT 2021] d
[Sun 14 Nov 11:02:26 GMT 2021] vlist='mydomain.ddns.net#nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q#https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A#http-01#/home/myusername/Downloads/lnbits/,'
[Sun 14 Nov 11:02:26 GMT 2021] d='mydomain.ddns.net'
[Sun 14 Nov 11:02:26 GMT 2021] ok, let's start to verify
[Sun 14 Nov 11:02:27 GMT 2021] Verifying: mydomain.ddns.net
[Sun 14 Nov 11:02:27 GMT 2021] d='mydomain.ddns.net'
[Sun 14 Nov 11:02:27 GMT 2021] keyauthorization='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:27 GMT 2021] uri='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] _currentRoot='/home/myusername/Downloads/lnbits/'
[Sun 14 Nov 11:02:27 GMT 2021] wellknown_path='/home/myusername/Downloads/lnbits//.well-known/acme-challenge'
[Sun 14 Nov 11:02:27 GMT 2021] writing token:nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE to /home/myusername/Downloads/lnbits//.well-known/acme-challenge/nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE
[Sun 14 Nov 11:02:27 GMT 2021] Changing owner/group of .well-known to myusername:myusername
[Sun 14 Nov 11:02:27 GMT 2021] Trigger domain validation.
[Sun 14 Nov 11:02:27 GMT 2021] _t_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] _t_key_authz='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:27 GMT 2021] _t_vtype='http-01'
[Sun 14 Nov 11:02:27 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] payload='{}'
[Sun 14 Nov 11:02:27 GMT 2021] Use cached jwk for file: /home/myusername/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:27 GMT 2021] Use _CACHED_NONCE='dRnZ9Ay37l1pAFyhF6EcVtzpL3dCaFXObBPVbiGMRjs'
[Sun 14 Nov 11:02:27 GMT 2021] nonce='dRnZ9Ay37l1pAFyhF6EcVtzpL3dCaFXObBPVbiGMRjs'
[Sun 14 Nov 11:02:27 GMT 2021] Retrying post
[Sun 14 Nov 11:02:27 GMT 2021] POST
[Sun 14 Nov 11:02:27 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:27 GMT 2021] body='{"protected": "eyJub25jZSI6ICJkUm5aOUF5MzdsMXBBRnloRjZFY1Z0enBMM2RDYUZYT2JCUFZiaUdNUmpzIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "e30", "signature": "lHpyBuo07Db92YBu1ei80lKQ6iQ2IwHTFuDqYXD4QQB2120zNvmnV5UvMCNTZLFhb5ActU2sxasxz_MfOCLqDBaUO0I1YY0nVAyvjWTH7Cq-aLV3Io0UdiuiofCoi7UsSJ6J2O_jad7aPV36YUKMTECYJhPqblxz9eibW8zEzCdOjGuwv6CrY966u9oOlE9NBfl8RK15kG2O008THlJ-ucKe51V12Ur-5MwY4Ajf9dSooO-NISkOVo94rx1JH5IeDqr3Cjx5kbRnAEn-HJSrVCJuMHE5j4aKuBlHD8VyLaOWM72T_xyQ3ZCMJB9d-FSrwGnZZitYf7oF5vZsC0U1YQ"}'
[Sun 14 Nov 11:02:27 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:27 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:27 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:28 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:28 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:28 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:28 GMT
content-type: application/json
content-length: 164
replay-nonce: ZfyM3GcLr5_EMbLargUk6k3o8Fiauc0U-PsePHYwcRc
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:28 GMT 2021] code='200'
[Sun 14 Nov 11:02:28 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] trigger validation code: 200
[Sun 14 Nov 11:02:28 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:28 GMT 2021] status='processing'
[Sun 14 Nov 11:02:28 GMT 2021] Processing, The CA is processing your order, please just wait. (1/5)
[Sun 14 Nov 11:02:29 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:31 GMT 2021] checking
[Sun 14 Nov 11:02:31 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:31 GMT 2021] payload
[Sun 14 Nov 11:02:31 GMT 2021] Use cached jwk for file: /home/myusername/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:31 GMT 2021] Use _CACHED_NONCE='ZfyM3GcLr5_EMbLargUk6k3o8Fiauc0U-PsePHYwcRc'
[Sun 14 Nov 11:02:31 GMT 2021] nonce='ZfyM3GcLr5_EMbLargUk6k3o8Fiauc0U-PsePHYwcRc'
