使用certbot续期ssl证书renew时遇到问题
证书失效后 会,浏览器会 提示 不安全,是否继续访问
遇到的问题如下:IMPORTANT NOTES:
– The following errors were reported by the server:
Domain: www.miling.online
Type: unauthorized
Detail: Invalid response from
http://www.miling.online/.well-known/acme-challenge/8IPPiMABwsHSwqSSTfZ5XMv7wD9sqXdO1pzOwFebdzg
[2001:470:35:bf9::2]: 404
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address.
[root@iZuf6istfz0zvz8dbdfyxxZ ~]# certbot-auto renew –force-renew
-bash: certbot-auto: command not found
[root@iZuf6istfz0zvz8dbdfyxxZ ~]#
[root@iZuf6istfz0zvz8dbdfyxxZ ~]# 1
-bash: 1: command not found
[root@iZuf6istfz0zvz8dbdfyxxZ ~]# certbot renew –quiet
Attempting to renew cert from /etc/letsencrypt/renewal/www.miling.online.conf produced an unexpected error: Failed authorization procedure. www.miling.online (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://www.miling.online/.well-known/acme-challenge/o30LM-8eAdn4IB8vX96Aa1Xgs6Mwc-5QjJNQ8mjl_Ns [2001:470:35:bf9::2]: 404. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/www.miling.online/fullchain.pem (failure)
1 renew failure(s), 0 parse failure(s)
最后查看了certbot的帮助
依次运行:
# service nginx stop
# certbot –force-renewal
# certbot certonly
# certbot renew –dry-run
# cerbot nginx start
需要注意的是service nginx stop/start,否则会出现问题