VPS侦探论坛

 找回密码
 注册
搜索
查看: 1303|回复: 2

lnmp1.5 生成通配符ssl问题!

[复制链接]
发表于 2018-4-26 23:14:45 | 显示全部楼层 |阅读模式



生成证书出现问题后 再次生成出现如下提示:
  1. Create new order error. Le_OrderFinalize not found. {"type":"urn:ietf:params:acme:error:malformed","detail":"Error creating new order :: Domain name "www.xxx.com" is redundant with a wildcard domain in the same request. Remove one or the other from the certificate request.","status": 400}
复制代码





下面是acme日志
  1. [Thu Apr 26 23:10:11 CST 2018] _main_domain='www.xxx.com'
  2. [Thu Apr 26 23:10:11 CST 2018] _alt_domains='xxx.com,*.xxx.com'
  3. [Thu Apr 26 23:10:11 CST 2018] Using config home:/usr/local/acme.sh
  4. [Thu Apr 26 23:10:11 CST 2018] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
  5. [Thu Apr 26 23:10:11 CST 2018] DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.xxx.com'
  6. [Thu Apr 26 23:10:11 CST 2018] Using ACME_DIRECTORY: https://acme-v02.api.letsencrypt.org/directory
  7. [Thu Apr 26 23:10:11 CST 2018] _init api for server: https://acme-v02.api.letsencrypt.org/directory
  8. [Thu Apr 26 23:10:11 CST 2018] GET
  9. [Thu Apr 26 23:10:11 CST 2018] url='https://acme-v02.api.letsencrypt.org/directory'
  10. [Thu Apr 26 23:10:11 CST 2018] timeout=
  11. [Thu Apr 26 23:10:11 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
  12. [Thu Apr 26 23:10:11 CST 2018] ret='0'
  13. [Thu Apr 26 23:10:12 CST 2018] ACME_KEY_CHANGE='https://acme-v02.api.letsencrypt.org/acme/key-change'
  14. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_AUTHZ
  15. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_ORDER='https://acme-v02.api.letsencrypt.org/acme/new-order'
  16. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_ACCOUNT='https://acme-v02.api.letsencrypt.org/acme/new-acct'
  17. [Thu Apr 26 23:10:12 CST 2018] ACME_REVOKE_CERT='https://acme-v02.api.letsencrypt.org/acme/revoke-cert'
  18. [Thu Apr 26 23:10:12 CST 2018] ACME_AGREEMENT='https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf'
  19. [Thu Apr 26 23:10:12 CST 2018] ACME_NEW_NONCE='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
  20. [Thu Apr 26 23:10:12 CST 2018] ACME_VERSION='2'
  21. [Thu Apr 26 23:10:12 CST 2018] _on_before_issue
  22. [Thu Apr 26 23:10:12 CST 2018] _chk_main_domain='www.xxx.com'
  23. [Thu Apr 26 23:10:12 CST 2018] _chk_alt_domains='xxx.com,*.xxx.com'
  24. [Thu Apr 26 23:10:12 CST 2018] Le_LocalAddress
  25. [Thu Apr 26 23:10:12 CST 2018] d='www.xxx.com'
  26. [Thu Apr 26 23:10:12 CST 2018] Check for domain='www.xxx.com'
  27. [Thu Apr 26 23:10:12 CST 2018] _currentRoot='dns_dp'
  28. [Thu Apr 26 23:10:12 CST 2018] d='xxx.com'
  29. [Thu Apr 26 23:10:12 CST 2018] Check for domain='xxx.com'
  30. [Thu Apr 26 23:10:12 CST 2018] _currentRoot='dns_dp'
  31. [Thu Apr 26 23:10:12 CST 2018] d='*.xxx.com'
  32. [Thu Apr 26 23:10:12 CST 2018] Check for domain='*.xxx.com'
  33. [Thu Apr 26 23:10:12 CST 2018] _currentRoot='dns_dp'
  34. [Thu Apr 26 23:10:12 CST 2018] d
  35. [Thu Apr 26 23:10:12 CST 2018] _saved_account_key_hash is not changed, skip register account.
  36. [Thu Apr 26 23:10:12 CST 2018] Read key length:
  37. [Thu Apr 26 23:10:12 CST 2018] Creating domain key
  38. [Thu Apr 26 23:10:12 CST 2018] Use DEFAULT_DOMAIN_KEY_LENGTH=2048
  39. [Thu Apr 26 23:10:12 CST 2018] Using config home:/usr/local/acme.sh
  40. [Thu Apr 26 23:10:12 CST 2018] ACME_DIRECTORY='https://acme-v02.api.letsencrypt.org/directory'
  41. [Thu Apr 26 23:10:12 CST 2018] Use length 2048
  42. [Thu Apr 26 23:10:12 CST 2018] Using RSA: 2048
  43. [Thu Apr 26 23:10:12 CST 2018] The domain key is here: /usr/local/nginx/conf/ssl/www.xxx.com/www.xxx.com.key
  44. [Thu Apr 26 23:10:12 CST 2018] _createcsr
  45. [Thu Apr 26 23:10:12 CST 2018] Multi domain='DNS:www.xxx.com,DNS:xxx.com,DNS:*.xxx.com'
  46. [Thu Apr 26 23:10:12 CST 2018] Getting domain auth token for each domain
  47. [Thu Apr 26 23:10:12 CST 2018] d='xxx.com'
  48. [Thu Apr 26 23:10:12 CST 2018] d='*.xxx.com'
  49. [Thu Apr 26 23:10:12 CST 2018] d
  50. [Thu Apr 26 23:10:12 CST 2018] url='https://acme-v02.api.letsencrypt.org/acme/new-order'
  51. [Thu Apr 26 23:10:12 CST 2018] payload='{"identifiers": [{"type":"dns","value":"www.xxx.com"},{"type":"dns","value":"xxx.com"},{"type":"dns","value":"*.xxx.com"}]}'
  52. [Thu Apr 26 23:10:12 CST 2018] RSA key
  53. [Thu Apr 26 23:10:12 CST 2018] HEAD
  54. [Thu Apr 26 23:10:12 CST 2018] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-nonce'
  55. [Thu Apr 26 23:10:12 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
  56. [Thu Apr 26 23:10:12 CST 2018] _ret='0'
  57. [Thu Apr 26 23:10:12 CST 2018] POST
  58. [Thu Apr 26 23:10:12 CST 2018] _post_url='https://acme-v02.api.letsencrypt.org/acme/new-order'
  59. [Thu Apr 26 23:10:12 CST 2018] _CURL='curl -L --silent --dump-header /usr/local/acme.sh/http.header  -g '
  60. [Thu Apr 26 23:10:13 CST 2018] _ret='0'
  61. [Thu Apr 26 23:10:13 CST 2018] code='400'
  62. [Thu Apr 26 23:10:13 CST 2018] Le_OrderFinalize
  63. [Thu Apr 26 23:10:13 CST 2018] Create new order error. Le_OrderFinalize not found. {"type":"urn:ietf:params:acme:error:malformed","detail":"Error creating new order :: Domain name "www.xxx.com" is redundant with a wildcard domain in the same request. Remove one or the other from the certificate request.","status": 400}
  64. [Thu Apr 26 23:10:13 CST 2018] pid
  65. [Thu Apr 26 23:10:13 CST 2018] No need to restore nginx, skip.
  66. [Thu Apr 26 23:10:13 CST 2018] _clearupdns
  67. [Thu Apr 26 23:10:13 CST 2018] skip dns.
  68. [Thu Apr 26 23:10:13 CST 2018] _on_issue_err
  69. [Thu Apr 26 23:10:13 CST 2018] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
复制代码
Linux下Nginx+MySQL+PHP自动安装工具:https://lnmp.org/
发表于 2018-4-27 10:19:07 | 显示全部楼层

回复 1# 的帖子




生成通配符域名证书不要加带www的域名
Linux下Nginx+MySQL+PHP自动安装工具:https://lnmp.org/
 楼主| 发表于 2018-5-2 16:30:37 | 显示全部楼层

回复 2# 的帖子




还有个问题就是为已存在的网站申请系统会新建2个server段。。。是否优化下
美国VPS推荐: 遨游主机LinodeLOCVPSKVMLAVPS2EZ搬瓦工80VPSVultr美国VPS主机中国VPS推荐: 阿里云腾讯云。LNMP付费服务(代装/问题排查)QQ 503228080
您需要登录后才可以回帖 登录 | 注册

本版积分规则

小黑屋|手机版|Archiver|VPS侦探 ( 鲁ICP备16040043号-1 )

GMT+8, 2019-5-27 20:43 , Processed in 0.044001 second(s), 26 queries .

Powered by Discuz! X3.4

© 2001-2017 Comsenz Inc.

快速回复 返回顶部 返回列表