[Sun 14 Nov 11:02:31 GMT 2021] Retrying post
[Sun 14 Nov 11:02:31 GMT 2021] POST
[Sun 14 Nov 11:02:31 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:31 GMT 2021] body='{"protected": "eyJub25jZSI6ICJaZnlNM0djTHI1X0VNYkxhcmdVazZrM284RmlhdWMwVS1Qc2VQSFl3Y1JjIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "YgyLJVZcWD8ojaLVgi9lCLLDSjRau67JtrBdo5cNqlI3apvZZr_OMZ7Zny75cRZ18WhudiWvUZcN5GWs6RLXBQy0zcq1H7I2WP2IYxLwNUxhrykH5TvveunBlZysUwZy1z60PKSv87BOUU2yo_cwrCDvZE9I71KZK0nnVoiNV7j9LBuzg8P8sdF-hDPCbTrwMD-J_ZM1gntxqKfAWUJim1DBE6BkHav-PFuWRMdIP3hTofEzedcJ9XEiwfzStGI7Tt2RR4aOhtccljxzztPwgs5OYfqhDxJc20vYAj4UfDw6JRZpfwsNZmfyxKPACA8CfoMWcfWfA7-k2W1Rs9Djeg"}'
[Sun 14 Nov 11:02:31 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:31 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:31 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:32 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:32 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:32 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:32 GMT
content-type: application/json
content-length: 164
replay-nonce: y6QZlBK0_ffILgrpzSdf_p_Yje0vQ8c_hTxJx_iOAok
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:32 GMT 2021] code='200'
[Sun 14 Nov 11:02:32 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:32 GMT 2021] status='processing'
[Sun 14 Nov 11:02:32 GMT 2021] Processing, The CA is processing your order, please just wait. (2/5)
[Sun 14 Nov 11:02:32 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:34 GMT 2021] checking
[Sun 14 Nov 11:02:34 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:34 GMT 2021] payload
[Sun 14 Nov 11:02:34 GMT 2021] Use cached jwk for file: /home/myusername/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:34 GMT 2021] Use _CACHED_NONCE='y6QZlBK0_ffILgrpzSdf_p_Yje0vQ8c_hTxJx_iOAok'
[Sun 14 Nov 11:02:34 GMT 2021] nonce='y6QZlBK0_ffILgrpzSdf_p_Yje0vQ8c_hTxJx_iOAok'
[Sun 14 Nov 11:02:34 GMT 2021] Retrying post
[Sun 14 Nov 11:02:34 GMT 2021] POST
[Sun 14 Nov 11:02:34 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:34 GMT 2021] body='{"protected": "eyJub25jZSI6ICJ5NlFabEJLMF9mZklMZ3JwelNkZl9wX1lqZTB2UThjX2hUeEp4X2lPQW9rIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "wZCICQPdSQCVXqyaHs9lxKyH20I1b1euCxzRGTmpm3JhPRyz17Km4T7S_HxvqF3CN9Za2dpUosm5HGgLnXLNT1W-fcmElKGPmGkYcThQR8qCtzBlQXKHflZJ23UsmNJZ7F5xCe17S5X1ue75aO25pAgMxAQge8ZQYbmhmWeJvEWAn9oHtHAKO3zJaGppuzpan2SKmL1u0W4zGC1T4DZ2INzcN1QEZPfGO_w4DER6-LyWPZMO1SiNS1XIem7cBYdjXHPn5AetrBZHZzpE9ScEf42LnVERbp2ZY4QAbbwWrvgonety2t4VYd7ae54sP4dQMQqE7EwFWk_D27_WMdL2vw"}'
[Sun 14 Nov 11:02:34 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:34 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:34 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:35 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:35 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:35 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:35 GMT
content-type: application/json
content-length: 164
replay-nonce: 18mEYeSgul4QGr8aTrlElKYvwGL_EzoDRA4AK-YXxFA
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:35 GMT 2021] code='200'
[Sun 14 Nov 11:02:35 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:35 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:36 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:36 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:36 GMT 2021] status='processing'
[Sun 14 Nov 11:02:36 GMT 2021] Processing, The CA is processing your order, please just wait. (3/5)
[Sun 14 Nov 11:02:36 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:38 GMT 2021] checking
[Sun 14 Nov 11:02:38 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:38 GMT 2021] payload
