安装ssl证书提示无效

airuib · 发表于 2019-3-14 11:04:45

安装ssl证书提示无效[Thu Mar 14 10:49:07 CST 2019] www.2kyb.com:Verify error:Invalid response from https://www.2kyb.com/.well-known/acme-challenge/MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGN    mvH20yT4 [23.225.94.37]:
[Thu Mar 14 10:49:07 CST 2019] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
Let's Encrypt SSL Certificate create failed!

下面是日志

[Thu Mar 14 10:48:32 CST 2019] _main_domain='www.2kyb.com'
[Thu Mar 14 10:48:32 CST 2019] _alt_domains='2kyb.com'
[Thu Mar 14 10:48:32 CST 2019] Using config home:/usr/local/acme.sh
[Thu Mar 14 10:48:32 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Thu Mar 14 10:48:32 CST 2019] DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.2kyb.com'
[Thu Mar 14 10:48:32 CST 2019] Using ACME_DIRECTORY: https://acme-v01.api.letsencrypt.org/directory
[Thu Mar 14 10:48:32 CST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Thu Mar 14 10:48:33 CST 2019] GET
[Thu Mar 14 10:48:33 CST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Thu Mar 14 10:48:33 CST 2019] timeout=
[Thu Mar 14 10:48:33 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:34 CST 2019] ret='0'
[Thu Mar 14 10:48:34 CST 2019] ACME_KEY_CHANGE='https://acme-v01.api.letsencrypt.org/acme/key-change'
[Thu Mar 14 10:48:34 CST 2019] ACME_NEW_AUTHZ='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Thu Mar 14 10:48:34 CST 2019] ACME_NEW_ORDER='https://acme-v01.api.letsencrypt.org/acme/new-cert'
[Thu Mar 14 10:48:34 CST 2019] ACME_NEW_ACCOUNT='https://acme-v01.api.letsencrypt.org/acme/new-reg'
[Thu Mar 14 10:48:34 CST 2019] ACME_REVOKE_CERT='https://acme-v01.api.letsencrypt.org/acme/revoke-cert'
[Thu Mar 14 10:48:34 CST 2019] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
[Thu Mar 14 10:48:34 CST 2019] ACME_NEW_NONCE
[Thu Mar 14 10:48:34 CST 2019] ACME_VERSION
[Thu Mar 14 10:48:34 CST 2019] _on_before_issue
[Thu Mar 14 10:48:34 CST 2019] _chk_main_domain='www.2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] _chk_alt_domains='2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] Le_LocalAddress
[Thu Mar 14 10:48:34 CST 2019] d='www.2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] Check for domain='www.2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] _currentRoot='/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] d='2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] Check for domain='2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] _currentRoot='/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:34 CST 2019] d
[Thu Mar 14 10:48:35 CST 2019] _saved_account_key_hash is not changed, skip register account.
[Thu Mar 14 10:48:35 CST 2019] Read key length:
[Thu Mar 14 10:48:35 CST 2019] Creating domain key
[Thu Mar 14 10:48:35 CST 2019] Use DEFAULT_DOMAIN_KEY_LENGTH=2048
[Thu Mar 14 10:48:35 CST 2019] Using config home:/usr/local/acme.sh
[Thu Mar 14 10:48:35 CST 2019] ACME_DIRECTORY='https://acme-v01.api.letsencrypt.org/directory'
[Thu Mar 14 10:48:35 CST 2019] Use length 2048
[Thu Mar 14 10:48:35 CST 2019] Using RSA: 2048
[Thu Mar 14 10:48:35 CST 2019] The domain key is here: [1;31;32m/usr/local/nginx/conf/ssl/www.2kyb.com/www.2kyb.com.key[0m
