現象

LetsEncrypt證書過期后，使用certbot簽發證書報錯：

[root@my-aliyun-server bin]# sudo certbot --apache Saving debug log to /var/log/letsencrypt/letsencrypt.log An unexpected error occurred: requests.exceptions.ReadTimeout: HTTPSConnectionPool(host='acme-v02.api.letsencrypt.org', port=443): Read timed out. (read timeout=45) Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.

從服務器ping acme-v02.api.letsencrypt.org 是通的

[root@my-aliyun-server bin]# ping acme-v02.api.letsencrypt.org PING ca80a1adb12a4fbdac5ffcbc944e9a61.pacloudflare.com (172.65.32.248) 56(84) bytes of data. 64 bytes from 172.65.32.248 (172.65.32.248): icmp_seq=1 ttl=48 time=178 ms 64 bytes from 172.65.32.248 (172.65.32.248): icmp_seq=2 ttl=48 time=178 ms 64 bytes from 172.65.32.248 (172.65.32.248): icmp_seq=3 ttl=48 time=178 ms

從服務器curl https地址，訪問非常不穩定，SSL連接經常失敗，偶爾成功。
從其它服務器curl是可以正常訪問的。

[root@my-aliyun-server bin]# curl -v https://acme-v02.api.letsencrypt.org/directory * About to connect() to acme-v02.api.letsencrypt.org port 443 (#0) * Trying 172.65.32.248... * Connected to acme-v02.api.letsencrypt.org (172.65.32.248) port 443 (#0) * Initializing NSS with certpath: sql:/etc/pki/nssdb * CAfile: /etc/pki/tls/certs/ca-bundle.crtCApath: none

解決方案

證書簽發出問題的服務器在阿里云北京，從阿里云北京等其它服務器可以正常訪問 https://acme-v02.api.letsencrypt.org，推測有關部門阻斷了這臺服務器IP和特定境外IP的通信。
于是更換服務器的公網IP地址，問題解決。

參考資料
https://community.letsencrypt.org/t/httpsconnectionpool-host-acme-v02-api-letsencrypt-org-port-443-read-timed-out/115221

總結

以上是生活随笔為你收集整理的处理LetsEncrypt证书签发错误acme-v02.api.letsencrypt.org timeout的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。