[Sun 14 Nov 11:02:38 GMT 2021] Use cached jwk for file: /home/myusername/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:38 GMT 2021] Use _CACHED_NONCE='18mEYeSgul4QGr8aTrlElKYvwGL_EzoDRA4AK-YXxFA'
[Sun 14 Nov 11:02:38 GMT 2021] nonce='18mEYeSgul4QGr8aTrlElKYvwGL_EzoDRA4AK-YXxFA'
[Sun 14 Nov 11:02:38 GMT 2021] Retrying post
[Sun 14 Nov 11:02:38 GMT 2021] POST
[Sun 14 Nov 11:02:38 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:38 GMT 2021] body='{"protected": "eyJub25jZSI6ICIxOG1FWWVTZ3VsNFFHcjhhVHJsRWxLWXZ3R0xfRXpvRFJBNEFLLVlYeEZBIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "emrtlHuqXDtw5oQwZCBqDVuCXsqYKMe-qQM_k9A0unubjIY1VpfubgAG06pniP7qTKOW8FoGzysupy8ywEZozSqQWNBeaf-5Hb4hwMpejWHBYfzJxJ84esFQHQksOCHCaEYr8vaaWYFofPCpqRLLHbQ3G27rSilgtiem-LrxIif02n9k4EIsagvEQCcDTpMvIVBcLaubXkVltDv_ivtng7b2Vk79bOwvcBKZ4dA92olG92F27Z_jezf8w9XONyoe6wRyw4_bPXxgmQpZG_-qfAHa4u6pWXGoVntC_cOJXATYtnYg6YskNf1ydoFl_OG1LScyn-wvKZmb7e5VnJTUWA"}'
[Sun 14 Nov 11:02:38 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:38 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:38 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:39 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:39 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:39 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:39 GMT
content-type: application/json
content-length: 164
replay-nonce: RCaUB7nTnUgi0O3Ug4bKF9AmRbXECo1w176HHZle5Zs
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:39 GMT 2021] code='200'
[Sun 14 Nov 11:02:39 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:39 GMT 2021] status='processing'
[Sun 14 Nov 11:02:39 GMT 2021] Processing, The CA is processing your order, please just wait. (4/5)
[Sun 14 Nov 11:02:39 GMT 2021] sleep 2 secs to verify again
[Sun 14 Nov 11:02:41 GMT 2021] checking
[Sun 14 Nov 11:02:41 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:41 GMT 2021] payload
[Sun 14 Nov 11:02:41 GMT 2021] Use cached jwk for file: /home/myusername/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:41 GMT 2021] Use _CACHED_NONCE='RCaUB7nTnUgi0O3Ug4bKF9AmRbXECo1w176HHZle5Zs'
[Sun 14 Nov 11:02:41 GMT 2021] nonce='RCaUB7nTnUgi0O3Ug4bKF9AmRbXECo1w176HHZle5Zs'
[Sun 14 Nov 11:02:42 GMT 2021] Retrying post
[Sun 14 Nov 11:02:42 GMT 2021] POST
[Sun 14 Nov 11:02:42 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:42 GMT 2021] body='{"protected": "eyJub25jZSI6ICJSQ2FVQjduVG5VZ2kwTzNVZzRiS0Y5QW1SYlhFQ28xdzE3NkhIWmxlNVpzIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "", "signature": "RMCgfkNSlinPxtKv237UKITUlOJTmFimqS_PP6UtQHwZMv_WyaIU8IFsYfYR_GbMzYKzok5Q-h7jt-8K5-8woo9-5MkYyDT-t2OBFS5HvsGOVDIBccw-xC-CsVHljk1r_YyZs1o2HagLUZ5R-JL36tsfI602MZHJBuEaFUTD8xJeWkJGyOz80NL2nFGvfJdk9hnS3NXRymQQxuDWGMHPEGmuCxoJA94zqs6yCT8TRwayTHWQ779GOLxxKtsY2qoCZftQiejlu7nO4moWPvwIKODzCe1ANOMuI_OlCxXMxkj44Y35MvNLv6iJi47f1mii6OjNsNv0xLqcw-U6g4WXyg"}'
[Sun 14 Nov 11:02:42 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:42 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:42 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:43 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:43 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:43 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:43 GMT
content-type: application/json
content-length: 164
replay-nonce: Imz8zf7tFMlXkfuycTDUnnmCAlhFmYARqc7QgW9LJIM
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:43 GMT 2021] code='200'
[Sun 14 Nov 11:02:43 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:43 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:43 GMT 2021] mydomain.ddns.net:Timeout
[Sun 14 Nov 11:02:43 GMT 2021] Debugging, skip removing: /home/myusername/Downloads/lnbits//.well-known/acme-challenge/nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE
