wulabing / Xray_onekey

Xray 基于 Nginx 的 VLESS + XTLS 一键安装脚本
MIT License
9.25k stars 3.64k forks source link

[BUG]xray一键安装脚本,ssl证书生成失败 #466

Open sooway opened 1 year ago

sooway commented 1 year ago

[OK] 安装 SSL 证书生成脚本 完成 [Wed 23 Aug 2023 02:17:12 PM CST] Changed default CA to: https://acme-v02.api.le tsencrypt.org/directory [Wed 23 Aug 2023 02:17:13 PM CST] Using CA: https://acme-v02.api.letsencrypt.org /directory [Wed 23 Aug 2023 02:17:13 PM CST] Creating domain key [Wed 23 Aug 2023 02:17:13 PM CST] The domain key is here: /root/.acme.sh/hk.acct .cc_ecc/hk.acct.cc.key [Wed 23 Aug 2023 02:17:13 PM CST] Single domain='hk.acct.cc' [Wed 23 Aug 2023 02:17:13 PM CST] Getting domain auth token for each domain [Wed 23 Aug 2023 02:17:15 PM CST] Getting webroot for domain='hk.acct.cc' [Wed 23 Aug 2023 02:17:15 PM CST] Verifying: hk.acct.cc [Wed 23 Aug 2023 02:17:16 PM CST] Pending, The CA is processing your order, plea se just wait. (1/30) [Wed 23 Aug 2023 02:17:20 PM CST] hk.acct.cc:Verify error:43.154.93.50: Invalid response from http://hk.acct.cc/.well-known/acme-challenge/3S5oppIiuyPpL4oHV0iy0 IfEDysxeDilydDdjWSIz10: 403 [Wed 23 Aug 2023 02:17:20 PM CST] Please add '--debug' or '--log' to check more details. [Wed 23 Aug 2023 02:17:20 PM CST] See: https://github.com/acmesh-official/acme.s h/wiki/How-to-debug-acme.sh [Wed 23 Aug 2023 02:17:21 PM CST] Using CA: https://acme-v02.api.letsencrypt.org /directory [Wed 23 Aug 2023 02:17:21 PM CST] Single domain='hk.acct.cc' [Wed 23 Aug 2023 02:17:21 PM CST] Getting domain auth token for each domain [Wed 23 Aug 2023 02:17:23 PM CST] Getting webroot for domain='hk.acct.cc' [Wed 23 Aug 2023 02:17:23 PM CST] Verifying: hk.acct.cc [Wed 23 Aug 2023 02:17:24 PM CST] Pending, The CA is processing your order, plea se just wait. (1/30) [Wed 23 Aug 2023 02:17:28 PM CST] hk.acct.cc:Verify error:43.154.93.50: Invalid response from http://hk.acct.cc/.well-known/acme-challenge/hx9fpZilPnkhGjiiVGduB _2b_rfXA5QFlMfX_0JyB2c: 403 [Wed 23 Aug 2023 02:17:28 PM CST] Please add '--debug' or '--log' to check more details. [Wed 23 Aug 2023 02:17:28 PM CST] See: https://github.com/acmesh-official/acme.s h/wiki/How-to-debug-acme.sh [ERROR] SSL 证书生成失败

alpha612 commented 1 year ago

我也遇到了类似情况 [Fri Aug 25 12:23:50 CST 2023] Using CA: https://acme-v02.api.letsencrypt.org/directory [Fri Aug 25 12:23:50 CST 2023] Single domain='xxxx.xxxx' [Fri Aug 25 12:23:50 CST 2023] Getting domain auth token for each domain [Fri Aug 25 12:23:52 CST 2023] Getting webroot for domain='xxxx.xxxx' [Fri Aug 25 12:23:52 CST 2023] Verifying: xxxx.xxxx [Fri Aug 25 12:23:52 CST 2023] Pending, The CA is processing your order, please just wait. (1/30) [Fri Aug 25 12:23:56 CST 2023] xxxx.xxxx:Verify error:xxxx: Fetching http://xxxx.xxxx/.well-known/acme-challenge/xxxx-_G4: Connection refused [Fri Aug 25 12:23:56 CST 2023] Please add '--debug' or '--log' to check more details. [Fri Aug 25 12:23:56 CST 2023] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh

aJIEw commented 1 year ago

建议先检查下 nginx 能否正常启动,以及域名能否正常访问:

systemctl status nginx

curl -IkL -m20 http://[your domain]

参考:https://github.com/wulabing/Xray_onekey/issues/447#issuecomment-1574940651

sooway commented 1 year ago

我今天在腾讯云的dabian 12安装,又一切正常了,之前是在dabian 10 ,出现错误的。

8884361 commented 10 months ago

我本来有acme了,用DNS验证的,能否直接利用跳过这一步?

maike2019 commented 4 months ago
  1. 安装 4 合 1 BBR、锐速安装脚本
  2. 安装 MTproxy(不推荐使用,请相关用户关闭或卸载)
  3. 卸载 Xray
  4. 更新 Xray-core
  5. 安装 Xray-core 测试版(Pre)
  6. 手动更新SSL证书
  7. 退出 请输入数字:36 [Sat May 18 07:57:22 PM PDT 2024] ===Starting cron=== [Sat May 18 07:57:22 PM PDT 2024] Renew: 'v1.bxxxxxxxn.top' [Sat May 18 07:57:22 PM PDT 2024] Renew to Le_API=https://acme-v02.api.letsencrypt.org/directory [Sat May 18 07:57:23 PM PDT 2024] Using CA: https://acme-v02.api.letsencrypt.org/directory [Sat May 18 07:57:23 PM PDT 2024] Single domain='v1.bxxxxxxxn.top' [Sat May 18 07:57:24 PM PDT 2024] Getting webroot for domain='v1.bxxxxxxxn.top' [Sat May 18 07:57:24 PM PDT 2024] Verifying: v1.bxxxxxxxn.top [Sat May 18 07:57:24 PM PDT 2024] Pending, The CA is processing your order, please just wait. (1/30) [Sat May 18 07:57:28 PM PDT 2024] Invalid status, v1.bxxxxxxx.top:Verify error detail:64.xx.xxx.x7: Fetching https://v1.bxxxxxxxn.top/.well-known/acme-challenge/22UdTvZ4Ogj5AGwxo1pOk1yZKoqe-6-tP2a-4Ky3a18: Connection refused [Sat May 18 07:57:28 PM PDT 2024] Please add '--debug' or '--log' to check more details. [Sat May 18 07:57:28 PM PDT 2024] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh [Sat May 18 07:57:28 PM PDT 2024] Error renew v1.bxxxxxxxn.top_ecc. [Sat May 18 07:57:28 PM PDT 2024] ===End cron=== [OK] Nginx 启动 完成 [OK] Xray 启动 完成

昨天还一切正常,今天打开后出现问题。经网络搜索后查询得知是 域名和证书信息不匹配 问题。我尝试手动脚本更新证书,提示报错。 原本的证书生成日期是 2024年2月19日,2024年5月19日出现问题