Let's Encrypt SSL获取失败

zhouyazun · 发表于 2017-8-19 11:34:30

系统为centos7 64位全新安装lnmp
新建站点，域名是修改host文件指向本地的，错误提示如下：

2: Use Let's Encrypt to create SSL Certificate and Key
Enter 1 or 2: 2
Please enter your email address: ******@qq.com
It will be processed automatically.
You select the exist rewrite rule:/usr/local/nginx/conf/other.conf
Test Nginx configure file......
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
Reload Nginx......
/bin/certbot [found]
index-url = https://pypi.doubanio.com/simple/
pip.conf exist.
Starting create SSL Certificate use Let's Encrypt...
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for ar.bus.com
Using the webroot path /home/wwwroot/ar.bus.com for all unmatched domains.
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. ar.bus.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://ar.bus.com/.well-known/acme-challenge/bsYYVCyh6snryQGyuQbQx8DivTSu-tI5W_C7ig36-vs: "<!DOCTYPE html>
<html>
<head>
  <title>The page you were looking for doesn't exist (404)</title>
  <meta name="viewport" content"

IMPORTANT NOTES:
- The following errors were reported by the server:

Domain: ar.bus.com
Type: unauthorized
Detail: Invalid response from
http://ar.bus.com/.well-known/acme-challenge/bsYYVCyh6snryQGyuQbQx8DivTSu-tI5W_C7ig36-vs:
"<!DOCTYPE html>
<html>
<head>
   <title>The page you were looking for doesn't exist (404)</title>
   <meta name="viewport" content"

To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
Let's Encrypt SSL Certificate create failed!

licess · 发表于 2017-8-19 13:08:23

如果修改hosts就能完成认证生成ssl证书的话，那google.com、baidu.com等所有域名的ssl证书随便生成就可以了，https那就没安全性可言了

		自动登录	找回密码
密码			注册