获取证书失败



  • 之前用vultr的服务器,使用站内的一键伪装脚本配置v2ray一切正常,可以上外网,只是速度太慢,于是购买了站内推荐的cubecloud魔方云新加坡服务器准备试一试,结果一键伪装脚本安装到最后时出现获取证书失败问题(以下我的域名用xxx取代),前提我的域名已经正常解析到了服务器ip
    http-01 challenge for xxx
    Waiting for verification...
    Challenge failed for domain xxx
    http-01 challenge for xxx
    Cleaning up challenges
    Some challenges have failed.

    IMPORTANT NOTES:

    • The following errors were reported by the server:

      Domain: xxx
      Type: connection
      Detail: Fetching
      http://xxx/.well-known/acme-challenge/FUgG_J9bL_SWcKLnsuXtdlVXG3pRXKH1gyoR9W-GE1A:
      Error getting validation data

      To fix these errors, please make sure that your domain name was
      entered correctly and the DNS A/AAAA record(s) for that domain
      contain(s) the right IP address. Additionally, please check that
      your computer has a publicly routable IP address and that no
      firewalls are preventing the server from communicating with the
      client. If you're using the webroot plugin, you should also verify
      that you are serving files from the webroot path you provided.

    • Your account credentials have been saved in your Certbot
      configuration directory at /etc/letsencrypt. You should make a
      secure backup of this folder now. This configuration directory will
      also contain certificates and private keys obtained by Certbot so
      making regular backups of this folder is ideal.
      获取证书失败,请到 https://www.hijk.pw 反馈

    后续试了不带伪装的脚本,能安装成功但是也无法上外网
    试了试trojan一键脚本,在获取证书时出现和v2ray一模一样的问题,求助!



  • 字面意思看有可能是DNS的问题,不妨检查一下或者重新加一个类似www2之类的新解析试试。还提到了可能跟防火墙有关,建议检查443等接口(如果没有修改的话)是否放行,尤其是部分服务提供商还有上级防火墙,就在服务提供商的面板里,那个也需要放行。具体请等待@hijk 解答



  • 看起来是防火墙没有开



  • @lostzzz 看了一下,是你的vps服务商没有用firewalld,而是用iptables,导致获取失败。

    我已经帮你把环境弄好,你登录进去执行命令安装就可以了



  • 经大神指导,问题已解决,先运行service iptables stop,然后再运行一键脚本,后来的同学碰到一样问题的可以参考一下


登录后回复