我使用让人加密来生成带有独立选项的SSL,然后我成功地生成了一个SSL证书。
我使用AWS负载均衡器在端口433配置一个侦听器,并使用之前生成的SSL证书在这种弹出窗口中导入:
然后一切正常,现在我想更新这个SSL证书。我跟随这个说明来更新我的证书。
我试过:
./certbot-自动更新-独立的
=> Checking for new version...
Requesting root privileges to run certbot...
/root/.local/share/letsencrypt/bin/letsencrypt renew --standalone
No renewals were attempted.
或再次获得证书./certbot-自动证书--独立的
Failed authorization procedure. www.atoha.com (tls-sni-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Incorrect validation certificate for TLS-SNI-01 challenge. Requested ef39667c9d782884f8157f30f3e85e81.fb4436208f9bc7c8bdeb19356bb090f2.acme.invalid from 54.179.140.152:443. Received certificate containing 'www.my_domain.com'
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: www.my_domain.com
Type: unauthorized
Detail: Incorrect validation certificate for TLS-SNI-01 challenge.
Requested ef39667c9d782884f8157f30f3e85e81.fb4436208f9bc7c8bdeb1935
6bb090f2.acme.invalid from 54.179.140.152:443. Received certificate
containing 'www.my_domain.com'
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A record(s) for that domain
contain(s) the right IP address.
这意味着我的证书以前是正确生成的,现在我想知道如何更新它,因为它几乎过期了!
谢谢!
发布于 2016-07-31 08:55:53
你可以试试这个:
bash /opt/letsencrypt/letsencrypt-auto -t --renew-by-default --server https://acme-v01.api.letsencrypt.org/directory certonly --agree-tos --email 'your@email.com' --webroot --webroot-path 'yourwebdirectory_publichtml' -d yourdomain.com -d www.yourdomain.com
其中/opt/letsencrypt/
=您的letsencrypt目录位置
然后将文件的.pem内容(复制粘贴)放置到aws (我通常在linux中使用cat ):
发布于 2017-01-26 08:51:03
我使用https://github.com/alex/letsencrypt-aws自动处理自动更新的AWS。它目前唯一没有做的就是删除旧证书。
https://stackoverflow.com/questions/37382741
复制相似问题