依旧是安全证书的问题,
根据最近军哥的回复:1、我首先升级lnmp到1.9版本。
2、按照如下命令升级。
因为acme.sh升级了默认用zerossl了,需要增加一个邮箱的参数到配置文件里面
执行:
/usr/local/acme.sh/acme.sh --register-account -m 你邮箱
后再添加就可以了
日志一直报错,
GET
url='https://acme-v01.api.letsencrypt.org/directory'
timeout=
_CURL='curl --silent --dump-header /usr/local/acme.sh/http.header-L-g '
Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 6
ret='6'
Can not init api for: https://acme-v01.api.letsencrypt.org/directory.
Sleep 10 and retry.
GET
url='https://acme-v01.api.letsencrypt.org/directory'
timeout=
_CURL='curl --silent --dump-header /usr/local/acme.sh/http.header-L-g '
Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 6
ret='6'
Can not init api for: https://acme-v01.api.letsencrypt.org/directory.
Sleep 10 and retry.
目前理解是不是因为服务器和https://acme-v01.api.letsencrypt.org 这个的网络有问题导致的?测试ping返回是
ping: unknown host acme-v01.api.letsencrypt.org
再后来,发现新的机器使用的地址是:https://acme-v02.api.letsencrypt.org 这个地址是OK的。
两个问题:
1、是不是这个原因造成的?
2、更新后为何没有直接使用02这个地址呢?如何可以直接使用v02的地址?
可能是我之前的lnmp的版本比较老,我记得大概是1.5-1.6升级到1.9的。
尝试不使用之前的重新添加,并,错误如下:
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
最后,用lnmp ssl add,选择新的默认的zerossl添加,把旧的nginx配置取消掉,算是成功了吧。
本帖最后由 pretender 于 2022-9-7 11:47 编辑
虽然成功了,但是手动更新还是一样的问题,如下面的日志,感觉应该是老配置没有删除完全造成的。
(刚找到 /usr/local/nginx/conf/ssl 目录下有残流的目录,挪走了,没有问题了,保留记录,当给后来人指引吧)
"/usr/local/acme.sh"/acme.sh --cron --home "/usr/local/acme.sh" > /home/wwwlogs/acme.sh.log
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4
Can not init api, for https://acme-v01.api.letsencrypt.org/directory Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 6
这个error code: 6 错误是域名无法正常解析,ping: unknown host 也说明是域名无法正常解析,acme-v01.api.letsencrypt.org 这个是老版本的,目前已经弃用了,所以是无法续期
因为你这些域名里面还是原来的老版本的api所以续期还是会报错的,将 /usr/local/nginx/conf/ssl/域名/域名.conf 中的 acme-v01 改成 acme-v02 保存试试
另外不清楚你说的证书安全问题具体提示什么也没法判断是什么问题
页:
[1]