Open szerr opened 1 year ago
Please upgrade to the latest code and try again first. Maybe it's already fixed. acme.sh --upgrade
If it's still not working, please provide the log with --debug 2
, otherwise, nobody can help you.
acme.sh --upgrade
has been executed
--debug 2
is provided
应该是一个 bug. 但是原因还不是很明确.
看样子是申请了两个证书.
一个是 rsa的 在 '/acme.sh/szerr.cn'
第二个是 '/acme.sh/szerr.cn_ecc'
第一个可能没有成功, 所以 fullchain 是空的. 第二个在deploy 的时候, 用的第一个的 fullchain.
你能把这两个路径下的文件都打开看看吗.
贴出来我看看.
szerr.cn 下没有 fullchain.cer 和 szerr.cn.cer
/acme.sh/szerr.cn # ls -al total 28 drwxr-xr-x 3 root root 4096 Apr 1 06:44 . drwxr-xr-x 5 root root 4096 Apr 1 04:52 .. drwxr-xr-x 2 root root 4096 Apr 1 07:03 backup -rw-r--r-- 1 root root 1025 Apr 1 08:04 szerr.cn.conf -rw-r--r-- 1 root root 1127 Apr 1 05:11 szerr.cn.csr -rw-r--r-- 1 root root 301 Apr 1 05:11 szerr.cn.csr.conf -rw------- 1 root root 1675 Apr 1 04:52 szerr.cn.key
/acme.sh/szerr.cn_ecc # ls -al total 40 drwxr-xr-x 2 root root 4096 Apr 1 06:35 . drwxr-xr-x 5 root root 4096 Apr 1 04:52 .. -rw-r--r-- 1 root root 2668 Apr 1 07:56 ca.cer -rw-r--r-- 1 root root 4120 Apr 1 07:56 fullchain.cer -rw-r--r-- 1 root root 1452 Apr 1 07:56 szerr.cn.cer -rw-r--r-- 1 root root 1063 Apr 1 07:56 szerr.cn.conf -rw-r--r-- 1 root root 469 Apr 1 07:56 szerr.cn.csr -rw-r--r-- 1 root root 198 Apr 1 07:56 szerr.cn.csr.conf -rw------- 1 root root 227 Apr 1 04:36 szerr.cn.key
你想看这些文件的内容?
-----BEGIN CERTIFICATE REQUEST----- MIIDCDCCAfACAQAwEzERMA8GA1UEAwwIc3plcnIuY24wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDGdFcH6Vp/zQ+i440TndfSCt7AW0Wlm9kJT98TNnys T2wFbK6fl2I4eCM3PqAFFs6g/OL6LdPIuDBpD8tbs2/rnS/qtGuCW361B+Oqqj32 +YRXGbErtoV5kn5xTAFhOMrdotdgwo258gGspzGWvDJe3l1SiXg4kzLoykMRbUBQ 6YBHQPWmxhoapWM/zUnsP+i9wuDps3yN6BHvhsl8wM0knie8oL34OskvJ2ZWBWPe gq8eDspjKAJWa9/Y4y5x2r0JS7PUoZFRHfNkvH5bPiHQlCr9dVYV41A+jer6SoGM fjs/DAUX5G8UCBWC0mPWINT1rrsN7KKOwblKV1TATH9xAgMBAAGgga8wgawGCSqG SIb3DQEJDjGBnjCBmzCBmAYDVR0RBIGQMIGNgghzemVyci5jboIMd3d3LnN6ZXJy LmNuggxhcGkuc3plcnIuY26CC2lwLnN6ZXJyLmNugg5tdXNpYy5zemVyci5jboIO dW1hbWkuc3plcnIuY26CDG51Yy5zemVyci5jboILc3Quc3plcnIuY26CCnkuc3pl cnIuY26CEWZlYnJ1YXJ5LnN6ZXJyLmNuMA0GCSqGSIb3DQEBCwUAA4IBAQBOSD7z