docker - 您的连接不是私有(private)的(此证书无法通过受信任的验证机构进行验证)

Question

我很难为我的网站设置 Traefik 的“让我们加密”自动证书。它不断弹出错误消息:“您的连接不是私有(private)的”。当我检查证书时，它看起来像这样 shown here on screenshot

Traefik 是否破坏了此功能？我怎样才能让它工作。难道我做错了什么？

这是我的 traefik.toml 文件:

defaultEntryPoints = ["http", "https"]
[web]
address = ":8080"
  [web.auth.basic]
  users = ["admin:$apr1$yhytIYv.$p0hPOLpt/NE9aAr7c1HsV1"]
[entryPoints]
  [entryPoints.http]
  address = ":80"
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]
[acme]
email = "test@traefik.io"
storage = "acme.json"
onDemand = true
caServer = "https://acme-staging-v02.api.letsencrypt.org/directory"
entryPoint = "https"
  [acme.httpChallenge]
  entryPoint = "http"

另外，我以这种方式启动容器:

docker network create proxy
docker run -d \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v $PWD/traefik.toml:/traefik.toml \
  -v $PWD/acme.json:/acme.json \
  -p 80:80 \
  -p 443:443 \
  -l traefik.frontend.rule=Host:monitor.btcsha.com \
  -l traefik.port=8080 \
  --network proxy \
  --name traefik \
  traefik:1.7-alpine --docker

Answer 1

好的，我以某种方式使它工作。我认为问题在于我必须删除旧的 acme.json 文件。然后当我创建一个新的时，我忘了给它一个“chmod 600 acme.json”

是的，Idez 是对的 "caServer = "https://acme-v02.api.letsencrypt.org/directory"
现在它起作用了。所以为了将来的引用，这里是我的 traefik.toml:

defaultEntryPoints = ["http", "https"]
[web]
address = ":8080"
  [web.auth.basic]
  users = ["admin:$apr1$yhytIYv.$p0hPOLpt/NE9aAr7c1HsV1"]
[entryPoints]
[entryPoints.http]
address = ":80"
[entryPoints.http.redirect]
entryPoint = "https"
[entryPoints.https]
address = ":443"
[entryPoints.https.tls]
[acme]
email = "irmscher9@gmail.com"
storage = "acme.json"
onDemand = true
caServer = "https://acme-v02.api.letsencrypt.org/directory"
entryPoint = "https"
  [acme.httpChallenge]
   entryPoint = "http"

...我使用以下命令启动 docker:

docker network create proxy
docker run -d \
  -v /var/run/docker.sock:/var/run/docker.sock \
  -v $PWD/traefik.toml:/traefik.toml \
  -v $PWD/acme.json:/acme.json \
  -p 80:80 \
  -p 443:443 \
  -l traefik.frontend.rule=Host:monitor.btcsha.com \
  -l traefik.port=8080 \
  --network proxy \
  --name traefik \
  traefik:1.7-alpine --docker