我需要续订我们的加密证书,但是当我使用以下命令时:/usr/bin/certbot renew
我遇到以下错误:
------------------------------------------------------------------------------- Processing /etc/letsencrypt/renewal/XX.XXXXXXX.fr.conf ------------------------------------------------------------------------------- Cert is due for renewal, auto-renewing... Plugins selected:
Authenticator webroot, Installer apache Renewing an existing
certificate Performing the following challenges: http-01 challenge for XX.XXXXXXX.fr Waiting for verification... Cleaning up challenges
Attempting to renew cert (XX.XXXXXXX.fr) from
/etc/letsencrypt/renewal/XX.XXXXXXX.fr.conf produced an unexpected error: Failed authorization procedure. XX.XXXXXXX.fr (http-01):
urn:acme:error:unauthorized :: The client lacks sufficient
authorization :: Invalid response from
http://XX.XXXXXXX.fr/.well-known/acme-challenge/UsP0WqIJyBAVp5_fnUYAgspbKQQEUG82ZGFqHWlyKlE:
"<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>404 Not Found</title> </head><body> <h1>Not Found</h1> <p".
Skipping. All renewal attempts failed. The following certs could not
be renewed: /etc/letsencrypt/live/XX.XXXXXXX.fr/fullchain.pem
(failure)
-------------------------------------------------------------------------------
All renewal attempts failed. The following certs could not be renewed: /etc/letsencrypt/live/XX.XXXXXXX.fr/fullchain.pem (failure)
------------------------------------------------------------------------------- 1 renew failure(s), 0 parse failure(s)
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: XX.XXXXXXX.fr Type: unauthorized Detail: Invalid
response from
http://XX.XXXXXXX.fr/.well-known/acme-challenge/UsP0WqIJyBAVp5_fnUYAgspbKQQEUG82ZGFqHWlyKlE:
"<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head>
<title>404 Not Found</title> </head><body> <h1>Not Found</h1>
<p"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
这是我的续约文件:
# renew_before_expiry = 30 days
version = 0.23.0
archive_dir = /etc/letsencrypt/archive/XX.XXXXXX.fr
cert = /etc/letsencrypt/live/XX.XXXXXX.fr/cert.pem
privkey = /etc/letsencrypt/live/XX.XXXXXX.fr/privkey.pem
chain = /etc/letsencrypt/live/XX.XXXXXX.fr/chain.pem
fullchain = /etc/letsencrypt/live/XX.XXXXXX.fr/fullchain.pem
# Options used in the renewal process
[renewalparams]
installer = apache
authenticator = webroot
account = 2d101a0977417f65991acf27117fb99d
[[webroot_map]]
XX.XXXXXX.fr = /var/www/html/wordpress
我的根文档中没有.well-known
文件夹,但是我不知道如何生成它。有什么想法吗?