iG0kN90bohOnJ9cztJbf/6dAN7dcJp9d126KXluo755jFE5wndkYcC1EiO3ZoFpe mncemJvnDh431De7YmPEH1doHXkdyKYCo0JifdGP+6bXvylcwHG2sva5/1YFXTWv TRpWErLvQQTyjcYOPIPgCNNbZSpyIOFVljxNO+kKDkNmVRHEOtT8VWhQkIq28m9s tyoCuWozvwtn0gwsSDbm6SjlMbjk/HRCRuAiClPSvevStSOy+BV9WCbMKVIJjfDx myiyEYLXlnOMHKxpz1KELZLPHWa8/fZgjWJNRYL2REqe1IAjZ5G7evtr+eIPkHZ4 2NkXhW0VVmTt3DOh -----END CERTIFICATE REQUEST-----
[ req_distinguished_name ] [ req ] distinguished_name = req_distinguished_name req_extensions = v3_req [ v3_req ]
subjectAltName=DNS:szerr.cn,DNS:www.szerr.cn,DNS:api.szerr.cn,DNS:ip.szerr.cn,DNS:music.szerr.cn,DNS:umami.szerr.cn,DNS:nuc.szerr.cn,DNS:st.szerr.cn,DNS:y.szerr.cn,DNS:february.szerr.cn### szerr.cn.conf Le_Domain='szerr.cn' Le_Alt='www.szerr.cn,api.szerr.cn,ip.szerr.cn,music.szerr.cn,umami.szerr.cn,nuc.szerr.cn,st.szerr.cn,y.szerr.cn,february.szerr.cn' Le_Webroot='/var/www' Le_PreHook='' Le_PostHook='' Le_RenewHook='' Le_API='https://acme.zerossl.com/v2/DV90' Le_Keylength='2048' Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/dGeHnSlvCmQtF0aWvrH46A/finalize' Le_DeployHook='docker,' SAVED_DEPLOY_DOCKER_CONTAINER_LABEL='sh.acme.autoload.domain=drops' SAVED_DEPLOY_DOCKER_CONTAINER_KEY_FILE='/etc/nginx/ssl/drops/key.pem' SAVED_DEPLOY_DOCKER_CONTAINER_CERT_FILE='/etc/nginx/ssl/drops/cert.pem' SAVED_DEPLOY_DOCKER_CONTAINER_CA_FILE='/etc/nginx/ssl/drops/ca.pem' SAVED_DEPLOY_DOCKER_CONTAINER_FULLCHAIN_FILE='/etc/nginx/ssl/drops/full.pem' SAVED_DEPLOY_DOCKER_CONTAINER_RELOAD_CMD='ACME_BASE64__START_c2VydmljZSBuZ2lueCBmb3JjZS1yZWxvYWQ=ACME_BASE64_END' Le_RealCertPath='' Le_RealCACertPath='' Le_RealKeyPath='/var/www/.well-known/key.pem' Le_ReloadCmd='' Le_RealFullChainPath='/var/www/.well-known/cert.pem'
-----BEGIN RSA PRIVATE KEY----- MIIEogIBAAKCAQEAxnRXB+laf80PouONE53X0grewFtFpZvZCU/fEzZ8rE9sBWyu n5diOHgjNz6gBRbOoPzi+i3TyLgwaQ/LW7Nv650v6rRrglt+tQfjqqo99vmEVxmx K7aFeZJ+cUwBYTjK3aLXYMKNufIBrKcxlrwyXt5dUol4OJMy6MpDEW1AUOmAR0D1 psYaGqVjP81J7D/ovcLg6bN8jegR74bJfMDNJJ4nvKC9+DrJLydmVgVj3oKvHg7K YygCVmvf2OMucdq9CUuz1KGRUR3zZLx+Wz4h0JQq/XVWFeNQPo3q+kqBjH47PwwF F+RvFAgVgtJj1iDU9a67DeyijsG5SldUwEx/cQIDAQABAoIBAF3xDo2pMfTTbjZu PwbtLg+4o48s5YAqkQeubmua3FN42SqMMvFK6OzQOeNZ2sft7uwYKZ3B+cHHJutk 