Skip to content

[BUG]面板 SSL 证书更新后不生效 #6191

Closed

Description

@Ben-Huang

联系方式

No response

1Panel 版本

v1.10.13-lts

问题描述

证书自动更新后,访问面板依然提示证书过期

重现步骤

开启面板 SSL绑定域名和证书

期待的正确结果

证书自动更新后,面板 SSL服务应该自动重新加载新的证书

相关日志输出

2024/07/22 00:42:44 申请 [*.*] 证书成功!!
2024/07/22 00:42:44 证书推送到目录 [/opt/1panel/ssl] 成功
2024/07/22 00:42:44 开始更新 he.* 网站证书
2024/07/22 00:42:44 开始更新 vm.* 网站证书
2024/07/22 00:42:45 更新网站证书成功

附加信息

浏览器证书错误

面板 SSL

Activity

  1. Ben-Huang commented on Aug 20, 2024

    @Ben-Huang
    Author

    重启面板后问题依旧,提示证书过期

  2. Ben-Huang commented on Aug 20, 2024

    @Ben-Huang
    Author

    重启面板后问题依旧,提示证书过期

    [2024-08-20 19:44:55] [INFO] init logger successfully  
    [2024-08-20 19:44:55] [INFO] init monitor db successfully  
    [2024-08-20 19:44:55] [INFO] init db successfully  
    [2024-08-20 19:44:55] [INFO] Migration run successfully  
    [2024-08-20 19:44:55] [INFO] init cache successfully  
    [2024-08-20 19:44:55] [INFO] init session successfully  
    [2024-08-20 19:44:55] [DEBUG] synchronize system time with [pool.ntp.org] successful!  
    [2024-08-20 19:44:59] [INFO] [xpack] init db successfully  
    [2024-08-20 19:44:59] [INFO] [xpack] migration run successfully  
    [2024-08-20 19:44:59] [INFO] Starting synchronization with App Store...  
    [2024-08-20 19:44:59] [INFO] listen at https://0.0.0.0:32282 [tcp4]  
    2024/08/20 19:44:59 http: TLS handshake error from 192.168.2.20:60144: remote error: tls: unknown certificate
    2024/08/20 19:44:59 http: TLS handshake error from 192.168.2.20:60146: remote error: tls: unknown certificate
    [2024-08-20 19:44:59] [INFO] [AppStore] download file from https://apps-assets.fit2cloud.com/stable/1panel.json.zip  
    [2024-08-20 19:45:00] [INFO] The App Store is at the latest version  
    2024/08/20 19:45:10 http: TLS handshake error from 192.168.2.20:60150: remote error: tls: unknown certificate
    2024/08/20 19:45:10 http: TLS handshake error from 192.168.2.20:60149: remote error: tls: unknown certificate
    2024/08/20 19:45:10 http: TLS handshake error from 192.168.2.20:60151: remote error: tls: unknown certificate
    2024/08/20 19:45:11 http: TLS handshake error from 192.168.2.20:60209: remote error: tls: unknown certificate
    2024/08/20 19:45:11 http: TLS handshake error from 192.168.2.20:60210: remote error: tls: unknown certificate
    2024/08/20 19:45:12 http: TLS handshake error from 192.168.2.20:60211: remote error: tls: unknown certificate
    2024/08/20 19:48:21 http: TLS handshake error from 192.168.2.20:60331: remote error: tls: unknown certificate
    2024/08/20 19:48:21 http: TLS handshake error from 192.168.2.20:60332: remote error: tls: unknown certificate
    2024/08/20 19:48:21 http: TLS handshake error from 192.168.2.20:60333: remote error: tls: unknown certificate
    2024/08/20 19:48:31 http: TLS handshake error from 192.168.2.20:60343: remote error: tls: unknown certificate
    2024/08/20 19:48:31 http: TLS handshake error from 192.168.2.20:60342: remote error: tls: unknown certificate
    2024/08/20 19:48:39 http: TLS handshake error from 192.168.2.20:60352: remote error: tls: unknown certificate
    2024/08/20 19:48:39 http: TLS handshake error from 192.168.2.20:60353: remote error: tls: unknown certificate
    2024/08/20 19:48:39 http: TLS handshake error from 192.168.2.20:60354: remote error: tls: unknown certificate
    2024/08/20 19:48:43 http: TLS handshake error from 192.168.2.20:60364: remote error: tls: unknown certificate
    2024/08/20 19:48:43 http: TLS handshake error from 192.168.2.20:60363: remote error: tls: unknown certificate
    2024/08/20 19:48:43 http: TLS handshake error from 192.168.2.20:60365: remote error: tls: unknown certificate
    2024/08/20 19:48:57 http: TLS handshake error from 192.168.2.20:60400: remote error: tls: unknown certificate
    
  3. Ben-Huang commented on Aug 20, 2024

    @Ben-Huang
    Author

    更换浏览器或无痕模式访问依旧提示证书过期

  4. wanghe-fit2cloud commented on Aug 20, 2024

    @wanghe-fit2cloud
    Member

    在 网站 页面创建反向代理网站(后端地址填写 1Panel 系统的 IP:Port),选择启用 HTTPS 时,指定该证书,然后使用浏览器访问并检查结果。

  5. Ben-Huang commented on Aug 20, 2024

    @Ben-Huang
    Author

    在 网站 页面创建反向代理网站(后端地址填写 1Panel 系统的 IP:Port),选择启用 HTTPS 时,指定该证书,然后使用浏览器访问并检查结果。

    可以访问, 但是提示 "暂无权限访问 当前环境已经开启了访问域名绑定"
    其他使用该证书的网站也是正常的

    zccc

  6. Ben-Huang commented on Aug 20, 2024

    @Ben-Huang
    Author

    在面板 SSL页面重新选择了一次证书暂时可以了,看下一次自动更新证书时还会不会再次出现问题

  7. ssongliu commented on Aug 21, 2024

    @ssongliu
    Member

    在面板 SSL页面重新选择了一次证书暂时可以了,看下一次自动更新证书时还会不会再次出现问题

    http: TLS handshake error from 192.168.2.20:60400: remote error: tls: unknown certificate 这个表示的是自签证书不被信任
    看下面这个过期时间已经续签成功了
    image

  8. locked and limited conversation to collaborators on Sep 12, 2024
  9. converted this issue into a discussion #6480 on Sep 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions