让我们加密检查以前的证书并抛出错误

时间:2017-08-27 15:05:46

标签: nginx lets-encrypt

我在我的服务器上设置了自己的登录页面,其中包含Nginx。我遵循数字海洋“如何”获得SSL认证。

现在我为妻子设置了Wordpress。一切都在普通HTTP上运行良好,但如果我尝试使用let加密重做该过程:sudo certbot --nginx -d pamelajoa.com -d www.pamelajoa.com cerbot尝试挑战服务器,但发现已经有我自己网站的证书:

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: pamelajoa.com
   Type:   unauthorized
   Detail: Incorrect validation certificate for tls-sni-01 challenge.
   Requested
   XXX.YYY.acme.invalid
   from [2001:41d0:8:6d9b::1]:443. Received 2 certificate(s), first
   certificate had names "gfelot.xyz, www.gfelot.xyz"

   Domain: www.pamelajoa.com
   Type:   unauthorized
   Detail: Incorrect validation certificate for tls-sni-01 challenge.
   Requested
   XXX.YYY.acme.invalid
   from [2001:41d0:8:6d9b::1]:443. Received 2 certificate(s), first
   certificate had names "gfelot.xyz, www.gfelot.xyz"

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

我自己的网站再一次使用HTTPS,WP可以在HTTP上工作,所以我认为它不适合我的Nginx配置。

任何想法?

1 个答案:

答案 0 :(得分:0)

在您的命令中使用此选项找到了对我有用的解决方案:

--preferred-challenges http-01

或者您可以尝试使用此方法:

--preferred-challenges http

完整命令在这里:

sudo certbot --nginx --preferred-challenges http-01 -d www.kaokeb.com

此线程中此解决方案的完整文章: https://community.letsencrypt.org/t/expired-certification/60185/23