BT上面的ssl证书最好使用 Let's Encrypt

发布日期： 2026-07-23 14:55 阅读量： 132 来源： 互联网

今天作瑞里汽车的H5项目，发现商城的过期订单没有自动转为失效

这个应该是计划任务没有执行的原因

再往里面查发现，三分钟一次的url访问确实是执行了，也返回successful，但是就是数据库没有反应，断定还是没有执行成功。

找到日志

★[2026-07-23 14:40:01] Successful
----------------------------------------------------------------------------
curl: (60) Certificate key usage inadequate for attempted operation.
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.
----------------------------------------------------------------------------
★[2026-07-23 14:45:01] Successful
----------------------------------------------------------------------------
curl: (60) Certificate key usage inadequate for attempted operation.
More details here: http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.

再翻译一下，就是ssl证书有问题

Certificate key usage inadequate for attempted operation证书的密钥用途字段不满足当前加密交互要求，证书配置有缺陷，curl 校验直接拒绝连接。

方式 1：重新签发站点 SSL 证书（最推荐）

宝塔 → 网站 → SSL → 先关闭当前证书，删除旧证书文件
重新申请 Let’s Encrypt 免费证书，申请时保持默认配置不要手动修改证书高级参数

上一篇：: 聊聊目前AI的发展状态，以及未来可以达到的程度

下一篇：: navicat今天发现的奇怪问题，导出完全正常，导入就是报错

BT上面的ssl证书最好使用 Let's Encrypt

随便看看