Traefik无法获得letsencrypt证书

时间：2018-02-28 07:52:56

标签： docker

我尝试使用portainer设置traefik，以便我可以在*.vps.ahri.net上创建应用，并通过来自letsencrypt的https提供。

我使用cloudflare作为我的DNS并拥有A vps.ahri.net条记录，CNAME *.vps指向A记录。

我正在使用Docker version 17.12.1-ce, build 7390fc6和docker-compose version 1.19.0, build 9e633ef。

我的配置文件如下：

traefik /搬运工-compose.yml：

version: '2'

services:
  traefik:
    image: traefik:1.3.5
    restart: always
    ports:
      - 80:80
      - 443:443
    networks:
      - web
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./traefik.toml:/traefik.toml
      - ./acme.json:/acme.json
    container_name: traefik

networks:
  web:
    external: true

traefik / traefik.toml：

debug = true

logLevel = "ERROR"
defaultEntryPoints = ["https","http"]

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  [entryPoints.https]
  address = ":443"
  [entryPoints.https.tls]

[retry]

[docker]
endpoint = "unix:///var/run/docker.sock"
domain = "vps.ahri.net"
watch = true
exposedbydefault = false

[acme]
email = "adam@ahri.net"
storage = "acme.json"
entryPoint = "https"
OnHostRule = true
[acme.httpChallenge]
entryPoint = "http"

最后，portainer / docker-compose.yml：

version: "2.1"

services:
  app:
    image: portainer/portainer
    restart: always
    networks:
      - web
      - default
    expose:
      - "9000"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./data:/data
    labels:
      - "traefik.backend=my-awesome-app-app"
      - "traefik.docker.network=web"
      - "traefik.frontend.rule=Host:docker.vps.ahri.net"
      - "traefik.enable=true"
      - "traefik.port=9000"
      - "traefik.default.protocol=https"