1Z/YBf/jjZ4tv8KaaxVo4aWVJvX1UWclu090/CP7a61YDEMobieSgR/FmO9PlulS z8+J0NJFsqlyd51YWL4HmM30CIED4c4zdAojPWfE93jq2g8JMepYBuSOaNfLwyiN 2O3sAFfN98bz0cv/WdNCfKezFY+BUfVtoDsxXIIzlRmEWFRRryCAd1ZI9x7ikrim 57SLq6gAqV6lb/l1h5kQrtpzoJ76y69Fs39Rvp8hPmDLXY35J14Rosmky2nr3F/S Y7CCqd0CgYEA7VuM1TuW/PKsD7rFGX1R8t/Mk8x3FIJkoHjYvENXriT46889vEAP lnS+ozJMYcIpejFhaD8pITgrbYj7oUEREJ92AOymBbB3KPv1sAl4xJ3naAMDCElz ftfMKUYO6REcEUbngAI2MEk18ZCQhhFLfN7iUScF+Rh96FO+9roHQa8CgYEA1gqU i2I8k5q9Jq33ml1LBJm+aKu+mBHQHMVz7/9u3Ly0ABGAJXoBcd3yoM9XKa6jzwgX +fxwbbXKJwdh/KLFkY9gTtyXqRrOu7orJ6SZ0R+5y+/31wd7yGbg2cP9cxy2t1MT bHoruYyYFXShwD+3J9rINvGj5z0E199s+W8kON8CgYAPUednI+986BTe9wkdug7+ BB/qMjpFYp0oFmS20gnovY4rejbb3a6j4Wkkk2yGqseOkX1eAyWedUeoTD0hjVeS oRg2uw+EMn2ecZTMBfB7kE2NUxRxBnyj5T3SNClmNaqAGvl6M6pXt4H504DghmE+ 8AvffQtPppsJ0c3zktJBFQKBgGSe+q//0YxuTQeW9vR5cR/Liui3/FSO4y/zXwpv IVXh3BjAIWb80RsPhNU2Q7qTn+xe2K6rjsr0kAEDBnx2pLxGE7dfGmjj8lXsMgdj 6O+Xo4eM2w0aNoXCX2fgLBDmabsK8fGoCVAkGQbVGok/KsIwpri1piC53cICBb/J ENUvAoGAY0B27hLKkwbZxEbDhUH4MY5FQsXevt9MRR+CxZE1e8gHeNfriozWJWVd WgyY7kSgTyHd8mk+nMCTIKKaKm/7FkC2rxBIgbBJfHV0QoujJ3jMjbby2y6FpaCw swrHkvjF4u4c8Wa1Aeqg75weznhoV56J645IrSrpuU9H0oZUhOo= -----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE REQUEST----- MIIBITCByAIBADATMREwDwYDVQQDDAhzemVyci5jbjBZMBMGByqGSM49AgEGCCqG SM49AwEHA0IABOPEo/7F0kPcAbrSg5SD6uiPCuhFwXXqLeZoafavaVsgsDV2Vq+H WUPRaKrggFvDWiY/DlnJrO78WPDXcwUG5RqgUzBRBgkqhkiG9w0BCQ4xRDBCMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAhBgNVHREEGjAYgghzemVyci5j boIMd3d3LnN6ZXJyLmNuMAoGCCqGSM49BAMCA0gAMEUCIQDsiOoeh8oYPrzhiBch LTd+vgbDLbs2vezpTjQ0kKc93AIgYPmYCDj9xI1m7TnjiCdR1PGZjPgE/ARVVaOR MXtt/vQ= -----END CERTIFICATE REQUEST-----
[ req_distinguished_name ] [ req ] distinguished_name = req_distinguished_name req_extensions = v3_req [ v3_req ] extendedKeyUsage=serverAuth,clientAuth
subjectAltName=DNS:szerr.cn,DNS:www.szerr.cn### ca.cer -----BEGIN CERTIFICATE----- MIIDhTCCAwygAwIBAgIQI7dt48G7KxpRlh4I6rdk6DAKBggqhkjOPQQDAzCBiDEL MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMjAwMTMw MDAwMDAwWhcNMzAwMTI5MjM1OTU5WjBLMQswCQYDVQQGEwJBVDEQMA4GA1UEChMH WmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NTTCBFQ0MgRG9tYWluIFNlY3VyZSBTaXRl IENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAENkFhFytTJe2qypTk1tpIV+9QuoRk gte7BRvWHwYk9qUznYzn8QtVaGOCMBBfjWXsqqivl8q1hs4wAYl03uNOXgFu7iZ7 zFP6I6T3RB0+TR5fZqathfby47yOCZiAJI4go4IBdTCCAXEwHwYDVR0jBBgwFoAU OuEJhtTPGcKWdnRJdtzgNcZjY5owHQYDVR0OBBYEFA9r5kvOOUeu9n6QHnnwMJGS yF+jMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAiBgNVHSAEGzAZMA0GCysGAQQBsjEBAgJO MAgGBmeBDAECATBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVz dC5jb20vVVNFUlRydXN0RUNDQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwdgYI KwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0cnVzdC5j b20vVVNFUlRydXN0RUNDQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6 Ly9vY3NwLnVzZXJ0cnVzdC5jb20wCgYIKoZIzj0EAwMDZwAwZAIwJHBUDwHJQN3I VNltVMrICMqYQ3TYP/TXqV9t8mG5cAomG2MwqIsxnL937Gewf6WIAjAlrauksO6N UuDdDXyd330druJcZJx0+H5j5cFOYBaGsKdeGW7sCMaR2PsDFKGllas= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID0zCCArugAwIBAgIQVmcdBOpPmUxvEIFHWdJ1lDANBgkqhkiG9w0BAQwFADB7 MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4 MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5 MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgRUNDIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEGqxUWqn5aCPnetUkb1PGWthL q8bVttHmc3Gu3ZzWDGH926CJA7gFFOxXzu5dP+Ihs8731Ip54KODfi2X0GHE8Znc JZFjq38wo7Rw4sehM5zzvy5cU7Ffs30yf4o043l5o4HyMIHvMB8GA1UdIwQYMBaA FKARCiM+lvEH7OKvKe+CpX/QMKS0MB0GA1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1 xmNjmjAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zARBgNVHSAECjAI MAYGBFUdIAAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5j b20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNAYIKwYBBQUHAQEEKDAmMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEM BQADggEBABns652JLCALBIAdGN5CmXKZFjK9Dpx1WywV4ilAbe7/ctvbq5AfjJXy ij0IckKJUAfiORVsAYfZFhr1wHUrxeZWEQff2Ji8fJ8ZOd+LygBkc7xGEJuTI42+ FsMuCIKchjN0djsoTI0DQoWz4rIjQtUfenVqGtF8qmchxDM6OW1TyaLtYiKou+JV bJlsQ2uRl9EMC5MCHdK8aXdJ5htN978UeAOwproLtOGFfy/cQjutdAFI3tZs4RmY CV4Ks2dH/hzg1cEo70qLRDEmBDeNiXQ2Lu+lIg+DdEmSx/cQwgwp+7e9un/jX9Wf 8qn0dNW44bOwgeThpWOjzOoEeJBuv/c= -----END CERTIFICATE-----
