☰

letsencrypt certbot 使用 NGINX 时“无法找到可执行文件 apache2ctl”

tag-icon • tag-icon linux ubuntu nginx lets-encrypt
letsencrypt certbot 使用 NGINX 时“无法找到可执行文件 apache2ctl”

今天我收到错误，因为我的网络服务器已过期SSL

好的，我进入操作系统服务器并运行让我们加密手动快速编写脚本

# /opt/letsencrypt/bin/letsencrypt-auto
Upgrading certbot-auto 0.13.0 to 0.14.2...
Replacing certbot-auto...
Creating virtual environment...
Installing Python packages...
Installation succeeded.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Failed to find executable apache2ctl in PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games
Certbot doesn't know how to automatically configure the web server on this system. However, it can still get a certificate for you. Please run "letsencrypt-auto certonly" to do so. You'll need to manually configure your web server to use the resulting certificate.

好的，关于“apache2ctl”有一些奇怪的消息Apache2没关系，我正在使用NGINX在openresty

并通常运行另一个命令来更新所有证书

# /opt/letsencrypt/bin/letsencrypt-auto renew

然后我在每个过期域名上都遇到了另一个错误

Processing
/etc/letsencrypt/renewal/{{domain}}.conf
-------------------------------------------------------------------------------
Cert is due for renewal, auto-renewing...
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for {{domain}}
Waiting for verification...
Cleaning up challenges
Attempting to renew cert from /etc/letsencrypt/renewal/{{domain}}.conf produced an unexpected error: Failed authorization procedure. {{domain}} (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: The key authorization file from the server did not match this challenge [{{key}}] != [HELLO! This domain is waiting to be connected.<br>
For more information see help or contact us on {{contact_url}}.]. Skipping.

运行单独的命令没有帮助，因为文档没有显示之后发生了什么

# ./certbot-auto certonly
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Failed to find executable apache2ctl in PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/usr/local/games

How would you like to authenticate with the ACME CA?
-------------------------------------------------------------------------------
1: Spin up a temporary webserver (standalone)
2: Place files in webroot directory (webroot)
-------------------------------------------------------------------------------
Select the appropriate number [1-2] then [enter] (press 'c' to cancel):

可能每一个举动都会摧毁我的结构

问我该怎么办？

答案1

一开始我备份机器

这是我的步骤

# wget https://dl.eff.org/certbot-auto
# chmod a+x ./certbot-auto
# mv certbot-auto /opt/letsencrypt/bin
# openresty -s stop
# ./certbot-auto certonly --standalone -d {{domain}},{{domain}},{{domain}}
# openresty

之后我检查了一下，命令选项“更新”工作正常，即使再次运行网络服务器也没有错误

./certbot-auto renew

也许它可以对某些人有所帮助。

相关内容