[Thu Mar 14 10:48:35 CST 2019] _createcsr
[Thu Mar 14 10:48:35 CST 2019] Multi domain='DNS:www.2kyb.com,DNS:2kyb.com'
[Thu Mar 14 10:48:35 CST 2019] Getting domain auth token for each domain
[Thu Mar 14 10:48:35 CST 2019] d='www.2kyb.com'
[Thu Mar 14 10:48:35 CST 2019] Getting webroot for domain='www.2kyb.com'
[Thu Mar 14 10:48:35 CST 2019] _w='/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:35 CST 2019] _currentRoot='/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:35 CST 2019] Getting new-authz for domain='www.2kyb.com'
[Thu Mar 14 10:48:35 CST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Thu Mar 14 10:48:35 CST 2019] Try new-authz for the 0 time.
[Thu Mar 14 10:48:35 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Thu Mar 14 10:48:35 CST 2019] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "www.2kyb.com"}}'
[Thu Mar 14 10:48:35 CST 2019] RSA key
[Thu Mar 14 10:48:35 CST 2019] GET
[Thu Mar 14 10:48:35 CST 2019] url='https://acme-v01.api.letsencrypt.org/directory'
[Thu Mar 14 10:48:35 CST 2019] timeout=
[Thu Mar 14 10:48:35 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:37 CST 2019] ret='0'
[Thu Mar 14 10:48:37 CST 2019] POST
[Thu Mar 14 10:48:37 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Thu Mar 14 10:48:37 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:39 CST 2019] _ret='0'
[Thu Mar 14 10:48:39 CST 2019] code='201'
[Thu Mar 14 10:48:39 CST 2019] The new-authz request is ok.
[Thu Mar 14 10:48:39 CST 2019] entry='"type":"http-01","status":"pending","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317","token":"MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4"'
[Thu Mar 14 10:48:39 CST 2019] token='MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4'
[Thu Mar 14 10:48:39 CST 2019] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:39 CST 2019] keyauthorization='MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4.9K_SVByNPPnEjmn5vKz9qFSYbvW_2hX_cvHEzZDW-y0'
[Thu Mar 14 10:48:39 CST 2019] dvlist='www.2kyb.com#MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4.9K_SVByNPPnEjmn5vKz9qFSYbvW_2hX_cvHEzZDW-y0#https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317#http-01#/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:39 CST 2019] d='2kyb.com'
[Thu Mar 14 10:48:39 CST 2019] Getting webroot for domain='2kyb.com'
[Thu Mar 14 10:48:39 CST 2019] _w='/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:39 CST 2019] _currentRoot='/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:39 CST 2019] Getting new-authz for domain='2kyb.com'
[Thu Mar 14 10:48:39 CST 2019] _init api for server: https://acme-v01.api.letsencrypt.org/directory
[Thu Mar 14 10:48:39 CST 2019] Try new-authz for the 0 time.
[Thu Mar 14 10:48:39 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Thu Mar 14 10:48:39 CST 2019] payload='{"resource": "new-authz", "identifier": {"type": "dns", "value": "2kyb.com"}}'
[Thu Mar 14 10:48:39 CST 2019] POST
[Thu Mar 14 10:48:39 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/new-authz'
[Thu Mar 14 10:48:39 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:42 CST 2019] _ret='0'
[Thu Mar 14 10:48:42 CST 2019] code='201'

