VPS侦探论坛

标题: SSL没有自动续期，不知道哪里问题，军哥帮忙看下吧 [打印本页]
作者: cinbo    时间: 2022-6-4 20:18
标题: SSL没有自动续期，不知道哪里问题，军哥帮忙看下吧
请军哥帮忙看下，网站发现SSL没自动续，过期了。下面是日志的一部分，文件不能上传了。


[Sat Jun  4 20:02:11 CST 2022] Running cmd: upgrade
[Sat Jun  4 20:02:11 CST 2022] Using config home:/usr/local/acme.sh
[Sat Jun  4 20:02:11 CST 2022] default_acme_server
[Sat Jun  4 20:02:11 CST 2022] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:02:11 CST 2022] GET
[Sat Jun  4 20:02:11 CST 2022] url='https://api.github.com/repos/acmesh-official/acme.sh/git/refs/heads/master'
[Sat Jun  4 20:02:11 CST 2022] timeout=
[Sat Jun  4 20:02:11 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:02:12 CST 2022] ret='0'
[Sat Jun  4 20:02:12 CST 2022] Already uptodate!
[Sat Jun  4 20:02:12 CST 2022] Upgrade success!
[Sat Jun  4 20:03:05 CST 2022] Running cmd: cron
[Sat Jun  4 20:03:05 CST 2022] Using config home:/usr/local/acme.sh
[Sat Jun  4 20:03:05 CST 2022] default_acme_server
[Sat Jun  4 20:03:05 CST 2022] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:05 CST 2022] ===Starting cron===
[Sat Jun  4 20:03:05 CST 2022] Using config home:/usr/local/acme.sh
[Sat Jun  4 20:03:05 CST 2022] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:05 CST 2022] _stopRenewOnError
[Sat Jun  4 20:03:05 CST 2022] _server
[Sat Jun  4 20:03:05 CST 2022] _set_level='2'
[Sat Jun  4 20:03:05 CST 2022] di='/usr/local/nginx/conf/ssl/luotuody.com/'
[Sat Jun  4 20:03:05 CST 2022] d='luotuody.com'
[Sat Jun  4 20:03:05 CST 2022] _renewServer
[Sat Jun  4 20:03:05 CST 2022] Using config home:/usr/local/acme.sh
[Sat Jun  4 20:03:05 CST 2022] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:05 CST 2022] DOMAIN_PATH='/usr/local/nginx/conf/ssl/luotuody.com'
[Sat Jun  4 20:03:05 CST 2022] Renew: 'luotuody.com'
[Sat Jun  4 20:03:05 CST 2022] Le_API='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:05 CST 2022] Renew to Le_API=https://acme.zerossl.com/v2/DV90
[Sat Jun  4 20:03:05 CST 2022] Using config home:/usr/local/acme.sh
[Sat Jun  4 20:03:05 CST 2022] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:05 CST 2022] _main_domain='luotuody.com'
[Sat Jun  4 20:03:05 CST 2022] _alt_domains='*.luotuody.com'
[Sat Jun  4 20:03:05 CST 2022] Le_NextRenewTime='1651421587'
[Sat Jun  4 20:03:05 CST 2022] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Sat Jun  4 20:03:05 CST 2022] _init api for server: https://acme.zerossl.com/v2/DV90
[Sat Jun  4 20:03:05 CST 2022] GET
[Sat Jun  4 20:03:05 CST 2022] url='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:05 CST 2022] timeout=
[Sat Jun  4 20:03:05 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:03:06 CST 2022] ret='0'
[Sat Jun  4 20:03:06 CST 2022] ACME_KEY_CHANGE
[Sat Jun  4 20:03:06 CST 2022] ACME_NEW_AUTHZ
[Sat Jun  4 20:03:06 CST 2022] ACME_NEW_ORDER
[Sat Jun  4 20:03:06 CST 2022] ACME_NEW_ACCOUNT
[Sat Jun  4 20:03:06 CST 2022] ACME_REVOKE_CERT
[Sat Jun  4 20:03:06 CST 2022] ACME_AGREEMENT
[Sat Jun  4 20:03:06 CST 2022] ACME_NEW_NONCE
[Sat Jun  4 20:03:06 CST 2022] Sleep 10 and retry.
[Sat Jun  4 20:03:17 CST 2022] GET
[Sat Jun  4 20:03:17 CST 2022] url='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:17 CST 2022] timeout=
[Sat Jun  4 20:03:17 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:03:19 CST 2022] ret='0'
[Sat Jun  4 20:03:19 CST 2022] ACME_KEY_CHANGE
[Sat Jun  4 20:03:19 CST 2022] ACME_NEW_AUTHZ
[Sat Jun  4 20:03:19 CST 2022] ACME_NEW_ORDER
[Sat Jun  4 20:03:19 CST 2022] ACME_NEW_ACCOUNT
[Sat Jun  4 20:03:19 CST 2022] ACME_REVOKE_CERT
[Sat Jun  4 20:03:19 CST 2022] ACME_AGREEMENT
[Sat Jun  4 20:03:19 CST 2022] ACME_NEW_NONCE
[Sat Jun  4 20:03:19 CST 2022] Sleep 10 and retry.
[Sat Jun  4 20:03:30 CST 2022] GET
[Sat Jun  4 20:03:30 CST 2022] url='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:30 CST 2022] timeout=
[Sat Jun  4 20:03:30 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:03:31 CST 2022] ret='0'
[Sat Jun  4 20:03:31 CST 2022] ACME_KEY_CHANGE
[Sat Jun  4 20:03:31 CST 2022] ACME_NEW_AUTHZ
[Sat Jun  4 20:03:31 CST 2022] ACME_NEW_ORDER
[Sat Jun  4 20:03:31 CST 2022] ACME_NEW_ACCOUNT
[Sat Jun  4 20:03:31 CST 2022] ACME_REVOKE_CERT
[Sat Jun  4 20:03:31 CST 2022] ACME_AGREEMENT
[Sat Jun  4 20:03:31 CST 2022] ACME_NEW_NONCE
[Sat Jun  4 20:03:31 CST 2022] Sleep 10 and retry.
[Sat Jun  4 20:03:42 CST 2022] GET
[Sat Jun  4 20:03:42 CST 2022] url='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:42 CST 2022] timeout=
[Sat Jun  4 20:03:42 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:03:43 CST 2022] ret='0'
