[GH-ISSUE #1243 ] 证书申请报错 #5112

Author

Owner

@liuhd92 commented on GitHub (Jul 19, 2025):

没有您说的这几个按钮

@liuhd92 commented on GitHub (Jul 19, 2025): <img width="3152" height="964" alt="Image" src="https://github.com/user-attachments/assets/482510ad-e8f9-4489-83db-9afe557486b8" />没有您说的这几个按钮

kerem commented

Author

Owner

@0xJacky commented on GitHub (Jul 19, 2025):

更新一下到最新的版本

@0xJacky commented on GitHub (Jul 19, 2025): 更新一下到最新的版本

kerem commented

Author

Owner

@liuhd92 commented on GitHub (Jul 19, 2025):

国内的ecs无法访问到github的资源下载地址，有国内的地址代替吗

@liuhd92 commented on GitHub (Jul 19, 2025): 国内的ecs无法访问到github的资源下载地址，有国内的地址代替吗

kerem commented

Author

Owner

@0xJacky commented on GitHub (Jul 19, 2025):

安装最新稳定版本

bash -c "$(curl -L https://cloud.nginxui.com/install.sh)" @ install -r https://cloud.nginxui.com/

@0xJacky commented on GitHub (Jul 19, 2025): # 安装最新稳定版本 bash -c "$(curl -L https://cloud.nginxui.com/install.sh)" @ install -r https://cloud.nginxui.com/

kerem commented

Author

Owner

@0xJacky commented on GitHub (Jul 19, 2025):

这个应该是可以在大陆 ECS 高速下载的

@0xJacky commented on GitHub (Jul 19, 2025): 这个应该是可以在大陆 ECS 高速下载的

kerem commented

Author

Owner

@0xJacky commented on GitHub (Jul 19, 2025):

更新到最新版之后，后续的 OTA 都会通过 cloud.nginxui.com 代理而不是直接从 github 下载

@0xJacky commented on GitHub (Jul 19, 2025): 更新到最新版之后，后续的 OTA 都会通过 cloud.nginxui.com 代理而不是直接从 github 下载

kerem commented

Author

Owner

@liuhd92 commented on GitHub (Jul 19, 2025):

版本已更新，但是没有，还是报错
正在获取证书，请稍等...

[Nginx UI] 正在准备 lego 配置

[Nginx UI] ACME 用户：System Initial User，邮箱：liuhd92@163.com，CA 目录：https://acme-v02.api.letsencrypt.org/directory

[Nginx UI] 正在创建客户端用于与 CA 服务器通信

[Nginx UI] 正在设置 HTTP01 验证提供程序

[Nginx UI] 正在获取证书

2025/07/19 19:03:12 [INFO] [www.yujianfengkong.cn] acme: Obtaining bundled SAN certificate

2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/2071784517/555511550371

2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] acme: Could not find solver for: tls-alpn-01

2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] acme: use http-01 solver

2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] acme: Trying to solve HTTP-01

2025/07/19 19:03:21 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz/2071784517/555511550371

obtain cert error: error: one or more domains had a problem: [www.yujianfengkong.cn] invalid authorization: acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 222.210.35.11: Invalid response from http://www.yujianfengkong.cn/.well-known/acme-challenge/IIng3QcCNig2RpPR3FtvwrDuiunrmnEVLN3kWGjUZxE: 403

@liuhd92 commented on GitHub (Jul 19, 2025): 版本已更新，但是没有，还是报错正在获取证书，请稍等... [Nginx UI] 正在准备 lego 配置 [Nginx UI] ACME 用户：System Initial User，邮箱：liuhd92@163.com，CA 目录：https://acme-v02.api.letsencrypt.org/directory [Nginx UI] 正在创建客户端用于与 CA 服务器通信 [Nginx UI] 正在设置 HTTP01 验证提供程序 [Nginx UI] 正在获取证书 2025/07/19 19:03:12 [INFO] [www.yujianfengkong.cn] acme: Obtaining bundled SAN certificate 2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/2071784517/555511550371 2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] acme: Could not find solver for: tls-alpn-01 2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] acme: use http-01 solver 2025/07/19 19:03:13 [INFO] [www.yujianfengkong.cn] acme: Trying to solve HTTP-01 2025/07/19 19:03:21 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz/2071784517/555511550371 obtain cert error: error: one or more domains had a problem: [www.yujianfengkong.cn] invalid authorization: acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 222.210.35.11: Invalid response from http://www.yujianfengkong.cn/.well-known/acme-challenge/IIng3QcCNig2RpPR3FtvwrDuiunrmnEVLN3kWGjUZxE: 403

kerem commented

Author

Owner

@liuhd92 commented on GitHub (Jul 19, 2025):

也设置模版了

@liuhd92 commented on GitHub (Jul 19, 2025): 也设置模版了

kerem commented

Author

Owner

@0xJacky commented on GitHub (Jul 19, 2025):

噢我知道了，你是不是现有的配置文件里设置了 .well-known deny

@0xJacky commented on GitHub (Jul 19, 2025): 噢我知道了，你是不是现有的配置文件里设置了 .well-known deny

kerem commented

Author

Owner

@liuhd92 commented on GitHub (Jul 19, 2025):

没有哦

@liuhd92 commented on GitHub (Jul 19, 2025): <img width="1378" height="1232" alt="Image" src="https://github.com/user-attachments/assets/b3dabaae-069b-4708-a9f6-bc4828da3b86" />没有哦

kerem commented

Author

Owner

@0xJacky commented on GitHub (Jul 19, 2025):

要看 www. 的不是 t.

