CHINA PHP CODER

CHINA PHP CODER

Who am I?

I am a china php coder.


What I write about


Recent Posts

lets encrypt 提示was considered an unsafe domain by a third-party API

  今天给一个二级域名申请ssl证书遇到了如下错误:

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for xxx.com
Waiting for verification...
Cleaning up challenges
Failed authorization procedure. xxx.com (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: "xxx.com" was considered an unsafe domain by a third-party API

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: xxx.com
   Type:   unauthorized
   Detail: "xxx.com" was considered an unsafe domain by a
   third-party API

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.

  前两天给这个域名的另一个二级域名申请证书时一切正常,今天怎么会遇到这个问题,都是同一个域名下的二级域名。后来一想确定这两天一直收到阿里云的挂马警报邮件,当时没有在意思,今天一想可能是因为被挂马了,被其它网站标记为不安全网站。首先要找到是被哪个网站标记的才能恢复,经过一番搜索,得到的解决方法如下

  1. 先去这个网站查一下是否被标记不为不安全网站,谷歌的网站需要梯子,https://transparencyreport.google.com/safe-browsing/search
  2. 在search console中将该域名关联到自己的账号下
  3. 在安全问题中,请求重新审核