[You got an error!]terraform/v1/mgmt/letsencrypt

[wuxianlijiang]

Describe the bug
I try to get SSL on page /mgmt/en/routers-settings?tab=https , it showed error message:

You got an error!
Request: http://**.***.**.***:2022/terraform/v1/mgmt/letsencrypt
Status: 500 Internal Server Error
Data: updateSslFiles domain=live.75.*****.cn: run 
lego [--email [email protected] --domains live.75.*****.cn 
--http.webroot /usr/local/srs-stack/platform/containers/data --http 
--accept-tos run] in /usr/local/srs-stack/platform/containers/data/lego,

stdout , 
stderr 
2023/09/24 11:25:36 [INFO] [live.75.*****.cn] acme: Obtaining bundled SAN certificate 
2023/09/24 11:25:37 [INFO] [live.75.*****.cn] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/267515225066 
2023/09/24 11:25:37 [INFO] [live.75.*****.cn] acme: Could not find solver for: tls-alpn-01 
2023/09/24 11:25:37 [INFO] [live.75.*****.cn] acme: use http-01 solver 
2023/09/24 11:25:37 [INFO] [live.75.*****.cn] acme: Trying to solve HTTP-01 
2023/09/24 11:25:41 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/267515225066 
2023/09/24 11:25:41 Could not obtain certificates: error: one or more domains had a problem: [live.75.*****.cn] acme: error: 400 :: urn:ietf:params:acme:error:connection :: **.***.**.***: 

Fetching http://live.75.*****.cn/.well-known/acme-challenge/hzYJ4mhAkEa62O9DJtdy0qctchO0pM1D-YDx0FZMzv4: 
Connection refused : exit status 1

thinks!

Version
©srs-stack/v5.10.2 (docker)

To Reproduce
Steps to reproduce the behavior:

1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error

Expected behavior
A clear and concise description of what you expected to happen.

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
Add any other context about the problem here.

[winlinvip]

An HTTPS certificate requires real domain resolution, and you can't set up hosts.

It looks like your domain is live.75.*****.cn. Without setting up hosts, can this domain be resolved to your SRS Stack IP?

Also, this IP needs to be accessible from the internet.

In simple terms, when you apply for an HTTPS certificate from letsencrypt, it will send a request back to your domain's service: http://live.75.*****.cn/.well-known/acme-challenge/xxx. The stuff after this is automatically generated by the SRS Stack, so there won't be any issues. The problem arises if this domain can't be resolved or if your service can't be accessed.

For more details, please check out the FAQ: https://ossrs.io/lts/en-us/faq-srs-stack#https

TRANS_BY_GPT4

[winlinvip]

Also, it's important to note that it has to be port 80, not port 2022.

It's accessing http://live.75.*****.cn, not http://live.75.*****.cn:2022.

When starting Docker, you must map it to port 80.

TRANS_BY_GPT4

[wuxianlijiang]

Let's Encrypt SSL ok ! thanks!