[GH-ISSUE #855] Cloudflare DNS + Google Trust Services无法申请证书 #582

Closed
opened 2026-03-03 01:04:28 +03:00 by kerem · 1 comment
Owner

Originally created by @zacharykka on GitHub (Jul 7, 2025).
Original GitHub issue: https://github.com/certimate-go/certimate/issues/855

软件版本 / Release Version

v0.3.21

问题描述 / Description

Cloudflare DNS + Google Trust Services无法申请证书
Cloudflare API token权限

Image

Google Truest 信息

Image

certimate日志

2025/07/07 16:35:28 [INFO] [test.DOMAIN.xyz] acme: Obtaining bundled SAN certificate
2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] AuthURL: https://dv.acme-v02.api.pki.goog/authz/MilRzSBo9UrOppNvpNdDww
2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: Could not find solver for: tls-alpn-01
2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: Could not find solver for: http-01
2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: use dns-01 solver
2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: Preparing to solve DNS-01
2025/07/07 16:35:32 [INFO] cloudflare: new record for test.DOMAIN.xyz, ID be90fd7a5a70ef384644a9c2af8d3d75
2025/07/07 16:35:32 [INFO] [test.DOMAIN.xyz] acme: Trying to solve DNS-01
2025/07/07 16:35:32 [INFO] [test.DOMAIN.xyz] acme: Checking DNS record propagation. [nameservers=8.8.8.8:53]

执行历史记录报错

error: one or more domains had a problem: [test.DOMAIN.xyz] invalid authorization: acme: error: 0 :: urn:ietf:params:acme:error:dns :: Error while resolving DNS TXT records for _acme-challenge.test.DOMAIN.xyz.: NXDOMAIN

查看了文档FAQ 以及相似issue #575
尝试添加了DNS 递归服务器8.8.8.8 以及打开阻止 CNAME 跟随 均无法解决
麻烦各位帮忙看一下,多谢!

其他 / Miscellaneous

No response

Originally created by @zacharykka on GitHub (Jul 7, 2025). Original GitHub issue: https://github.com/certimate-go/certimate/issues/855 ### 软件版本 / Release Version v0.3.21 ### 问题描述 / Description Cloudflare DNS + Google Trust Services无法申请证书 Cloudflare API token权限 <img width="1189" height="1145" alt="Image" src="https://github.com/user-attachments/assets/571e8d67-50d7-4798-aa22-5f0eb46a2abb" /> Google Truest 信息 <img width="806" height="753" alt="Image" src="https://github.com/user-attachments/assets/c57c93f2-cab8-4d59-89a8-512e3b33c2fa" /> certimate日志 ```log 2025/07/07 16:35:28 [INFO] [test.DOMAIN.xyz] acme: Obtaining bundled SAN certificate 2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] AuthURL: https://dv.acme-v02.api.pki.goog/authz/MilRzSBo9UrOppNvpNdDww 2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: Could not find solver for: tls-alpn-01 2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: Could not find solver for: http-01 2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: use dns-01 solver 2025/07/07 16:35:31 [INFO] [test.DOMAIN.xyz] acme: Preparing to solve DNS-01 2025/07/07 16:35:32 [INFO] cloudflare: new record for test.DOMAIN.xyz, ID be90fd7a5a70ef384644a9c2af8d3d75 2025/07/07 16:35:32 [INFO] [test.DOMAIN.xyz] acme: Trying to solve DNS-01 2025/07/07 16:35:32 [INFO] [test.DOMAIN.xyz] acme: Checking DNS record propagation. [nameservers=8.8.8.8:53] ``` 执行历史记录报错 ```log error: one or more domains had a problem: [test.DOMAIN.xyz] invalid authorization: acme: error: 0 :: urn:ietf:params:acme:error:dns :: Error while resolving DNS TXT records for _acme-challenge.test.DOMAIN.xyz.: NXDOMAIN ``` 查看了[文档FAQ](https://docs.certimate.me/docs/reference/faq) 以及相似issue #575 尝试添加了DNS 递归服务器`8.8.8.8` 以及打开`阻止 CNAME 跟随` 均无法解决 麻烦各位帮忙看一下,多谢! ### 其他 / Miscellaneous _No response_
kerem closed this issue 2026-03-03 01:04:28 +03:00
Author
Owner

@zacharykka commented on GitHub (Jul 7, 2025):

DNS 传播等待时间设置为60s 已解决

<!-- gh-comment-id:3044062821 --> @zacharykka commented on GitHub (Jul 7, 2025): `DNS 传播等待时间`设置为`60s` 已解决
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/certimate#582
No description provided.