RainLee 发表于 2021-2-24 11:12:29

centos8.2 Let's Encrypt创建失败

军哥帮忙看一下事咋回事
新环境centos8.2的系统lnmp1.7创建虚拟机的时候Let's Encrypt证书添加失败
Create Virtul Host directory......
set permissions of Virtual Host directory......
You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/thinkphp.conf
Test Nginx configure file......
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
Reload Nginx......
Reload service php-fpmdone
Password:
Enter it again:
Created FTP User: wxpac Sucessfully.
--2021-02-24 10:54:10--https://soft.vpser.net/lib/acme.sh/latest.tar.gz
Resolving soft.vpser.net (soft.vpser.net)... 36.42.73.7, 183.131.200.94, 183.131.200.92, ...
Connecting to soft.vpser.net (soft.vpser.net)|36.42.73.7|:443... connected.
WARNING: The certificate of ‘soft.vpser.net’ is not trusted.
WARNING: The certificate of ‘soft.vpser.net’ has expired.
HTTP request sent, awaiting response... 200 OK
Length: 207898 (203K)
Saving to: ‘latest.tar.gz’

latest.tar.gz                      100%[================================================================>] 203.03K--.-KB/s    in 0.09s   

2021-02-24 10:54:11 (2.26 MB/s) - ‘latest.tar.gz’ saved

It is recommended to install socat first.
We use socat for standalone server if you use standalone mode.
If you don't use standalone mode, just ignore this warning.
Installing to /usr/local/acme.sh
Installed to /usr/local/acme.sh/acme.sh
Installing alias to '/root/.bashrc'
OK, Close and reopen your terminal to start using acme.sh
Installing alias to '/root/.cshrc'
Installing alias to '/root/.tcshrc'
Installing cron job
no crontab for root
no crontab for root
Good, bash is found, so change the shebang to use bash as preferred.
OK
Add acme.sh upgrade crontab rule...
Last metadata expiration check: 0:25:08 ago on Wed 24 Feb 2021 10:29:04 AM CST.
Dependencies resolved.
Nothing to do.
Complete!
Last metadata expiration check: 0:25:09 ago on Wed 24 Feb 2021 10:29:04 AM CST.
Package ca-certificates-2020.2.41-80.0.el8_2.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
Redirecting to /bin/systemctl restart crond.service
Note: Forwarding request to 'systemctl enable crond.service'.
Starting create SSL Certificate use Let's Encrypt...
Using CA: https://acme-v02.api.letsencrypt.org/directory
Create account key ok.
Registering account: https://acme-v02.api.letsencrypt.org/directory
Registered
ACCOUNT_THUMBPRINT='JvX0gM6zEYXwnWtiUo2n4uCk4moncxNb3f0y3Gf3ucI'
Creating domain key
The domain key is here: /usr/local/nginx/conf/ssl/www.wxpac.com/www.wxpac.com.key
Multi domain='DNS:www.wxpac.com,DNS:wxpac.com'
Getting domain auth token for each domain
Getting webroot for domain='www.wxpac.com'
Getting webroot for domain='wxpac.com'
Verifying: www.wxpac.com
Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 35
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Pending
Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 35
www.wxpac.com:Verify error:
Please check log file for more details: /usr/local/acme.sh/acme.sh.log


licess 发表于 2021-2-24 14:40:14

lnmp vhost add 前 执行一下:export ACME_USE_WGET=1
再创建试试

RainLee 发表于 2021-2-24 15:23:47

licess 发表于 2021-2-24 14:40
lnmp vhost add 前 执行一下:export ACME_USE_WGET=1
再创建试试

执行完export ACME_USE_WGET=1后开始报Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4这个错误

licess 发表于 2021-2-24 19:56:46

是否改动过系统的openssl
openssl version 看一下
页: [1]
查看完整版本: centos8.2 Let's Encrypt创建失败