情况是这样的,本来用 acme.sh 申请了一个一级域名的证书,突然想起二级域名忘记申请了就重新写了一个申请二级域名的,但在 renew 的时候出错了,使用的 dns 方式生成的证书,报错如下
[root@centos ~]# acme.sh --force --renew -d crazyc.cn -d www.crazyc. cn -d chat.crazyc.cn
[Sat Dec 31 18:23:23 CST 2016] Renew: 'crazyc.cn'
[Sat Dec 31 18:23:23 CST 2016] Multi domain='DNS:www.crazyc.cn,DNS:chat.crazyc.cn'
[Sat Dec 31 18:23:23 CST 2016] Getting domain auth token for each domain
[Sat Dec 31 18:23:23 CST 2016] crazyc.cn is already verified, skip dns-01.
[Sat Dec 31 18:23:23 CST 2016] Verifying:www.crazyc.cn
[Sat Dec 31 18:23:30 CST 2016] www.crazyc.cn:Challenge error: {"type":"urn:acme:error:malformed","detail":"Unable to update challenge :: Response does not complete challenge","status": 400}
[Sat Dec 31 18:23:30 CST 2016] Please check log file for more details: /root/.acme.sh/acme.sh.log
加上 debug 发现
[Sat Dec 31 18:23:45 CST 2016] RSA key
[Sat Dec 31 18:23:46 CST 2016] GET
[Sat Dec 31 18:23:47 CST 2016] url='https://acme-v01.api.letsencrypt.org/directo ry'
[Sat Dec 31 18:23:47 CST 2016] timeout
[Sat Dec 31 18:23:47 CST 2016] _CURL='curl -L --silent --dump-header /root/.acme .sh/http.header '
[Sat Dec 31 18:23:47 CST 2016] Please refer to https://curl.haxx.se/libcurl/c/li bcurl-errors.html for error code: 7
[Sat Dec 31 18:23:47 CST 2016] ret='7'
[Sat Dec 31 18:23:47 CST 2016] Can not connect to https://acme-v01.api.letsencry pt.org/directory to get nonce.
[Sat Dec 31 18:23:47 CST 2016] www.crazyc.cn:Can not get challenge:
[Sat Dec 31 18:23:47 CST 2016] Skip for removelevel:
[Sat Dec 31 18:23:47 CST 2016] pid
[Sat Dec 31 18:23:47 CST 2016] _clearupdns
[Sat Dec 31 18:23:47 CST 2016] Dns not added, skip.
[Sat Dec 31 18:23:47 CST 2016] _on_issue_err
[Sat Dec 31 18:23:47 CST 2016] Please check log file for more details: /root/.ac me.sh/acme.sh.log
[Sat Dec 31 18:23:47 CST 2016] nc doesn't exists.
[Sat Dec 31 18:23:47 CST 2016] Diagnosis versions:
openssl:openssl
OpenSSL 1.0.1e-fips 11 Feb 2013
apache:
apache doesn't exists.
nc:
为什么会 time out ,是我的问题还是 Let's encrypt 那边的问题,求告知怎么解决的,万分感谢!