使用dokku letsencrypt插件时出现“无法获取本地发行者证书”错误

时间:2019-07-13 01:07:16

标签: ssl nginx dokku

我通过使用dokku-letsencrypt插件向在dokku上运行的buildpack应用程序添加了SSL证书,但是在运行dokku certs:report时出现错误:

CN = mysite.com
error 20 at 0 depth lookup: unable to get local issuer certificate
=====> mysite.com ssl information
       Ssl dir:                       /home/dokku/mysite.com/tls
       Ssl enabled:                   true
       Ssl hostnames:                 mysite.com
       Ssl expires at:                Oct 10 22:24:52 2019 GMT
       Ssl issuer:                    C = US, O = Lets Encrypt, CN = Lets Encrypt Authority X3
       Ssl starts at:                 Jul 12 22:24:52 2019 GMT
       Ssl subject:                   subject=CN = mysite.com
       Ssl verified:                  self signed

证书的初始安装成功:

=====> Let's Encrypt mysite.com
-----> Updating letsencrypt docker image...
latest: Pulling from dokkupaas/letsencrypt-simp_le
2fdfe1cd78c2: Pull complete                                                                                             14c299a8553e: Pull complete                                                                                             9c300f8e499f: Pull complete                                                                                             Digest: sha256:95681f7cd659f23f451738121df9efe42ffc919e93a969781c40e936258fea72
Status: Downloaded newer image for dokkupaas/letsencrypt-simp_le:latest
       done updating
-----> Enabling ACME proxy for mysite.com...
-----> Getting letsencrypt certificate for mysite.com...
        - Domain 'mysite.com'
darkhttpd/1.12, copyright (c) 2003-2016 Emil Mikulic.
listening on: http://0.0.0.0:80/
2019-07-12 23:24:50,043:INFO:__main__:1211: Generating new account key
2019-07-12 23:24:51,167:INFO:__main__:1305: mysite.com was successfully self-verified
2019-07-12 23:24:51,254:INFO:__main__:1313: Generating new certificate private key
2019-07-12 23:24:52,802:INFO:__main__:391: Saving account_key.json
2019-07-12 23:24:52,803:INFO:__main__:391: Saving fullchain.pem
2019-07-12 23:24:52,803:INFO:__main__:391: Saving chain.pem
2019-07-12 23:24:52,803:INFO:__main__:391: Saving cert.pem
2019-07-12 23:24:52,804:INFO:__main__:391: Saving key.pem
-----> Certificate retrieved successfully.
-----> Installing let's encrypt certificates
-----> Configuring mysite.com...(using built-in template)
-----> Creating https nginx.conf
-----> Running nginx-pre-reload
       Reloading nginx
-----> Configuring mysite.com...(using built-in template)
-----> Creating https nginx.conf
-----> Running nginx-pre-reload
       Reloading nginx
-----> Disabling ACME proxy for mysite.com...
       done

默认情况下,我的服务器(AWS Lightsail)防火墙未配置为处理HTTPS流量,因此我必须在“网络”部分中对其进行更新。

我不确定该错误告诉我什么,因为我可以成功导航到HTTPS网址?

0 个答案:

没有答案