acme.sh 默认 CA 更新为 ZeroSSL 引起的问题
今天通过 acme.sh 给新域名申请 SSL 证书,遇到报错:
[Mon Jul 12 15:53:31 CST 2021] Using CA: https://acme.zerossl.com/v2/DV90
[Mon Jul 12 15:53:31 CST 2021] No EAB credentials found for ZeroSSL, let's get one
[Mon Jul 12 15:53:31 CST 2021] acme.sh is using ZeroSSL as default CA now.
[Mon Jul 12 15:53:31 CST 2021] Please update your account with an email address first.
[Mon Jul 12 15:53:31 CST 2021] acme.sh --register-account -m [email protected]
[Mon Jul 12 15:53:31 CST 2021] See: https://github.com/acmesh-official/acme.sh/wiki/ZeroSSL.com-CA
[Mon Jul 12 15:53:31 CST 2021] Please add '--debug' or '--log' to check more details.
[Mon Jul 12 15:53:31 CST 2021] See: https://github.com/acmesh-official/acme.sh/wiki/How-to-debug-acme.sh
Error: Create Let's Encrypt SSL Certificate failed!
有人说需要在 ~/.acme.sh/account.conf 中添加:
ACCOUNT_EMAIL='[email protected]'
但是需要邮箱地址终究是麻烦,希望切换回 Let's Encrypt,可以这样:
# .acme.sh/acme.sh --set-default-ca --server letsencrypt
[Mon Jul 12 15:54:19 CST 2021] Changed default CA to: https://acme-v02.api.letsencrypt.org/directory
官方文档上也都写了,可以猛戳此处。
不过据说 ZeroSSL 支持泛域名比较爽,有空再折腾一下,先学党国维稳。