如何修复CERBOT错误＆＃x27;无法在端口80＆＃x27; Apache更新后？

Question

我最近将Apache从2.4.6更新到2.4.5倍。

现在certbot续订-Dry-Run告诉我，Apache在port 80上没有

从/var/log/letsencrypt/letsencencrypt.log 在

PluginError: Unable to find a virtual host listening on port 80 which is currently needed for Certbot to prove to the CA that you control your domain. Please add a virtual host for port 80.

2022-04-27 13:00:18,010:ERROR:certbot._internal.renewal:All renewal attempts failed. The following certs could not be renewed:
2022-04-27 13:00:18,011:ERROR:certbot._internal.renewal:  /etc/letsencrypt/live/co2-avatar.com/fullchain.pem (failure)

端口80上收听，但我有一个＆lt; virtualHost＆gt;在我的Apache配置中，其中包含所有请求的域，例如 servername/serveralias 。我已经用netstat在端口80上侦听。

这是配置文件：

# redirect everything from http to https
<VirtualHost *:80>
    DocumentRoot "/var/www/html/"
    ServerName co2-avatar.com
    ServerAlias sustainable-data-platform.de
    ServerAlias co2-avatar.de
    ServerAlias co2-avatar.eu
    ServerAlias co2-avatar.org
    ServerAlias co2avatar.com
    ServerAlias co2avatar.de
    ServerAlias co2avatar.eu
    ServerAlias co2avatar.org
    ServerAlias git.sustainable-data-platform.org
    ServerAlias gitlab.sustainable-data-platform.org
    ServerAlias hp-cockpit.com
    ServerAlias hp-cockpit.de
    ServerAlias hp-cockpit.eu
    ServerAlias hp-cockpit.org
    ServerAlias hpcockpit.com
    ServerAlias hpcockpit.de
    ServerAlias hpcockpit.eu
    ServerAlias hpcockpit.org
    ServerAlias stop-fossil.de
    ServerAlias stop-fossil.org
    ServerAlias stopfossil.de
    ServerAlias stopfossil.org
    ServerAlias sustainable-building-platform.com
    ServerAlias sustainable-building-platform.de
    ServerAlias sustainable-building-platform.eu
    ServerAlias sustainable-building-platform.org
    ServerAlias sustainable-data-platform.com
    ServerAlias sustainable-data-platform.eu
    ServerAlias sustainable-data-platform.org
    ServerAlias sustainabledataplatform.com
    ServerAlias sustainabledataplatform.de
    ServerAlias sustainabledataplatform.eu
    ServerAlias sustainabledataplatform.org
    ServerAlias test.co2avatar.org
    ServerAlias test.hp-cockpit.org
    ServerAlias wp-cockpit.de
    ServerAlias wp-cockpit.eu
    ServerAlias wp-cockpit.org
    ServerAlias wpcockpit.eu
    ServerAlias wpcockpit.org

    <Directory "/var/www/html/">
        Options Indexes FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>
    ErrorLog "/var/log/httpd/webServer-error_log"
    CustomLog "/var/log/httpd/webServer-access_log" combined
    RewriteEngine on
    RewriteCond %{HTTPS} off
    RewriteCond %{REQUEST_URI} !\.well-known/acme-challenge
    RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>

rewriteCond％{request_uri}！\。（哪个来自这里），但是我该如何调试？是否有更多详细的日志文件来自 certbot 或 letsencrypt 。

当运行续订或要在证书中添加某些域时，我确实没有看到Apache LogFiles中的任何访问权限。因此，我不确定，我在这里做错了什么以及如何检查，实际上发生了什么（模拟可持续data-platform.org现有证书的续订和40个域）） 。当我运行curl -v-x获取http：//co2-avatar.com/.well-nown/aacme-challenge时，这是不同的。我至少获得了301，并且在服务器上的Apache LogFile中获得了一个条目。

还有其他提示与Apache 4.2.53一起使用 certbot 吗？

Answer 1

尝试使用网站启用您的网站，然后尝试重新安装证书

sudo a2ensite [site conf name]