v1.34.2

build: prepare to build
fix: 修复部署到又拍云强制https无效的bug
2026-04-07 08:20:54 +08:00 · 2025-05-11 20:27:04 +08:00 · 2025-05-11 20:23:52 +08:00 · 2025-05-11 12:29:04 +08:00 · 2025-05-11 10:55:45 +08:00 · 2025-05-11 10:55:01 +08:00
276 changed files with 9570 additions and 1130 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,63 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+### Bug Fixes
+
+* 修复部署到又拍云强制https无效的bug ([2397097](https://github.com/certd/certd/commit/2397097e4ddcb6f593210598e8779ffd44ac3f8f))
+* 修复刷新流水线页面后，日志不自动更新的bug ([0b2e28b](https://github.com/certd/certd/commit/0b2e28b62dd5eb6804c602083e65c87a9d1d72d2))
+
+### Performance Improvements
+
+* 集成智能问答机器人 ([9dd4905](https://github.com/certd/certd/commit/9dd49054d18ec436a5029444ca55a38adc682933))
+* 支持设置网安备案号 ([d18e431](https://github.com/certd/certd/commit/d18e431e2f08e6b37704032c4ea6fbdd8e971442))
+* http方式支持校验443端口 ([d75fcb7](https://github.com/certd/certd/commit/d75fcb7fec421a9a638eaa27fe9378c84b5e0f19))
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+### Bug Fixes
+
+* 根据SOA记录判断子域名托管有缺陷，改回手动配置子域名托管记录的方式 ([1b280a2](https://github.com/certd/certd/commit/1b280a2940f9e2d919b0bf23b89cc185be1fa498))
+* 修复宝塔授权测试按钮显示错误的bug ([048696e](https://github.com/certd/certd/commit/048696ee9386491bb68592fb3a47d1c900bb68bf))
+
+### Performance Improvements
+
+* 支持部署证书到火山dcdn ([5f85219](https://github.com/certd/certd/commit/5f852194953dc1b4e6336770f417507b8f5a33ad))
+* 支持部署证书到unicloud ([a63d687](https://github.com/certd/certd/commit/a63d687f1c573159f0857693f37602b0e1e44072))
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+### Bug Fixes
+
+* 修复二次认证登录进入错误账号的bug ([e3930e0](https://github.com/certd/certd/commit/e3930e07172dd7903cb0f6ff26e0e3e828ba3e77))
+
+### Features
+
+* 从yaml文件注册插件 ([deb3893](https://github.com/certd/certd/commit/deb38938204b29543f36d3266249958faaaa6b66))
+
+### Performance Improvements
+
+* 优化cdnfly插件，支持自动匹配域名部署 ([afd59e9](https://github.com/certd/certd/commit/afd59e9933b2650f41c5d47684c171b93b962065))
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+### Bug Fixes
+
+* 服务器时间获取不准确的bug ([5d10cbf](https://github.com/certd/certd/commit/5d10cbf18daf94a90a7551641a3b13e3c5fec611))
+* 修复复制流水线无效的bug ([3df20a9](https://github.com/certd/certd/commit/3df20a924f32970b052e2588ea20de095f0ea693))
+* 修复http上传方式无法清除记录文件的bug ([72a7b51](https://github.com/certd/certd/commit/72a7b51d479602b2c54c6c3ac8d8a0dcb9664e73))
+* 修复token过期后，疯狂打印token过期信息的bug ([50a5fa1](https://github.com/certd/certd/commit/50a5fa15bb240a125bbc91d2ce1ff3c835888a77))
+
+### Performance Improvements
+
+* 从域名的soa获取主域名，子域名托管无需额外配置 ([a586a92](https://github.com/certd/certd/commit/a586a92d5e32ea846ac37be52a7ad8c328d89966))
+* 七牛oss支持删除过期备份 ([b7113bd](https://github.com/certd/certd/commit/b7113bda2378116d6c116dc583f563cce7cf9f00))
+* 数据库备份支持oss ([308d460](https://github.com/certd/certd/commit/308d4600efe2002f199c33b4594d3071784e58ea))
+* 支持阿里云中文域名申请 ([b3468cf](https://github.com/certd/certd/commit/b3468cf7f28228d7c9cf68de6b5a9bbeb67f2c6d))
+* 支持反向代理增加contextPath路径 ([0088929](https://github.com/certd/certd/commit/0088929622160cc922995de9a563e8061686ff34))
+* 支持中文域名 ([162ebfd](https://github.com/certd/certd/commit/162ebfd4e0c25727efb33952d3bbf7420a02e2c3))
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 ### Performance Improvements
--- a/README.md
+++ b/README.md
@@ -5,28 +5,35 @@ Certd 是一个免费全自动申请和自动部署更新SSL证书的管理系

 关键字：证书自动申请、证书自动更新、证书自动续期、证书自动续签、证书管理工具

+> 关于证书续期：
+>* 实际上没有办法不改变证书文件本身情况下直接续期或者续签。
+>* 我们所说的续期，其实就是按照全套流程重新申请一份新证书，然后重新部署上去。
+>* 免费证书过期时间90天，以后可能还会缩短，所以自动化部署必不可少
+
+
+> 流水线数量现已调整为无限制，欢迎大家使用
+
 ## 一、特性
 本项目不仅支持证书申请过程自动化，还可以自动化部署更新证书，让你的证书永不过期。     

-* 全自动申请证书（支持所有注册商注册的域名）
+* 全自动申请证书（支持所有注册商注册的域名，支持DNS-01、HTTP-01、CNAME代理等多种域名验证方式）
 * 全自动部署更新证书（目前支持部署到主机、阿里云、腾讯云等70+部署插件）
-* 支持DNS-01、HTTP-01、CNAME代理等多种域名验证方式
 * 支持通配符域名/泛域名，支持多个域名打到一个证书上，支持pem、pfx、der、jks等多种证书格式
-* 邮件通知、webhook通知
-* 私有化部署，数据保存本地，授权信息加密存储，镜像由Github Actions构建，过程公开透明
-* 支持SQLite，PostgreSQL、MySQL数据库
+* 邮件通知、webhook通知、企微、钉钉、飞书、anpush等多种通知方式
+* 私有化部署，数据保存本地，安装升级非常简单快捷
+* 镜像由Github Actions构建，过程公开透明
+* 授权加密，站点隐藏，2FA，密码防爆破等多重安全保障
+* 支持SQLite，PostgreSQL、MySQL多种数据库
+* 开放接口支持
+* 站点证书监控
+* 多用户管理


  ![](./docs/images/intro/intro.svg)

->
-> 流水线数量现已调整为无限制，欢迎大家使用
->

-> 关于证书续期：
- >* 实际上没有办法不改变证书文件本身情况下直接续期或者续签。
- >* 我们所说的续期，其实就是按照全套流程重新申请一份新证书，然后重新部署上去。
- >* 免费证书过期时间90天，以后可能还会缩短，所以自动化部署必不可少
+
+
 
 ## 二、在线体验

--- a/build.trigger
+++ b/build.trigger
@@ -1 +1 @@
-00:08
+00:32
--- a/docker/run/docker-compose.yaml
+++ b/docker/run/docker-compose.yaml
@@ -3,6 +3,8 @@ services:
  certd:
    # 镜像                                                  #  ↓↓↓↓↓ ---- 镜像版本号，建议改成固定版本号,例如：certd:1.29.0
    image: registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest
+    # image: ghcr.io/certd/certd:latest                    #   --------- 如果 报镜像not found，可以尝试其他镜像源
+    # image: greper/certd:latest
    container_name: certd # 容器名
    restart: unless-stopped # 自动重启
    volumes:
@@ -35,6 +37,8 @@ services:
 #    networks:
 #      - ip6net
    environment:
+#             ↓↓↓↓ ----------------------------------------------------- 使用上海东八时区
+#      - TZ=Asia/Shanghai
 #     设置环境变量即可自定义certd配置
 #     配置项见： packages/ui/certd-server/src/config/config.default.ts
 #     配置规则： certd_ + 配置项, 点号用_代替
--- a/docs/.vitepress/config.ts
+++ b/docs/.vitepress/config.ts
@@ -88,22 +88,25 @@ export default defineConfig({
                    text: "特性",
                    items: [
                        {text: "CNAME代理校验", link: "/guide/feature/cname/index.md"},
-                        {text: "插件列表", link: "/guide/plugins.md"},
                        {text: "多数据库支持", link: "/guide/install/database.md"},
                        {text: "开放接口", link: "/guide/open/index.md"},
                        {
-                            text: "站点安全", items: [
-                                {text: "安全特性", link: "/guide/feature/safe"},
-                                {text: "站点隐藏", link: "/guide/feature/safe/hidden"},
-                                {text: "安全生产建议", link: "/guide/feature/safe/suggest"},
+                            text: "站点安全",  link: "/guide/feature/safe"
+                        },
+                        {
+                            text: "插件列表", items: [
+                                {text: "授权提供商", link: "/guide/plugins/access"},
+                                {text: "DNS提供商", link: "/guide/plugins/dns-provider"},
+                                {text: "任务插件", link: "/guide/plugins/deploy"},
+                                {text: "通知插件", link: "/guide/plugins/notification"},
                            ]
                        },
-
                    ]
                },
                {
                    text: "常见问题",
                    items: [
+                        {text: "常见报错处理", link: "/guide/qa/"},
                        {text: "群晖证书部署", link: "/guide/use/synology/"},
                        {text: "腾讯云密钥获取", link: "/guide/use/tencent/"},
                        {text: "连接windows主机", link: "/guide/use/host/windows.md"},
@@ -115,8 +118,14 @@ export default defineConfig({
                        {text: "js脚本插件使用", link: "/guide/use/custom-script/index.md"},
                        {text: "邮箱配置", link: "/guide/use/email/index.md"},
                        {text: "IPv6支持", link: "/guide/use/setting/ipv6.md"},
-                        {text: "其他插件使用", link: "/deploy/"},
-                        {text: "商业版说明", link: "/comm/"},
+                        {text: "ESXi", link: "/guide/use/ESXi/index.md"},
+                    ]
+                },
+                {
+                    text: "商业版配置", link: "/guide/use/comm/", items: [
+                        {text: "支付宝配置", link: "/guide/use/comm/payments/alipay.md"},
+                        {text: "微信支付配置", link: "/guide/use/comm/payments/wxpay.md"},
+                        {text: "彩虹易支付配置", link: "/guide/use/comm/payments/yizhifu.md"},
                    ]
                },
                {
@@ -133,26 +142,6 @@ export default defineConfig({
                    ]
                }
            ],
-            "/deploy/": [
-                {
-                    text: "部署证书插件",
-                    items: [
-                        {text: "插件说明", link: "/deploy/index.md"},
-                        {text: "部署到ESXi", link: "/deploy/ESXi/index.md"},
-                    ]
-                }
-            ],
-            "/comm/": [
-                {
-                    text: "商业版",
-                    items: [
-                        {text: "支付宝配置", link: "/comm/payments/alipay.md"},
-                        {text: "微信支付配置", link: "/comm/payments/wxpay.md"},
-                        {text: "彩虹易支付配置", link: "/comm/payments/yizhifu.md"},
-                    ]
-                }
-            ]
-            ,
        },

