申请TLS证书错误/Error applying for TLS certificate【咨询/consult】

[xiaowen-king1]

我在新增站点的时候申请TLS证书的时候发生了一些错误，我不知道是BUG还是我的操作系统之类的问题，需要咨询一下。
I encountered some errors when applying for a TLS certificate while adding a new site. I don't know if it's a bug or a problem with my operating system, so I need to consult someone.

Nginx-ui版本：2.3.(516)
Nginx-ui Version: 2.3.5 (516)

服务器系统：Rocky Linux
operating system：Rocky Linux

操作步骤：
Operation steps：

1、点击【网站管理】
1、Click [Manage Sites]
2、点击【添加站点】
2、Click [Add Site]
3、输入【配置名称】
3、enter [Configuration Name]
4、输入【server_name】
4、enter [server_name]
5、点击【下一步】
5、Click [Next]
6、跳转到"DNS记录"，直接点击【下一步】
6、jump to “DNS Record”
7、打开【启用TLS】
7、Open [Enable TLS]
8、打开【用 Let's Encrypt 对网站进行加密】
8、Open [Encrypt website with Let's Encrypt]
9、选择【ACME 用户】
9、choose [ACME User]
10、打开【撤销旧证书】
10、Open [Revoke Old Certificate]
11、点击【下一步】进行证书申请
11、Click [Next],Start TLS certificate application
12、报错如下内容：
12、The following error occurred

正在获取证书，请稍等...

[Nginx UI] 正在准备 lego 配置

[Nginx UI] ACME 用户：KongBai，邮箱：kongbai5202019@gmail.com，CA 目录：https://acme-v02.api.letsencrypt.org/directory

[Nginx UI] 正在创建客户端用于与 CA 服务器通信

[Nginx UI] 正在设置 HTTP01 验证提供程序

[Nginx UI] 正在获取证书

2026/03/17 20:47:19 [INFO] [123.ersansi.top] acme: Obtaining bundled SAN certificate

2026/03/17 20:47:20 [INFO] [123.ersansi.top] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/3153264977/674489599657

2026/03/17 20:47:20 [INFO] [123.ersansi.top] acme: Could not find solver for: tls-alpn-01

2026/03/17 20:47:20 [INFO] [123.ersansi.top] acme: use http-01 solver

2026/03/17 20:47:20 [INFO] [123.ersansi.top] acme: Trying to solve HTTP-01

2026/03/17 20:47:28 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz/3153264977/674489599657

obtain cert error: error: one or more domains had a problem: [123.ersansi.top] invalid authorization: acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 43.161.242.16: Invalid response from http://123.ersansi.top/.well-known/acme-challenge/kAVD6wZyTucJ3OIZMzIakO9DKpgsW0XxjGdOt0Z-cGQ: 404

Getting the certificate, please wait...

[Nginx UI] Preparing lego configurations

[Nginx UI] ACME User: KongBai, Email: kongbai5202019@gmail.com, CA Dir: https://acme-v02.api.letsencrypt.org/directory

[Nginx UI] Creating client facilitates communication with the CA server

[Nginx UI] Setting HTTP01 challenge provider

[Nginx UI] Obtaining certificate

2026/03/17 20:55:42 [INFO] [www.gbliu.xin] acme: Obtaining bundled SAN certificate

2026/03/17 20:55:43 [INFO] [www.gbliu.xin] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/3153264977/674492221227

2026/03/17 20:55:43 [INFO] [www.gbliu.xin] acme: Could not find solver for: tls-alpn-01

2026/03/17 20:55:43 [INFO] [www.gbliu.xin] acme: use http-01 solver

2026/03/17 20:55:43 [INFO] [www.gbliu.xin] acme: Trying to solve HTTP-01

2026/03/17 20:55:48 [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz/3153264977/674492221227

obtain cert error: error: one or more domains had a problem: [www.gbliu.xin] invalid authorization: acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 43.161.242.16: Invalid response from http://www.gbliu.xin/.well-known/acme-challenge/9NzOOh1V1GDpyemCMgyDFS42asKa0qTAUWN4CtXtC4Q: 404

[0xJacky]

你的解析是不是没生效到当前的服务器呀

[xiaowen-king1]

你的解析是不是没生效到当前的服务器呀

解析已经生效了，然后现在我发现一个问题，我在申请证书的同时检测9108端口，反馈如下

[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
tcp6       0      0 :::9180                 :::*                    LISTEN     
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
[root@VM-4-6-rockylinux html]# sudo netstat -tuln | grep 9180
[root@VM-4-6-rockylinux html]# curl -v http://127.0.0.1:9180
*   Trying 127.0.0.1:9180...
* connect to 127.0.0.1 port 9180 failed: Connection refused
* Failed to connect to 127.0.0.1 port 9180: Connection refused
* Closing connection 0
curl: (7) Failed to connect to 127.0.0.1 port 9180: Connection refused
[root@VM-4-6-rockylinux html]# 

好像是只监测了ipv6

[xiaowen-king1]

找到原因了，我想这可能是Nginx-ui的一个BUG，只需要先创建站点，不要在创建时申请tls证书，创建站点完成后在编辑配置文件打开tls申请TLS证书即可

也就是说先创建一个默认80端口的站点，生成配置文件后再次编辑站点配置文件，启用tls就可以正常申请证书了

我想出现这个问题的原因时开启TLS开关的时候站点配置文件并没有保存生效，导致了当前这个配置文件是没有启动的，nginx就没有办法把80端口反代到9180端口从而验证证书申请文件。