{"id":1848,"date":"2020-08-27T21:08:01","date_gmt":"2020-08-27T13:08:01","guid":{"rendered":"http:\/\/www.youthtribe.com\/?p=1848"},"modified":"2020-08-27T21:13:11","modified_gmt":"2020-08-27T13:13:11","slug":"lets-encrypt-certbot-renew-%e9%81%87%e5%88%b0%e7%9a%84%e9%97%ae%e9%a2%98-ocsp-are-we-offline","status":"publish","type":"post","link":"http:\/\/www.youthtribe.com\/archives\/1848","title":{"rendered":"lets encrypt certbot renew \u9047\u5230\u7684\u95ee\u9898 [ocsp…are we offline?]"},"content":{"rendered":"\n

\u5728\u6267\u884c\u81ea\u52a8\u66f4\u65b0\u547d\u4ee4\u65f6\uff0c\u51fa\u9519\u4e86\uff0c\u4e3a\u5982\u4e0b\u63d0\u793a<\/p>\n\n\n

WARNING: unable to check for updates.\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nProcessing \/etc\/letsencrypt\/renewal\/dajuan.com.conf\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\nOCSP check failed for \/etc\/letsencrypt\/archive\/dajuan.com\/cert1.pem (are we offline?)\nTraceback (most recent call last):\n  File \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/certbot\/ocsp.py\", line 188, in _check_ocsp_cryptography\n    timeout=timeout)\n  File \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/requests\/api.py\", line 119, in post\n    return request('post', url, data=data, json=json, **kwargs)\n  File \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/requests\/api.py\", line 61, in request\n    return session.request(method=method, url=url, **kwargs)\n  File \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/requests\/sessions.py\", line 530, in request\n    resp = self.send(prep, **send_kwargs)\n  File \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/requests\/sessions.py\", line 643, in send\n    r = adapter.send(request, **kwargs)\n  File \"\/opt\/eff.org\/certbot\/venv\/lib\/python2.7\/site-packages\/requests\/adapters.py\", line 516, in send\n    raise ConnectionError(e, request=request)\nConnectionError: HTTPConnectionPool(host='ocsp.int-x3.letsencrypt.org', port=80): Max retries exceeded with url: \/ (Caused by NewConnectionError(': Failed to establish a new connection: [Errno 113] No route to host',))\nCert not yet due for renewal\n\n- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -\n\nThe following certs are not due for renewal yet:\n  \/etc\/letsencrypt\/live\/dajuan.com\/fullchain.pem expires on 2020-11-25 (skipped)\nNo renewals were attempted.\n\n<\/pre>\n\n\n

\u8fd9\u662f\u662f\u9996\u884c\u7684\u9519\u8bef\u63d0\u793a\uff1a<\/p>\n\n\n\n

OCSP check failed for \/etc\/letsencrypt\/archive\/dajuan.com\/cert1.pem (are we offline?)<\/p>\n\n\n\n

\u7ecf\u641c\u7d22\u539f\u56e0\uff1a\u539f\u56e0\u662f ocsp.int-x3.letsencrypt.org \u7684 cname \u57df\u540d a771.dscq.akamai.net \u53d7\u5230\u4e86\u5e72\u6270\u3002
\u53ef\u4ee5\u91c7\u7528\u672c\u5730\u4fee\u6539hosts\u7684\u65b9\u6848\u8fdb\u884c\u4e34\u65f6\u5904\u7406\uff0c\u5728\/etc\/hosts\u4e2d\u6dfb\u52a0 <\/p>\n\n\n\n

23.32.3.72     ocsp.int-x3.letsencrypt.org<\/code><\/pre>\n\n\n\n

\u7136\u540e\u518d\u6267\u884c <\/p>\n\n\n\n

certbot-auto renew<\/p>\n\n\n\n

\u5c31\u662f\u5982\u4e0b\u7684\u63d0\u793a\u4e86<\/p>\n\n\n\n

[root@VM-0-7-centos ~]# certbot-auto renew
WARNING: unable to check for updates.
Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log

Processing \/etc\/letsencrypt\/renewal\/dajuan.com.conf

Cert not yet due for renewal

The following certs are not due for renewal yet:
\/etc\/letsencrypt\/live\/dajuan.com\/fullchain.pem expires on 2020-11-25 (skipped)
No renewals were attempted.
<\/pre>\n","protected":false},"excerpt":{"rendered":"

\u5728\u6267\u884c\u81ea\u52a8\u66f4\u65b0\u547d\u4ee4\u65f6\uff0c\u51fa\u9519\u4e86\uff0c\u4e3a\u5982\u4e0b\u63d0\u793a WARNING: unable to check for updates. Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – – Processing \/etc\/letsencrypt\/renewal\/dajuan.com.conf – – – – – – – – – – – – – – – – – – – – – – – – – – <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/posts\/1848"}],"collection":[{"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/comments?post=1848"}],"version-history":[{"count":3,"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/posts\/1848\/revisions"}],"predecessor-version":[{"id":1851,"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/posts\/1848\/revisions\/1851"}],"wp:attachment":[{"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/media?parent=1848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/categories?post=1848"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.youthtribe.com\/wp-json\/wp\/v2\/tags?post=1848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}