[Sun 14 Nov 11:02:43 GMT 2021] pid
[Sun 14 Nov 11:02:43 GMT 2021] No need to restore nginx, skip.
[Sun 14 Nov 11:02:43 GMT 2021] _clearupdns
[Sun 14 Nov 11:02:43 GMT 2021] dns_entries
[Sun 14 Nov 11:02:43 GMT 2021] skip dns.
[Sun 14 Nov 11:02:43 GMT 2021] _on_issue_err
[Sun 14 Nov 11:02:43 GMT 2021] Please add '--debug' or '--log' to check more details.
[Sun 14 Nov 11:02:43 GMT 2021] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
[Sun 14 Nov 11:02:43 GMT 2021] _chk_vlist='mydomain.ddns.net#nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q#https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A#http-01#/home/myusername/Downloads/lnbits/,'
[Sun 14 Nov 11:02:43 GMT 2021] start to deactivate authz
[Sun 14 Nov 11:02:43 GMT 2021] Trigger domain validation.
[Sun 14 Nov 11:02:43 GMT 2021] _t_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:43 GMT 2021] _t_key_authz='nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE.S2ONLQD-y2io9cXrHP31-CcGCOpRWqsPo_MBqqRDs2Q'
[Sun 14 Nov 11:02:43 GMT 2021] _t_vtype
[Sun 14 Nov 11:02:43 GMT 2021] url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:43 GMT 2021] payload='{}'
[Sun 14 Nov 11:02:43 GMT 2021] Use cached jwk for file: /home/myusername/.acme.sh/ca/acme.zerossl.com/v2/DV90/account.key
[Sun 14 Nov 11:02:43 GMT 2021] Use _CACHED_NONCE='Imz8zf7tFMlXkfuycTDUnnmCAlhFmYARqc7QgW9LJIM'
[Sun 14 Nov 11:02:43 GMT 2021] nonce='Imz8zf7tFMlXkfuycTDUnnmCAlhFmYARqc7QgW9LJIM'
[Sun 14 Nov 11:02:43 GMT 2021] Retrying post
[Sun 14 Nov 11:02:43 GMT 2021] POST
[Sun 14 Nov 11:02:43 GMT 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A'
[Sun 14 Nov 11:02:43 GMT 2021] body='{"protected": "eyJub25jZSI6ICJJbXo4emY3dEZNbFhrZnV5Y1REVW5ubUNBbGhGbVlBUnFjN1FnVzlMSklNIiwgInVybCI6ICJodHRwczovL2FjbWUuemVyb3NzbC5jb20vdjIvRFY5MC9jaGFsbC9hellYTXZxclZtckpuRjdZMy1xUTVBIiwgImFsZyI6ICJSUzI1NiIsICJraWQiOiAiaHR0cHM6Ly9hY21lLnplcm9zc2wuY29tL3YyL0RWOTAvYWNjb3VudC9lZkI2Y0xHTHpHa2VuQThvY1ozbElBIn0", "payload": "e30", "signature": "ja9AxZGQa-QD2_CDtjBDukszxBNUR4tHcTSc_gpwWxtIG7hbPw6RRvawIC2_KpTKp7ri1uwWgO-6utIIT6cgaxwP8i3lZ8a-vE5HxR2VO9gSNAsHENVmayWBtrJKOcMtOxNnJ9Ere_2nBhFC9KwZ1UfemQragEZtCVWRzaSJ85y1rOAITvWuSHewdJtjdz8x7JRLvDuiRshfNVEXR4pqZ0kTzSisoR3Vt0Y7wSCVOzMJyMpgbl02bALA3yXHPoGG5tCyTcMENnrs2p9KodUoBTzE9AE2uEiEg7lVUX32FD88sTHYoSWq1vbYI9_bDZx81V2ICurRqdkBmzIk1_JBsw"}'
[Sun 14 Nov 11:02:43 GMT 2021] _postContentType='application/myname+json'
[Sun 14 Nov 11:02:44 GMT 2021] Http already initialized.
[Sun 14 Nov 11:02:44 GMT 2021] _CURL='curl --silent --dump-header /home/myusername/.acme.sh/http.header  -L  --trace-ascii /tmp/tmp.dro5EnquaT '
[Sun 14 Nov 11:02:45 GMT 2021] _ret='0'
[Sun 14 Nov 11:02:45 GMT 2021] _hcode='0'
[Sun 14 Nov 11:02:45 GMT 2021] responseHeaders='HTTP/2 200 
server: nginx
date: Sun, 14 Nov 2021 11:02:45 GMT
content-type: application/json
content-length: 164
replay-nonce: Zg717LkI7AP_5PKYsgBjZpn-MOfx9erI0N193I1CI-g
cache-control: max-age=-1
access-control-allow-origin: *
link: <https://acme.zerossl.com/v2/DV90>;rel="index"
link: <https://acme.zerossl.com/v2/DV90/authz/MZL7w_Y5JzVNDzpd-CjnNQ>;rel="up"
retry-after: 10
strict-transport-security: max-age=15552000
'
[Sun 14 Nov 11:02:45 GMT 2021] code='200'
[Sun 14 Nov 11:02:45 GMT 2021] original='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:45 GMT 2021] response='{"type":"http-01","url":"https://acme.zerossl.com/v2/DV90/chall/azYXMvqrVmrJnF7Y3-qQ5A","status":"processing","token":"nem_cd4rY01dwqwo9994ciqmrjQkcPqIIiYIhKz97fE"}'
[Sun 14 Nov 11:02:45 GMT 2021] socat doesn't exist.
[Sun 14 Nov 11:02:45 GMT 2021] Diagnosis versions: 
openssl:openssl
OpenSSL 1.1.1k  25 Mar 2021
apache:
apache doesn't exist.
nginx:
nginx doesn't exist.
socat:
$

