[GH-ISSUE #897] [Bug] 腾讯云COS部署时请求参数格式异常 #611

Closed
opened 2026-03-03 01:04:39 +03:00 by kerem · 6 comments
Owner

Originally created by @zuoliang0 on GitHub (Jul 31, 2025).
Original GitHub issue: https://github.com/certimate-go/certimate/issues/897

软件版本 / Release Version

v0.3.25

缺陷描述 / Description

今天测试部署了一个证书报错:

failed to execute sdk request 'ssl.DeployCertificateInstance': [TencentCloudSDKError] Code=FailedOperation.CertificateDeployInstanceEmpty, Message=系统未检测到可用实例,无法更新证书,请您核对证书域名与云资源实例是否匹配。, RequestId=5402d49b-223e-4af8-851b-40e1d1d9fe20

查看了cos帮助文档正确的InstanceIdList格式应该

cos:Region|Bucket|Domain, 例:["ap-hongkong|ssl-server-1251810746|tencent.com"]

文档链接:

复现步骤 / Steps to reproduce

1.申请证书
2.部署证书到cos域名
3.部署失败通知

日志 / Logs

查看了请求参数

[2025-07-31 14:17:06]
sdk request 'ssl.DeployCertificateInstance'
request:
{"CertificateId":"xxxxxxxx","InstanceIdList":["eu-frankfurt#xxxxxx-eu-1326287105#image.xxxxxxx.club"],"ResourceType":"cos","Status":1}
response:
{"Response":null}
[2025-07-31 14:17:06]
failed to deploy certificate
[2025-07-31 14:17:06]
failed to execute sdk request 'ssl.DeployCertificateInstance': [TencentCloudSDKError] Code=FailedOperation.CertificateDeployInstanceEmpty, Message=系统未检测到可用实例,无法更新证书,请您核对证书域名与云资源实例是否匹配。, RequestId=b2fe946f-6e9d-4d65-81dd-9e5b7269bedd

其他 / Miscellaneous

其他问题,我观察到上传证书到cos这个请求虽然请求成功了返回了证书ID,但是返回的是老的证书ID并不是最新的,从腾讯云的SSL管理页面也看不到上传新的证书。

贡献 / Contribution

  • 我乐意为此贡献 PR! / I am interested in contributing a PR for this!
Originally created by @zuoliang0 on GitHub (Jul 31, 2025). Original GitHub issue: https://github.com/certimate-go/certimate/issues/897 ### 软件版本 / Release Version v0.3.25 ### 缺陷描述 / Description 今天测试部署了一个证书报错: ``` failed to execute sdk request 'ssl.DeployCertificateInstance': [TencentCloudSDKError] Code=FailedOperation.CertificateDeployInstanceEmpty, Message=系统未检测到可用实例,无法更新证书,请您核对证书域名与云资源实例是否匹配。, RequestId=5402d49b-223e-4af8-851b-40e1d1d9fe20 ``` 查看了cos帮助文档正确的`InstanceIdList`格式应该 ``` cos:Region|Bucket|Domain, 例:["ap-hongkong|ssl-server-1251810746|tencent.com"] ``` 文档链接: - https://console.cloud.tencent.com/api/explorer?Product=ssl&Version=2019-12-05&Action=DeployCertificateInstance - https://cloud.tencent.com/document/product/400/91667 ### 复现步骤 / Steps to reproduce 1.申请证书 2.部署证书到cos域名 3.部署失败通知 ### 日志 / Logs <details> 查看了请求参数 ``` [2025-07-31 14:17:06] sdk request 'ssl.DeployCertificateInstance' request: {"CertificateId":"xxxxxxxx","InstanceIdList":["eu-frankfurt#xxxxxx-eu-1326287105#image.xxxxxxx.club"],"ResourceType":"cos","Status":1} response: {"Response":null} [2025-07-31 14:17:06] failed to deploy certificate [2025-07-31 14:17:06] failed to execute sdk request 'ssl.DeployCertificateInstance': [TencentCloudSDKError] Code=FailedOperation.CertificateDeployInstanceEmpty, Message=系统未检测到可用实例,无法更新证书,请您核对证书域名与云资源实例是否匹配。, RequestId=b2fe946f-6e9d-4d65-81dd-9e5b7269bedd ``` </details> ### 其他 / Miscellaneous ~~其他问题,我观察到上传证书到cos这个请求虽然请求成功了返回了证书ID,但是返回的是老的证书ID并不是最新的,从腾讯云的SSL管理页面也看不到上传新的证书。~~ ### 贡献 / Contribution - [x] 我乐意为此贡献 PR! / I am interested in contributing a PR for this!
kerem 2026-03-03 01:04:39 +03:00
  • closed this issue
  • added the
    bug
    label
Author
Owner