airuib · 发表于 2019-3-14 11:04:49

[Thu Mar 14 10:48:42 CST 2019] The new-authz request is ok.
[Thu Mar 14 10:48:42 CST 2019] entry='"type":"http-01","status":"valid","uri":"https://acme-v01.api.letsencrypt.org/acme/challenge/rn3riMBeLUdPOlBjt_fGwoOx8OFWwQx7dHiuIBgSI9I/13628546515","token":"HLtkXSSU2aP9PN52oEs7CkKjaFmk73QHC8-6D4C1svU","validationRecord":[{"url":"http://2kyb.com/.well-known/acme-challenge/HLtkXSSU2aP9PN52oEs7CkKjaFmk73QHC8-6D4C1svU","hostname":"2kyb.com","port":"80","addressesResolved":["172.247.246.119","172.247.246.101","172.247.246.113","23.225.74.137","23.225.74.138","23.225.94.27","23.225.94.37","23.225.94.32","172.247.246.106"],"addressUsed":"172.247.246.119"'
[Thu Mar 14 10:48:42 CST 2019] token='HLtkXSSU2aP9PN52oEs7CkKjaFmk73QHC8-6D4C1svU'
[Thu Mar 14 10:48:42 CST 2019] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/rn3riMBeLUdPOlBjt_fGwoOx8OFWwQx7dHiuIBgSI9I/13628546515'
[Thu Mar 14 10:48:42 CST 2019] keyauthorization='HLtkXSSU2aP9PN52oEs7CkKjaFmk73QHC8-6D4C1svU.9K_SVByNPPnEjmn5vKz9qFSYbvW_2hX_cvHEzZDW-y0'
[Thu Mar 14 10:48:42 CST 2019] 2kyb.com is already verified.
[Thu Mar 14 10:48:42 CST 2019] keyauthorization='verified_ok'
[Thu Mar 14 10:48:42 CST 2019] dvlist='2kyb.com#verified_ok#https://acme-v01.api.letsencrypt.org/acme/challenge/rn3riMBeLUdPOlBjt_fGwoOx8OFWwQx7dHiuIBgSI9I/13628546515#http-01#/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:42 CST 2019] d
[Thu Mar 14 10:48:42 CST 2019] vlist='www.2kyb.com#MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4.9K_SVByNPPnEjmn5vKz9qFSYbvW_2hX_cvHEzZDW-y0#https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317#http-01#/home/wwwroot/www.2kyb.com,2kyb.com#verified_ok#https://acme-v01.api.letsencrypt.org/acme/challenge/rn3riMBeLUdPOlBjt_fGwoOx8OFWwQx7dHiuIBgSI9I/13628546515#http-01#/home/wwwroot/www.2kyb.com,'
[Thu Mar 14 10:48:42 CST 2019] d='www.2kyb.com'
[Thu Mar 14 10:48:42 CST 2019] d='2kyb.com'
[Thu Mar 14 10:48:42 CST 2019] 2kyb.com is already verified, skip http-01.
[Thu Mar 14 10:48:42 CST 2019] ok, let's start to verify
[Thu Mar 14 10:48:42 CST 2019] Verifying:www.2kyb.com
[Thu Mar 14 10:48:42 CST 2019] d='www.2kyb.com'
[Thu Mar 14 10:48:42 CST 2019] keyauthorization='MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4.9K_SVByNPPnEjmn5vKz9qFSYbvW_2hX_cvHEzZDW-y0'
[Thu Mar 14 10:48:42 CST 2019] uri='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:42 CST 2019] _currentRoot='/home/wwwroot/www.2kyb.com'
[Thu Mar 14 10:48:42 CST 2019] wellknown_path='/home/wwwroot/www.2kyb.com/.well-known/acme-challenge'
[Thu Mar 14 10:48:42 CST 2019] writing token:MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4 to /home/wwwroot/www.2kyb.com/.well-known/acme-challenge/MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4
[Thu Mar 14 10:48:42 CST 2019] Changing owner/group of .well-known to www:www
[Thu Mar 14 10:48:42 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:42 CST 2019] payload='{"resource": "challenge", "keyAuthorization": "MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4.9K_SVByNPPnEjmn5vKz9qFSYbvW_2hX_cvHEzZDW-y0"}'
[Thu Mar 14 10:48:42 CST 2019] POST
[Thu Mar 14 10:48:42 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:42 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:44 CST 2019] _ret='0'
[Thu Mar 14 10:48:44 CST 2019] code='202'
[Thu Mar 14 10:48:44 CST 2019] sleep 2 secs to verify
[Thu Mar 14 10:48:46 CST 2019] checking
[Thu Mar 14 10:48:46 CST 2019] GET
[Thu Mar 14 10:48:46 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:46 CST 2019] timeout=
[Thu Mar 14 10:48:46 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:48 CST 2019] ret='0'
[Thu Mar 14 10:48:48 CST 2019] Pending
[Thu Mar 14 10:48:48 CST 2019] sleep 2 secs to verify
[Thu Mar 14 10:48:50 CST 2019] checking
[Thu Mar 14 10:48:50 CST 2019] GET
[Thu Mar 14 10:48:50 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:50 CST 2019] timeout=
[Thu Mar 14 10:48:50 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:52 CST 2019] ret='0'
[Thu Mar 14 10:48:52 CST 2019] Pending
[Thu Mar 14 10:48:52 CST 2019] sleep 2 secs to verify
[Thu Mar 14 10:48:54 CST 2019] checking
[Thu Mar 14 10:48:54 CST 2019] GET
[Thu Mar 14 10:48:54 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:54 CST 2019] timeout=
[Thu Mar 14 10:48:54 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:55 CST 2019] ret='0'
[Thu Mar 14 10:48:55 CST 2019] Pending
[Thu Mar 14 10:48:55 CST 2019] sleep 2 secs to verify
[Thu Mar 14 10:48:57 CST 2019] checking
[Thu Mar 14 10:48:57 CST 2019] GET
[Thu Mar 14 10:48:57 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:48:57 CST 2019] timeout=
[Thu Mar 14 10:48:57 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:48:59 CST 2019] ret='0'
[Thu Mar 14 10:48:59 CST 2019] Pending
[Thu Mar 14 10:48:59 CST 2019] sleep 2 secs to verify
[Thu Mar 14 10:49:01 CST 2019] checking
[Thu Mar 14 10:49:01 CST 2019] GET
[Thu Mar 14 10:49:01 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:49:01 CST 2019] timeout=
[Thu Mar 14 10:49:01 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:49:03 CST 2019] ret='0'
[Thu Mar 14 10:49:03 CST 2019] Pending
[Thu Mar 14 10:49:03 CST 2019] sleep 2 secs to verify
[Thu Mar 14 10:49:06 CST 2019] checking
[Thu Mar 14 10:49:06 CST 2019] GET
[Thu Mar 14 10:49:06 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:49:06 CST 2019] timeout=
[Thu Mar 14 10:49:06 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:49:07 CST 2019] ret='0'
[Thu Mar 14 10:49:07 CST 2019] www.2kyb.com:Verify error:Invalid response from https://www.2kyb.com/.well-known/acme-challenge/MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4 [23.225.94.37]:
[Thu Mar 14 10:49:07 CST 2019] pid
[Thu Mar 14 10:49:07 CST 2019] No need to restore nginx, skip.
[Thu Mar 14 10:49:07 CST 2019] _clearupdns
[Thu Mar 14 10:49:07 CST 2019] skip dns.
[Thu Mar 14 10:49:07 CST 2019] _on_issue_err
[Thu Mar 14 10:49:07 CST 2019] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
[Thu Mar 14 10:49:07 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:49:07 CST 2019] payload='{"resource": "challenge", "keyAuthorization": "MCeCu13r6OL1fT0eJzzF5MFwDn0gcMDmDGNmvH20yT4.9K_SVByNPPnEjmn5vKz9qFSYbvW_2hX_cvHEzZDW-y0"}'
[Thu Mar 14 10:49:07 CST 2019] POST
[Thu Mar 14 10:49:07 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/RT-pOOp8tX3Vj1c5d8jnqWX0qhBRPaJcgKmSI4rl2iE/13629904317'
[Thu Mar 14 10:49:07 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:49:10 CST 2019] _ret='0'
[Thu Mar 14 10:49:10 CST 2019] code='400'
[Thu Mar 14 10:49:10 CST 2019] url='https://acme-v01.api.letsencrypt.org/acme/challenge/rn3riMBeLUdPOlBjt_fGwoOx8OFWwQx7dHiuIBgSI9I/13628546515'
[Thu Mar 14 10:49:10 CST 2019] payload='{"resource": "challenge", "keyAuthorization": "verified_ok"}'
[Thu Mar 14 10:49:10 CST 2019] POST
[Thu Mar 14 10:49:10 CST 2019] _post_url='https://acme-v01.api.letsencrypt.org/acme/challenge/rn3riMBeLUdPOlBjt_fGwoOx8OFWwQx7dHiuIBgSI9I/13628546515'
[Thu Mar 14 10:49:10 CST 2019] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
[Thu Mar 14 10:49:12 CST 2019] _ret='0'
[Thu Mar 14 10:49:12 CST 2019] code='202'

airuib · 发表于 2019-3-14 11:05:05

怎么回事
以前都可以正常安装

licess · 发表于 2019-3-14 13:26:43

网站都无法访问，肯定是无法生成ssl证书的

		自动登录	找回密码
密码			注册