ssl - 无法使用 nginx 配置 certbot 以接受 https

Question

当我尝试使用 certboot 配置我的 nginx 应用程序时 this tutorial和其他人一样。我总是使用来自 certbot 的相同答案

Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator nginx, Installer nginx Obtaining a new certificate Performing the following challenges: http-01 challenge for sicocme.enterpriserealdomain.com http-01 challenge for www.sicocme.enterpriserealdomain.com Waiting for verification... Cleaning up challenges Failed authorization procedure. sicocme.enterpriserealdomain.com (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: dns :: DNS problem: NXDOMAIN looking up A for sicocme.enterpriserealdomain.com, www.sicocme.enterpriserealdomain.com (http-01): urn:ietf:params:acme:error:connection :: The server could not connect to the client to verify the domain :: dns :: DNS problem: NXDOMAIN looking up A for www.sicocme.enterpriserealdomain.com

IMPORTANT NOTES: - The following errors were reported by the server:

Domain: sicocme.enterpriserealdomain.com Type: connection
Detail: dns :: DNS problem: NXDOMAIN looking up A for
sicocme.enterpriserealdomain.com

Domain: www.sicocme.enterpriserealdomain.com Type: connection Detail: dns :: DNS problem: NXDOMAIN looking up A for
www.sicocme.enterpriserealdomain.com

To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address. Additionally, please check that
your computer has a publicly routable IP address and that no
firewalls are preventing the server from communicating with the
client. If you're using the webroot plugin, you should also verify
that you are serving files from the webroot path you provided.

当我检查我的域服务器时，A 记录对于 www 和 no-www 都有正确的 IP 地址。服务器可以访问网络，可以通过IP或域名访问或被访问，证明DNS域识别 native 并存在

我还确保允许使用 ufw 的正确端口

To                         Action      From
--                         ------      ----
443/tcp                    ALLOW       Anywhere
80/tcp                     ALLOW       Anywhere
22/tcp                     ALLOW       Anywhere
5432/tcp                   ALLOW       Anywhere
Nginx Full                 ALLOW       Anywhere
443/tcp (v6)               ALLOW       Anywhere (v6)
80/tcp (v6)                ALLOW       Anywhere (v6)
22/tcp (v6)                ALLOW       Anywhere (v6)
5432/tcp (v6)              ALLOW       Anywhere (v6)
Nginx Full (v6)            ALLOW       Anywhere (v6)

为什么会这样？提前致谢!

Answer 1

这是同一个问题，但与 Apache

然后查看服务器设置的A记录

 sudo certbot --apache -d DOMAIN_WOTHOUT_WWW -d DOMAIN_WITH_WWW

然后它会正常工作。