@fudiwei commented on GitHub (Jul 31, 2025):

之前的文档里分隔符给的就是 #。你可以在这里看到它的文档历史快照。

另一些同类型的项目中这里也同样是 #

github.com/netcccyun/dnsmgr@b585e5fa55/app/lib/deploy/tencent.php (L38)

github.com/certd/certd@a8a45d7f75/packages/ui/certd-server/src/plugins/plugin-tencent/plugin/deploy-to-cos/index.ts (L124)

所以你确定你的报错是跟分隔符有关?

<!-- gh-comment-id:3139024192 --> @fudiwei commented on GitHub (Jul 31, 2025): 之前的文档里分隔符给的就是 `#`。你可以[在这里](https://github.com/TencentCloud/tencentcloud-cli/blob/564b8ab1b541f59e59d698b3e814853eda8f0125/tccli/examples/ssl/v20191205/DeployCertificateInstance.md)看到它的文档历史快照。 另一些同类型的项目中这里也同样是 `#`: > https://github.com/netcccyun/dnsmgr/blob/b585e5fa5548a09ef00e4674e2ce89c6abb240c7/app/lib/deploy/tencent.php#L38 > > https://github.com/certd/certd/blob/a8a45d7f757820990e278533277a3deda5ba48f3/packages/ui/certd-server/src/plugins/plugin-tencent/plugin/deploy-to-cos/index.ts#L124 所以你确定你的报错是跟分隔符有关?
Author
Owner

@zuoliang0 commented on GitHub (Aug 1, 2025):

确定是分隔符问题
我拉取最新的dev分支,手工修改分割符,测试部署时正常部署了。

[2025-08-01 10:06:25]
ssl certificate uploaded
result:
{"certId":"xxxxxx"}
[2025-08-01 10:06:36]
sdk request 'ssl.DeployCertificateInstance'
request:
{"CertificateId":"xxxxxx","InstanceIdList":["na-ashburn|xxxxxxx-www-1326287105|www.xxxxxx.club"],"ResourceType":"cos","Status":1}
response:
{"Response":{"DeployRecordId":132191,"DeployStatus":1,"RequestId":"b07bdc21-5012-401f-90f4-2dfc242d082a"}}
[2025-08-01 10:06:36]
sdk request 'ssl.DescribeHostDeployRecordDetail'
request:
{"DeployRecordId":"132191"}
response:
{"Response":{"TotalCount":1,"DeployRecordDetailList":[{"Id":367298,"CertId":"xxxxxx","OldCertId":"xxxxxx","InstanceId":"","InstanceName":"","ListenerId":"","Domains":["www.xxxxxx.club"],"Protocol":"","Status":0,"ErrorMsg":"","CreateTime":"2025-08-01T02:06:36.000000Z","UpdateTime":"2025-08-01T02:06:36.000000Z","ListenerName":"","SniSwitch":0,"Bucket":"xxxxxx-www-1326287105","Namespace":"","SecretName":"","Port":0,"EnvId":"","TCBType":"","Region":""}],"SuccessTotalCount":0,"FailedTotalCount":0,"RunningTotalCount":0,"PendingTotalCount":1,"RequestId":"2fca0b69-1efe-4d27-a766-748a66fbb2ff"}}

并且你看
github.com/TencentCloud/tencentcloud-cli@564b8ab1b5/tccli/examples/ssl/v20191205/DeployCertificateInstance.md
的示例也都是基于|分割的。

猜测是否是腾讯更新接口?

是否需要我提供更多资料?

