成功生成证书,配置在域名上却无法使用

我通过certbot certonly --manual --preferred-challenges http -d www.dev.rs.cicc.com生成证书
但是生成的证书却无法生效,日期显示已经更新了,但是访问页面显示的是

20230216-112500

Using --manual only updates the certificate.
You must restart (or reload) the web service for it to use the latest certificate.

That said, there are several certificates with the name "www.dev.rs.cicc.com" on it.
The command shown would only renew that single name.
The certificate being used at that site contains many other names:

X509v3 Subject Alternative Name: 
DNS:awp-mobile-web.dev.rs.cicc.com
DNS:awp-mobile-web.qa.rs.cicc.com
DNS:awp-mobile-web.uat.rs.cicc.com
DNS:dev.rs.cicc.com
DNS:qa.rs.cicc.com
DNS:sso.dev-rs.cicc.com
DNS:sso.uat-rs.cicc.com
DNS:uat.rs.cicc.com
DNS:www.dev.rs.cicc.com
DNS:www.qa.rs.cicc.com
DNS:www.uat.rs.cicc.com

When renewing certificates, it is best to use only:
certbot renew

That said, you may have good reason to be using "--manual" and your certificate renewals might not be able to be automated.
There is not enough information known to be certain of such a situation.

3 Likes

没有理解您说的内容,我知道的是有一个ssl证书不就可以给所有的二级域名进行配置了吗

I'm sorry.
Maybe the translation is not good.

Let's check if certbot was able to get a new cert.
Show:
certbot certificates

2 Likes

这个命令是什么意思?

That command will show us all the certificates that certbot manages for you.

2 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.