-----BEGIN CERTIFICATE----- MIIEAjCCA4egAwIBAgIRAP47CzgXKerhQ3F3j05wR6UwCgYIKoZIzj0EAwMwSzEL MAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9TU0wg RUNDIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMzA0MDEwMDAwMDBaFw0yMzA2 MzAyMzU5NTlaMBMxETAPBgNVBAMTCHN6ZXJyLmNuMFkwEwYHKoZIzj0CAQYIKoZI zj0DAQcDQgAE48Sj/sXSQ9wButKDlIPq6I8K6EXBdeot5mhp9q9pWyCwNXZWr4dZ Q9FoquCAW8NaJj8OWcms7vxY8NdzBQblGqOCAoIwggJ+MB8GA1UdIwQYMBaAFA9r 5kvOOUeu9n6QHnnwMJGSyF+jMB0GA1UdDgQWBBQ0o3Yf3kvQePvv18DzIlwRcIa4 dzAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTjAlMCMGCCsG AQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYgGCCsG AQUFBwEBBHwwejBLBggrBgEFBQcwAoY/aHR0cDovL3plcm9zc2wuY3J0LnNlY3Rp Z28uY29tL1plcm9TU0xFQ0NEb21haW5TZWN1cmVTaXRlQ0EuY3J0MCsGCCsGAQUF BzABhh9odHRwOi8vemVyb3NzbC5vY3NwLnNlY3RpZ28uY29tMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooA AAGHO9FJfAAABAMARzBFAiAJMLj/vrVgxDpx9AwuwyZbmkOpTDUjfCqtkOoI7b2C +AIhAOPApQhW00RlrNUQgJMSOsdJTfF5v8YBrHNfmrPXhPxjAHYAejKMVNi3LbYg 6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGHO9FJ1gAABAMARzBFAiAQa3kr11h+ D7N+qFmEecOhEmNObU1M7SEHPuEpgxrcZQIhAPfY/c1O9Pj9i23sA2Mt3+vlrKpW BxTiVRWY7RhxuU99MCEGA1UdEQQaMBiCCHN6ZXJyLmNuggx3d3cuc3plcnIuY24w CgYIKoZIzj0EAwMDaQAwZgIxAOwI2zqg9MzWr1n/uj7yDxIuvWMbAKdExXMJdoz4 u3FADNSMz5z1bw8uQXiVBmkC9wIxAIpGctrqbdkgU9VuKBxlibc5vJhd/mepyEUK aQGnBdKZrV+iD1SVTyqfqSW0ZsrFlQ== -----END CERTIFICATE-----
Le_Domain='szerr.cn' Le_Alt='www.szerr.cn' Le_Webroot='/var/www' Le_PreHook='' Le_PostHook='' Le_RenewHook='' Le_API='https://acme.zerossl.com/v2/DV90' Le_Keylength='ec-256' Le_OrderFinalize='https://acme.zerossl.com/v2/DV90/order/SnqPkDiLb4mCjBIs6HmEBg/finalize' Le_DeployHook='docker,' SAVED_DEPLOY_DOCKER_CONTAINER_LABEL='sh.acme.autoload.domain=drops' SAVED_DEPLOY_DOCKER_CONTAINER_KEY_FILE='/etc/nginx/ssl/drops/key.pem' SAVED_DEPLOY_DOCKER_CONTAINER_CERT_FILE='/etc/nginx/ssl/drops/cert.pem' SAVED_DEPLOY_DOCKER_CONTAINER_CA_FILE='/etc/nginx/ssl/drops/ca.pem' SAVED_DEPLOY_DOCKER_CONTAINER_FULLCHAIN_FILE='/etc/nginx/ssl/drops/full.pem' SAVED_DEPLOY_DOCKER_CONTAINER_RELOAD_CMD='ACME_BASE64__START_c2VydmljZSBuZ2lueCBmb3JjZS1yZWxvYWQ=ACME_BASE64_END' Le_LinkOrder='https://acme.zerossl.com/v2/DV90/order/SnqPkDiLb4mCjBIs6HmEBg' Le_LinkCert='https://acme.zerossl.com/v2/DV90/cert/e_4MxexJIrwLWiofCzqVnQ' Le_CertCreateTime='1680335806' Le_CertCreateTimeStr='2023-04-01T07:56:46Z' Le_NextRenewTimeStr='2023-05-30T07:56:46Z' Le_NextRenewTime='1685433406'