<!-- gh-comment-id:3141922450 --> @zuoliang0 commented on GitHub (Aug 1, 2025): `确定是分隔符问题` 我拉取最新的dev分支,手工修改分割符,测试部署时正常部署了。 ``` [2025-08-01 10:06:25] ssl certificate uploaded result: {"certId":"xxxxxx"} [2025-08-01 10:06:36] sdk request 'ssl.DeployCertificateInstance' request: {"CertificateId":"xxxxxx","InstanceIdList":["na-ashburn|xxxxxxx-www-1326287105|www.xxxxxx.club"],"ResourceType":"cos","Status":1} response: {"Response":{"DeployRecordId":132191,"DeployStatus":1,"RequestId":"b07bdc21-5012-401f-90f4-2dfc242d082a"}} [2025-08-01 10:06:36] sdk request 'ssl.DescribeHostDeployRecordDetail' request: {"DeployRecordId":"132191"} response: {"Response":{"TotalCount":1,"DeployRecordDetailList":[{"Id":367298,"CertId":"xxxxxx","OldCertId":"xxxxxx","InstanceId":"","InstanceName":"","ListenerId":"","Domains":["www.xxxxxx.club"],"Protocol":"","Status":0,"ErrorMsg":"","CreateTime":"2025-08-01T02:06:36.000000Z","UpdateTime":"2025-08-01T02:06:36.000000Z","ListenerName":"","SniSwitch":0,"Bucket":"xxxxxx-www-1326287105","Namespace":"","SecretName":"","Port":0,"EnvId":"","TCBType":"","Region":""}],"SuccessTotalCount":0,"FailedTotalCount":0,"RunningTotalCount":0,"PendingTotalCount":1,"RequestId":"2fca0b69-1efe-4d27-a766-748a66fbb2ff"}} ``` 并且你看 https://github.com/TencentCloud/tencentcloud-cli/blob/564b8ab1b541f59e59d698b3e814853eda8f0125/tccli/examples/ssl/v20191205/DeployCertificateInstance.md 的示例也都是基于|分割的。 猜测是否是腾讯更新接口? 是否需要我提供更多资料?
Author
Owner

@fudiwei commented on GitHub (Aug 1, 2025):

建议跟腾讯云提个工单确定一下影响范围。而且直到此时 # 在 ap-guangzhou 依然可用(起码在我这儿是可用的)。我不确定这是否跟地域或存储桶的创建时间有关。

<!-- gh-comment-id:3142070019 --> @fudiwei commented on GitHub (Aug 1, 2025): 建议跟腾讯云提个工单确定一下影响范围。而且直到此时 `#` 在 ap-guangzhou 依然可用(起码在我这儿是可用的)。我不确定这是否跟地域或存储桶的创建时间有关。
Author
Owner

@zuoliang0 commented on GitHub (Aug 1, 2025):

我可以去提个工单问下,请问你那边可以提供下请求例子吗?最好能带requestId的,我提工单可以附上

<!-- gh-comment-id:3142089507 --> @zuoliang0 commented on GitHub (Aug 1, 2025): 我可以去提个工单问下,请问你那边可以提供下请求例子吗?最好能带requestId的,我提工单可以附上
Author
Owner

@zuoliang0 commented on GitHub (Aug 1, 2025):

咨询了售后客服,他们提到目前已经都切到|分割了,建议更新代码支持下

<!-- gh-comment-id:3142126897 --> @zuoliang0 commented on GitHub (Aug 1, 2025): 咨询了售后客服,他们提到目前已经都切到`|`分割了,建议更新代码支持下
Author
Owner

@abigmiu commented on GitHub (Aug 13, 2025):

已经部署的情况下也会报这个错

Image Image
<!-- gh-comment-id:3182904098 --> @abigmiu commented on GitHub (Aug 13, 2025): 已经部署的情况下也会报这个错 <img width="786" height="99" alt="Image" src="https://github.com/user-attachments/assets/b9f09889-4893-4ca8-a2dc-1b644eda394d" /> <img width="1503" height="50" alt="Image" src="https://github.com/user-attachments/assets/77a29690-45da-490f-b689-48e44fec320b" />
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/certimate#611
No description provided.