VPS侦探论坛

 找回密码
 注册
查看: 401|回复: 2

请教,SSL证书安签发失败

[复制链接]
发表于 2021-6-18 08:19:29 | 显示全部楼层 |阅读模式



Starting create SSL Certificate use Let's Encrypt...
[Fri Jun 18 08:12:55 CST 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Fri Jun 18 08:12:55 CST 2021] No EAB credentials found for ZeroSSL, let's get one
[Fri Jun 18 08:12:55 CST 2021] acme.sh is using ZeroSSL as default CA now.
[Fri Jun 18 08:12:55 CST 2021] Please update your account with an email address first.
[Fri Jun 18 08:12:55 CST 2021] acme.sh --register-account -m my@example.com
[Fri Jun 18 08:12:55 CST 2021] See: https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA
[Fri Jun 18 08:12:55 CST 2021] Please check log file for more details: /usr/local/acme.sh/acme.sh.log
Let's Encrypt SSL Certificate create failed!
下面是日志
[Fri Jun 18 08:12:54 CST 2021] Running cmd: issue
[Fri Jun 18 08:12:54 CST 2021] _main_domain='www.l***.com'
[Fri Jun 18 08:12:54 CST 2021] _alt_domains='no'
[Fri Jun 18 08:12:54 CST 2021] Using config home:/usr/local/acme.sh
[Fri Jun 18 08:12:54 CST 2021] default_acme_server
[Fri Jun 18 08:12:54 CST 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Fri Jun 18 08:12:54 CST 2021] DOMAIN_PATH='/usr/local/nginx/conf/ssl/www.l***.com'
[Fri Jun 18 08:12:54 CST 2021] Using ACME_DIRECTORY: https://acme.zerossl.com/v2/DV90
[Fri Jun 18 08:12:54 CST 2021] _init api for server: https://acme.zerossl.com/v2/DV90
[Fri Jun 18 08:12:54 CST 2021] GET
[Fri Jun 18 08:12:54 CST 2021] url='https://acme.zerossl.com/v2/DV90'
[Fri Jun 18 08:12:54 CST 2021] timeout=
[Fri Jun 18 08:12:54 CST 2021] _CURL='curl --silent --dump-header /usr/local/acme.sh/http.header  -L  -g '
[Fri Jun 18 08:12:55 CST 2021] ret='0'
[Fri Jun 18 08:12:55 CST 2021] ACME_KEY_CHANGE='https://acme.zerossl.com/v2/DV90/keyChange'
[Fri Jun 18 08:12:55 CST 2021] ACME_NEW_AUTHZ
[Fri Jun 18 08:12:55 CST 2021] ACME_NEW_ORDER='https://acme.zerossl.com/v2/DV90/newOrder'
[Fri Jun 18 08:12:55 CST 2021] ACME_NEW_ACCOUNT='https://acme.zerossl.com/v2/DV90/newAccount'
[Fri Jun 18 08:12:55 CST 2021] ACME_REVOKE_CERT='https://acme.zerossl.com/v2/DV90/revokeCert'
[Fri Jun 18 08:12:55 CST 2021] ACME_AGREEMENT='https://secure.trust-provider.com/repository/docs/Legacy/20201020_Certificate_Subscriber_Agreement_v_2_4_click.pdf'
[Fri Jun 18 08:12:55 CST 2021] ACME_NEW_NONCE='https://acme.zerossl.com/v2/DV90/newNonce'
[Fri Jun 18 08:12:55 CST 2021] Le_NextRenewTime
[Fri Jun 18 08:12:55 CST 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Fri Jun 18 08:12:55 CST 2021] _on_before_issue
[Fri Jun 18 08:12:55 CST 2021] _chk_main_domain='www.***.com'
[Fri Jun 18 08:12:55 CST 2021] _chk_alt_domains
[Fri Jun 18 08:12:55 CST 2021] Le_LocalAddress
[Fri Jun 18 08:12:55 CST 2021] d='www.***.com'
[Fri Jun 18 08:12:55 CST 2021] Check for domain='www.***.com'
[Fri Jun 18 08:12:55 CST 2021] _currentRoot='/home/wwwroot/www.***.com'
[Fri Jun 18 08:12:55 CST 2021] d
[Fri Jun 18 08:12:55 CST 2021] config file is empty, can not read CA_KEY_HASH
[Fri Jun 18 08:12:55 CST 2021] Using config home:/usr/local/acme.sh
[Fri Jun 18 08:12:55 CST 2021] ACME_DIRECTORY='https://acme.zerossl.com/v2/DV90'
[Fri Jun 18 08:12:55 CST 2021] _init api for server: https://acme.zerossl.com/v2/DV90
[Fri Jun 18 08:12:55 CST 2021] RSA key
[Fri Jun 18 08:12:55 CST 2021] config file is empty, can not read CA_EAB_KEY_ID
[Fri Jun 18 08:12:55 CST 2021] config file is empty, can not read CA_EAB_HMAC_KEY
[Fri Jun 18 08:12:55 CST 2021] config file is empty, can not read CA_EMAIL
[Fri Jun 18 08:12:55 CST 2021] No EAB credentials found for ZeroSSL, let's get one
[Fri Jun 18 08:12:55 CST 2021] acme.sh is using ZeroSSL as default CA now.
[Fri Jun 18 08:12:55 CST 2021] Please update your account with an email address first.
[Fri Jun 18 08:12:55 CST 2021] acme.sh --register-account -m my@example.com
[Fri Jun 18 08:12:55 CST 2021] See: https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA
[Fri Jun 18 08:12:55 CST 2021] _on_issue_err
[Fri Jun 18 08:12:55 CST 2021] Please check log file for more details: /usr/local/acme.sh/acme.sh.log



美国VPS推荐: 遨游主机LinodeLOCVPSKVMLAVPS2EZ搬瓦工80VPSVultr美国VPS主机中国VPS推荐: 阿里云腾讯云。LNMP付费服务(代装/问题排查)QQ 503228080
发表于 2021-6-18 09:50:12 | 显示全部楼层


看了下是acme.sh调整了默认证书let's encrypt为zerossl导致的,lnmp 1.8的话暂时选择其他zerossl或buypass,1.8的修复版已经上传

或者添加ssl证书前执行:export ACCOUNT_EMAIL="你的邮箱xxx@xxx.com"
或者执行:  /usr/local/acme.sh/acme.sh --set-default-ca  --server  letsencrypt 这样设置let's encrypt为默认ssl证书就可以了
Linux下Nginx+MySQL+PHP自动安装工具:https://lnmp.org
 楼主| 发表于 2021-6-18 10:26:59 | 显示全部楼层



licess 发表于 2021-6-18 09:50
看了下是acme.sh调整了默认证书导致的,lnmp 1.8的话暂时选择其他zerossl或buypass

或者执行:  /usr/loc ...

好的,谢谢
美国VPS推荐: 遨游主机LinodeLOCVPSKVMLAVPS2EZ搬瓦工80VPSVultr美国VPS主机中国VPS推荐: 阿里云腾讯云。LNMP付费服务(代装/问题排查)QQ 503228080
您需要登录后才可以回帖 登录 | 注册

本版积分规则

小黑屋|手机版|Archiver|VPS侦探 ( 鲁ICP备16040043号-1 )

GMT+8, 2021-7-25 13:18 , Processed in 0.058262 second(s), 28 queries .

Powered by Discuz! X3.4

Copyright © 2001-2021, Tencent Cloud.

快速回复 返回顶部 返回列表