        socialLinks: [
--- a/docs/deploy/index.md
+++ b/docs/deploy/index.md
@@ -1,4 +0,0 @@
-# 部署插件说明
-
-## 待完善
-
--- a/docs/guide/changelogs/CHANGELOG.md
+++ b/docs/guide/changelogs/CHANGELOG.md
@@ -3,6 +3,61 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+### Bug Fixes
+
+* 根据SOA记录判断子域名托管有缺陷，改回手动配置子域名托管记录的方式 ([1b280a2](https://github.com/certd/certd/commit/1b280a2940f9e2d919b0bf23b89cc185be1fa498))
+* 修复宝塔授权测试按钮显示错误的bug ([048696e](https://github.com/certd/certd/commit/048696ee9386491bb68592fb3a47d1c900bb68bf))
+
+### Performance Improvements
+
+* 支持部署证书到火山dcdn ([5f85219](https://github.com/certd/certd/commit/5f852194953dc1b4e6336770f417507b8f5a33ad))
+* 支持部署证书到unicloud ([a63d687](https://github.com/certd/certd/commit/a63d687f1c573159f0857693f37602b0e1e44072))
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+### Bug Fixes
+
+* 修复二次认证登录进入错误账号的bug ([e3930e0](https://github.com/certd/certd/commit/e3930e07172dd7903cb0f6ff26e0e3e828ba3e77))
+
+### Features
+
+* 从yaml文件注册插件 ([deb3893](https://github.com/certd/certd/commit/deb38938204b29543f36d3266249958faaaa6b66))
+
+### Performance Improvements
+
+* 优化cdnfly插件，支持自动匹配域名部署 ([afd59e9](https://github.com/certd/certd/commit/afd59e9933b2650f41c5d47684c171b93b962065))
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+### Bug Fixes
+
+* 服务器时间获取不准确的bug ([5d10cbf](https://github.com/certd/certd/commit/5d10cbf18daf94a90a7551641a3b13e3c5fec611))
+* 修复复制流水线无效的bug ([3df20a9](https://github.com/certd/certd/commit/3df20a924f32970b052e2588ea20de095f0ea693))
+* 修复http上传方式无法清除记录文件的bug ([72a7b51](https://github.com/certd/certd/commit/72a7b51d479602b2c54c6c3ac8d8a0dcb9664e73))
+* 修复token过期后，疯狂打印token过期信息的bug ([50a5fa1](https://github.com/certd/certd/commit/50a5fa15bb240a125bbc91d2ce1ff3c835888a77))
+
+### Performance Improvements
+
+* 从域名的soa获取主域名，子域名托管无需额外配置 ([a586a92](https://github.com/certd/certd/commit/a586a92d5e32ea846ac37be52a7ad8c328d89966))
+* 七牛oss支持删除过期备份 ([b7113bd](https://github.com/certd/certd/commit/b7113bda2378116d6c116dc583f563cce7cf9f00))
+* 数据库备份支持oss ([308d460](https://github.com/certd/certd/commit/308d4600efe2002f199c33b4594d3071784e58ea))
+* 支持阿里云中文域名申请 ([b3468cf](https://github.com/certd/certd/commit/b3468cf7f28228d7c9cf68de6b5a9bbeb67f2c6d))
+* 支持反向代理增加contextPath路径 ([0088929](https://github.com/certd/certd/commit/0088929622160cc922995de9a563e8061686ff34))
+* 支持中文域名 ([162ebfd](https://github.com/certd/certd/commit/162ebfd4e0c25727efb33952d3bbf7420a02e2c3))
+
+## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)
+
+### Performance Improvements
+
+* 添加部署证书至火山 Live ([abea80e](https://github.com/certd/certd/commit/abea80e3ab9b1672aebe1c5d5e856693b29931a8))
+* 优化首页插件列表展示 ([9b8f60b](https://github.com/certd/certd/commit/9b8f60b64b5f9a3db7dfa9b3dcbd9201984358d0))
+* 证书申请支持51dns ([8638fc9](https://github.com/certd/certd/commit/8638fc91ff34fccaf12ff9874fd3fa9d2a8c18b7))
+* 支持51dns ([96a0900](https://github.com/certd/certd/commit/96a0900edc95dcfd9acccf9d13592f12f5a09b3d))
+* ssh PTY模式登录设置 ([8385bcc](https://github.com/certd/certd/commit/8385bcc2d7f2411a07748bb5c53f9eaf4d38d7cc))
+* ssh伪终端模式优化，windows下不开启 ([42dfe93](https://github.com/certd/certd/commit/42dfe936b773b7bdd82ca3378363252ffffd7b71))
+
 ## [1.33.6](https://github.com/certd/certd/compare/v1.33.5...v1.33.6) (2025-04-20)

 ### Bug Fixes
--- a/docs/guide/feature/safe/hidden/index.md
+++ b/docs/guide/feature/safe/hidden/index.md
@@ -22,4 +22,6 @@
 ![](./images/hidden2.png)

 ## 3、忘记解除地址和解除密码怎么办
-登录服务器，在数据库平级的目录下创建`.unhidden`文件即可`临时解除`站点隐藏
+登录服务器，在数据库平级的目录下创建`.unhidden`命名的空白文件，即可临时解除站点隐藏       
+临时解除后会自动删除`.unhidden`文件，请尽快设置好新的`解除地址`和`解除密码`，并记住    
+
--- a/docs/guide/feature/safe/index.md
+++ b/docs/guide/feature/safe/index.md
@@ -1,36 +1,48 @@
-# 站点安全特性
+# 安全特性

-Certd 存储了证书以及授权等敏感数据，所以需要严格保障安全。
-我们非常重视您的数据安全，提供了以下安全特性
+Certd 存储了证书以及授权等敏感数据，所以需要严格保障安全。      
+我们提供了以下安全特性，以及安全生产建议（请遵照建议进行生产部署以保障数据安全）

-## 1、 授权数据加密存储【默认开启】
+## 一、站点安全特性
+
+### 1、 授权数据加密存储【默认开启】
 * 所有的授权敏感字段会加密后存储
 * 每个用户独立维护授权数据，连管理员都无权查看

 ![星号部分为加密数据](./images/access.png)
 星号部分为加密数据

-## 2、 密码防爆破【默认开启】
+### 2、 密码防爆破【默认开启】
 * 登录失败次数过多，账号将被锁定，最高24小时(重启服务可解除锁定)
 * 用户登录密码加密hash后存储，无法计算出密码明文
  ![](./images/login.png)

-## 3、站点隐藏【建议开启】
+### 3、站点隐藏【建议开启】
 * 一般来说Certd设置好之后，后续很少需要访问修改。
 * 所以我们平时可以把站点访问关闭，需要的时候再打开，减少站点被攻击的风险    
 * 请前往 `系统管理->系统设置->安全设置->开启站点隐藏`
-* [站点隐藏设置说明](./hidden/)
  ![](./images/hidden.png)

-## 4、登录双重验证
+点击查看 [站点隐藏功能详细使用说明](./hidden/)
+
+
+### 4、登录双重验证

 支持2FA双重认证

 ![](./images/2fa.png)

-## 5、数据库自动备份【建议开启】
+### 5、数据库自动备份【建议开启】
 * [自动备份设置说明](../../use/backup/)