@0xJacky commented on GitHub (Jul 19, 2025): 要看 www. 的不是 t.

kerem commented

Author

Owner

@liuhd92 commented on GitHub (Jul 19, 2025):

map $http_upgrade $connection_upgrade {
default upgrade;
'' close;
}
server {
listen 80;
server_name www.yujianfengkong.cn;
root /home/projects/php/yjfk-gw-service/public;
index index.php index.html;
# 详细的错误日志
error_log /var/log/nginx/yjgw_error.log debug;
access_log /var/log/nginx/yjgw_access.log combined;
location / {
index index.php index.html;
if (!-e $request_filename) {
rewrite ^(.+?.php)(/.+)$ /$1?s=$2 last;
rewrite ^/(.)$ /index.php?s=$1 last;
}
autoindex off;
}
# 注册落地页
location ^~ /landing {
alias /home/projects/web/yjfk-landing-release/;
index index.html;
try_files $uri $uri/ /landing/index.html =404;
}
# h5进件
location ^~ /h5 {
alias /home/projects/web/yjfk-h5-release/;
index index.html;
try_files $uri $uri/ /h5/index.html =404;
}
location ~ .php(.)$ {
#location ~ [^/].php(/|$) {
# PHP-FPM 配置
fastcgi_pass unix:/run/php/php8.3-fpm.sock;
fastcgi_index index.php;
fastcgi_split_path_info ^((?U).+.php)(/?.+)$;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
include fastcgi_params;
}
# 静态文件缓存
location * .(js|css|png|jpg|jpeg|gif|ico|svg)$ {
expires max;
log_not_found off;
access_log off;
try_files $uri =404;
}
# favicon.ico
location = /favicon.ico {
access_log off;
log_not_found off;
try_files $uri =404;
}
# robots.txt
location = /robots.txt {
access_log off;
log_not_found off;
}
# 阻止直接访问 chrome-extension
location ^ /chrome-extension/ {
return 404;
}
# 禁止访问隐藏文件
location ~ /. {
deny all;
}
# 禁止访问 PHP 文件备份
location ~ .*.(php~|php#|php.bak|php.old)$ {
deny all;
}
location ~ /.well-known/acme-challenge {
proxy_set_header Host $host;
proxy_set_header X-Real_IP $remote_addr;
proxy_set_header X-Forwarded-For $remote_addr:$remote_port;
proxy_pass http://127.0.0.1:9180;
}
}

@liuhd92 commented on GitHub (Jul 19, 2025): map $http_upgrade $connection_upgrade { default upgrade; '' close; } server { listen 80; server_name www.yujianfengkong.cn; root /home/projects/php/yjfk-gw-service/public; index index.php index.html; # 详细的错误日志 error_log /var/log/nginx/yjgw_error.log debug; access_log /var/log/nginx/yjgw_access.log combined; location / { index index.php index.html; if (!-e $request_filename) { rewrite ^(.+?\.php)(/.+)$ /$1?s=$2 last; rewrite ^/(.*)$ /index.php?s=$1 last; } autoindex off; } # 注册落地页 location ^~ /landing { alias /home/projects/web/yjfk-landing-release/; index index.html; try_files $uri $uri/ /landing/index.html =404; } # h5进件 location ^~ /h5 { alias /home/projects/web/yjfk-h5-release/; index index.html; try_files $uri $uri/ /h5/index.html =404; } location ~ \.php(.*)$ { #location ~ [^/]\.php(/|$) { # PHP-FPM 配置 fastcgi_pass unix:/run/php/php8.3-fpm.sock; fastcgi_index index.php; fastcgi_split_path_info ^((?U).+\.php)(/?.+)$; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_param PATH_INFO $fastcgi_path_info; fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info; include fastcgi_params; } # 静态文件缓存 location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ { expires max; log_not_found off; access_log off; try_files $uri =404; } # favicon.ico location = /favicon.ico { access_log off; log_not_found off; try_files $uri =404; } # robots.txt location = /robots.txt { access_log off; log_not_found off; } # 阻止直接访问 chrome-extension location ^~ /chrome-extension/ { return 404; } # 禁止访问隐藏文件 location ~ /\. { deny all; } # 禁止访问 PHP 文件备份 location ~ .*\.(php~|php#|php.bak|php.old)$ { deny all; } location ~ /.well-known/acme-challenge { proxy_set_header Host $host; proxy_set_header X-Real_IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr:$remote_port; proxy_pass http://127.0.0.1:9180; } }

kerem commented

Author

Owner

@liuhd92 commented on GitHub (Jul 19, 2025):

@liuhd92 commented on GitHub (Jul 19, 2025): <img width="1632" height="1474" alt="Image" src="https://github.com/user-attachments/assets/3ba48b36-cda6-4acc-8b33-7b0b4e4c6a3b" /> <img width="1232" height="1272" alt="Image" src="https://github.com/user-attachments/assets/5eb82158-8655-4ec6-a0c8-bc22ac9a4396" />

kerem commented

Author

Owner

@0xJacky commented on GitHub (Jul 19, 2025):

把这个移除吧

@0xJacky commented on GitHub (Jul 19, 2025): ![image](https://github.com/user-attachments/assets/ccec4a76-a016-45a7-95c9-e1c4a24ce22c) 把这个移除吧

kerem commented