证书创建错误 Digital Ocean Lets Encrypt

Question

我想将 Rails 应用程序部署到 Digital Ocean 上的服务器，但在此之前我想添加 SSL。我已经按照教程here 进行操作，但在第 2 步中出现以下错误：

Failed authorization procedure. www.xxx.co.za (http-01):urn:acme:error:connection :: The server could not connect to the client to verify the domain :: DNS problem: NXDOMAIN looking up A for www.xxx.co.za, xxx.co.za (http-01): urn:acme:error:unauthorized :: The client lacks sufficient authorization :: Invalid response from http://xxx.co.za/.well-known/acme-challenge/d1kKPdePX3MLO6kMt1pAdFets-N0RkQ_ffM3Y5aEBO8 [xxx.xx.xxx.xx]: 404

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: xxx.co.za
   Type:   unauthorized
   Detail: Invalid response from http://xxx.co.za/.well-known
   /acme-challenge/d1kKPdePX3MLO6kMt1pAdFets-N0RkQ_ffM3Y5aEBO8
   [xxx.xx.xxx.xx]: 404

   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A record(s) for that domain
   contain(s) the right IP address.
 - The following errors were reported by the server:

   Domain: www.xxx.co.za
   Type:   connection
   Detail: DNS problem: NXDOMAIN looking up A for www.xxx.co.za

出于隐私原因，我标出了 IP 和域名。我也运行了一个挖掘请求，但不确定这意味着什么。

; <<>> DiG 9.9.5-3ubuntu0.7-Ubuntu <<>> xxx.co.za
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18315
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;xxx.co.za.         IN  A

;; ANSWER SECTION:
xxx.co.za.      1799    IN  A   xxx.xx.xxx.xx

;; Query time: 194 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Tue May 10 10:55:38 SAST 2016
;; MSG SIZE  rcvd: 59

有什么建议吗？大约 12 小时前，我只编辑了我的域名主机上的 DNS 设置，这是问题所在，我应该等待更长时间吗？ “权限：0”是什么意思？这是问题的一部分吗？我以前只与 Heroku 合作过，他们为你做所有事情，现在我管理服务器，它有点复杂。提前致谢！

Answer 1

好的，所以我发现应该指向rails app的nginx配置文件

sudo nano /etc/nginx/sites-available/rails

然后记下您的应用程序的根目录，并在生成证书时使用它。还记得在配置更改后重新启动服务器，并尽可能使用 Digital Ocean 的基于 Web 的控制台。

希望这对其他人有所帮助。