-----BEGIN CERTIFICATE----- MIIEAjCCA4egAwIBAgIRAP47CzgXKerhQ3F3j05wR6UwCgYIKoZIzj0EAwMwSzEL MAkGA1UEBhMCQVQxEDAOBgNVBAoTB1plcm9TU0wxKjAoBgNVBAMTIVplcm9TU0wg RUNDIERvbWFpbiBTZWN1cmUgU2l0ZSBDQTAeFw0yMzA0MDEwMDAwMDBaFw0yMzA2 MzAyMzU5NTlaMBMxETAPBgNVBAMTCHN6ZXJyLmNuMFkwEwYHKoZIzj0CAQYIKoZI zj0DAQcDQgAE48Sj/sXSQ9wButKDlIPq6I8K6EXBdeot5mhp9q9pWyCwNXZWr4dZ Q9FoquCAW8NaJj8OWcms7vxY8NdzBQblGqOCAoIwggJ+MB8GA1UdIwQYMBaAFA9r 5kvOOUeu9n6QHnnwMJGSyF+jMB0GA1UdDgQWBBQ0o3Yf3kvQePvv18DzIlwRcIa4 dzAOBgNVHQ8BAf8EBAMCB4AwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEF BQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0BgsrBgEEAbIxAQICTjAlMCMGCCsG AQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQUzAIBgZngQwBAgEwgYgGCCsG AQUFBwEBBHwwejBLBggrBgEFBQcwAoY/aHR0cDovL3plcm9zc2wuY3J0LnNlY3Rp Z28uY29tL1plcm9TU0xFQ0NEb21haW5TZWN1cmVTaXRlQ0EuY3J0MCsGCCsGAQUF BzABhh9odHRwOi8vemVyb3NzbC5vY3NwLnNlY3RpZ28uY29tMIIBBAYKKwYBBAHW eQIEAgSB9QSB8gDwAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooA AAGHO9FJfAAABAMARzBFAiAJMLj/vrVgxDpx9AwuwyZbmkOpTDUjfCqtkOoI7b2C +AIhAOPApQhW00RlrNUQgJMSOsdJTfF5v8YBrHNfmrPXhPxjAHYAejKMVNi3LbYg 6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGHO9FJ1gAABAMARzBFAiAQa3kr11h+ D7N+qFmEecOhEmNObU1M7SEHPuEpgxrcZQIhAPfY/c1O9Pj9i23sA2Mt3+vlrKpW BxTiVRWY7RhxuU99MCEGA1UdEQQaMBiCCHN6ZXJyLmNuggx3d3cuc3plcnIuY24w CgYIKoZIzj0EAwMDaQAwZgIxAOwI2zqg9MzWr1n/uj7yDxIuvWMbAKdExXMJdoz4 u3FADNSMz5z1bw8uQXiVBmkC9wIxAIpGctrqbdkgU9VuKBxlibc5vJhd/mepyEUK aQGnBdKZrV+iD1SVTyqfqSW0ZsrFlQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIDhTCCAwygAwIBAgIQI7dt48G7KxpRlh4I6rdk6DAKBggqhkjOPQQDAzCBiDEL MAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxFDASBgNVBAcTC0plcnNl eSBDaXR5MR4wHAYDVQQKExVUaGUgVVNFUlRSVVNUIE5ldHdvcmsxLjAsBgNVBAMT JVVTRVJUcnVzdCBFQ0MgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwHhcNMjAwMTMw MDAwMDAwWhcNMzAwMTI5MjM1OTU5WjBLMQswCQYDVQQGEwJBVDEQMA4GA1UEChMH