Let's Encrypt更新报错

今天收到letsencrypt的邮件说证书到期，上服务器检查，发现使用cerbot更新证书时，报错HTTPS校验错：

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Processing /etc/letsencrypt/renewal/*****.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Starting new HTTP connection (1): [r3.o.lencr.org](http://r3.o.lencr.org)

Cert not due for renewal, but simulating renewal for dry run

Plugin legacy name certbot-dns-aliyun:dns-aliyun may be removed in a future version. Please use dns-aliyun instead.

Plugins selected: Authenticator certbot-dns-aliyun:dns-aliyun, Installer None

Starting new HTTPS connection (1): [acme-staging-v02.api.letsencrypt.org](http://acme-staging-v02.api.letsencrypt.org)

Failed to renew certificate 我的域名 with error: ("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",)

解决方法1： 不验证https

certbot renew --no-verify-ssl

解决方法2： 更新pip相关模块

1. pip list --outdated --trusted-host mirrors.aliyun.com（用的阿里云）

2. pip install --upgrade pyOpenSSL

3. pip install --upgrade requests

4. pip install --upgrade pycurl（这一步更新失败没影响）

再执行certbot renew