一年多了之前 Renew 都是正常的,就在双十一当天 Renew 一直失败,各位 V 友有遇到这种情况吗?有思路的给个提示,下面是部分信息。
- 子域
api.xxxx.xx,域名在阿里云管理,DNS配的A记录 - 使用的
standalone模式,Renew前已经把本地的Nginx关闭了。80、443 端口没被占用 - 把服务器重启后
Renew也是一样的错 - 网上也看到一些类似情况,但也解决不了
部分错误日志如下:
{
"identifier": {
"type": "dns",
"value": "api.xxxx.xx"
},
"status": "invalid",
"expires": "2018-11-18T15:33:56Z",
"challenges": [
{
"type": "http-01",
"status": "invalid",
"error": {
"type": "urn:ietf:params:acme:error:connection",
"detail": "Fetching http://api.xxxx.xx/.well-known/acme-challenge/xxxxxxxx: Error getting validation data",
"status": 400
},
"url": "https://acme-v02.api.letsencrypt.org/acme/challenge/jgMy9WxHILHaUScF9joUpdXZ7uCRDSM2mabGDDn_22k/9189513629",
"token": "xxxxxxxx",
"validationRecord": [
{
"url": "http://api.xxxx.xx/.well-known/acme-challenge/xxxxxxxx",
"hostname": "api.xxxx.xx",
"port": "80",
"addressesResolved": [
"xx.xxx.xx.xx"
],
"addressUsed": "xx.xxx.xx.xx"
}
]
}
]
}
2018-11-11 23:35:02,624:DEBUG:certbot.reporter:Reporting to user: The following errors were reported by the server:
Attempting to renew cert (api.xxxx.xx) from /etc/letsencrypt/renewal/api.xxxx.xx.conf produced an unexpected error: Failed authorization procedure. api.xxxx.xx ( http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://api.xxxx.xx/.well-known/acme-challenge/k9NoezsP97OBAnv0hP_a6jbV_9OKhFey5QOqt9ON2nk: Error getting validation data. Skipping.
All renewal attempts failed. The following certs could not be renewed:
/etc/letsencrypt/live/api.xxxx.xx/fullchain.pem (failure)