[Sat Jun  4 20:03:43 CST 2022] ACME_KEY_CHANGE
[Sat Jun  4 20:03:43 CST 2022] ACME_NEW_AUTHZ
[Sat Jun  4 20:03:43 CST 2022] ACME_NEW_ORDER
[Sat Jun  4 20:03:43 CST 2022] ACME_NEW_ACCOUNT
[Sat Jun  4 20:03:43 CST 2022] ACME_REVOKE_CERT
[Sat Jun  4 20:03:43 CST 2022] ACME_AGREEMENT
[Sat Jun  4 20:03:43 CST 2022] ACME_NEW_NONCE
[Sat Jun  4 20:03:43 CST 2022] Sleep 10 and retry.
[Sat Jun  4 20:03:54 CST 2022] GET
[Sat Jun  4 20:03:54 CST 2022] url='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:03:54 CST 2022] timeout=
[Sat Jun  4 20:03:54 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:03:56 CST 2022] ret='0'
[Sat Jun  4 20:03:56 CST 2022] ACME_KEY_CHANGE
[Sat Jun  4 20:03:56 CST 2022] ACME_NEW_AUTHZ
[Sat Jun  4 20:03:56 CST 2022] ACME_NEW_ORDER
[Sat Jun  4 20:03:56 CST 2022] ACME_NEW_ACCOUNT
[Sat Jun  4 20:03:56 CST 2022] ACME_REVOKE_CERT
[Sat Jun  4 20:03:56 CST 2022] ACME_AGREEMENT
[Sat Jun  4 20:03:56 CST 2022] ACME_NEW_NONCE
[Sat Jun  4 20:03:56 CST 2022] Sleep 10 and retry.
[Sat Jun  4 20:04:07 CST 2022] GET
[Sat Jun  4 20:04:07 CST 2022] url='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:04:07 CST 2022] timeout=
[Sat Jun  4 20:04:07 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:04:08 CST 2022] ret='0'
[Sat Jun  4 20:04:08 CST 2022] ACME_KEY_CHANGE
[Sat Jun  4 20:04:08 CST 2022] ACME_NEW_AUTHZ
[Sat Jun  4 20:04:08 CST 2022] ACME_NEW_ORDER
[Sat Jun  4 20:04:08 CST 2022] ACME_NEW_ACCOUNT
[Sat Jun  4 20:04:08 CST 2022] ACME_REVOKE_CERT
[Sat Jun  4 20:04:08 CST 2022] ACME_AGREEMENT
[Sat Jun  4 20:04:08 CST 2022] ACME_NEW_NONCE
[Sat Jun  4 20:04:08 CST 2022] Sleep 10 and retry.
[Sat Jun  4 20:04:19 CST 2022] GET
[Sat Jun  4 20:04:19 CST 2022] url='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:04:19 CST 2022] timeout=
[Sat Jun  4 20:04:19 CST 2022] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Sat Jun  4 20:04:36 CST 2022] ret='0'
[Sat Jun  4 20:04:36 CST 2022] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[Sat Jun  4 20:04:36 CST 2022] ACME_NEW_AUTHZ
[Sat Jun  4 20:04:36 CST 2022] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[Sat Jun  4 20:04:36 CST 2022] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[Sat Jun  4 20:04:36 CST 2022] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[Sat Jun  4 20:04:36 CST 2022] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf'
[Sat Jun  4 20:04:36 CST 2022] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Sat Jun  4 20:04:36 CST 2022] Using CA: https://acme.zerossl.com/v2/DV90
[Sat Jun  4 20:04:36 CST 2022] _on_before_issue
[Sat Jun  4 20:04:36 CST 2022] _chk_main_domain='luotuody.com'
[Sat Jun  4 20:04:36 CST 2022] _chk_alt_domains='*.luotuody.com'
[Sat Jun  4 20:04:36 CST 2022] Le_LocalAddress
[Sat Jun  4 20:04:36 CST 2022] d='luotuody.com'
[Sat Jun  4 20:04:36 CST 2022] Check for domain='luotuody.com'
[Sat Jun  4 20:04:36 CST 2022] _currentRoot='dns_ali'
[Sat Jun  4 20:04:36 CST 2022] d='*.luotuody.com'
[Sat Jun  4 20:04:36 CST 2022] Check for domain='*.luotuody.com'
[Sat Jun  4 20:04:36 CST 2022] _currentRoot='dns_ali'
[Sat Jun  4 20:04:36 CST 2022] d
[Sat Jun  4 20:04:36 CST 2022] config file is empty, can not read CA_KEY_HASH
[Sat Jun  4 20:04:36 CST 2022] Using config home:/usr/local/acme.sh
[Sat Jun  4 20:04:36 CST 2022] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Sat Jun  4 20:04:36 CST 2022] _init api for server: https://acme.zerossl.com/v2/DV90
[Sat Jun  4 20:04:36 CST 2022] RSA key
[Sat Jun  4 20:04:36 CST 2022] config file is empty, can not read CA_EAB_KEY_ID
[Sat Jun  4 20:04:36 CST 2022] config file is empty, can not read CA_EAB_HMAC_KEY
[Sat Jun  4 20:04:36 CST 2022] config file is empty, can not read CA_EMAIL
[Sat Jun  4 20:04:36 CST 2022] No EAB credentials found for ZeroSSL, let's get one
[Sat Jun  4 20:04:36 CST 2022] acme.sh is using ZeroSSL as default CA now.
[Sat Jun  4 20:04:36 CST 2022] Please update your account with an email address first.
[Sat Jun  4 20:04:36 CST 2022] acme.sh --register-account -m my@example.com
[Sat Jun  4 20:04:36 CST 2022] See: https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA
[Sat Jun  4 20:04:36 CST 2022] _on_issue_err
[Sat Jun  4 20:04:36 CST 2022] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
[Sat Jun  4 20:04:36 CST 2022] Return code: 1
[Sat Jun  4 20:04:36 CST 2022] Error renew luotuody.com.
[Sat Jun  4 20:04:36 CST 2022] _error_level='1'
[Sat Jun  4 20:04:36 CST 2022] _set_level='2'
[Sat Jun  4 20:04:36 CST 2022] The NOTIFY_HOOK is empty, just return.
[Sat Jun  4 20:04:36 CST 2022] ===End cron===