-## 更多安全生产建议
-[安全生产建议](./suggest.md)
+## 二、安全生产建议
+
+尽管`Cert`本身实现了很多安全特性，但`外部环境的安全`仍需要您来确保。    
+请`务必`遵循如下建议做好安全防护
+
+* 请`务必`使用`HTTPS协议`访问本应用，避免被中间人攻击
+* 请`务必`使用`web应用防火墙`防护本应用，防止XSS、SQL注入等攻击
+* 请`务必`做好`服务器本身`的安全防护，防止数据库泄露
+* 请`务必`做好[`数据备份`](../../use/backup/)，避免数据丢失
+* 建议开启[`站点隐藏`](./hidden/)功能
--- a/docs/guide/feature/safe/suggest.md
+++ b/docs/guide/feature/safe/suggest.md
@@ -1,10 +0,0 @@
-# 安全生产建议
-
-尽管`Cert`本身实现了很多安全特性，但`外部环境的安全`仍需要您来确保。    
-请`务必`遵循如下建议做好安全防护
-
-* 请`务必`使用`HTTPS协议`访问本应用，避免被中间人攻击
-* 请`务必`使用`web应用防火墙`防护本应用，防止XSS、SQL注入等攻击
-* 请`务必`做好`服务器本身`的安全防护，防止数据库泄露
-* 请`务必`做好[`数据备份`](../../use/backup/)，避免数据丢失
-* 建议开启[`站点隐藏`](./hidden/)功能
--- a/docs/guide/index.md
+++ b/docs/guide/index.md
@@ -5,32 +5,28 @@ Certd 是一款开源、免费、全自动申请和部署更新SSL证书的工

 关键字：证书自动申请、证书自动更新、证书自动续期、证书自动续签、证书管理工具

+## 1、关于证书续期
+>* 实际上没有办法不改变证书文件本身情况下直接续期或者续签。
+>* 我们所说的续期，其实就是按照全套流程重新申请一份新证书，然后重新部署上去。
+>* 免费证书过期时间90天，以后可能还会缩短，所以自动化部署必不可少

-## 一、特性
+
+## 2、项目特性
 本项目不仅支持证书申请过程自动化，还可以自动化部署更新证书，让你的证书永不过期。

-* 全自动申请证书（支持所有注册商注册的域名）
-* 全自动部署更新证书（目前支持部署到主机、部署到阿里云、腾讯云等，目前已支持60+部署插件）
-* 支持通配符域名/泛域名，支持多个域名打到一个证书上
-* 邮件通知
-* 私有化部署，保障数据安全
-* 支持SQLite、Postgresql、MySQL数据库
+* 全自动申请证书（支持所有注册商注册的域名，支持DNS-01、HTTP-01、CNAME代理等多种域名验证方式）
+* 全自动部署更新证书（目前支持部署到主机、阿里云、腾讯云等70+部署插件）
+* 支持通配符域名/泛域名，支持多个域名打到一个证书上，支持pem、pfx、der、jks等多种证书格式
+* 邮件通知、webhook通知、企微、钉钉、飞书、anpush等多种通知方式
+* 私有化部署，数据保存本地，安装升级非常简单快捷
+* 镜像由Github Actions构建，过程公开透明
+* 授权加密，站点隐藏，2FA，密码防爆破等多重安全保障
+* 支持SQLite，PostgreSQL、MySQL多种数据库
+* 开放接口支持
+* 站点证书监控
+* 多用户管理


  ![](../images/intro/intro.svg)

-## 二、一些说明
-* 本项目申请证书过程遵循acme协议
-* 需要验证域名所有权，一般有两种方式
-    * http-01： 在网站根目录下放置一份txt文件
-    * dns-01： 需要给域名添加txt解析记录，通配符域名只能用这种方式（本项目仅支持dns-01）
-* 证书续期：
-    * 实际上没有办法不改变证书文件本身情况下直接续期或者续签。
-    * 我们所说的续期，其实就是按照全套流程重新申请一份新证书，然后重新部署上去。
-* 免费证书过期时间90天，以后可能还会缩短，所以自动化部署必不可少
-* 设置每天自动运行，当证书过期前35天，会自动重新申请证书并部署

-## 三、证书颁发机构对比
-* Let's Encrypt：申请最简单。
-* Google: 大厂光环，兼容性好，首次需要翻墙获取EAB。
-* ZeroSSL： 需要EAB，获取EAB无需翻墙。
--- a/docs/guide/install/docker/index.md
+++ b/docs/guide/install/docker/index.md
@@ -55,6 +55,11 @@ https://your_server_ip:7002