This domain I have is not really a domain. It's a noip.com DDNS service I have, which makes it a layer 3 domain and someone told me that certbot (which has acme.sh script as one of it's implementations) doesn't support 3rd layer domains but I couldn't confirm this and I don't know if this is failing due to this problem...

Bitcoin is energy. Bitcoin is freedom
I rather die on my feet than living on my knees!

DaveF

Legendary

Offline

Activity: 3472
Merit: 6273

Crypto Swap Exchange

Re: Signing a CSR for LNBits

November 14, 2021, 02:25:14 PM

#2

I am on mobile can can't do a full look but:

IIRC you are not running your web server on port 80. Certbot goes out and checks port 80 for the file at http://your.domain.com/.well-known/ acme-challenge/ or /pki-validation

So if you are still on 5000 it will probably not work.
There may or may not be another issue with what you have, but I think that will be a stumbling block also unless you can get a public web server on port 80.

-Dave

█▀▀▀
█
█
█
█
█
█
█
█
█
█
█
█▄▄▄

▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

▀▀▀█
█
█
█
█
█
█
█
█
█
█
█
▄▄▄█

▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
░▀▀██▀▀

darkv0rt3x (OP)

Hero Member

Offline

Activity: 1204
Merit: 658

I rather die on my feet than to live on my knees

Re: Signing a CSR for LNBits

November 14, 2021, 06:13:12 PM

#3

Quote from: DaveF on November 14, 2021, 02:25:14 PM

I am on mobile can can't do a full look but:

IIRC you are not running your web server on port 80. Certbot goes out and checks port 80 for the file at http://your.domain.com/.well-known/ acme-challenge/ or /pki-validation

So if you are still on 5000 it will probably not work.
There may or may not be another issue with what you have, but I think that will be a stumbling block also unless you can get a public web server on port 80.

-Dave

Hum ok. I'm also discussing this in a specific forum. They are also trying to help me. Let's see where this goes. And thank you @DaveF.

Bitcoin is energy. Bitcoin is freedom
I rather die on my feet than living on my knees!

DaveF

Legendary

Offline

Activity: 3472
Merit: 6273

Crypto Swap Exchange

Re: Signing a CSR for LNBits

November 14, 2021, 10:01:34 PM

#4

Did a bit of digging there may be a way around not having poor 80 open:
Take a look at: https://jmorahan.net/articles/lets-encrypt-without-port-80/
No idea if any of those would work for you.