作者: licess    时间: 2022-6-4 20:37
/usr/local/acme.sh/acme.sh --register-account -m 你邮箱
执行上述命令后再重新运行续期命令
作者: cinbo    时间: 2022-6-5 19:46
多谢，续期成功了！
作者: yggcwx    时间: 2022-6-6 15:41
licess 发表于 2022-6-4 20:37
/usr/local/acme.sh/acme.sh --register-account -m 你邮箱
执行上述命令后再重新运行续期命令 ...

军哥：怎么才能自动续期呢？我今天也发现3月1日的证书到期后没有自动续期

补充内容 (2022-6-6 17:49):
好像默认会自动续期？我的应用，因为在执行lnmp vhost add时先设置了一个目录，后来又得在编辑nginx配置时修改目录，域名.conf那里还是旧目录。有效果

补充内容 (2022-6-6 17:49):
修改为新目录后有效果
作者: yggcwx    时间: 2022-6-6 15:48
手动续期命令是这个吗：
  1. "/usr/local/acme.sh"/acme.sh --cron --home "/usr/local/acme.sh" --force
复制代码
作者: licess    时间: 2022-6-6 19:58
yggcwx 发表于 2022-6-6 15:48
手动续期命令是这个吗：

前段时间acme.sh 升级做了些变动后就要求这样了
只是续期当前已到期的证书 --force 不用加也可以



欢迎光临 VPS侦探论坛 (https://bbs.lnmp.com/) Powered by Discuz! X3.4