 ## 二、升级

+::: warning   
+如果您是第一次升级certd版本，切记切记先备份一下数据    
+:::
+
+
 ### 如果使用固定版本号
 1. 修改`docker-compose.yaml`中的镜像版本号
 2. 运行`docker compose up -d` 即可
--- a/docs/guide/install/source/index.md
+++ b/docs/guide/install/source/index.md
@@ -44,6 +44,11 @@ kill -9 $(lsof -t -i:7001)
 ./start.sh
 ```

+::: warning   
+升级certd版本前，切记切记先备份一下数据    
+:::
+
+
 ## 三、数据备份
 > 数据默认保存在 `./packages/ui/certd-server/data` 目录下    
 > 建议配置一条[数据库备份流水线](../../use/backup/)  自动备份
--- a/docs/guide/install/upgrade.md
+++ b/docs/guide/install/upgrade.md
@@ -8,5 +8,9 @@
 3. [1Panel面板方式部署升级](./1panel/#三、升级)
 4. [源码方式部署](./source/#二、升级)

+::: warning   
+如果您是第一次升级certd版本，切记切记先备份一下数据    
+:::
+
 ## 升级日志
 [CHANGELOG](../changelogs/CHANGELOG.md)
--- a/docs/guide/plugins.md
+++ b/docs/guide/plugins.md
@@ -1,5 +0,0 @@
-# 插件列表
-
-![img_1.png](../images/plugins/list.png)
-
-
--- a/docs/guide/plugins/access.md
+++ b/docs/guide/plugins/access.md
@@ -0,0 +1,58 @@
+# 授权列表
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **阿里云授权** |  | 
+| 2.| **EAB授权** | ZeroSSL证书申请需要EAB授权 | 
+| 3.| **google cloud** | 谷歌云授权 | 
+| 4.| **主机登录授权** |  | 
+| 5.| **SFTP授权** |  | 
+| 6.| **阿里云OSS授权** | 包含地域和Bucket | 
+| 7.| **FTP授权** |  | 
+| 8.| **腾讯云** |  | 
+| 9.| **腾讯云COS授权** | 腾讯云对象存储授权，包含地域和存储桶 | 
+| 10.| **七牛云授权** |  | 
+| 11.| **七牛OSS授权** |  | 
+| 12.| **天翼云授权** |  | 
+| 13.| **s3/minio授权** | S3/minio oss授权 | 
+| 14.| **baota授权** |  | 
+| 15.| **易盾DCDN授权** | https://user.yiduncdn.com | 
+| 16.| **易盾rcdn授权** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
+| 17.| **易发云短信** | sms.yfyidc.cn/ | 
+| 18.| **cdnfly授权** |  | 
+| 19.| **群晖登录授权** |  | 
+| 20.| **k8s授权** |  | 
+| 21.| **1panel授权** | 账号和密码 | 
+| 22.| **百度云授权** |  | 
+| 23.| **LeCDN授权** |  | 
+| 24.| **白山云授权** |  | 
+| 25.| **plesk授权** |  | 
+| 26.| **易支付** |  | 
+| 27.| **支付宝** |  | 
+| 28.| **微信支付** |  | 
+| 29.| **长亭雷池授权** |  | 
+| 30.| **lucky** |  | 
+| 31.| **括彩云cdn授权** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
+| 32.| **uniCloud** | unicloud授权 | 
+| 33.| **华为云授权** |  | 
+| 34.| **西部数码授权** |  | 
+| 35.| **多吉云** |  | 
+| 36.| **我爱云授权** | 我爱云CDN | 
+| 37.| **CacheFly** | CacheFly | 
+| 38.| **Gcore** | Gcore | 
+| 39.| **亚马逊云aws授权** |  | 
+| 40.| **dns.la授权** |  | 
+| 41.| **又拍云** |  | 
+| 42.| **火山引擎** |  | 
+| 43.| **京东云** |  | 
+| 44.| **51dns授权** |  | 
+
+<style module>
+table th:first-of-type {
+        width: 65px;
+    }
+table th:nth-of-type(2) {
+        width: 240px;
+    }
+</style>
+    
--- a/docs/guide/plugins/deploy.md
+++ b/docs/guide/plugins/deploy.md
@@ -0,0 +1,130 @@
+# 任务插件
+共 `70` 款任务插件    
+## 1. 证书申请
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **证书申请（JS版）** | 免费通配符域名证书申请，支持多个域名打到同一个证书上 | 
+| 2.| **证书申请（Lego）** | 支持海量DNS解析提供商，推荐使用，一样的免费通配符域名证书申请，支持多个域名打到同一个证书上 | 
+| 3.| **商用证书托管** | 手动上传自定义证书后，自动部署（每次证书有更新，都需要手动上传一次） | 
+## 2. 主机
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **FTP-上传证书到FTP** | 将证书上传到FTP服务器 | 
+| 2.| **IIS-部署到IIS站点** |  | 
+| 3.| **主机-执行远程主机脚本命令** | 可以执行重启nginx等操作让证书生效 | 
+| 4.| **主机-部署证书到SSH主机** | SFTP上传证书到主机，然后SSH执行部署脚本命令 | 
+## 3. CDN
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **易盾-部署到易盾DCDN** | 主要是防御，http://user.yiduncdn.com/ | 
+| 2.| **易盾-部署到易盾RCDN** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) | 
+| 3.| **cdnfly-部署证书到cdnfly** | cdnfly | 
+| 4.| **百度云-部署证书到CDN** | 部署到百度云CDN | 
+| 5.| **LeCDN-更新证书** |  | 
+| 6.| **LeCDN-更新证书V2** | 支持新版本LeCDN | 
+| 7.| **白山云-更新证书** |  | 
+| 8.| **天翼云-部署证书到CDN** | 部署证书到天翼云CDN和全站加速 | 
+| 9.| **括彩云-部署到括彩云CDN** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) | 
+| 10.| **多吉云-部署到多吉云CDN** |  | 
+| 11.| **我爱云-部署证书到我爱云CDN** | 部署证书到我爱云CDN | 
+| 12.| **CacheFly-部署证书到CacheFly** | 部署证书到 CacheFly | 
+| 13.| **Gcore-部署证书到Gcore** | 仅上传 并不会部署到cdn | 
+| 14.| **Gcore-刷新Gcore证书** | 刷新现有的证书 | 
+| 15.| **又拍云-部署证书到CDN/USS** | 支持又拍云CDN，又拍云云存储USS | 
+## 4. 面板
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **宝塔-面板证书部署** | 部署宝塔面板本身的ssl证书 | 
+| 2.| **宝塔-网站证书部署** | 部署宝塔管理的站点的ssl证书，目前支持网站站点、docker站点等 | 
+| 3.| **群晖-部署证书到群晖面板** | Synology，支持6.x以上版本 | 
+| 4.| **K8S-部署证书到Secret** | 部署证书到k8s的secret | 
+| 5.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress | 
+| 6.| **1Panel-部署证书到1Panel** | 更新1Panel的证书 | 
+| 7.| **Plesk-部署Plesk网站证书** |  | 
+| 8.| **雷池-更新证书** | 更新长亭雷池WAF的证书 | 
+| 9.| **lucky-更新Lucky证书** |  | 
+| 10.| **uniCloud-部署到服务空间** | 部署到服务空间 | 
+| 11.| **威联通-部署证书到威联通** | 部署证书到qnap | 
+## 5. 阿里云
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **阿里云-部署到Ack** | 部署到阿里云Ack集群Ingress等通过Secret管理证书的应用 | 
+| 2.| **阿里云-部署至任意云资源** | 【不建议使用】需要消耗阿里云自动部署次数，支持SLB、LIVE、webHosting、VOD、CR、DCDN、DDoS、CDN、ALB、APIGateway、FC、GA、MSE、NLB、OSS、SAE、WAF等云产品 | 
+| 3.| **阿里云-部署证书至CDN** | 自动部署域名证书至阿里云CDN | 
+| 4.| **阿里云-部署证书至DCDN** | 依赖证书申请前置任务，自动部署域名证书至阿里云DCDN | 
+| 5.| **阿里云-部署证书至OSS** | 自动部署域名证书至阿里云OSS | 
+| 6.| **阿里云-上传证书到阿里云** | 如果不想在阿里云上同一份证书上传多次，可以把此任务作为前置任务，其他阿里云任务证书那一项选择此任务的输出 | 
+| 7.| **阿里云-部署至阿里云WAF** | 部署证书到阿里云WAF | 
+| 8.| **阿里云-部署至ALB（应用负载均衡）** | ALB,更新监听器的默认证书 | 
+| 9.| **阿里云-部署至NLB（网络负载均衡）** | NLB,网络负载均衡,更新监听器的默认证书 | 
+| 10.| **阿里云-部署至SLB(传统负载均衡)** | 部署证书到阿里云SLB(传统负载均衡) | 
+| 11.| **阿里云-部署至阿里云FC(3.0)** | 部署证书到阿里云函数计算（FC3.0）,【注意】证书的加密算法必须选择【pkcs1旧版】 | 
+## 6. 华为云
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **华为云-部署证书至CDN** |  | 
+## 7. 腾讯云
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **腾讯云-部署证书到任意云资源** | 支持负载均衡、CDN、DDoS、直播、点播、Web应用防火墙、API网关、TEO、容器服务、对象存储、轻应用服务器、云原生微服务、云开发 | 
+| 2.| **腾讯云-部署到CLB** | 暂时只支持单向认证证书，暂时只支持通用负载均衡 | 
+| 3.| **腾讯云-部署到CDN（废弃）** | 已废弃，请使用v2版 | 
+| 4.| **腾讯云-部署到CDN-v2** | 推荐使用 | 
+| 5.| **腾讯云-上传证书到腾讯云** | 上传成功后输出：tencentCertId | 
+| 6.| **腾讯云-部署证书到COS** | 部署到腾讯云COS源站域名证书【注意：很不稳定，需要重试很多次偶尔才能成功一次】 | 
+| 7.| **腾讯云-部署到腾讯云EO** | 腾讯云边缘安全加速平台EO，必须配置上传证书到腾讯云任务 | 
+| 8.| **腾讯云-删除即将过期证书** | 仅删除未使用的证书 | 
+| 9.| **腾讯云-部署到TKE-ingress** | serverless集群请使用K8S部署插件；Qcloud类型需要【上传到腾讯云】作为前置任务；ApiServer未开启外网访问则需要做域名的内网IP映射 | 
+## 8. 火山引擎
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **火山引擎-部署证书至CDN** | 支持网页，文件下载，音视频点播 | 
+| 2.| **火山引擎-部署证书至CLB** | 部署至火山引擎负载均衡 | 
+| 3.| **火山引擎-上传证书至证书中心** | 上传证书至火山引擎证书中心 | 
+| 4.| **火山引擎-部署证书至ALB** | 部署至火山引擎应用负载均衡 | 
+| 5.| **火山引擎-部署证书至Live** | 部署至火山引擎视频直播 | 
+## 9. 京东云
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **京东云-部署证书至CDN** | 京东云内容分发网络 | 
+| 2.| **京东云-更新已有证书** | 更新SSL数字证书中的证书 | 
+| 3.| **京东云-上传新证书** | 上传证书到SSL数字证书中心 | 
+## 10. 七牛云
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **七牛云-部署证书至OSS** | 自动部署域名证书至七牛云KODO，注意是自定义源站域名，不是CDN域名 | 
+| 2.| **七牛云-部署证书至CDN** | 自动部署域名证书至七牛云CDN | 
+## 11. 亚马逊云
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **AWS-部署证书到CloudFront** | 部署证书到 AWS CloudFront | 
+## 12. 其他
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **Demo-测试插件** |  | 
+| 2.| **重启 Certd** | 【仅管理员可用】 重启 certd的https服务，用于更新 Certd 的 ssl 证书 | 
+| 3.| **自定义js脚本** | 【仅管理员】运行自定义js脚本执行 | 
+| 4.| **等待** | 等待一段时间 | 
+| 5.| **数据库备份** | 仅支持备份SQLite数据库 | 
+
+<style module>
+table th:first-of-type {
+        width: 65px;
+    }
+table th:nth-of-type(2) {
+        width: 240px;
+    }
+</style>
+    
--- a/docs/guide/plugins/dns-provider.md
+++ b/docs/guide/plugins/dns-provider.md
@@ -0,0 +1,22 @@
+# DNS提供商
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **阿里云** | 阿里云DNS解析提供商 | 
+| 2.| **腾讯云** | 腾讯云域名DNS解析提供者 | 
+| 3.| **华为云** | 华为云DNS解析提供商 | 
+| 4.| **西部数码** | west dns provider | 
+| 5.| **dns.la** | dns.la | 
+| 6.| **火山引擎** | 火山引擎DNS解析提供商 | 
+| 7.| **京东云** | 京东云DNS解析提供商 | 
+| 8.| **51dns** | 51DNS | 
+
+<style module>
+table th:first-of-type {
+        width: 65px;
+    }
+table th:nth-of-type(2) {
+        width: 240px;
+    }
+</style>
+    
--- a/docs/guide/plugins/notification.md
+++ b/docs/guide/plugins/notification.md
@@ -0,0 +1,26 @@
+# 通知插件
+
+| 序号 | 名称 | 说明 |
+|-----|-----|-----|
+| 1.| **企业微信通知** | 企业微信群聊机器人通知 | 
+| 2.| **电子邮件** | 电子邮件通知 | 
+| 3.| **爱语飞飞微信通知(iyuu)** | https://iyuu.cn/ | 
+| 4.| **自定义webhook** | 根据模版自定义http请求 | 
+| 5.| **Server酱ᵀ** | https://sct.ftqq.com/ | 
+| 6.| **Server酱³** | https://doc.sc3.ft07.com/serverchan3 | 
+| 7.| **AnPush** | https://anpush.com | 
+| 8.| **Telegram通知** | Telegram Bot推送通知 | 
+| 9.| **Discord 通知** | Discord 机器人通知 | 
+| 10.| **Slack通知** | Slack消息推送通知 | 
+| 11.| **Bark 通知** | Bark 推送通知插件 | 
+| 12.| **飞书通知** | 飞书群聊webhook通知 | 
+
+<style module>
+table th:first-of-type {
+        width: 65px;
+    }
+table th:nth-of-type(2) {
+        width: 240px;
+    }
+</style>
+    
--- a/docs/guide/qa/index.md
+++ b/docs/guide/qa/index.md
@@ -0,0 +1,19 @@
+# 常见报错解决
+
+## 1. getaddrinfo ENOTFOUND错误
+如果出现`getaddrinfo ENOTFOUND`错误，可以尝试在`docker-compose.yaml`中设置dns
+```yaml
+version: '3.3' # 兼容旧版docker-compose
+services:
+  certd:
