无法使用 Let's Encrypt 在我的网站上安装 SSL

编程问答 2022-05-20

问题描述

我正在尝试按照本指南在我的网站上安装 SSL https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-20-04

如您所料，我使用的是 ubuntu 20.04，并且在我在问题“您要为哪些名称激活 HTTPS？有这个输出：

Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: sugacards.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces,or leave input
blank to select all options shown (Enter 'c' to cancel): 
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for sugacards.com
Enabled Apache rewrite module
Waiting for verification...

Challenge Failed for domain sugacards.com
http-01 challenge for sugacards.com
Cleaning up challenges
Some challenges have Failed.

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: sugacards.com
   Type:   unauthorized
   Detail: Invalid response from
   http://sugacards.com/.well-kNown/acme-challenge/FA0pB7nMEk0_VIaeQPJStKNlXKX5kTqcvHmUi5ESVJ0
   [31.220.55.52]: "<!DOCTYPE HTML PUBLIC \"-//IETF//DTD HTML
   2.0//EN\">\n<html><head>\n<title>404 Not
   Found</title>\n</head><body>\n<h1>Not Found</h1>\n<p"

   To fix these errors,please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

我该如何解决这个问题？这是我第一次在 vps 上安装 SSL，所以这可能是一个愚蠢的问题，但仍然感谢任何答案:)

解决方法

他们需要验证您确实拥有该域，因为 SSL 证书基于信任。为了保持信任，他们需要确保永远不会向不是特定域所有者的个人颁发证书。他们这样做的方式是为您提供一个挑战文件，您需要将该文件托管在您的网站上：

http://sugacards.com/.well-known/acme-challenge/FA0pB7nMEk0_VIaeQPJStKNlXKX5kTqcvHmUi5ESVJ0

一旦该文件托管在那里，他们就会向该地址发出请求，以验证您确实拥有该网站。您需要做的就是在该路由上托管该文件。您这样做的方式取决于您的网站的托管方式。

如果您提供有关如何托管网站的更多详细信息，我可以编辑此答案并提供有关如何操作的更多详细信息。

,

原来我只需要这样做：

sudo ufw enable

:D

lets-encryptsshsshsshsslubuntuvpsvps