WmVyb1NTTDEqMCgGA1UEAxMhWmVyb1NTTCBFQ0MgRG9tYWluIFNlY3VyZSBTaXRl IENBMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAENkFhFytTJe2qypTk1tpIV+9QuoRk gte7BRvWHwYk9qUznYzn8QtVaGOCMBBfjWXsqqivl8q1hs4wAYl03uNOXgFu7iZ7 zFP6I6T3RB0+TR5fZqathfby47yOCZiAJI4go4IBdTCCAXEwHwYDVR0jBBgwFoAU OuEJhtTPGcKWdnRJdtzgNcZjY5owHQYDVR0OBBYEFA9r5kvOOUeu9n6QHnnwMJGS yF+jMA4GA1UdDwEB/wQEAwIBhjASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdJQQW MBQGCCsGAQUFBwMBBggrBgEFBQcDAjAiBgNVHSAEGzAZMA0GCysGAQQBsjEBAgJO MAgGBmeBDAECATBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVz dC5jb20vVVNFUlRydXN0RUNDQ2VydGlmaWNhdGlvbkF1dGhvcml0eS5jcmwwdgYI KwYBBQUHAQEEajBoMD8GCCsGAQUFBzAChjNodHRwOi8vY3J0LnVzZXJ0cnVzdC5j b20vVVNFUlRydXN0RUNDQWRkVHJ1c3RDQS5jcnQwJQYIKwYBBQUHMAGGGWh0dHA6 Ly9vY3NwLnVzZXJ0cnVzdC5jb20wCgYIKoZIzj0EAwMDZwAwZAIwJHBUDwHJQN3I VNltVMrICMqYQ3TYP/TXqV9t8mG5cAomG2MwqIsxnL937Gewf6WIAjAlrauksO6N UuDdDXyd330druJcZJx0+H5j5cFOYBaGsKdeGW7sCMaR2PsDFKGllas= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID0zCCArugAwIBAgIQVmcdBOpPmUxvEIFHWdJ1lDANBgkqhkiG9w0BAQwFADB7 MQswCQYDVQQGEwJHQjEbMBkGA1UECAwSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYD VQQHDAdTYWxmb3JkMRowGAYDVQQKDBFDb21vZG8gQ0EgTGltaXRlZDEhMB8GA1UE AwwYQUFBIENlcnRpZmljYXRlIFNlcnZpY2VzMB4XDTE5MDMxMjAwMDAwMFoXDTI4 MTIzMTIzNTk1OVowgYgxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpOZXcgSmVyc2V5 MRQwEgYDVQQHEwtKZXJzZXkgQ2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBO ZXR3b3JrMS4wLAYDVQQDEyVVU0VSVHJ1c3QgRUNDIENlcnRpZmljYXRpb24gQXV0 aG9yaXR5MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEGqxUWqn5aCPnetUkb1PGWthL q8bVttHmc3Gu3ZzWDGH926CJA7gFFOxXzu5dP+Ihs8731Ip54KODfi2X0GHE8Znc JZFjq38wo7Rw4sehM5zzvy5cU7Ffs30yf4o043l5o4HyMIHvMB8GA1UdIwQYMBaA FKARCiM+lvEH7OKvKe+CpX/QMKS0MB0GA1UdDgQWBBQ64QmG1M8ZwpZ2dEl23OA1 xmNjmjAOBgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zARBgNVHSAECjAI MAYGBFUdIAAwQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL2NybC5jb21vZG9jYS5j b20vQUFBQ2VydGlmaWNhdGVTZXJ2aWNlcy5jcmwwNAYIKwYBBQUHAQEEKDAmMCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wDQYJKoZIhvcNAQEM BQADggEBABns652JLCALBIAdGN5CmXKZFjK9Dpx1WywV4ilAbe7/ctvbq5AfjJXy ij0IckKJUAfiORVsAYfZFhr1wHUrxeZWEQff2Ji8fJ8ZOd+LygBkc7xGEJuTI42+ FsMuCIKchjN0djsoTI0DQoWz4rIjQtUfenVqGtF8qmchxDM6OW1TyaLtYiKou+JV bJlsQ2uRl9EMC5MCHdK8aXdJ5htN978UeAOwproLtOGFfy/cQjutdAFI3tZs4RmY CV4Ks2dH/hzg1cEo70qLRDEmBDeNiXQ2Lu+lIg+DdEmSx/cQwgwp+7e9un/jX9Wf 8qn0dNW44bOwgeThpWOjzOoEeJBuv/c= -----END CERTIFICATE-----