+    #↓↓↓↓ ------------ # 如果出现getaddrinfo ENOTFOUND错误，可以尝试设置dns
+    dns:
+      - 223.5.5.5      # 阿里云公共dns
+      - 223.6.6.6
+#       # ↓↓↓↓ ------- # 如果你服务器在腾讯云，可以用这个替换上面阿里云的公共dns
+#      - 119.29.29.29  # 腾讯云公共dns
+#      - 182.254.116.116
+#       # ↓↓↓↓ ------- # 如果你服务器部署在国外，可以用这个替换上面阿里云的公共dns
+#      - 8.8.8.8       # 谷歌公共dns
+#      - 8.8.4.4
+```
--- a/docs/guide/use/ESXi/images/ssh.png
+++ b/docs/guide/use/ESXi/images/ssh.png
--- a/docs/guide/use/ESXi/index.md
+++ b/docs/guide/use/ESXi/index.md
--- a/docs/guide/use/comm/images/index.png
+++ b/docs/guide/use/comm/images/index.png
--- a/docs/guide/use/comm/index.md
+++ b/docs/guide/use/comm/index.md
--- a/docs/guide/use/comm/payments/alipay.md
+++ b/docs/guide/use/comm/payments/alipay.md
--- a/docs/guide/use/comm/payments/wxpay.md
+++ b/docs/guide/use/comm/payments/wxpay.md
--- a/docs/guide/use/comm/payments/yizhifu.md
+++ b/docs/guide/use/comm/payments/yizhifu.md
--- a/docs/guide/use/pretask/images/pretask1.png
+++ b/docs/guide/use/pretask/images/pretask1.png
--- a/docs/guide/use/pretask/images/pretask2.png
+++ b/docs/guide/use/pretask/images/pretask2.png
--- a/docs/guide/use/pretask/index.md
+++ b/docs/guide/use/pretask/index.md
@@ -0,0 +1,13 @@
+# 带输出的前置任务
+
+前置任务输出可以在后续任务中使用
+
+比如上传证书到阿里云，会返回阿里云的CertId，之后其他阿里云的部署任务可以选择复用这个证书
+
+## 复用证书
+
+![img.png](images/pretask1.png)
+
+在后续任务中可以选择前置任务的输出
+
+![img.png](images/pretask2.png)
--- a/lerna.json
+++ b/lerna.json
@@ -9,5 +9,5 @@
    }
  },
  "npmClient": "pnpm",
-  "version": "1.33.7"
+  "version": "1.34.2"
 }
--- a/package.json
+++ b/package.json
@@ -30,7 +30,8 @@
    "init": "lerna run build",
    "docs:dev": "vitepress dev docs",
    "docs:build": "vitepress build docs",
-    "docs:preview": "vitepress preview docs"
+    "docs:preview": "vitepress preview docs",
+    "pub": "echo 1"
  },
  "license": "AGPL-3.0",
  "dependencies": {
--- a/packages/core/acme-client/CHANGELOG.md
+++ b/packages/core/acme-client/CHANGELOG.md
@@ -3,6 +3,33 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/publishlab/node-acme-client/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+### Performance Improvements
+
+* http方式支持校验443端口 ([d75fcb7](https://github.com/publishlab/node-acme-client/commit/d75fcb7fec421a9a638eaa27fe9378c84b5e0f19))
+
+## [1.34.1](https://github.com/publishlab/node-acme-client/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+### Bug Fixes
+
+* 根据SOA记录判断子域名托管有缺陷，改回手动配置子域名托管记录的方式 ([1b280a2](https://github.com/publishlab/node-acme-client/commit/1b280a2940f9e2d919b0bf23b89cc185be1fa498))
+
+# [1.34.0](https://github.com/publishlab/node-acme-client/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/acme-client
+
+## [1.33.8](https://github.com/publishlab/node-acme-client/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+### Bug Fixes
+
+* 修复http上传方式无法清除记录文件的bug ([72a7b51](https://github.com/publishlab/node-acme-client/commit/72a7b51d479602b2c54c6c3ac8d8a0dcb9664e73))
+
+### Performance Improvements
+
+* 从域名的soa获取主域名，子域名托管无需额外配置 ([a586a92](https://github.com/publishlab/node-acme-client/commit/a586a92d5e32ea846ac37be52a7ad8c328d89966))
+* 七牛oss支持删除过期备份 ([b7113bd](https://github.com/publishlab/node-acme-client/commit/b7113bda2378116d6c116dc583f563cce7cf9f00))
+
 ## [1.33.7](https://github.com/publishlab/node-acme-client/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/acme-client
--- a/packages/core/acme-client/package.json
+++ b/packages/core/acme-client/package.json
@@ -3,7 +3,7 @@
    "description": "Simple and unopinionated ACME client",
    "private": false,
    "author": "nmorsman",
-    "version": "1.33.7",
+    "version": "1.34.2",
    "type": "module",
    "module": "scr/index.js",
    "main": "src/index.js",
@@ -18,7 +18,7 @@
        "types"
    ],
    "dependencies": {
-        "@certd/basic": "^1.33.7",
+        "@certd/basic": "^1.34.2",
        "@peculiar/x509": "^1.11.0",
        "asn1js": "^3.0.5",
        "axios": "^1.7.2",
@@ -26,7 +26,8 @@
        "http-proxy-agent": "^7.0.2",
        "https-proxy-agent": "^7.0.5",
        "lodash-es": "^4.17.21",
-        "node-forge": "^1.3.1"
+        "node-forge": "^1.3.1",
+        "punycode": "^2.3.1"
    },
    "devDependencies": {
        "@types/node": "^20.14.10",
@@ -50,7 +51,8 @@
        "lint": "eslint .",
        "lint-types": "tsd",
        "prepublishOnly": "npm run build-docs",
-        "test": "mocha -t 60000 \"test/setup.js\" \"test/**/*.spec.js\""
+        "test": "mocha -t 60000 \"test/setup.js\" \"test/**/*.spec.js\"",
+        "pub": "npm publish"
    },
    "repository": {
        "type": "git",
@@ -67,5 +69,5 @@
    "bugs": {
        "url": "https://github.com/publishlab/node-acme-client/issues"
    },
-    "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+    "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/core/acme-client/src/auto.js
+++ b/packages/core/acme-client/src/auto.js
@@ -117,12 +117,12 @@ export default async (client, userOpts) => {

        log(`[auto] [${d}] Trigger challengeCreateFn()`);
        try {
-            const { recordReq, recordRes, dnsProvider, challenge, keyAuthorization } = await opts.challengeCreateFn(authz, keyAuthorizationGetter);
+            const { recordReq, recordRes, dnsProvider, challenge, keyAuthorization ,httpUploader} = await opts.challengeCreateFn(authz, keyAuthorizationGetter);
            clearTasks.push(async () => {
                /* Trigger challengeRemoveFn(), suppress errors */
                log(`[auto] [${d}] Trigger challengeRemoveFn()`);
                try {
-                    await opts.challengeRemoveFn(authz, challenge, keyAuthorization, recordReq, recordRes, dnsProvider);
+                    await opts.challengeRemoveFn(authz, challenge, keyAuthorization, recordReq, recordRes, dnsProvider,httpUploader);
                } catch (e) {
                    log(`[auto] [${d}] challengeRemoveFn threw error: ${e.message}`);
                }
@@ -234,6 +234,7 @@ export default async (client, userOpts) => {
            throw new CancelError("用户取消");
        }

+        const waitDnsDiffuseTime = opts.waitDnsDiffuseTime || 30;
        try {
            // eslint-disable-next-line no-await-in-loop
            await runPromisePa(challengePromises);
@@ -242,8 +243,8 @@ export default async (client, userOpts) => {
                await wait(60 * 1000);
            } else {
                await runPromisePa(localVerifyTasks, 1000);
-                log("本地校验完成，等待30s")
-                await wait(30 * 1000)
+                log(`本地校验完成，等待${waitDnsDiffuseTime}s`)
+                await wait(waitDnsDiffuseTime * 1000)
            }

            log("开始向提供商请求挑战验证");
--- a/packages/core/acme-client/src/index.js
+++ b/packages/core/acme-client/src/index.js
@@ -46,3 +46,5 @@ export *  from './axios.js'
 export * from './logger.js'
 export * from './verify.js'
 export * from './error.js'
+
+export * from './util.js'
--- a/packages/core/acme-client/src/util.js
+++ b/packages/core/acme-client/src/util.js
@@ -340,5 +340,6 @@ export {
    formatResponseError,
    getAuthoritativeDnsResolver,
    retrieveTlsAlpnCertificate,
+    resolveDomainBySoaRecord
 };

--- a/packages/core/acme-client/src/verify.js
+++ b/packages/core/acme-client/src/verify.js
@@ -24,22 +24,46 @@ const dns = dnsSdk.promises
 */

 async function verifyHttpChallenge(authz, challenge, keyAuthorization, suffix = `/.well-known/acme-challenge/${challenge.token}`) {
+
+    async function doQuery(challengeUrl){
+        log(`正在测试请求 ${challengeUrl} `)
+        // const httpsPort = axios.defaults.acmeSettings.httpsChallengePort || 443;
+        // const challengeUrl = `https://${authz.identifier.value}:${httpsPort}${suffix}`;
+
+        /* May redirect to HTTPS with invalid/self-signed cert - https://letsencrypt.org/docs/challenge-types/#http-01-challenge */
+        const httpsAgent = new https.Agent({ rejectUnauthorized: false });
+
+        log(`Sending HTTP query to ${authz.identifier.value}, suffix: ${suffix}, port: ${httpPort}`);
+        let data = ""
+        try{
+            const resp = await axios.get(challengeUrl, { httpsAgent });
+            data = (resp.data || '').replace(/\s+$/, '');
+        }catch (e) {
+            log(`[error] HTTP request error from ${authz.identifier.value}`,e.message);
+            return false
+        }
+
+        if (!data || (data !== keyAuthorization)) {
+            log(`[error] Authorization not found in HTTP response from ${authz.identifier.value}`);
+            return false
+        }
+        return true
+
+    }
+
    const httpPort = axios.defaults.acmeSettings.httpChallengePort || 80;
