Server Admin Авторский блог системного администратора
Добрый день!
Переезжаю с шареда на VPS. Хотелось бы установить Centos8.
Использую ваши рекомендации. Возникла проблема при установке certbot (на шареде установлен Lets Encrypt).
СпойлерОшибкаhttp-01 challenge for *********
Waiting for verification...
Challenge failed for domain *****
http-01 challenge for ******
Cleaning up challenges
Some challenges have failed.
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: *****
Type: unauthorized
Detail: Invalid response from
https://*******.well-known/acme-challenge/D4HSgMFLQPKttnegB8e06yO4oCX-M2mkZtGv2P97R8U
[2a03:6f00:1::5c35:6082]: "<!DOCTYPE html>\n<html>\n<head>\n
<title>Ничего не найдено для Well Known Acme Challenge
D4Hsgmflqpkttnegb8E"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
- Your account credentials have been saved in your Certbot
configuration directory at /etc/letsencrypt. You should make a
secure backup of this folder now. This configuration directory will
also contain certificates and private keys obtained by Certbot so
making regular backups of this folder is ideal.
[root@***** ~]# nginx -t
nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/pma.********/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/pma.*********/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /etc/nginx/nginx.conf test failed
Как правильно переехать?
Добрый день!
Переезжаю с шареда на VPS. Хотелось бы установить Centos8.
Использую ваши рекомендации. Возникла проблема при установке certbot (на шареде установлен Lets Encrypt).
СпойлерОшибкаhttp-01 challenge for *********
Waiting for verification...
Challenge failed for domain *****
http-01 challenge for ******
Cleaning up challenges
Some challenges have failed.
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: *****
Type: unauthorized
Detail: Invalid response from
https://*******.well-known/acme-challenge/D4HSgMFLQPKttnegB8e06yO4oCX-M2mkZtGv2P97R8U
[2a03:6f00:1::5c35:6082]: "<!DOCTYPE html>\n<html>\n<head>\n
<title>Ничего не найдено для Well Known Acme Challenge
D4Hsgmflqpkttnegb8E"
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address.
- Your account credentials have been saved in your Certbot
configuration directory at /etc/letsencrypt. You should make a
secure backup of this folder now. This configuration directory will
also contain certificates and private keys obtained by Certbot so
making regular backups of this folder is ideal.
[root@***** ~]# nginx -t
nginx: [emerg] cannot load certificate "/etc/letsencrypt/live/pma.********/fullchain.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/pma.*********/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /etc/nginx/nginx.conf test failedКак правильно переехать?
Вы не получите сертификат через certbot, пока dns записи не перенастроены на новый сервер. Получите его первый раз в ручном режиме, через свой текущий хостинг и перенесите этот сертификат на новый сервер. После того, как на него перейдете и поменяете dns записи, сможете получать автоматически через certbot.
От рута запуск? Селинукс выключен?
1. От рута
2. Выключен
"перенесите этот сертификат на новый сервер"
Это главный вопрос - как?
Файлы сертификата и ключа имею.
