renew letsencrypt certificates

更新 letsencrypt 的证书

今天收到邮件,说我的letsencrypt证书快要过期了,好吧,那登录上去renew一下。

sudo letsencrypt renew

结果报错了

2016-08-12 02:47:26,054:WARNING:letsencrypt.cli:Attempting to renew cert from /etc/letsencrypt/renewal/www.chenghu.me.conf produced an unexpected error: 'server'. Skipping.

悲剧,好吧,找一下了。

这里 有人说是0.4.1创建的证书的配置文件少一些字段。新版本的就可以。

这不就so easy了。

创建一个新的证书,复制里面的renewalparams字段覆盖原配置中的renewalparams字段,然后再renew就好了

对比一下老版本renewalparams字段

[renewalparams]
authenticator = standalone
installer = None
account = xxxxxxxxxxx

新版本的renewalparams字段

[renewalparams]
no_self_upgrade = False
no_verify_ssl = False
ifaces = None
register_unsafely_without_email = False
uir = None
installer = none
config_dir = /etc/letsencrypt
text_mode = False
staging = False
dry_run = False
work_dir = /var/lib/letsencrypt
tos = False
duplicate = False
http01_port = 80
init = False
noninteractive_mode = False
key_path = None
fullchain_path = None
email = None
csr = None
agree_dev_preview = None
redirect = None
verbose_count = -3
config_file = None
renew_by_default = False
hsts = False
authenticator = standalone
nginx = False
rsa_key_size = 2048
verb = renew
checkpoints = 1
manual_test_mode = False
apache = False
cert_path = None
webroot_path = ,
reinstall = False
expand = False
strict_permissions = False
account = xxxxxxxxxxxxxxxxx
prepare = False
manual_public_ip_logging_ok = False
chain_path = None
break_my_certs = False
domains = ftp.chenghu.me,
standalone = False
manual = False
server = https://acme-v01.api.letsencrypt.org/directory
standalone_supported_challenges = "tls-sni-01,http-01"
webroot = False
os_packages_only = False
func = <function renew at 0x7f655c98e2a8>
user_agent = None
debug = False
tls_sni_01_port = 443
logs_dir = /var/log/letsencrypt
configurator = None
[[webroot_map]]

需要的同学可以直接复制,记得替换自己的account字段和domains字段。

Comments !

blogroll

social