dns - Renewal SSL certificate with ACME and cloudfare "Unauthorized to access requested resource" - Stack Over

I use ACME and cloudfare to manage my SSLDNSWhen I wanted to renew the SSL of my domains with ACME,

I use ACME and cloudfare to manage my SSL/DNS

When I wanted to renew the SSL of my domains with ACME, /root/.acme.sh/acme.sh --renew

I got this error :

`response='{"success":false,"errors":[
{"code":9109,"message":"Unauthorized to access requested resource"}],
"messages":[],"result":null}'
    
invalid domain
Error add txt for domain:_acme-challenge.<domain_name>

PS : I did not integrate ACME in this server so I don't know how it is working.

I use ACME and cloudfare to manage my SSL/DNS

When I wanted to renew the SSL of my domains with ACME, /root/.acme.sh/acme.sh --renew

I got this error :

`response='{"success":false,"errors":[
{"code":9109,"message":"Unauthorized to access requested resource"}],
"messages":[],"result":null}'
    
invalid domain
Error add txt for domain:_acme-challenge.<domain_name>

PS : I did not integrate ACME in this server so I don't know how it is working.

Share Improve this question asked Mar 20 at 11:16 Kevin.BKevin.B 1112 silver badges5 bronze badges
Add a comment  | 

1 Answer 1

Reset to default 0

I did not find a clear way to find the solution, I respond to my own question.

It could occurs because your cloudfare api_token has expired.

You can change it on https://developers.cloudflare/fundamentals/api/get-started/create-token/

I thought I could change it in /root/.acme.sh/account.conf. But it seems it only displays the CF_Token used in the variable inSAVED_CF_Token. I could be wrong on this one.

I have seen suggestions to add a environment variable export CF_Token=<token> but I guess the configuration is the proper way to do it. And in my case with a temporary token I still had the issue.

So I ran the CLI with more details in a test environement.

/root/.acme.sh/acme.sh --renew --debug 2 (you can replace 2 by 3 to get information about the CF_Token used, DISCLAIMER be aware I prefer to tell you that it display sensitive information like the CF_Token used, make sure you don't run this in production or insecure environment)

In my case I add multiple subdomain, so the conf used was located in /root/.acme.sh/<domain_name>/<domain_name>.conf

Change the CF_Token and it is done !

发布者:admin,转转请注明出处:http://www.yc00.com/questions/1744413984a4573022.html

相关推荐

发表回复

评论列表(0条)

  • 暂无评论

联系我们

400-800-8888

在线咨询: QQ交谈

邮件:admin@example.com

工作时间:周一至周五,9:30-18:30,节假日休息

关注微信