python - 证书未到期更新，但模拟更新以进行试运行

Question

我正在使用 certbot-auto 为我的域名生成证书 https。我使用这样的命令

sudo ./certbot-auto

没关系，但是当我更新证书时使用命令

sudo ./certbot-auto renew --dry-run

它无法续订证书并显示如下错误消息:

/root/.local/share/letsencrypt/lib/python2.6/site-packages/cryptography/__init__.py:26: DeprecationWarning: Python 2.6 is no longer supported by the Python core team, please upgrade your Python. A future version of cryptography will drop support for Python 2.6
  DeprecationWarning
Saving debug log to /var/log/letsencrypt/letsencrypt.log

-------------------------------------------------------------------------------
Processing /etc/letsencrypt/renewal/example.asia.conf
-------------------------------------------------------------------------------
Cert not due for renewal, but simulating renewal for dry run
Starting new HTTPS connection (1): acme-staging.api.letsencrypt.org
Renewing an existing certificate
Performing the following challenges:
tls-sni-01 challenge for example.asia
tls-sni-01 challenge for www.example.asia
Waiting for verification...
Cleaning up challenges
Generating key (2048 bits): /etc/letsencrypt/keys/0020_key-certbot.pem
Creating CSR: /etc/letsencrypt/csr/0020_csr-certbot.pem
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates below have not been saved.)

Congratulations, all renewals succeeded. The following certs have been renewed:
  /etc/letsencrypt/live/example.asia/fullchain.pem (success)
** DRY RUN: simulating 'certbot renew' close to cert expiry
**          (The test certificates above have not been saved.)

请帮帮我

Answer 1

您在问题中运行的命令 sudo ./certbot-auto renew --dry-run 用于测试更新。如您的日志所示，一切顺利，测试成功。

当您希望续订证书时，运行 sudo ./certbot-auto renew --quiet 即可。您可以在证书在 30 天内过期或已经过期时续订证书。

更多详细信息可以在 Certbot documentation 中找到和 Certbot userguide .