请教，SSL证书安签发失败
Starting create SSL Certificate use Let's Encrypt...Using CA: https://acme.zerossl.com/v2/DV90
No EAB credentials found for ZeroSSL, let's get one
acme.sh is using ZeroSSL as default CA now.
Please update your account with an email address first.
acme.sh --register-account -m my@example.com
See: https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA
Please check log file for more details: /usr/local/acme.sh/acme.sh.log
Let's Encrypt SSL Certificate create failed!
下面是日志
Running cmd: issue
_main_domain='www.l***.com'
_alt_domains='no'
Using config home:/usr/local/acme.sh
default_acme_server
ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.l***.com'
Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
_init api for server: https://acme.zerossl.com/v2/DV90
GET
url='https://acme.zerossl.com/v2/DV90'
timeout=
_CURL='curl --silent --dump-header /usr/local/acme.sh/http.header-L-g '
ret='0'
ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
ACME_NEW_AUTHZ
ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf'
ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
Le_NextRenewTime
Using CA: https://acme.zerossl.com/v2/DV90
_on_before_issue
_chk_main_domain='www.***.com'
_chk_alt_domains
Le_LocalAddress
d='www.***.com'
Check for domain='www.***.com'
_currentRoot='/home/wwwroot/www.***.com'
d
config file is empty, can not read CA_KEY_HASH
Using config home:/usr/local/acme.sh
ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
_init api for server: https://acme.zerossl.com/v2/DV90
RSA key
config file is empty, can not read CA_EAB_KEY_ID
config file is empty, can not read CA_EAB_HMAC_KEY
config file is empty, can not read CA_EMAIL
No EAB credentials found for ZeroSSL, let's get one
[1;32macme.sh is using ZeroSSL as default CA now.[0m
[1;32mPlease update your account with an email address first.[0m
my@example.com[0m
See: https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA[0m
_on_issue_err
Please check log file for more details: /usr/local/acme.sh/acme.sh.log
看了下是acme.sh调整了默认证书let's encrypt为zerossl导致的，lnmp 1.8的话暂时选择其他zerossl或buypass，1.8的修复版已经上传
或者添加ssl证书前执行：export ACCOUNT_EMAIL="你的邮箱xxx@xxx.com"
或者执行：/usr/local/acme.sh/acme.sh --set-default-ca--serverletsencrypt 这样设置let's encrypt为默认ssl证书就可以了
licess 发表于 2021-6-18 09:50
看了下是acme.sh调整了默认证书导致的，lnmp 1.8的话暂时选择其他zerossl或buypass
或者执行：/usr/loc ...
好的，谢谢
页:
[1]