2

我在 DigitalOcean 上的 Debian 8 上运行 nginx Web 服务器。几年前我用 certbot 生成了一个 SSL 证书。最近,由于停止支持 ACME-v1,证书已过期且无法续订。我无法在 Debian 8 上将 certbot 更新到最新版本以使用 ACME-v2,我目前无法将 Debian 升级到 9 或 10。

这就是说我选择使用acme.sh客户端来颁发和安装一个新证书,因为它支持我当前的环境。

问题是当我尝试使用以下命令颁发证书时,我得到多个“处理”行,然后请求超时。使用 --debug 标志时,我得到了更多详细信息,如下所示,但仍然无法判断什么是超时以及为什么。非常感谢任何有助于理解和解决此问题的帮助。

# acme.sh --issue  --nginx -d domain.com -d www.domain.com
[Mon Jul 26 23:23:09 UTC 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Mon Jul 26 23:23:09 UTC 2021] Multi domain='DNS:domain.com,DNS:www.domain.com'
[Mon Jul 26 23:23:09 UTC 2021] Getting domain auth token for each domain
[Mon Jul 26 23:23:11 UTC 2021] Getting webroot for domain='domain.com'
[Mon Jul 26 23:23:11 UTC 2021] Getting webroot for domain='www.domain.com'
[Mon Jul 26 23:23:11 UTC 2021] Verifying: domain.com
[Mon Jul 26 23:23:11 UTC 2021] Nginx mode for domain:domain.com
[Mon Jul 26 23:23:11 UTC 2021] Found conf file: /etc/nginx/sites-enabled/domain.com
[Mon Jul 26 23:23:11 UTC 2021] Backup /etc/nginx/sites-enabled/domain.com to /root/.acme.sh/domain.com/backup/domain.com.nginx.conf
[Mon Jul 26 23:23:11 UTC 2021] Check the nginx conf before setting up.
[Mon Jul 26 23:23:11 UTC 2021] OK, Set up nginx config file
[Mon Jul 26 23:23:11 UTC 2021] nginx conf is done, let's check it again.
[Mon Jul 26 23:23:11 UTC 2021] Reload nginx
[Mon Jul 26 23:23:16 UTC 2021] Processing
[Mon Jul 26 23:23:19 UTC 2021] Processing
[Mon Jul 26 23:23:22 UTC 2021] Processing
[Mon Jul 26 23:23:24 UTC 2021] Processing
[Mon Jul 26 23:23:27 UTC 2021] Processing
[Mon Jul 26 23:23:30 UTC 2021] Processing
[Mon Jul 26 23:23:32 UTC 2021] Processing
[Mon Jul 26 23:23:35 UTC 2021] Processing
[Mon Jul 26 23:23:37 UTC 2021] Processing
[Mon Jul 26 23:23:40 UTC 2021] Processing
[Mon Jul 26 23:23:42 UTC 2021] Processing
[Mon Jul 26 23:23:45 UTC 2021] Processing
[Mon Jul 26 23:23:48 UTC 2021] Processing
[Mon Jul 26 23:23:50 UTC 2021] Processing
[Mon Jul 26 23:23:53 UTC 2021] Processing
[Mon Jul 26 23:23:56 UTC 2021] Processing
[Mon Jul 26 23:23:58 UTC 2021] Processing
[Mon Jul 26 23:24:01 UTC 2021] Processing
[Mon Jul 26 23:24:04 UTC 2021] Processing
[Mon Jul 26 23:24:07 UTC 2021] Processing
[Mon Jul 26 23:24:09 UTC 2021] Processing
[Mon Jul 26 23:24:12 UTC 2021] Processing
[Mon Jul 26 23:24:14 UTC 2021] Processing
[Mon Jul 26 23:24:17 UTC 2021] Processing
[Mon Jul 26 23:24:20 UTC 2021] Processing
[Mon Jul 26 23:24:22 UTC 2021] Processing
[Mon Jul 26 23:24:25 UTC 2021] Processing
[Mon Jul 26 23:24:27 UTC 2021] Processing
[Mon Jul 26 23:24:30 UTC 2021] Processing
[Mon Jul 26 23:24:30 UTC 2021] domain.com:Timeout
[Mon Jul 26 23:24:30 UTC 2021] Restoring from /root/.acme.sh/domain.com/backup/domain.com.nginx.conf to /etc/nginx/sites-enabled/domain.com
[Mon Jul 26 23:24:30 UTC 2021] Reload nginx
[Mon Jul 26 23:24:30 UTC 2021] Please add '--debug' or '--log' to check more details.
[Mon Jul 26 23:24:30 UTC 2021] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

--debug 版本中的“处理”行

[Mon Jul 26 22:54:30 UTC 2021] Processing
[Mon Jul 26 22:54:30 UTC 2021] sleep 2 secs to verify
[Mon Jul 26 22:54:32 UTC 2021] checking
[Mon Jul 26 22:54:32 UTC 2021] url='https://acme.zerossl.com/v2/DV90/chall/3ueaYuL2TLgvqk2DPubxxx'
[Mon Jul 26 22:54:32 UTC 2021] payload
[Mon Jul 26 22:54:32 UTC 2021] POST
[Mon Jul 26 22:54:32 UTC 2021] _post_url='https://acme.zerossl.com/v2/DV90/chall/3ueaYuL2TLgvqk2DPubxxx'
[Mon Jul 26 22:54:32 UTC 2021] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Mon Jul 26 22:54:33 UTC 2021] _ret='0'
[Mon Jul 26 22:54:33 UTC 2021] code='200'
4

1 回答 1

0
  • 你可以检查你的防火墙80端口
ufw allow 80
ufw status
于 2022-03-03T02:17:11.220 回答