客户端和服务器不支持一般SSL协议版本或加密时间 The client and server do not support general SSL protocol version or encryption time

stevenzhu · May 20, 2018, 2:40am

因为Centos 7自带防火墙，本来就默认屏蔽所有端口。

我个人不建议关掉防火墙，如果你不用来做某些服务（你懂的），打开防火墙后添加这些规则比较合适 sudo firewall-cmd --add-service http,https,ssh (SSH 前提是你没有改ssh端口）

LE默认是连接端口80来验证网站所有权

sanwzzz · May 20, 2018, 2:40am

Can it be solved only by closing the firewall?

sanwzzz · May 20, 2018, 2:42am

okay，I’ll try it.
thanks

schoen · May 20, 2018, 2:42am

If you want to use the HTTP-01 challenge and not the DNS-01 challenge, then you need to be able to receive incoming port 80 connections on your server.

rg305 · May 20, 2018, 2:42am

Please...……………………...

sanwzzz · May 20, 2018, 2:46am

未找到服务 111

sanwzzz · May 20, 2018, 2:47am

111

stevenzhu · May 20, 2018, 2:47am

对对对…抱歉…

sudo firewall-cmd --add-service http
sudo firewall-cmd --add-service https
sudo firewall-cmd --add-service ssh

建议要么换个SSH端口，要么弄个Fail2ban…

还有…必须要用caddy嘛…

sanwzzz · May 20, 2018, 2:49am

caddy简单点…Apache, nginx太难…

rg305 · May 20, 2018, 2:52am

There is no service running on port 80 nor on port 443.

stevenzhu · May 20, 2018, 2:52am

我觉得你可以看一下这个文件…
Check this page out…

https://segmentfault.com/a/1190000008742322
虚拟主机节

谢谢

sanwzzz · May 20, 2018, 2:55am

thanks,The problem has been solved. firewallprotection is not closed

system · June 19, 2018, 2:55am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.