ssl - Traefik 将颁发证书而不是 Let's encrypt

Question

我正在尝试根据本教程设置 traefik:https://www.digitalocean.com/community/tutorials/how-to-use-traefik-as-a-reverse-proxy-for-docker-containers-on-ubuntu-16-04

这是我正在使用的 traefik.toml:

defaultEntryPoints = ["http", "https"]

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
      entryPoint = "https"
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]

[web]
address = ":8080"
  [web.auth.basic]
  users = [myuserandpw]

[acme]
email = "myemailadress"
storage = "acme.json"
entryPoint = "https"
onHostRule = true
onDemand = false

现在，当我想打开监控仪表板时，会收到一条警告，提示我的连接不安全。它指出我的网站正在使用自签名证书(错误代码:SEC_ERROR_UNKOWN_ISSUER)。这是真的，因为正在使用 traefik 默认证书而不是来自 let's encrypt 的新证书。这可能是什么原因？

Answer 1

由于 Let's Encrypt 问题 (https://community.letsencrypt.org/t/important-what-you-need-to-know-about-tls-sni-validation-issues/50811)，您必须更改您的 acme 配置:

• Træfik 1.4:使用 DNS 挑战 https://docs.traefik.io/v1.4/configuration/acme/#dnsprovider
• Træfik 1.5:使用 HTTP 挑战 https://docs.traefik.io/v1.5/configuration/acme/#acmehttpchallenge或 DNS 质询 https://docs.traefik.io/v1.5/configuration/acme/#acmednschallenge