networks:
  web:
    external: true

正如您在上面所看到的，我已经开启调试，因为ACME的东西似乎无法正常工作：

traefik    | time="2018-02-28T07:36:27Z" level=info msg="Traefik version v1.3.5 built on 2017-08-01_04:18:59PM"
traefik    | time="2018-02-28T07:36:27Z" level=info msg="Using TOML configuration file //traefik.toml"
traefik    | time="2018-02-28T07:36:27Z" level=debug msg="Global configuration loaded {"GraceTimeOut":10000000000,"Debug":true,"CheckNewVersion":true,"AccessLogsFile":"","TraefikLogsFile":"","LogLevel":"DEBUG","EntryPoints":{"http":{"Network":"","Address":":80","TLS":null,"Redirect":{"EntryPoint":"https","Regex":"","Replacement":""},"Auth":null,"Compress":false},"https":{"Network":"","Address":":443","TLS":{"MinVersion":"","CipherSuites":null,"Certificates":null,"ClientCAFiles":null},"Redirect":null,"Auth":null,"Compress":false}},"Cluster":null,"Constraints":[],"ACME":{"Email":"adam@ahri.net","Domains":null,"Storage":"acme.json","StorageFile":"","OnDemand":false,"OnHostRule":true,"CAServer":"","EntryPoint":"https","DNSProvider":"","DelayDontCheckDNS":0,"ACMELogging":false,"TLSConfig":null},"DefaultEntryPoints":["https","http"],"ProvidersThrottleDuration":2000000000,"MaxIdleConnsPerHost":200,"IdleTimeout":180000000000,"InsecureSkipVerify":false,"Retry":{"Attempts":0},"HealthCheck":{"Interval":30000000000},"Docker":{"Watch":true,"Filename":"","Constraints":null,"Endpoint":"unix:///var/run/docker.sock","Domain":"vps.ahri.net","TLS":null,"ExposedByDefault":false,"UseBindPortIP":false,"SwarmMode":false},"File":null,"Web":null,"Marathon":null,"Consul":null,"ConsulCatalog":null,"Etcd":null,"Zookeeper":null,"Boltdb":null,"Kubernetes":null,"Mesos":null,"Eureka":null,"ECS":null,"Rancher":null,"DynamoDB":null}"
traefik    | time="2018-02-28T07:36:27Z" level=info msg="Preparing server http &{Network: Address::80 TLS:<nil> Redirect:0xc4203195c0 Auth:<nil> Compress:false}"
traefik    | time="2018-02-28T07:36:27Z" level=info msg="Preparing server https &{Network: Address::443 TLS:0xc4204fd140 Redirect:<nil> Auth:<nil> Compress:false}"
traefik    | time="2018-02-28T07:36:27Z" level=info msg="Starting server on :80"
traefik    | time="2018-02-28T07:36:27Z" level=info msg="Loading ACME Account..."
traefik    | time="2018-02-28T07:36:27Z" level=info msg="Loaded ACME config from store acme.json"
traefik    | time="2018-02-28T07:36:27Z" level=debug msg="Building ACME client..."
traefik    | time="2018-02-28T07:36:28Z" level=debug msg=AgreeToTOS...
traefik    | time="2018-02-28T07:36:28Z" level=info msg="Starting provider *docker.Provider {"Watch":true,"Filename":"","Constraints":null,"Endpoint":"unix:///var/run/docker.sock","Domain":"vps.ahri.net","TLS":null,"ExposedByDefault":false,"UseBindPortIP":false,"SwarmMode":false}"
traefik    | time="2018-02-28T07:36:28Z" level=info msg="Retrieving ACME certificates..."
traefik    | time="2018-02-28T07:36:28Z" level=info msg="Retrieved ACME certificates"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Testing certificate renew..."
traefik    | time="2018-02-28T07:36:28Z" level=info msg="Starting server on :443"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Provider connection established with docker 17.12.1-ce (API 1.35)"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Filtering disabled container /traefik"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Validation of load balancer method for backend backend-my-awesome-app-app-default failed: invalid load-balancing method ''. Using default method wrr."
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Configuration received from provider docker: {"backends":{"backend-my-awesome-app-app-default":{"servers":{"service":{"url":"https://172.18.0.3:9000","weight":0}},"loadBalancer":{"method":"wrr"}}},"frontends":{"frontend-my-awesome-app-app-default":{"entryPoints":["https","http"],"backend":"backend-my-awesome-app-app-default","routes":{"service-default":{"rule":"Host:docker.vps.ahri.net"}},"passHostHeader":true,"priority":0,"basicAuth":[]}}}"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Last docker config received more than 2s, OK"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating frontend frontend-my-awesome-app-app-default"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Wiring frontend frontend-my-awesome-app-app-default to entryPoint https"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating route service-default Host:docker.vps.ahri.net"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating backend backend-my-awesome-app-app-default"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating load-balancer wrr"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating server service at https://172.18.0.3:9000 with weight 0"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating retries max attempts 1"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Wiring frontend frontend-my-awesome-app-app-default to entryPoint http"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating route service-default Host:docker.vps.ahri.net"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating entryPoint redirect http -> https : ^(?:https?:\/\/)?([\w\._-]+)(?::\d+)?(.*)$ -> https://$1:443$2"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating backend backend-my-awesome-app-app-default"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating load-balancer wrr"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating server service at https://172.18.0.3:9000 with weight 0"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Creating retries max attempts 1"
traefik    | time="2018-02-28T07:36:28Z" level=info msg="Server configuration reloaded on :443"
traefik    | time="2018-02-28T07:36:28Z" level=info msg="Server configuration reloaded on :80"
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="LoadCertificateForDomains [docker.vps.ahri.net]..."
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Look for provided certificate to validate [docker.vps.ahri.net]..."
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="No provided certificate found for domains [docker.vps.ahri.net], get ACME certificate."
traefik    | time="2018-02-28T07:36:28Z" level=debug msg="Loading ACME certificates [docker.vps.ahri.net]..."
traefik    | time="2018-02-28T07:36:29Z" level=error msg="map[docker.vps.ahri.net:[docker.vps.ahri.net] acme: Could not determine solvers]"
traefik    | time="2018-02-28T07:36:29Z" level=error msg="Error getting ACME certificates [docker.vps.ahri.net] : Cannot obtain certificates map[docker.vps.ahri.net:[docker.vps.ahri.net] acme: Could not determine solvers]+v"
traefik    | time="2018-02-28T07:36:29Z" level=warning msg="A new release has been found: 1.5.3. Please consider updating."
traefik    | time="2018-02-28T07:38:12Z" level=debug msg="Look for provided certificate to validate [docker.vps.ahri.net]..."
traefik    | time="2018-02-28T07:38:12Z" level=debug msg="No provided certificate found for domains [docker.vps.ahri.net], get ACME certificate."
traefik    | time="2018-02-28T07:38:12Z" level=debug msg="Challenge GetCertificate docker.vps.ahri.net"
traefik    | time="2018-02-28T07:38:12Z" level=debug msg="ACME got nothing docker.vps.ahri.net"
traefik    | time="2018-02-28T07:38:15Z" level=debug msg="Look for provided certificate to validate [docker.vps.ahri.net]..."
traefik    | time="2018-02-28T07:38:15Z" level=debug msg="No provided certificate found for domains [docker.vps.ahri.net], get ACME certificate."
traefik    | time="2018-02-28T07:38:15Z" level=debug msg="Challenge GetCertificate docker.vps.ahri.net"
traefik    | time="2018-02-28T07:38:15Z" level=debug msg="ACME got nothing docker.vps.ahri.net"
traefik    | time="2018-02-28T07:38:15Z" level=warning msg="Error forwarding to https://172.18.0.3:9000, err: tls: oversized record received with length 20527"
traefik    | time="2018-02-28T07:38:15Z" level=warning msg="Error forwarding to https://172.18.0.3:9000, err: tls: oversized record received with length 20527"

由于我不熟悉traefik或letsencrypt及其ACME协议，因此我不确定如何进行调试。谁能发现我的错误？

或许值得注意的是，由于未能通过ACME获得证书，所使用的证书是Traefik默认证书。我最后两行是尝试使用Chrome访问https://docker.vps.ahri.net。

0 个答案:

没有答案
相关问题
最新问题