How often does your IP address change? On some cable / fios providers it's the same for months on end for others you will get a new ip every few days.
If it does not change that much then you might want to get your own domain and use a DNS record to authenticate your request.

-Dave

█▀▀▀
█
█
█
█
█
█
█
█
█
█
█
█▄▄▄

▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

▀▀▀█
█
█
█
█
█
█
█
█
█
█
█
▄▄▄█

▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
░▀▀██▀▀

ABCbits

Legendary

Offline

Activity: 2870
Merit: 7497

Crypto Swap Exchange

Re: Signing a CSR for LNBits

November 15, 2021, 11:18:31 AM

Merited by DaveF (2)

#5

Quote from: DaveF on November 14, 2021, 02:25:14 PM

IIRC you are not running your web server on port 80. Certbot goes out and checks port 80 for the file at http://your.domain.com/.well-known/ acme-challenge/ or /pki-validation

So if you are still on 5000 it will probably not work.

FYI, certbot have parameter to seek HTTP on different port. Here's part of certbot manpages from https://manpages.ubuntu.com/manpages/bionic/en/man1/certbot.1.html.

Code:

            --http-01-port HTTP01_PORT
                                  Port used in the http-01 challenge. This only affects
                                  the port Certbot listens on. A conforming ACME server
                                  will still attempt to connect on port 80. (default:
                                  80)

█▀▀▀
█
█
█
█
█
█
█
█
█
█
█
█▄▄▄

▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

▀▀▀█
█
█
█
█
█
█
█
█
█
█
█
▄▄▄█

▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
░▀▀██▀▀

DaveF

Legendary

Offline

Activity: 3472
Merit: 6273

Crypto Swap Exchange

Re: Signing a CSR for LNBits

November 15, 2021, 01:48:45 PM

#6

Quote from: ETFbitcoin on November 15, 2021, 11:18:31 AM

Quote from: DaveF on November 14, 2021, 02:25:14 PM

IIRC you are not running your web server on port 80. Certbot goes out and checks port 80 for the file at http://your.domain.com/.well-known/ acme-challenge/ or /pki-validation

So if you are still on 5000 it will probably not work.

FYI, certbot have parameter to seek HTTP on different port. Here's part of certbot manpages from https://manpages.ubuntu.com/manpages/bionic/en/man1/certbot.1.html.

Code:

            --http-01-port HTTP01_PORT
                                  Port used in the http-01 challenge. This only affects
                                  the port Certbot listens on. A conforming ACME server
                                  will still attempt to connect on port 80. (default:
                                  80)

Unless I am mistaken, the server will LISTEN on a different but the letsencrypt ACME server will still try to connect to darkv0rt3x on port 80.
I could be 100% wrong but from the reading I did that is what it looks like to me.

Letsencrypt is a great product, and it does work 98% of the time. But for the last 2% with non standard things it can be a pain to get it to work.
I actually tried a few times and said screw it for $5/ year for a cheap domain name with free DNS and $9 a year for a real SSL it just became not worth my time.
The issue here is the DHCP on the public side. If it changes a lot it's a pain to keep updating it.

-Dave

█▀▀▀
█
█
█
█
█
█
█
█
█
█
█
█▄▄▄

▀▀▀▀▀▀▀▀▀▀▀
e
▄▄▄▄▄▄▄▄▄▄▄

▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀▀
c.h.
▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄▄

▀▀▀█
█
█
█
█
█
█
█
█
█
█
█
▄▄▄█

▄██████▄▄▄
█████████████▄▄
███████████████
███████████████
███████████████
███████████████
███░░█████████
███▌▐█████████
█████████████
███████████▀
██████████▀
████████▀
░▀▀██▀▀

darkv0rt3x (OP)

Hero Member

Offline

Activity: 1204
Merit: 658

I rather die on my feet than to live on my knees

Re: Signing a CSR for LNBits

November 15, 2021, 11:26:10 PM

#7

Ok, guys...

I'm putting this thread in a stall for a while.
I have purchased a domain and now I need to learn how to setup nginx to forward the traffic from this domain to the correct IP:PORT.

And in my Domain painel, I'm still not sure if I'm setting things correctly.

I'm not sure I should open a new thread to deal with nginx configuration for the new scenario or if I should continue here and then simply keep using the same thread for the TLS certificate matter!

Bitcoin is energy. Bitcoin is freedom
I rather die on my feet than living on my knees!