大概三個月前，通過let s encrypt來進行網站SSL證書的申請，現在算算也差不多是時間了，登上伺服器，本來打算執行證書更新程式，沒想到一執行便出現了問題：

pyOpenSSl的版本太低，按照網上的一些做法解除安裝了低版本的pyOpenSSl，重新安裝了最新版的pyOpenSSl，但是再次執行certbot certifications還是出現了：

  ...
  File "/usr/lib/python2.7/site-packages/acme/jose/interfaces.py", line 9, in <module>
    from acme.jose import util
  File "/usr/lib/python2.7/site-packages/acme/jose/util.py"
 
, line 5, in <module>
    import OpenSSL
  File "/usr/lib/python2.7/site-packages/OpenSSL/__init__.py", line 8, in <module>
    from OpenSSL import rand, crypto, SSL
  File "/usr/lib/python2.7/site-packages/OpenSSL/SSL.py", line 118, in <module>
    SSL_ST_INIT = _lib.SSL_ST_INIT
AttributeError: 'module'
 
 object has no attribute 'SSL_ST_INIT'

網上查了下原因，好像是阿里雲伺服器問題，別家的伺服器並沒有這個情況，網上解決方案也是各式各樣，這裡採取了完全解除安裝之前的重新安裝的方式：

[root@oldpan etc]# pip uninstall certbot

之前我是使用pip安裝的所以用pip進行解除安裝，如果是用apt或者rpm安裝的則需要相應的解除安裝命令。

[[email protected] etc]# pip install certbot
 ...
[[email protected] etc]# certbot certificates
 

Traceback (most recent call last):
  File "/usr/bin/certbot", line 7, in <module>
    from certbot.main import main
  File "/usr/lib/python2.7/site-packages/certbot/main.py", line 11, in <module>
    from acme import jose

[[email protected] etc]# pip uninstall acme
Uninstalling acme-0.20.0:
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/DESCRIPTION.rst
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/INSTALLER
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/METADATA
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/RECORD
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/WHEEL
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/entry_points.txt
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/metadata.json
  /usr/lib/python2.7/site-packages/acme-0.20.0.dist-info/top_level.txt
Proceed (y/n)? y
  Successfully uninstalled acme-0.20.0

[[email protected] etc]# pip install acme
 ...
/usr/lib/python2.7/site-packages (from cffi>=1.7; platform_python_
implementation != "PyPy"->cryptography>=0.8->acme)
Installing collected packages: acme
Successfully installed acme-0.20.0

[[email protected] etc]# certbot certificates
/usr/lib/python2.7/site-packages/requests/__init__.py:80: RequestsDependencyWarning: urllib3 (1.22) or chardet
 (2.2.1) doesn't match a supported version!
  RequestsDependencyWarning)
Saving debug log to /var/log/letsencrypt/letsencrypt.log

-------------------------------------------------------------------------------
Found the following certs:
  Certificate Name: oldpan.me
    Domains: oldpan.me www.oldpan.me
    Expiry Date: 2018-01-19 04:08:01+00:00 (VALID: 6 days)
    Certificate Path: /etc/letsencrypt/live/oldpan.me/fullchain.pem
    Private Key Path: /etc/letsencrypt/live/oldpan.me/privkey.pem
-------------------------------------------------------------------------------

重新驗證一下就可以了，注意因為重新啟用證書的時候需要80埠與中間伺服器進行通訊，如果此時網站執行的時候是不可以的，暫時關閉網站後進行更新證書再開啟網站即可。