我正在尝试使用dehydrated和dehydrated-route53-hook-script更新服务器上的证书。
这是完整的命令和错误:
./xsys renewcerts
Running: cd certificates && ./dehydrated --cron
# INFO: Using main config file ..config/certificates/config
Processing mydomain.org with alternative names: dev-mydomain.org
+ Checking domain name(s) of existing cert... unchanged.
+ Checking expire date of existing cert...
+ Valid till Apr 21 11:47:17 2019 GMT (Less than 30 days). Renewing!
+ Signing domains...
+ Generating private key...
+ Generating signing request...
+ Requesting new certificate order from CA...
+ Received 2 authorizations URLs from the CA
+ Handling authorization for dev-mydomain.org
+ Handling authorization for mydomain.org
+ 2 pending challenge(s)
+ Deploying challenge tokens...
Error: NoCredentialProviders: no valid providers in chain. Deprecated.
For verbose messaging see aws.Config.CredentialsChainVerboseErrors
Could not find zone for dev-mydomain.org
Running: cd certificates && ./dehydrated --cleanup
看起来aws凭证失败了,但是从我能告诉的一切来看,这还可以。我上次运行该〜60天前,然后运行良好,据我所知,没有任何变化。
任何关于在哪里寻找修复程序的想法都会受到赞赏。
我发现此命令失败:
$cli53 list
Error: NoCredentialProviders: no valid providers in chain. Deprecated.
For verbose messaging see aws.Config.CredentialsChainVerboseErrors
因此,根本问题似乎是cli53。我每个文档的~/.aws/credentials
中都有凭据。
答案 0 :(得分:0)
这最终成为cli53的问题。我有如下符号链接...
ls -la .aws/
total 0
drwxr-xr-x 3 myuser staff 96 Apr 5 15:33 .
drwxr-xr-x+ 143 myuser staff 4576 Apr 8 12:30 ..
lrwxr-xr-x 1 myuser staff 69 Apr 5 15:33 credentials -> /Users/myuser/ansible/myapp/_secrets/aws_credentials
...但是我最近将此路径更改为:
/Users/myuser/apps/myapp/_secrets/aws_credentials
,因此cli53能够找到适当的凭据只是失败。