810656823 发表于 2018-2-6 16:05:59

军哥。ssl nginx的出现问题

nginx: BIO_new_file("/etc/letsencrypt/live/www.*.com/fullchain.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/www.*.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed
Reload Nginx......
nginx: BIO_new_file("/etc/letsencrypt/live/www.*.com/fullchain.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/www.*.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)


ssl原本做了。到期了。我直接执行/bin/certbot renew --disable-hook-validation --renew-hook "/etc/init.d/nginx reload"这样不行。出现错误，我就删除live和arrive底下的证书。和删除了vhost里面的ssl信息。根目录下的.well-know。都删除了。重新做。这样是可以的。我试过好多次了。这次却出现这个问题。求助。！谢谢

licess 发表于 2018-2-6 18:25:17

上面的错误是提示ssl证书和key文件不存在
续期时没有具体错误信息没法说是什么原因

810656823 发表于 2018-2-7 14:30:35

ssl错误内容

IMPORTANT NOTES:
- Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/www.*.com-0002/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/www.*.com-0002/privkey.pem
   Your cert will expire on 2018-05-07. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot
   again. To non-interactively renew *all* of your certificates, run
   "certbot renew"
- If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                  https://eff.org/donate-le

Let's encrypt crontab renew rule is exist.
Let's Encrypt SSL Certificate create successfully.
Test Nginx configure file......
nginx: BIO_new_file("/etc/letsencrypt/live/www.*.com/fullchain.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/www.*.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed
Reload Nginx......
nginx: BIO_new_file("/etc/letsencrypt/live/www.*.com/fullchain.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/www.*.com/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)

810656823 发表于 2018-2-7 14:36:40

重命名一下.把/etc/letsencrypt/live/www.*.com-0002改成 /etc/letsencrypt/live/www.*.com/ 就可以吗？

licess 发表于 2018-2-7 16:45:20

回复 4# 的帖子

不能，你生成多次就会是带数字的
直接删除 /etc/letsencrypt/archive/域名 及带数字的目录 和 /etc/letsencrypt/renewal/域名.conf 都删掉
/etc/letsencyrpt/live/域名 及带数字的目录 删掉
页: [1]
查看完整版本: 军哥。ssl nginx的出现问题