lnmp 1.5 ssl不成功

linx124

ssl不成功 acme.sh.log如下，大神帮忙看看
[Sat Aug 18 23:54:35 CST 2018] Try new-authz for the 0 time.
[Sat Aug 18 23:54:35 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Sat Aug 18 23:54:35 CST 2018] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "XXXX.com"}}'
[Sat Aug 18 23:54:36 CST 2018] POST
[Sat Aug 18 23:54:36 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Sat Aug 18 23:54:36 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Sat Aug 18 23:54:37 CST 2018] _ret='0'
[Sat Aug 18 23:54:37 CST 2018] code='201'
[Sat Aug 18 23:54:37 CST 2018] The new-authz request is ok.
[Sat Aug 18 23:54:37 CST 2018] entry='"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135","token":"EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY"'
[Sat Aug 18 23:54:37 CST 2018] token='EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY'
[Sat Aug 18 23:54:37 CST 2018] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135'
[Sat Aug 18 23:54:37 CST 2018] keyauthorization='EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY.6qBdVdSWwUgkR6KzT_z1k4eozUrKUDfKs61KYd8UF-U'
[Sat Aug 18 23:54:37 CST 2018] dvlist='XXXX.com#EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY.6qBdVdSWwUgkR6KzT_z1k4eozUrKUDfKs61KYd8UF-U#https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135#http-01#/app/data/XXXX'
[Sat Aug 18 23:54:37 CST 2018] d
[Sat Aug 18 23:54:37 CST 2018] vlist='www.XXXX.com#verified_ok#https://acme-v01.api.letsencrypt.org/acme/challenge/ZQYIxtsOIUr7DRuAeepIyjpGY5Hd7Hi1tMbXs0cJAGM/6580508428#http-01#/app/data/XXXX,XXXX.com#EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY.6qBdVdSWwUgkR6KzT_z1k4eozUrKUDfKs61KYd8UF-U#https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135#http-01#/app/data/XXXX,'
[Sat Aug 18 23:54:37 CST 2018] d='www.XXXX.com'
[Sat Aug 18 23:54:37 CST 2018] www.XXXX.com is already verified, skip http-01.
[Sat Aug 18 23:54:37 CST 2018] d='XXXX.com'
[Sat Aug 18 23:54:37 CST 2018] ok, let's start to verify
[Sat Aug 18 23:54:37 CST 2018] www.XXXX.com is already verified, skip http-01.
[Sat Aug 18 23:54:37 CST 2018] Verifying:XXXX.com
[Sat Aug 18 23:54:37 CST 2018] d='XXXX.com'
[Sat Aug 18 23:54:37 CST 2018] keyauthorization='EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY.6qBdVdSWwUgkR6KzT_z1k4eozUrKUDfKs61KYd8UF-U'
[Sat Aug 18 23:54:37 CST 2018] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135'
[Sat Aug 18 23:54:37 CST 2018] _currentRoot='/app/data/XXXX'
[Sat Aug 18 23:54:37 CST 2018] wellknown_path='/app/data/XXXX/.well-known/acme-challenge'
[Sat Aug 18 23:54:37 CST 2018] writing token:EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY to /app/data/XXXX/.well-known/acme-challenge/EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY
[Sat Aug 18 23:54:37 CST 2018] Changing owner/group of .well-known to www:www
[Sat Aug 18 23:54:37 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135'
[Sat Aug 18 23:54:37 CST 2018] payload='{"resource": "challenge", "keyAuthorization": "EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY.6qBdVdSWwUgkR6KzT_z1k4eozUrKUDfKs61KYd8UF-U"}'
[Sat Aug 18 23:54:37 CST 2018] POST
[Sat Aug 18 23:54:37 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135'
[Sat Aug 18 23:54:37 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Sat Aug 18 23:54:38 CST 2018] _ret='0'
[Sat Aug 18 23:54:38 CST 2018] code='202'
[Sat Aug 18 23:54:38 CST 2018] sleep 2 secs to verify
[Sat Aug 18 23:54:40 CST 2018] checking
[Sat Aug 18 23:54:40 CST 2018] GET
[Sat Aug 18 23:54:40 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135'
[Sat Aug 18 23:54:40 CST 2018] timeout=
[Sat Aug 18 23:54:40 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Sat Aug 18 23:54:40 CST 2018] ret='0'
[Sat Aug 18 23:54:40 CST 2018] XXXX.com:Verify error:Fetching https://www.XXXX.com/.well-known/acme-challenge/EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY: Connection reset by peer
[Sat Aug 18 23:54:40 CST 2018] pid
[Sat Aug 18 23:54:40 CST 2018] No need to restore nginx, skip.
[Sat Aug 18 23:54:40 CST 2018] _clearupdns
[Sat Aug 18 23:54:40 CST 2018] skip dns.
[Sat Aug 18 23:54:40 CST 2018] _on_issue_err
[Sat Aug 18 23:54:40 CST 2018] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
[Sat Aug 18 23:54:40 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/ZQYIxtsOIUr7DRuAeepIyjpGY5Hd7Hi1tMbXs0cJAGM/6580508428'
[Sat Aug 18 23:54:40 CST 2018] payload='{"resource": "challenge", "keyAuthorization": "verified_ok"}'
[Sat Aug 18 23:54:40 CST 2018] POST
[Sat Aug 18 23:54:40 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/ZQYIxtsOIUr7DRuAeepIyjpGY5Hd7Hi1tMbXs0cJAGM/6580508428'
[Sat Aug 18 23:54:40 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Sat Aug 18 23:54:41 CST 2018] _ret='0'
[Sat Aug 18 23:54:41 CST 2018] code='202'
[Sat Aug 18 23:54:41 CST 2018] url='https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135'
[Sat Aug 18 23:54:41 CST 2018] payload='{"resource": "challenge", "keyAuthorization": "EjgrwuX1UWYlJ5zKfKl5GHgQXHuI366hlsDtrOpQAqY.6qBdVdSWwUgkR6KzT_z1k4eozUrKUDfKs61KYd8UF-U"}'
[Sat Aug 18 23:54:42 CST 2018] POST
[Sat Aug 18 23:54:42 CST 2018] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/mzKlPwzPEN9Qf80b7JSM7vcrkth96JwvjiY3rAWieG4/6582363135'
[Sat Aug 18 23:54:42 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Sat Aug 18 23:54:43 CST 2018] _ret='0'
[Sat Aug 18 23:54:43 CST 2018] code='400'

[ 本帖最后由 linx124 于 2018-8-19 00:09 编辑 ]

licess

按日志看访问你网站时  Connection reset by peer 无法访问网站进行验证

linx124

用lnmp vhost add 创建ssl成功了。

这样会自动续期吗？

licess

只要配置文件不变动，crontab规则没动就会自动续期

linx124

感谢军哥！感谢军哥！:)