-----BEGIN EC PRIVATE KEY----- MHcCAQEEIK7//iSl6INn6JeH/cWZIk1vN33vv7uDsGcMoDuI6dK6oAoGCCqGSM49 AwEHoUQDQgAE48Sj/sXSQ9wButKDlIPq6I8K6EXBdeot5mhp9q9pWyCwNXZWr4dZ Q9FoquCAW8NaJj8OWcms7vxY8NdzBQblGg== -----END EC PRIVATE KEY-----
你之前申请过这个证书 ?
Le_Domain='szerr.cn'
Le_Alt='www.szerr.cn,api.szerr.cn,ip.szerr.cn,music.szerr.cn,umami.szerr.cn,nuc.szerr.cn,st.szerr.cn,y.szerr.cn,february.szerr.cn'
对,之前域名比较多,log 太长了;我在调试时去掉了部分域名
把这两个目录都删掉, 重新开始.
/acme.sh/szerr.cn
/acme.sh/szerr.cn_ecc
删掉后重新申请,好了 目前只剩了 szerr.cn_ecc
/acme.sh # ls
account.conf acme.sh.log ca http.header szerr.cn_ecc
/acme.sh # ls -al szerr.cn_ecc/
total 40
drwxr-xr-x 2 root root 4096 Apr 3 05:09 .
drwxr-xr-x 4 root root 4096 Apr 3 05:08 ..
-rw-r--r-- 1 root root 2668 Apr 3 05:12 ca.cer
-rw-r--r-- 1 root root 4278 Apr 3 05:12 fullchain.cer
-rw-r--r-- 1 root root 1610 Apr 3 05:12 szerr.cn.cer
-rw-r--r-- 1 root root 1172 Apr 3 05:12 szerr.cn.conf
-rw-r--r-- 1 root root 635 Apr 3 05:10 szerr.cn.csr
-rw-r--r-- 1 root root 339 Apr 3 05:10 szerr.cn.csr.conf
-rw------- 1 root root 227 Apr 3 05:08 szerr.cn.key
Steps to reproduce
下列操作都在 acme.sh 的 docker 容器中,已经更到最新版本。
acme.sh --force --issue --webroot /var/www \ -d szerr.cn \ -d www.szerr.cn && acme.sh --deploy -d szerr.cn --deploy-hook docker
目前没有异常退出,但证书的部署路径下 full.pem 文件是空的
ls -al total 12 drwxr-xr-x 2 root root 4096 Apr 1 07:35 . drwxr-xr-x 3 root root 4096 Apr 1 06:39 .. -rw-r--r-- 1 root root 0 Apr 1 06:45 full.pem -rw------- 1 root root 1675 Apr 1 04:52 key.pem
导出证书文件,试图找到原因:
acme.sh --installcert -d szerr.cn --key-file /var/www/.well-known/key.pem --fullchain-file /var/www/.well-known/cert.pem [Sat Apr 1 07:28:39 UTC 2023] Installing key to: /var/www/.well-known/key.pem [Sat Apr 1 07:28:39 UTC 2023] Installing full chain to: /var/www/.well-known/cert.pem cat: /acme.sh/szerr.cn/fullchain.cer: No such file or directory
Debug log