    const challengeUrl = `http://${authz.identifier.value}:${httpPort}${suffix}`;

-    /* May redirect to HTTPS with invalid/self-signed cert - https://letsencrypt.org/docs/challenge-types/#http-01-challenge */
-    const httpsAgent = new https.Agent({ rejectUnauthorized: false });
-
-    log(`Sending HTTP query to ${authz.identifier.value}, suffix: ${suffix}, port: ${httpPort}`);
-    const resp = await axios.get(challengeUrl, { httpsAgent });
-    const data = (resp.data || '').replace(/\s+$/, '');
-
-    log(`Query successful, HTTP status code: ${resp.status}`);
-
-    if (!data || (data !== keyAuthorization)) {
-        throw new Error(`Authorization not found in HTTP response from ${authz.identifier.value}`);
+    if (!await doQuery(challengeUrl)) {
+        const httpsPort = axios.defaults.acmeSettings.httpsChallengePort || 443;
+        const httpsChallengeUrl = `https://${authz.identifier.value}:${httpsPort}${suffix}`;
+        const res = await doQuery(httpsChallengeUrl)
+        if (!res) {
+            throw new Error(`[error] 验证失败，请检查以上测试url是否可以正常访问`);
+        }
    }

+
    log(`Key authorization match for ${challenge.type}/${authz.identifier.value}, ACME challenge verified`);
    return true;
 }
--- a/packages/core/acme-client/test/soa.spec.mjs
+++ b/packages/core/acme-client/test/soa.spec.mjs
@@ -0,0 +1,11 @@
+import {assert} from 'chai'
+import {resolveDomainBySoaRecord} from "../src/util.js"
+describe('dns', () => {
+    it('resolveDomainBySoaRecord', async () => {
+        const resp = await resolveDomainBySoaRecord("a.corp.smartdeer.com")
+
+        assert.equal(resp, "smartdeer.com")
+
+    });
+
+})
--- a/packages/core/acme-client/types/index.d.ts
+++ b/packages/core/acme-client/types/index.d.ts
@@ -59,7 +59,7 @@ export interface ClientExternalAccountBindingOptions {
 export interface ClientAutoOptions {
    csr: CsrBuffer | CsrString;
    challengeCreateFn: (authz: Authorization, keyAuthorization: (challenge:rfc8555.Challenge)=>Promise<string>) => Promise<{recordReq?:any,recordRes?:any,dnsProvider?:any,challenge: rfc8555.Challenge,keyAuthorization:string}>;
-    challengeRemoveFn: (authz: Authorization, challenge: rfc8555.Challenge, keyAuthorization: string,recordReq:any, recordRes:any,dnsProvider:any) => Promise<any>;
+    challengeRemoveFn: (authz: Authorization, challenge: rfc8555.Challenge, keyAuthorization: string,recordReq:any, recordRes:any,dnsProvider:any,httpUploader:any) => Promise<any>;
    email?: string;
    termsOfServiceAgreed?: boolean;
    skipChallengeVerification?: boolean;
@@ -204,4 +204,6 @@ export function setLogger(fn: (message: any, ...args: any[]) => void): void;

 export function walkTxtRecord(record: any): Promise<string[]>;

-export const CancelError: typeof CancelError;
+export const CancelError: typeof CancelError;
+
+export function resolveDomainBySoaRecord(domain: string): Promise<string>;
--- a/packages/core/acme-client/types/index.test-d.js
+++ b/packages/core/acme-client/types/index.test-d.js
@@ -1,137 +0,0 @@
-"use strict";
-/**
- * acme-client type definition tests
- */
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var __generator = (this && this.__generator) || function (thisArg, body) {
-    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g;
-    return g = { next: verb(0), "throw": verb(1), "return": verb(2) }, typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
-    function verb(n) { return function (v) { return step([n, v]); }; }
-    function step(op) {
-        if (f) throw new TypeError("Generator is already executing.");
-        while (g && (g = 0, op[0] && (_ = 0)), _) try {
-            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
-            if (y = 0, t) op = [op[0] & 2, t.value];
-            switch (op[0]) {
-                case 0: case 1: t = op; break;
-                case 4: _.label++; return { value: op[1], done: false };
-                case 5: _.label++; y = op[1]; op = [0]; continue;
-                case 7: op = _.ops.pop(); _.trys.pop(); continue;
-                default:
-                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
-                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
-                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
-                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
-                    if (t[2]) _.ops.pop();
-                    _.trys.pop(); continue;
-            }
-            op = body.call(thisArg, _);
-        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
-        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
-    }
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-var acme = require("acme-client");
-(function () { return __awaiter(void 0, void 0, void 0, function () {
-    var accountKey, client, order, authorizations, authorization, challenge, _a, certKey, certCsr;
-    return __generator(this, function (_b) {
-        switch (_b.label) {
-            case 0: return [4 /*yield*/, acme.crypto.createPrivateKey()];
-            case 1:
-                accountKey = _b.sent();
-                client = new acme.Client({
-                    accountKey: accountKey,
-                    directoryUrl: acme.directory.letsencrypt.staging
-                });
-                /* Account */
-                return [4 /*yield*/, client.createAccount({
-                        termsOfServiceAgreed: true,
-                        contact: ['mailto:test@example.com']
-                    })];
-            case 2:
-                /* Account */
-                _b.sent();
-                return [4 /*yield*/, client.createOrder({
-                        identifiers: [
-                            { type: 'dns', value: 'example.com' },
-                            { type: 'dns', value: '*.example.com' },
-                        ]
-                    })];
-            case 3:
-                order = _b.sent();
-                return [4 /*yield*/, client.getOrder(order)];
-            case 4:
-                _b.sent();
-                return [4 /*yield*/, client.getAuthorizations(order)];
-            case 5:
-                authorizations = _b.sent();
-                authorization = authorizations[0];
-                challenge = authorization.challenges[0];
-                return [4 /*yield*/, client.getChallengeKeyAuthorization(challenge)];
-            case 6:
-                _b.sent();
-                return [4 /*yield*/, client.verifyChallenge(authorization, challenge)];
-            case 7:
-                _b.sent();
-                return [4 /*yield*/, client.completeChallenge(challenge)];
-            case 8:
-                _b.sent();
-                return [4 /*yield*/, client.waitForValidStatus(challenge)];
-            case 9:
-                _b.sent();
-                return [4 /*yield*/, acme.crypto.createCsr({
-                        commonName: 'example.com',
-                        altNames: ['example.com', '*.example.com']
-                    })];
-            case 10:
-                _a = _b.sent(), certKey = _a[0], certCsr = _a[1];
-                return [4 /*yield*/, client.finalizeOrder(order, certCsr)];
-            case 11:
-                _b.sent();
-                return [4 /*yield*/, client.getCertificate(order)];
-            case 12:
-                _b.sent();
-                return [4 /*yield*/, client.getCertificate(order, 'DST Root CA X3')];
-            case 13:
-                _b.sent();
-                /* Auto */
-                return [4 /*yield*/, client.auto({
-                        csr: certCsr,
-                        challengeCreateFn: function (authz, challenge, keyAuthorization) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
-                            return [2 /*return*/];
-                        }); }); },
-                        challengeRemoveFn: function (authz, challenge, keyAuthorization) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
-                            return [2 /*return*/];
-                        }); }); }
-                    })];
-            case 14:
-                /* Auto */
-                _b.sent();
-                return [4 /*yield*/, client.auto({
-                        csr: certCsr,
-                        email: 'test@example.com',
-                        termsOfServiceAgreed: false,
-                        skipChallengeVerification: false,
-                        challengePriority: ['http-01', 'dns-01'],
-                        preferredChain: 'DST Root CA X3',
-                        challengeCreateFn: function (authz, challenge, keyAuthorization) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
