centos8.2 Let's Encrypt创建失败

RainLee

军哥帮忙看一下事咋回事
新环境centos8.2的系统lnmp1.7创建虚拟机的时候Let's Encrypt证书添加失败
Create Virtul Host directory......
set permissions of Virtual Host directory......
You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/thinkphp.conf
Test Nginx configure file......
nginx: the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
nginx: configuration file /usr/local/nginx/conf/nginx.conf test is successful
Reload Nginx......
Reload service php-fpm  done
Password:
Enter it again:
Created FTP User: wxpac Sucessfully.
--2021-02-24 10:54:10--  https://soft.vpser.net/lib/acme.sh/latest.tar.gz
Resolving soft.vpser.net (soft.vpser.net)... 36.42.73.7, 183.131.200.94, 183.131.200.92, ...
Connecting to soft.vpser.net (soft.vpser.net)|36.42.73.7|:443... connected.
WARNING: The certificate of ‘soft.vpser.net’ is not trusted.
WARNING: The certificate of ‘soft.vpser.net’ has expired.
HTTP request sent, awaiting response... 200 OK
Length: 207898 (203K) [application/octet-stream]
Saving to: ‘latest.tar.gz’

latest.tar.gz                      100%[================================================================>] 203.03K  --.-KB/s    in 0.09s   

2021-02-24 10:54:11 (2.26 MB/s) - ‘latest.tar.gz’ saved [207898/207898]

[Wed Feb 24 10:54:11 CST 2021] It is recommended to install socat first.
[Wed Feb 24 10:54:11 CST 2021] We use socat for standalone server if you use standalone mode.
[Wed Feb 24 10:54:11 CST 2021] If you don't use standalone mode, just ignore this warning.
[Wed Feb 24 10:54:11 CST 2021] Installing to /usr/local/acme.sh
[Wed Feb 24 10:54:11 CST 2021] Installed to /usr/local/acme.sh/acme.sh
[Wed Feb 24 10:54:11 CST 2021] Installing alias to '/root/.bashrc'
[Wed Feb 24 10:54:11 CST 2021] OK, Close and reopen your terminal to start using acme.sh
[Wed Feb 24 10:54:11 CST 2021] Installing alias to '/root/.cshrc'
[Wed Feb 24 10:54:11 CST 2021] Installing alias to '/root/.tcshrc'
[Wed Feb 24 10:54:11 CST 2021] Installing cron job
no crontab for root
no crontab for root
[Wed Feb 24 10:54:11 CST 2021] Good, bash is found, so change the shebang to use bash as preferred.
[Wed Feb 24 10:54:12 CST 2021] OK
Add acme.sh upgrade crontab rule...
Last metadata expiration check: 0:25:08 ago on Wed 24 Feb 2021 10:29:04 AM CST.
Dependencies resolved.
Nothing to do.
Complete!
Last metadata expiration check: 0:25:09 ago on Wed 24 Feb 2021 10:29:04 AM CST.
Package ca-certificates-2020.2.41-80.0.el8_2.noarch is already installed.
Dependencies resolved.
Nothing to do.
Complete!
Redirecting to /bin/systemctl restart crond.service
Note: Forwarding request to 'systemctl enable crond.service'.
Starting create SSL Certificate use Let's Encrypt...
[Wed Feb 24 10:54:47 CST 2021] Using CA: https://acme-v02.api.letsencrypt.org/directory
[Wed Feb 24 10:54:47 CST 2021] Create account key ok.
[Wed Feb 24 10:54:47 CST 2021] Registering account: https://acme-v02.api.letsencrypt.org/directory
[Wed Feb 24 10:55:10 CST 2021] Registered
[Wed Feb 24 10:55:10 CST 2021] ACCOUNT_THUMBPRINT='JvX0gM6zEYXwnWtiUo2n4uCk4moncxNb3f0y3Gf3ucI'
[Wed Feb 24 10:55:10 CST 2021] Creating domain key
[Wed Feb 24 10:55:10 CST 2021] The domain key is here: /usr/local/nginx/conf/ssl/www.wxpac.com/www.wxpac.com.key
[Wed Feb 24 10:55:10 CST 2021] Multi domain='DNS:www.wxpac.com,DNS:wxpac.com'
[Wed Feb 24 10:55:10 CST 2021] Getting domain auth token for each domain
[Wed Feb 24 10:55:36 CST 2021] Getting webroot for domain='www.wxpac.com'
[Wed Feb 24 10:55:36 CST 2021] Getting webroot for domain='wxpac.com'
[Wed Feb 24 10:55:36 CST 2021] Verifying: www.wxpac.com
[Wed Feb 24 10:57:49 CST 2021] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 35
[Wed Feb 24 10:58:01 CST 2021] Pending
[Wed Feb 24 10:58:16 CST 2021] Pending
[Wed Feb 24 10:58:22 CST 2021] Pending
[Wed Feb 24 10:58:29 CST 2021] Pending
[Wed Feb 24 10:58:32 CST 2021] Pending
[Wed Feb 24 10:58:37 CST 2021] Pending
[Wed Feb 24 10:59:19 CST 2021] Pending
[Wed Feb 24 10:59:32 CST 2021] Pending
[Wed Feb 24 10:59:41 CST 2021] Pending
[Wed Feb 24 10:59:47 CST 2021] Pending
[Wed Feb 24 10:59:52 CST 2021] Pending
[Wed Feb 24 11:00:36 CST 2021] Pending
[Wed Feb 24 11:00:55 CST 2021] Pending
[Wed Feb 24 11:01:01 CST 2021] Pending
[Wed Feb 24 11:01:08 CST 2021] Pending
[Wed Feb 24 11:01:17 CST 2021] Pending
[Wed Feb 24 11:01:24 CST 2021] Pending
[Wed Feb 24 11:01:33 CST 2021] Pending
[Wed Feb 24 11:01:49 CST 2021] Pending
[Wed Feb 24 11:05:02 CST 2021] Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: 35
[Wed Feb 24 11:05:02 CST 2021] www.wxpac.com:Verify error:
[Wed Feb 24 11:05:02 CST 2021] Please check log file for more details: /usr/local/acme.sh/acme.sh.log

licess

lnmp vhost add 前 执行一下：export ACME_USE_WGET=1
再创建试试

RainLee

licess 发表于 2021-2-24 14:40
lnmp vhost add 前 执行一下：export ACME_USE_WGET=1
再创建试试

执行完export ACME_USE_WGET=1后开始报Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: 4这个错误

licess

是否改动过系统的openssl
openssl version 看一下