Traefik 将颁发证书而不是 Let's encrypt

Question

我正在尝试根据本教程设置 traefik：https://www.digitalocean.com/community/tutorials/how-to-use-traefik-as-a-reverse-proxy-for-docker-containers-on-ubuntu-16-04

这是我正在使用的traefik.toml：

defaultEntryPoints = ["http", "https"]

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
      entryPoint = "https"
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]

[web]
address = ":8080"
  [web.auth.basic]
  users = [myuserandpw]

[acme]
email = "myemailadress"
storage = "acme.json"
entryPoint = "https"
onHostRule = true
onDemand = false

当我想打开监控仪表板时，我收到一条警告，提示我的连接不安全。它指出我的网站正在使用自签名证书（错误代码：SEC_ERROR_UNKOWN_ISSUER）。这是真的，因为正在使用 traefik 默认证书而不是来自 let's encrypt 的新证书。这可能是什么原因？

Answer 1

由于 Let's Encrypt 问题 (https://community.letsencrypt.org/t/important-what-you-need-to-know-about-tls-sni-validation-issues/50811)，您必须更改 acme 配置：

Træfik 1.4：使用 DNS 挑战 https://docs.traefik.io/v1.4/configuration/acme/#dnsprovider
Træfik 1.5：使用 HTTP 挑战 https://docs.traefik.io/v1.5/configuration/acme/#acmehttpchallenge or the DNS challenge https://docs.traefik.io/v1.5/configuration/acme/#acmednschallenge

Traefik 将颁发证书而不是 Let's encrypt

Traefik will issue certificate instead of Let's encrypt

ssl

lets-encrypt

traefik