Let's Encrypt SSL 泛域申请人家都签发证书了，宝塔还要报错

签发失败,我们无法验证您的域名:

1、检查域名是否绑定到对应站点

2、检查域名是否正确解析到本服务器,或解析还未完全生效

3、如果您的站点设置了反向代理,或使用了CDN,请先将其关闭

4、如果您的站点设置了301重定向,请先将其关闭

5、如果以上检查都确认没有问题，请尝试更换DNS服务商

---

[Thu Nov 8 11:49:26 CST 2018] Registering account
[Thu Nov 8 11:49:27 CST 2018] Registered
[Thu Nov 8 11:49:27 CST 2018] ACCOUNT_THUMBPRINT='xpIGTQdoWSV86WhxahDxuq8zem289Q4wQk1l0jQyYHM'
[Thu Nov 8 11:49:27 CST 2018] Creating domain key
[Thu Nov 8 11:49:27 CST 2018] The domain key is here: /www/server/panel/vhost/cert/*.easy-core.com/*.easy-core.com.key
[Thu Nov 8 11:49:27 CST 2018] Single domain='*.easy-core.com'
[Thu Nov 8 11:49:27 CST 2018] Getting domain auth token for each domain
[Thu Nov 8 11:49:28 CST 2018] Getting webroot for domain='*.easy-core.com'
[Thu Nov 8 11:49:28 CST 2018] Found domain api file: /root/.acme.sh/dnsapi/dns_dp.sh
[Thu Nov 8 11:49:29 CST 2018] Adding record
[Thu Nov 8 11:49:31 CST 2018] Sleep 10 seconds for the txt records to take effect
[Thu Nov 8 11:49:41 CST 2018] Verifying:*.easy-core.com
[Thu Nov 8 11:49:44 CST 2018] Success
[Thu Nov 8 11:49:44 CST 2018] Removing DNS records.
[Thu Nov 8 11:49:46 CST 2018] Verify finished, start to sign.
[Thu Nov 8 11:49:48 CST 2018] Cert success.
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
[Thu Nov 8 11:49:48 CST 2018] Your cert is in /www/server/panel/vhost/cert/*.easy-core.com/*.easy-core.com.cer
[Thu Nov 8 11:49:48 CST 2018] Your cert key is in /www/server/panel/vhost/cert/*.easy-core.com/*.easy-core.com.key
[Thu Nov 8 11:49:48 CST 2018] The intermediate CA cert is in /www/server/panel/vhost/cert/*.easy-core.com/ca.cer
[Thu Nov 8 11:49:48 CST 2018] And the full chain certs is there: /www/server/panel/vhost/cert/*.easy-core.com/fullchain.cer

刚又测试了

单钩（*.easy-core.com）有签发证书，会报错
单钩（easy-core.com）无签发证书，会报错
单钩（www.easy-core.com）正常签发证书，并能够部署

钩（easy-core.com+www.easy-core.com+*.easy-core.com）有签发证书，会报错
钩（easy-core.com+*.easy-core.com）有签发证书，会报错
钩（www.easy-core.com+*.easy-core.com）正常签发证书，并能够部署


所以目前测试的结果是同时钩选（www.easy-core.com+*.easy-core.com）才能够布署带泛域的 SSL


经过再次认，就算同时钩选（www.easy-core.com+*.easy-core.com）能够成功布署，实际上也是布署的www.easy-core.com单域的SSL，并不是泛域的SSL

对对对，我也是这样的情况！

这个问题有老大回复一下吗

ktkiss 发表于 2018-11-20 14:55
这个问题有老大回复一下吗

修复方案详见 https://blog.panzy.org/1023.html

micronsky 发表于 2018-12-19 21:11
修复方案详见 https://blog.panzy.org/1023.html

谢谢谢谢谢谢谢谢谢谢谢谢谢谢