我在Ubuntu 14.04上安装了Gitlab。无法续订我们的加密证书。我已经将Ubuntu升级到16.04,然后进行apt-get update和&& apt-get upgrade升级,但似乎它没有将ACME客户端升级到v2,这使我可以更新证书。如何更新证书?

gitlab-cli renew-le-certs


结果是:

letsencrypt_certificate[elenx.net] (letsencrypt::http_authorization
line 3) had an error: Acme::Client::Error::Unauthorized:
acme_certificate[staging]
(/opt/gitlab/embedded/cookbooks/cache/cookbooks/letsencrypt/resources/certificate.rb
line 20) had an error: Acme::Client::Error::Unauthorized: Account
creation on ACMEv1 is disabled. Please upgrade your ACME client to a
version that supports ACMEv2 / RFC 8555. See
https://community.letsencrypt.org/t/end-of-life-plan-for-acmev1/88430
for details.

最佳答案

https://gitlab.com/gitlab-org/omnibus-gitlab/issues/4614#note_232009029


有趣的困境。我们已经在!3420(合并)中升级了ACME客户端
在GitLab 12.1中,但是您无法升级,直到获得
重新配置成功。


所以你需要升级到gitlab> = 12.1


关闭letsencrypt:nano /etc/gitlab/gitlab.rb
向下几页查找:letsencrypt['enable'] = true并将其设置为false然后保存
升级到主要版本的最新版本
apt-get upgrade gitlab-ee=11.11.8
运行gitlab-ctl reconfigure
升级到Gitlab 12 apt-get upgrade gitlab-ee
运行gitlab-ctl reconfigure
重新启动sudo reboot
letsencrypt['enable'] = true中返回/etc/gitlab/gitlab.rb
运行gitlab-ctl reconfigure
运行gitlab-ctl renew-le-certs

09-10 07:22
查看更多