SSL 证书生成失败

[hotzwd]

SSL 证书生成失败

[aJIEw]

iptables -F 不一定有用，我尝试了下发现原因是 nginx 不能正常启动。因此，假如你不是在全新的 vps 上第一次使用该脚本，可以先看下 nginx 是否启动报错了。

我的话是因为之前已经运行过脚本并且安装了 nginx，再次启动脚本的时候 nginx 使用了旧的证书路径，导致无法正常启动 (cannot load certificate)，解决了这个问题之后再运行脚本就可以正常生成证书了。

如果还是不行，最好先检查下你的域名能否正常访问：

curl -IkL -m20 http://[your domain]

[Hins888]

服务运行情况

● xray.service - Xray Service
xray.service - Xray Service
Loaded: loaded (/etc/systemd/system/xray.service; enabled; vendor preset: enabled)
Drop-In: /etc/systemd/system/xray.service.d
└─10-donot_touch_single_conf.conf
Active: active (running) since Tue 2023-02-28 00:59:54 CST; 7min ago
Docs: https://github.com/xtls
Main PID: 198087 (xray)
Tasks: 9 (limit: 28701)
Memory: 4.1M
CPU: 96ms
CGroup: /system.slice/xray.service
└─198087 /usr/local/bin/xray run -config /usr/local/etc/xray/config.json

Feb 28 00:59:54 instance-20220619 systemd[1]: Started Xray Service.
Feb 28 00:59:54 instance-20220619 xray[198087]: Xray 1.7.5 (Xray, Penetrates Everything.) Custom (go1.20 linux/arm64)
Feb 28 00:59:54 instance-20220619 xray[198087]: A unified platform for anti-censorship.
Feb 28 00:59:54 instance-20220619 xray[198087]: 2023/02/28 00:59:54 [Info] infra/conf/serial: Reading config: /usr/local/etc/xray/config.json

请运行命令 service nginx status 并粘贴输出：

nginx.service - nginx - high performance web server
Loaded: loaded (/lib/systemd/system/nginx.service; disabled; vendor preset: enabled)
Active: active (running) since Tue 2023-02-28 00:59:53 CST; 9min ago
Docs: https://nginx.org/en/docs/
Process: 198078 ExecStart=/usr/sbin/nginx -c /etc/nginx/nginx.conf (code=exited, status=0/SUCCESS)
Main PID: 198079 (nginx)
Tasks: 5 (limit: 28701)
Memory: 3.9M
CPU: 23ms
CGroup: /system.slice/nginx.service
├─198079 "nginx: master process /usr/sbin/nginx -c /etc/nginx/nginx.conf"
├─198080 "nginx: worker process" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" ""
├─198081 "nginx: worker process" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" ""
├─198082 "nginx: worker process" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" ""
└─198083 "nginx: worker process" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" "" ""

Feb 28 00:59:53 instance-20220619 systemd[1]: Starting nginx - high performance web server...
Feb 28 00:59:53 instance-20220619 systemd[1]: Started nginx - high performance web server.

环境 Environment
oracle cloud, ubuntu 刚刚更新
不是全新安装，有安装X-UI，ACME，之前用的网络跳跃脚本装的XRAY，卸载后用你的脚本安装，但是无法生成证书

重现问题的具体步骤

[OK] 当前版本为最新版本
[OK] 您可以通过 bash install.sh 执行本程序
Xray 安装管理脚本 [0.2.2]
---authored by wulabing---
https://github.com/wulabing

当前已安装版本：ws
—————————————— 安装向导 ——————————————
0. 升级 脚本

1. 安装 Xray (VLESS + TCP + TLS + Nginx + WebSocket)
   —————————————— 配置变更 ——————————————
2. 变更 UUID
3. 变更 连接端口
4. 变更 WebSocket PATH
   —————————————— 查看信息 ——————————————
5. 查看 实时访问日志
6. 查看 实时错误日志
7. 查看 Xray 配置链接
   —————————————— 其他选项 ——————————————
8. 安装 4 合 1 BBR、锐速安装脚本
9. 安装 MTproxy(不推荐使用,请相关用户关闭或卸载)
10. 卸载 Xray
11. 更新 Xray-core
12. 安装 Xray-core 测试版(Pre)
13. 手动更新SSL证书
14. 退出
    请输入数字：36
    [Tue Feb 28 00:59:37 CST 2023] ===Starting cron===
    [Tue Feb 28 00:59:37 CST 2023] Renew: 'hins007.xyz'
    [Tue Feb 28 00:59:37 CST 2023] Renew to Le_API=https://acme.zerossl.com/v2/DV90
    [Tue Feb 28 00:59:37 CST 2023] Skip invalid cert for: hins007.xyz
    [Tue Feb 28 00:59:38 CST 2023] Skipped hins007.xyz
    [Tue Feb 28 00:59:38 CST 2023] Renew: 'hins007.xyz'
    [Tue Feb 28 00:59:38 CST 2023] Renew to Le_API=https://acme.zerossl.com/v2/DV90
    [Tue Feb 28 00:59:39 CST 2023] Using CA: https://acme.zerossl.com/v2/DV90
    [Tue Feb 28 00:59:39 CST 2023] Multi domain='DNS:hins007.xyz,DNS:www.hins007.xyz '
    [Tue Feb 28 00:59:39 CST 2023] Getting domain auth token for each domain
    [Tue Feb 28 00:59:47 CST 2023] Getting webroot for domain='hins007.xyz'
    [Tue Feb 28 00:59:47 CST 2023] Getting webroot for domain='www.hins007.xyz'
    [Tue Feb 28 00:59:48 CST 2023] Adding txt value: el-89APMRUIMTX6hkuhyGzGJMEoSZo7 F-rX7wa9DP-M for domain: _acme-challenge.hins007.xyz
    [Tue Feb 28 00:59:49 CST 2023] invalid domain
    [Tue Feb 28 00:59:49 CST 2023] Error add txt for domain:_acme-challenge.hins007. xyz
    [Tue Feb 28 00:59:49 CST 2023] Please check log file for more details: /root/.ac me.sh/acme.sh.log
    [Tue Feb 28 00:59:53 CST 2023] Error renew hins007.xyz_ecc.
    [Tue Feb 28 00:59:53 CST 2023] ===End cron===

我用ACME申请证书也是同样的错误。请教如何解决。

[fieri]

碰到同样问题，CENTOS 7

[snowroll]

换ubuntu，亲测可行

[ruanimal]

把 iptables 规则清一下

[szz1233]

把 iptables 规则清一下

请问大佬具体怎样做