我有一个Fedora 34服务器运行Apache。我有加密工作的证书。我用certbot安装了它们(就像一个一样),一切都很好。现在,当我要更新我的证书时,我会得到以下错误:
[root@app myname]# certbot
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator apache, Installer apache
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: example.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 1
Requesting a certificate for example.com
Performing the following challenges:
http-01 challenge for example.com
Waiting for verification...
Challenge failed for domain example.com
http-01 challenge for example.com
Cleaning up challenges
Some challenges have failed.
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: example.com
Type: unauthorized
Detail: Invalid response from
http://example.com/.well-known/acme-challenge/bRtftQXeDygjye2u-1c2O1I63A2PoSPMNqclYAVivzg
[ipv6address]: "html\r\nheadtitle404 Not
Found/title/head\r\nbody\r\ncenterh1404 Not
Found/h1/center\r\nhrcenteropenresty/cente"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
[root@app myname]#
还有几个细节:我从Apache服务器重定向(mod_rewrite)到Tomcat工作。在我的故障排除过程中,我暂时把它取下来了。
发布于 2021-09-27 19:50:17
我们搞清楚了!这是一个糟糕的DNS AAAA (ipv6)记录。我们修复了它,然后certbot成功地运行了!我们将AAAA记录指向在服务器上的ifconfig上显示的ipv6地址。我不知道它怎么会指向另一个地址。
https://serverfault.com/questions/1078648
复制相似问题