我正在尝试使用dehydrated和dehydrated-route53-hook-script更新我的服务器上的证书。
这是完整的命令和错误:
./xsys renewcerts
Running: cd certificates && ./dehydrated --cron
# INFO: Using main config file ..config/certificates/config
Processing mydomain.org with alternative names: dev-mydomain.org
+ Checking domain name(s) of existing cert... unchanged.
+ Checking expire date of existing cert...
+ Valid till Apr 21 11:47:17 2019 GMT (Less than 30 days). Renewing!
+ Signing domains...
+ Generating private key...
+ Generating signing request...
+ Requesting new certificate order from CA...
+ Received 2 authorizations URLs from the CA
+ Handling authorization for dev-mydomain.org
+ Handling authorization for mydomain.org
+ 2 pending challenge(s)
+ Deploying challenge tokens...
Error: NoCredentialProviders: no valid providers in chain. Deprecated.
For verbose messaging see aws.Config.CredentialsChainVerboseErrors
Could not find zone for dev-mydomain.org
Running: cd certificates && ./dehydrated --cleanup
看起来aws凭据失败了,但从我能说的一切都可以。我上次运行这个~60天前它运行良好然后(据我所知)没有任何改变。
任何关于在何处寻找修复的想法都值得赞赏。
我发现这个命令失败了:
$cli53 list
Error: NoCredentialProviders: no valid providers in chain. Deprecated.
For verbose messaging see aws.Config.CredentialsChainVerboseErrors
所以根本问题似乎是cli53。我有~/.aws/credentials
每个文档的凭据。
这最终成为cli53的一个问题。我有一个符号链接如下...
ls -la .aws/
total 0
drwxr-xr-x 3 myuser staff 96 Apr 5 15:33 .
drwxr-xr-x+ 143 myuser staff 4576 Apr 8 12:30 ..
lrwxr-xr-x 1 myuser staff 69 Apr 5 15:33 credentials -> /Users/myuser/ansible/myapp/_secrets/aws_credentials
...但我最近改变了这条道路:
/Users/myuser/apps/myapp/_secrets/aws_credentials
所以这只是cli53能够找到合适的凭证的失败。