-                            return [2 /*return*/];
-                        }); }); },
-                        challengeRemoveFn: function (authz, challenge, keyAuthorization) { return __awaiter(void 0, void 0, void 0, function () { return __generator(this, function (_a) {
-                            return [2 /*return*/];
-                        }); }); }
-                    })];
-            case 15:
-                _b.sent();
-                return [2 /*return*/];
-        }
-    });
-}); })();
--- a/packages/core/basic/CHANGELOG.md
+++ b/packages/core/basic/CHANGELOG.md
@@ -3,6 +3,24 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+### Performance Improvements
+
+* 支持部署证书到火山dcdn ([5f85219](https://github.com/certd/certd/commit/5f852194953dc1b4e6336770f417507b8f5a33ad))
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/basic
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/basic
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 ### Performance Improvements
--- a/packages/core/basic/build.md
+++ b/packages/core/basic/build.md
@@ -1 +1 @@
-22:12
+20:23
--- a/packages/core/basic/package.json
+++ b/packages/core/basic/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/basic",
  "private": false,
-  "version": "1.33.7",
+  "version": "1.34.2",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -12,7 +12,8 @@
    "build": "npm run before-build && tsc --skipLibCheck",
    "dev-build": "npm run build",
    "preview": "vite preview",
-    "test": "mocha   --loader=ts-node/esm"
+    "test": "mocha   --loader=ts-node/esm",
+    "pub": "npm publish"
  },
  "dependencies": {
    "axios": "^1.7.2",
@@ -44,5 +45,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/core/basic/src/utils/util.options.ts
+++ b/packages/core/basic/src/utils/util.options.ts
@@ -1,4 +1,4 @@
-import { domainUtils } from './util.domain.js';
+import { domainUtils } from "./util.domain.js";

 function groupByDomain(options: any[], inDomains: string[]) {
  const matched = [];
@@ -19,16 +19,16 @@ function groupByDomain(options: any[], inDomains: string[]) {
 function buildGroupOptions(options: any[], inDomains: string[]) {
  const grouped = groupByDomain(options, inDomains);
  const groupOptions = [];
-  groupOptions.push({ value: 'matched', disabled: true, label: '----已匹配----' });
+  groupOptions.push({ value: "matched", disabled: true, label: "----已匹配----" });
  if (grouped.matched.length === 0) {
-    options.push({ value: '', disabled: true, label: '没有可以匹配的域名' });
+    options.push({ value: "", disabled: true, label: "没有可以匹配的域名" });
  } else {
    for (const matched of grouped.matched) {
      groupOptions.push(matched);
    }
  }
  if (grouped.notMatched.length > 0) {
-    groupOptions.push({ value: 'unmatched', disabled: true, label: '----未匹配----' });
+    groupOptions.push({ value: "unmatched", disabled: true, label: "----未匹配----" });
    for (const notMatched of grouped.notMatched) {
      groupOptions.push(notMatched);
    }
--- a/packages/core/basic/src/utils/util.request.ts
+++ b/packages/core/basic/src/utils/util.request.ts
@@ -145,7 +145,8 @@ export function createAxiosService({ logger }: { logger: Logger }) {
      } else {
        logger.info("http response status:", response?.status);
      }
-      if (response?.config?.returnResponse) {
+
+      if (response?.config?.returnOriginRes) {
        return response;
      }
      return response.data;
@@ -215,7 +216,7 @@ export type HttpRequestConfig<D = any> = {
  logParams?: boolean;
  logRes?: boolean;
  httpProxy?: string;
-  returnResponse?: boolean;
+  returnOriginRes?: boolean;
 } & AxiosRequestConfig<D>;
 export type HttpClient = {
  request<D = any, R = any>(config: HttpRequestConfig<D>): Promise<HttpClientResponse<R>>;
--- a/packages/core/pipeline/CHANGELOG.md
+++ b/packages/core/pipeline/CHANGELOG.md
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+**Note:** Version bump only for package @certd/pipeline
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/pipeline
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/pipeline
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/pipeline
--- a/packages/core/pipeline/package.json
+++ b/packages/core/pipeline/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/pipeline",
  "private": false,
-  "version": "1.33.7",
+  "version": "1.34.2",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -13,11 +13,12 @@
    "dev-build": "npm run build",
    "build3": "rollup -c",
    "preview": "vite preview",
-    "test": "mocha   --loader=ts-node/esm"
+    "test": "mocha   --loader=ts-node/esm",
+    "pub": "npm publish"
  },
  "dependencies": {
-    "@certd/basic": "^1.33.7",
-    "@certd/plus-core": "^1.33.7",
+    "@certd/basic": "^1.34.2",
+    "@certd/plus-core": "^1.34.2",
    "dayjs": "^1.11.7",
    "lodash-es": "^4.17.21",
    "reflect-metadata": "^0.1.13"
@@ -43,5 +44,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/core/pipeline/src/decorator/common.ts
+++ b/packages/core/pipeline/src/decorator/common.ts
@@ -1,17 +0,0 @@
-import { Decorator } from "./index.js";
-
-export type AutowireProp = {
-  name?: string;
-  type?: any;
-};
-export const AUTOWIRE_KEY = "pipeline:autowire";
-
-export function Autowire(props?: AutowireProp): PropertyDecorator {
-  return (target, propertyKey) => {
-    const _type = Reflect.getMetadata("design:type", target, propertyKey);
-    target = Decorator.target(target, propertyKey);
-    props = props || {};
-    props.type = _type;
-    Reflect.defineMetadata(AUTOWIRE_KEY, props || {}, target, propertyKey);
-  };
-}
--- a/packages/core/pipeline/src/decorator/index.ts
+++ b/packages/core/pipeline/src/decorator/index.ts
@@ -1,2 +1 @@
 export * from "./utils.js";
-export * from "./common.js";
--- a/packages/core/pipeline/src/plugin/api.ts
+++ b/packages/core/pipeline/src/plugin/api.ts
@@ -51,10 +51,6 @@ export type PluginDefine = Registrable & {
    [key: string]: TaskOutputDefine;
  };

-  autowire?: {
-    [key: string]: any;
-  };
-
  shortcut?: {
    [key: string]: {
      title: string;
--- a/packages/core/pipeline/src/plugin/decorator.ts
+++ b/packages/core/pipeline/src/plugin/decorator.ts
@@ -1,7 +1,6 @@
 import { pluginRegistry } from "./registry.js";
 import { PluginDefine, TaskInputDefine, TaskOutputDefine } from "./api.js";
 import { Decorator } from "../decorator/index.js";
-import { AUTOWIRE_KEY } from "../decorator/index.js";
 import "reflect-metadata";
 import { merge, sortBy } from "lodash-es";
 // 提供一个唯一 key
@@ -12,7 +11,6 @@ export function IsTaskPlugin(define: PluginDefine): ClassDecorator {
    target = Decorator.target(target);

    const inputs: any = {};
-    const autowires: any = {};
    const outputs: any = {};
    const properties = Decorator.getClassProperties(target);
    for (const property in properties) {
@@ -21,11 +19,6 @@ export function IsTaskPlugin(define: PluginDefine): ClassDecorator {
        inputs[property] = input;
      }

-      const autowire = Reflect.getMetadata(AUTOWIRE_KEY, target, property);
-      if (autowire) {
-        autowires[property] = autowire;
-      }
-
      const output = Reflect.getMetadata(PLUGIN_OUTPUT_KEY, target, property);
      if (output) {
        outputs[property] = output;
@@ -57,7 +50,7 @@ export function IsTaskPlugin(define: PluginDefine): ClassDecorator {
      },
    };

-    define = merge(defaultConfig, define, { input: inputMap, autowire: autowires, output: outputs });
+    define = merge(defaultConfig, define, { input: inputMap, output: outputs });

    Reflect.defineMetadata(PLUGIN_CLASS_KEY, define, target);

--- a/packages/core/pipeline/src/registry/registry.ts
+++ b/packages/core/pipeline/src/registry/registry.ts
@@ -65,7 +65,7 @@ export class Registry<T = any> {
  }

  getDefineList() {
-    const list = [];
+    let list = [];
    for (const key in this.storage) {
      const define = this.getDefine(key);
      if (define) {
@@ -78,6 +78,10 @@ export class Registry<T = any> {
        list.push({ ...define, key });
      }
    }
+
+    list = list.sort((a, b) => {
+      return (a.order ?? 10) - (b?.order ?? 10);
+    });
    return list;
  }

--- a/packages/libs/lib-huawei/CHANGELOG.md
+++ b/packages/libs/lib-huawei/CHANGELOG.md
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/lib-huawei
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/lib-huawei
--- a/packages/libs/lib-huawei/package.json
+++ b/packages/libs/lib-huawei/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-huawei",
  "private": false,
-  "version": "1.33.7",
+  "version": "1.34.2",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
