执行命令,然后一直卡顿,也没提示
./letsencrypt.sh letsencrypt.conf Generate CSR...domain.csr查看脚本,38行是刚才提示的信息
38 echo "Generate CSR...$DOMAIN_CSR" 39 40 OPENSSL_CONF="/etc/ssl/openssl.cnf" 41 42 if [ ! -f "$OPENSSL_CONF" ];then 43 OPENSSL_CONF="/etc/pki/tls/openssl.cnf" 44 if [ ! -f "$OPENSSL_CONF" ];then 45 echo "Error, file openssl.cnf not found." 46 exit 1 47 fi 48 fi 49 50 openssl req -new -sha256 -key "$DOMAIN_KEY" -subj "/" -reqexts SAN -config <(cat $OPENSSL_CONF <(printf "[SAN]\nsubjectAltName=%s" "$DOMAINS")) > "$DOMAIN_CSR" 51 52 wget https://raw.githubusercontent.com/diafygi/acme-tiny/master/acme_tiny.py -O $ACME_TINY -o /dev/null猜测raw.githubusercontent.com可能超时,果然
[root@iZ2ze57zp7tzjwclifvht5Z aysen]# wget https://raw.githubusercontent.com/diafygi/acme-tiny/master/acme_tiny.py --2019-10-31 16:56:05-- https://raw.githubusercontent.com/diafygi/acme-tiny/master/acme_tiny.py Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 173.252.73.48 Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|173.252.73.48|:443...寻找之前解析ip,本地添加解析
151.101.0.133 raw.githubusercontent.com再次执行,解决成功
./letsencrypt.sh letsencrypt.conf Generate CSR...domian.csr Parsing account key... Parsing CSR... Found domains: domian Getting directory... Directory found! Registering account... Already registered! Creating new order... Order created! Verifying domian... domian verified! Signing certificate... Certificate signed! New cert: domian.crt has been generated偶尔也会出现卡顿,重新执行就ok
./letsencrypt.sh letsencrypt.conf Generate CSR...domain.csr Parsing account key... Parsing CSR... Found domains: domain Getting directory... Directory found! Registering account... Already registered! Creating new order... Order created! Verifying domain... ^CTraceback (most recent call last): File "/tmp/acme_tiny.py", line 198, in <module> main(sys.argv[1:]) File "/tmp/acme_tiny.py", line 194, in main signed_crt = get_crt(args.account_key, args.csr, args.acme_dir, log=LOGGER, CA=args.ca, disable_check=args.disable_check, directory_url=args.directory_url, contact=args.contact) File "/tmp/acme_tiny.py", line 159, in get_crt order = _poll_until_not(order_headers['Location'], ["pending", "processing"], "Error checking order status") File "/tmp/acme_tiny.py", line 70, in _poll_until_not result, _, _ = _send_signed_request(url, None, err_msg) File "/tmp/acme_tiny.py", line 60, in _send_signed_request return _do_request(url, data=data.encode('utf8'), err_msg=err_msg, depth=depth) File "/tmp/acme_tiny.py", line 34, in _do_request resp = urlopen(Request(url, data=data, headers={"Content-Type": "application/jose+json", "User-Agent": "acme-tiny"})) File "/usr/lib64/python2.7/urllib2.py", line 154, in urlopen return opener.open(url, data, timeout) File "/usr/lib64/python2.7/urllib2.py", line 431, in open response = self._open(req, data) File "/usr/lib64/python2.7/urllib2.py", line 449, in _open '_open', req) File "/usr/lib64/python2.7/urllib2.py", line 409, in _call_chain result = func(*args) File "/usr/lib64/python2.7/urllib2.py", line 1258, in https_open context=self._context, check_hostname=self._check_hostname) File "/usr/lib64/python2.7/urllib2.py", line 1217, in do_open r = h.getresponse(buffering=True) File "/usr/lib64/python2.7/httplib.py", line 1113, in getresponse response.begin() File "/usr/lib64/python2.7/httplib.py", line 444, in begin version, status, reason = self._read_status() File "/usr/lib64/python2.7/httplib.py", line 400, in _read_status line = self.fp.readline(_MAXLINE + 1) File "/usr/lib64/python2.7/socket.py", line 476, in readline data = self._sock.recv(self._rbufsize) File "/usr/lib64/python2.7/ssl.py", line 759, in recv return self.read(buflen) File "/usr/lib64/python2.7/ssl.py", line 653, in read v = self._sslobj.read(len or 1024)