Алексей Казарин (Все сообщения пользователя)

Processing site1.ru
with alternative names: site2.com

 + Checking domain name(s) of existing cert...
changed!

 + Domain name(s) are not matching!

 + Names in old certificate: site1.ru

 + Configured names: site1.ru site2.com

 + Forcing renew.

 + Checking expire date of existing cert...

 + Valid till Oct 30 08:00:13 2019 GMT (Longer
than 20 days). Ignoring because renew was forced!

 + Signing domains...

 + Generating private key...

 + Generating signing request...

 + Requesting authorization for site1.ru...

 + Found valid authorization for site1.ru

 + Requesting authorization for site2.com...

 + 1 pending challenge(s)

 + Deploying challenge tokens...

 + Responding to challenge for site2.com
authorization...

 + Challenge is valid!

 + Cleaning challenge tokens...

 + Requesting certificate...

 + Checking certificate...

 + Done!

 + Creating fullchain.pem...

 + Using cached chain!

 + Done!

Processing site2.com

 + Checking domain name(s) of existing cert...
unchanged.

 + Checking expire date of existing cert...

 + Valid till Aug 26 17:06:03 2019 GMT (Longer
than 20 days). Skipping renew!

Stopping
nginx: [  OK  ]^M

Starting nginx: [ 
OK  ]^M

 

Separate multiple entries with a comma. Example: default, test

Enter site name (default):

Separate multiple entries with a comma. Example: www.example.org, example.org

Enter DNS name(s):

 INFO: Using main config file /home/bitrix/dehydrated/config
Processing aspire.vpn.domain
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting authorization for aspire.vpn.domain...
 + 1 pending challenge(s)
 + Deploying challenge tokens...
 + Responding to challenge for aspire.vpn.domain authorization...
 + Cleaning challenge tokens...
 + Challenge validation has failed :(
ERROR: Challenge is invalid! (returned: invalid) (result: {
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:acme:error:unauthorized",
    "detail": "Invalid response from http://aspire.vpn.domain/.well-known/acme-challenge/sQvrZWkOvJliQHn2cCWLMk9SArOW70yykIT1ljJiUr4 [84.53.239.12]: \"\u003c!DOCTYPE html\u003e\\r\\n\u003chtml class=\\\"no-js\\\" lang=\\\"ru\\\"\u0
    "status": 403
  },
  "uri": "https://acme-v01.api.letsencrypt.org/acme/challenge/dP2FeUQ4CuAVqjc6_KCObF9AWMAe_9L9VXysjuiNa6U/15979104919",
  "token": "sQvrZWkOvJliQHn2cCWLMk9SArOW70yykIT1ljJiUr4",
  "validationRecord": [
    {
      "url": "http://aspire.vpn.domain/.well-known/acme-challenge/sQvrZWkOvJliQHn2cCWLMk9SArOW70yykIT1ljJiUr4",
      "hostname": "aspire.vpn.domain",
      "port": "80",
      "addressesResolved": [
        "84.53.239.12"
      ],
      "addressUsed": "84.53.239.12"
    }
  ]
})

# INFO: Using main config file /home/bitrix/dehydrated/config
Processing test1.test2.test3.ru
 + Signing domains...
 + Generating private key...
 + Generating signing request...
 + Requesting authorization for test1.test2.test3.ru...
 + 1 pending challenge(s)
 + Deploying challenge tokens...
 + Responding to challenge for test1.test2.test3.ru authorization...
 + Cleaning challenge tokens...
 + Challenge validation has failed 
ERROR: Challenge is invalid! (returned: invalid) (result: {
  "type": "http-01",
  "status": "invalid",
  "error": {
    "type": "urn:acme:error:unauthorized",
    "detail": "Invalid response from http://test1.test2.test3.ru/.well-known/acme-challenge/fC64wBOlDGHyG9PjeYzis6kC6YWpj39QxBdzUSGYp5I  500",
    "status": 403
  },
  "uri": "https://acme-staging.api.letsencrypt.org/acme/challenge/OXjY9MCjBxlRymmsaZxmmgRZP0ZLn0BJPCl8wP1bUGU/...;,
  "token": "fC64wBOlDGHyG9PjeYzis6kC6YWpj39QxBdzUSGYp5I",
  "validationRecord": [
    {
      "url": "http://test1.test2.test3.ru/.well-known/acme-challenge/fC64wBOlDGHyG9PjeYzis6kC6YWpj39QxBdzUSGYp5I...;,
      "hostname": "test1.test2.test3.ru",
      "port": "80",
      "addressesResolved": [
        "84.53.212.116",
        
      ],
      
    }
  ]
})

bx_ext_jira.kc.conf   [----] 77 L:[  1+ 4   5/ 99] *(273 /2605b) 0010 0x00A
# Ansible managed: /etc/ansible/roles/web/templates/httpd/bx_apache_site.conf.j2 modified on 2014-08-18 16:17:35 by root on newserver.kc
# site: jira.kc

<------>ServerName  jira.kc
<------>ServerAlias www.jira.kc www.jira.domain.net jira.domain.net
<------>ServerAdmin webmaster@localhost
<------>DocumentRoot  /home/bitrix/ext_www/jira.kc

<------>ErrorLog logs/jira_error_log
<------>LogLevel warn
<------>CustomLog logs/jira_access_log combined

<------><IfModule mod_rewrite.c>
<------><------>#Nginx should have "proxy_set_header HTTPS YES;" in location
<------><------>RewriteEngine On
<------><------>RewriteCond %{HTTP:HTTPS} =YES
<------><------>RewriteRule .* - [E=HTTPS:on,L]
<------></IfModule>

...
...

<------><Directory />
<------><------>Options FollowSymLinks
<------><------>AllowOverride None
<------></Directory>

<------><DirectoryMatch .*\.svn/.*>
<------><------> Deny From All
<------></DirectoryMatch>

<------><DirectoryMatch .*\.git/.*>
<------><------> Deny From All
<------></DirectoryMatch>

<------><DirectoryMatch .*\.hg/.*>
<------><------> Deny From All
<------></DirectoryMatch>

<------><Directory /home/bitrix/ext_www/jira.kc>
<------><------>Options Indexes FollowSymLinks MultiViews
<------><------>AllowOverride All
<------><------>DirectoryIndex index.php index.html index.htm
<------><------>Order allow,deny
<------><------>allow from all
    php_admin_value session.save_path /tmp/php_sessions/ext_www/jira.kc
    php_admin_value 

# Ansible managed: /etc/ansible/roles/web/templates/nginx/http_newsite_template.conf.j2 modified on 2014-08-18 16:17:35 by root on newserver.kc
# Additional website http
server {
    listen 80 ;
..
    server_name jira.kc www.jira.kc www.jira.domain.net jira.domain.net;
..
  access_log /var/log/nginx/jira_access.log main;
  error_log  /var/log/nginx/jira_error.log warn;

location / {
    proxy_pass<>http://192.168.0.55/;
             proxy_redirect off;
                 }
.................
}