ssl 在Apache服务器上部署Mercure

fcipmucu  于 2022-11-14  发布在  Apache
关注(0)|答案(1)|浏览(182)

我在ovh服务器上用Symfony 4.4在生产模式下设置Mercure时遇到了问题。它在开发模式下工作得很好,但是当我试图在生产模式下部署它时,我遇到了这个问题。

loading initial config: loading new config: http app module: start: tcp: listening on :443: listen tcp :443: bind: address already in use

这是我的球童档案

{
#       {$GLOBAL_OPTIONS}
}

{$SERVER_NAME:monsite.fr}

log

route {
        redir / /.well-known/mercure/ui/
        encode zstd gzip

        mercure {
                # Transport to use (default to Bolt)
                transport_url {$MERCURE_TRANSPORT_URL:bolt://mercure.db}
                # Publisher JWT key
                publisher_jwt {env.MERCURE_PUBLISHER_JWT_KEY} {env.MERCURE_PUBLISHER_JWT_ALG}
                # Subscriber JWT key
                subscriber_jwt {env.MERCURE_SUBSCRIBER_JWT_KEY} {env.MERCURE_SUBSCRIBER_JWT_ALG}
                # Permissive configuration for the development environment
                cors_origins *
                publish_origins *
                demo
                anonymous
                subscriptions
                # Extra directives
                {$MERCURE_EXTRA_DIRECTIVES}
        }

        respond /healthz 200

        respond "Not Found" 404
}

因此,我尝试将端口更改为端口3000,但随后出现以下错误:

2022/08/29 11:28:41.230 ERROR   tls.issuance.acme.acme_client   deactivating authorization  {"identifier": "monsite.fr", "authz": "https://acme.zerossl.com/v2/DV90/authz/BXGXc1Fhb2xL6WN4PNWyGw", "error": "request to https://acme.zerossl.com/v2/DV90/authz/BXGXc1Fhb2xL6WN4PNWyGw failed after 1 attempts: context canceled"}
2022/08/29 11:28:41.230 ERROR   tls.obtain  could not get certificate from issuer   {"identifier": "monsite.fr", "issuer": "acme.zerossl.com-v2-DV90", "error": "[monsite.fr] solving challenges: [monsite.fr] context canceled (order=https://acme.zerossl.com/v2/DV90/order/Db-LeFrtzvBUllnxtuU8og) (ca=https://acme.zerossl.com/v2/DV90)"}
2022/08/29 11:28:41.230 INFO    tls.obtain  releasing lock  {"identifier": "monsite.fr"}
2022/08/29 11:28:41.230 ERROR   tls.obtain  unable to unlock    {"identifier": "monsite.fr", "lock_key": "issue_cert_monsite.fr", "error": "remove /root/.local/share/caddy/locks/issue_cert_monsite.fr.lock: no such file or directory"}
2022/08/29 11:28:41.230 ERROR   tls job failed  {"error": "monsite.fr: obtaining certificate: [monsite.fr] Obtain: [monsite.fr] solving challenges: [monsite.fr] context canceled (order=https://acme.zerossl.com/v2/DV90/order/Db-LeFrtzvBUllnxtuU8og) (ca=https://acme.zerossl.com/v2/DV90)"}

我在域上有Let's Encrypt证书,但我在Web上发现更改端口不适用于Let Encrypt。
但是端口80和443已经在使用中了,请问我该怎么做才能让它工作?

deyfvvtc

deyfvvtc1#

我遇到了同样的问题,这使它工作:
停止使用端口443的程序,启动mercure服务器(它将获得证书),重新启动使用端口443的程序。
然而,我不确定证书续订是否正常工作。

相关问题