mirror of
https://github.com/certimate-go/certimate.git
synced 2026-04-26 05:05:56 +03:00
[GH-ISSUE #562] [Bug] 腾讯EdgeOne 作为DNS提供商申请证书报错 #368
Labels
No labels
announcement
backlog
bug
declined
documentation
duplicate
enhancement
good first issue
good first issue
help wanted
invalid
pull-request
question
stale
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/certimate#368
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @gaoyuoppa on GitHub (Mar 27, 2025).
Original GitHub issue: https://github.com/certimate-go/certimate/issues/562
问题描述 / Description
腾讯EdgeOne 申请时报错，错误代码如下
error: one or more domains had a problem: [.####] [.####] acme: error presenting token: tencentcloud-eo: [TencentCloudSDKError] Code=InvalidParameterValue.InvalidDNSName, Message=DNS 记录名称错误。, RequestId=34ad06fb-10d4-4d62-920f-65b2922d516f
=====腾讯操作记录如下
{
"userIdentity": {
"principalId": "####",
"accountId": "####",
"secretId": "####",
"sessionContext": {},
"type": "CAMUser",
"userName": "####"
},
"eventRegion": "ap-shanghai",
"eventVersion": 2,
"errorCode": "0",
"errorMessage": "permission verify",
"requestID": "34ad06fb-10d4-4d62-920f-65b2922d516f",
"apiVersion": "3.0",
"eventType": "ApiCall",
"actionType": "Write",
"httpMethod": "POST",
"apiErrorCode": 0,
"apiErrorMessage": "InvalidParameterValue.InvalidDNSName",
"userAgent": "SDK_GO_1.0.1127",
"eventTime": 1743039905,
"sensitiveAction": "0",
"sourceIPAddress": "######",
"resourceType": "teo",
"eventName": "CreateDnsRecord",
"eventSource": "teo.tencentcloudapi.com",
"resourceSet": [
{
"resourceType": "TEO",
"resourceRegion": "Global",
"resourceId": "####",
"resourceTypeClass": "QCS::TEO::Zone"
}
],
"requestParameters": {
"ZoneId": "####",
"Name": "####",
"Type": "TXT",
"Content": "q1Og4S1kh-7JOSyoDcw0NI-q1EKJ2DHVTECaIQ6bWXw",
"TTL": 300,
"AccountArea": "0",
"Version": "2022-09-01",
"Region": ""
},
"responseElements": "{"Error":{"Code":"***","Message":"DNS 记录名称错误。"},"RequestId":"3####"}",
"resources": "["qcs::teo::uin\/:zone\/####"]",
"resourceName": "####",
"tags": [
""
]
}
其他 / Miscellaneous
错误代码对应：请求签名或鉴权发生错误时的错误码
主账号和子账户最小化授权都试过，不知道是不是哪里设置错了。
@fudiwei commented on GitHub (Mar 27, 2025):
certimate 里看一下执行日志，找到
CreateDnsRecord那条接口调用日志。然后打开 https://cloud.tencent.com/document/product/1552/80720 点一下 API 调试，把日志里的参数贴进去，点执行看看结果。
P.S. 我一直觉得 Name 那个参数不应该是个 FQDN，但腾讯云文档的示例上就这么写的 😕 如果报错了你可以试着改成只有 SubDomain 的形式看看。
@fudiwei commented on GitHub (Mar 27, 2025):
噢，腾讯云日志里给参数了，就是这坨：
@gaoyuoppa commented on GitHub (Mar 27, 2025):
哥，抽空修复下。
执行日志中的是错误的，
"requestParameters": {
"ZoneId": "xxxxxxx",
"Name": "xxxxxxx-xyz.mgqhcu17ooaq.cname.certd.com.cn",
"Type": "TXT",
"Content": "nRdgxRGXh3xrA52Bx11TgQdpxTf5QixaksfEI_popiDSUxeWE",
"TTL": 300,
"AccountArea": "0",
"Version": "2022-09-01",
"Region": ""
},
============
正确的
"requestParameters": {
"ZoneId": "zone-2nz54dq9xffg",
"Name": "2w.xxxxxxx.xyz",
"Type": "TXT",
"Content": "xxxxxxx-xyz.mgqhcu17ooaq.cname.certd.com.cn",
"AccountArea": "0",
"Version": "2022-09-01",
"Region": ""
},
=========
===========
键值 Name
DNS 记录名，如果是中文、韩文、日文域名，需要转换为 punycode 后输入。
示例值
www.example.com
键值Content
DNS 记录内容，根据 Type 值填入与之相对应的内容，如果是中文、韩文、日文域名，需要转换为 punycode 后输入。
示例值
1.2.3.4
@fudiwei commented on GitHub (Mar 27, 2025):
你有 CNAME？需要在 Certimate 里配置关闭 CNAME 跟随。
@gaoyuoppa commented on GitHub (Mar 27, 2025):
泛域名
Certimate默认开启CNAME跟随，解析有CNAME报错error: one or more domains had a problem: [.xxxx.xyz] [.xxxx.xyz] acme: error presenting token: tencentcloud-eo: [TencentCloudSDKError] Code=InvalidParameterValue.InvalidDNSName, Message=DNS 记录名称错误。, RequestId=c05dc247-8e9e-41fc-bafa-f9b625666a2b
======
非泛域名
Certimate默认开启CNAME跟随，解析有CNAME /解析没有CNAME，报错， error: one or more domains had a problem: [dh.xxxx.xyz] invalid authorization: acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: Incorrect TXT record "8y67BWKRgVGHReZ6uYR_G7nbbxMh5szKr4pbfEEWGdQ" found at _acme-challenge.dh.xxxx.xyz
Certimate关闭CNAME跟随 ， 解析有CNAME/解析没有CNAME ，报错，error: one or more domains had a problem: [dh.xxxx.xyz] invalid authorization: acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: During secondary validation: No TXT record found at _acme-challenge.dh.xxxx.xyz
@fudiwei commented on GitHub (Mar 27, 2025):
接口如果调用成功的话后续 ACME 错误就已经与 Certimate 无关了 😕
你可以结合 acme.sh 的手动模式来排查 DNS 问题。通常来说都是权威 DNS 解析未生效。