  "types": "./dist/d/index.d.ts",
@@ -10,7 +10,8 @@
    "before-build": "rimraf dist && rimraf tsconfig.tsbuildinfo && rimraf .rollup.cache",
    "build": "npm run before-build && rollup -c ",
    "dev-build": "npm run build",
-    "preview": "vite preview"
+    "preview": "vite preview",
+    "pub": "npm publish"
  },
  "dependencies": {
    "axios": "^1.7.2",
@@ -23,5 +24,5 @@
    "prettier": "^2.8.8",
    "tslib": "^2.8.1"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/libs/lib-iframe/CHANGELOG.md
+++ b/packages/libs/lib-iframe/CHANGELOG.md
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/lib-iframe
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/lib-iframe
--- a/packages/libs/lib-iframe/package.json
+++ b/packages/libs/lib-iframe/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-iframe",
  "private": false,
-  "version": "1.33.7",
+  "version": "1.34.2",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -13,7 +13,8 @@
    "dev-build": "npm run build",
    "build3": "rollup -c",
    "build2": "vue-tsc --noEmit && vite build",
-    "preview": "vite preview"
+    "preview": "vite preview",
+    "pub": "npm publish"
  },
  "dependencies": {
    "nanoid": "^4.0.0"
@@ -30,5 +31,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/libs/lib-jdcloud/CHANGELOG.md
+++ b/packages/libs/lib-jdcloud/CHANGELOG.md
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/jdcloud
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/jdcloud
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/jdcloud
--- a/packages/libs/lib-jdcloud/package.json
+++ b/packages/libs/lib-jdcloud/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@certd/jdcloud",
-  "version": "1.33.7",
+  "version": "1.34.2",
  "description": "jdcloud openApi sdk",
  "main": "./dist/bundle.js",
  "module": "./dist/bundle.js",
@@ -9,7 +9,8 @@
    "test": "cross-env NODE_CONFIG_DIR=./test/config  mocha --recursive --require babel-register",
    "dev": "babel src --out-dir babel -w",
    "build": "rollup -c ",
-    "dev-build": "npm run build"
+    "dev-build": "npm run build",
+    "pub": "npm publish"
  },
  "author": "",
  "license": "Apache",
@@ -60,5 +61,5 @@
      "fetch"
    ]
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/libs/lib-k8s/CHANGELOG.md
+++ b/packages/libs/lib-k8s/CHANGELOG.md
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/lib-k8s
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/lib-k8s
--- a/packages/libs/lib-k8s/package.json
+++ b/packages/libs/lib-k8s/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/lib-k8s",
  "private": false,
-  "version": "1.33.7",
+  "version": "1.34.2",
  "type": "module",
  "main": "./dist/index.js",
  "module": "./dist/index.js",
@@ -13,10 +13,11 @@
    "dev-build": "npm run build",
    "build3": "rollup -c",
    "build2": "vue-tsc --noEmit && vite build",
-    "preview": "vite preview"
+    "preview": "vite preview",
+    "pub": "npm publish"
  },
  "dependencies": {
-    "@certd/basic": "^1.33.7",
+    "@certd/basic": "^1.34.2",
    "@kubernetes/client-node": "0.21.0"
  },
  "devDependencies": {
@@ -31,5 +32,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/libs/lib-server/CHANGELOG.md
+++ b/packages/libs/lib-server/CHANGELOG.md
@@ -3,6 +3,24 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+### Performance Improvements
+
+* 支持设置网安备案号 ([d18e431](https://github.com/certd/certd/commit/d18e431e2f08e6b37704032c4ea6fbdd8e971442))
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+**Note:** Version bump only for package @certd/lib-server
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/lib-server
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/lib-server
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/lib-server
--- a/packages/libs/lib-server/package.json
+++ b/packages/libs/lib-server/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@certd/lib-server",
-  "version": "1.33.7",
+  "version": "1.34.2",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -27,10 +27,10 @@
  ],
  "license": "AGPL",
  "dependencies": {
-    "@certd/acme-client": "^1.33.7",
-    "@certd/basic": "^1.33.7",
-    "@certd/pipeline": "^1.33.7",
-    "@certd/plus-core": "^1.33.7",
+    "@certd/acme-client": "^1.34.2",
+    "@certd/basic": "^1.34.2",
+    "@certd/pipeline": "^1.34.2",
+    "@certd/plus-core": "^1.34.2",
    "@midwayjs/cache": "~3.14.0",
    "@midwayjs/core": "~3.20.3",
    "@midwayjs/i18n": "~3.20.3",
@@ -61,5 +61,5 @@
    "typeorm": "^0.3.11",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/libs/lib-server/src/system/settings/service/models.ts
+++ b/packages/libs/lib-server/src/system/settings/service/models.ts
@@ -25,6 +25,7 @@ export class SysPublicSettings extends BaseSettings {
  limitUserPipelineCount = 0;
  managerOtherUserPipeline = false;
  icpNo?: string;
+  mpsNo?: string;
  robots?: boolean = true;
 }

--- a/packages/libs/midway-flyway-js/CHANGELOG.md
+++ b/packages/libs/midway-flyway-js/CHANGELOG.md
@@ -3,6 +3,22 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+**Note:** Version bump only for package @certd/midway-flyway-js
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/midway-flyway-js
--- a/packages/libs/midway-flyway-js/package.json
+++ b/packages/libs/midway-flyway-js/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@certd/midway-flyway-js",
-  "version": "1.33.7",
+  "version": "1.34.2",
  "description": "midway with flyway, sql upgrade way ",
  "private": false,
  "type": "module",
@@ -46,5 +46,5 @@
    "typeorm": "^0.3.11",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/plugins/plugin-cert/CHANGELOG.md
+++ b/packages/plugins/plugin-cert/CHANGELOG.md
@@ -3,6 +3,33 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+### Bug Fixes
+
+* 根据SOA记录判断子域名托管有缺陷，改回手动配置子域名托管记录的方式 ([1b280a2](https://github.com/certd/certd/commit/1b280a2940f9e2d919b0bf23b89cc185be1fa498))
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+**Note:** Version bump only for package @certd/plugin-cert
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+### Bug Fixes
+
+* 修复http上传方式无法清除记录文件的bug ([72a7b51](https://github.com/certd/certd/commit/72a7b51d479602b2c54c6c3ac8d8a0dcb9664e73))
+
+### Performance Improvements
+
+* 从域名的soa获取主域名，子域名托管无需额外配置 ([a586a92](https://github.com/certd/certd/commit/a586a92d5e32ea846ac37be52a7ad8c328d89966))
+* 数据库备份支持oss ([308d460](https://github.com/certd/certd/commit/308d4600efe2002f199c33b4594d3071784e58ea))
+* 支持阿里云中文域名申请 ([b3468cf](https://github.com/certd/certd/commit/b3468cf7f28228d7c9cf68de6b5a9bbeb67f2c6d))
+* 支持中文域名 ([162ebfd](https://github.com/certd/certd/commit/162ebfd4e0c25727efb33952d3bbf7420a02e2c3))
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 **Note:** Version bump only for package @certd/plugin-cert
--- a/packages/plugins/plugin-cert/package.json
+++ b/packages/plugins/plugin-cert/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-cert",
  "private": false,
-  "version": "1.33.7",
+  "version": "1.34.2",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -12,18 +12,20 @@
    "dev-build": "npm run build",
    "build3": "rollup -c",
    "build2": "vue-tsc --noEmit && vite build",
-    "preview": "vite preview"
+    "preview": "vite preview",
+    "pub": "npm publish"
  },
  "dependencies": {
-    "@certd/acme-client": "^1.33.7",
-    "@certd/basic": "^1.33.7",
-    "@certd/pipeline": "^1.33.7",
-    "@certd/plugin-lib": "^1.33.7",
+    "@certd/acme-client": "^1.34.2",
+    "@certd/basic": "^1.34.2",
+    "@certd/pipeline": "^1.34.2",
+    "@certd/plugin-lib": "^1.34.2",
    "@google-cloud/publicca": "^1.3.0",
    "dayjs": "^1.11.7",
    "jszip": "^3.10.1",
    "lodash-es": "^4.17.21",
    "psl": "^1.9.0",
+    "punycode": "^2.3.1",
    "rimraf": "^5.0.5"
  },
  "devDependencies": {
@@ -41,5 +43,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/plugins/plugin-cert/src/dns-provider/api.ts
+++ b/packages/plugins/plugin-cert/src/dns-provider/api.ts
@@ -4,9 +4,6 @@ import { IAccess, Registrable } from "@certd/pipeline";
 export type DnsProviderDefine = Registrable & {
  accessType: string;
  icon?: string;
-  autowire?: {
-    [key: string]: any;
-  };
 };

 export type CreateRecordOptions = {
@@ -35,6 +32,8 @@ export interface IDnsProvider<T = any> {
  createRecord(options: CreateRecordOptions): Promise<T>;
  removeRecord(options: RemoveRecordOptions<T>): Promise<void>;
  setCtx(ctx: DnsProviderContext): void;
+  //中文域名是否需要punycode转码，如果返回True，则使用punycode来添加解析记录，否则使用中文域名添加解析记录
+  usePunyCode(): boolean;
 }

 export interface ISubDomainsGetter {
--- a/packages/plugins/plugin-cert/src/dns-provider/base.ts
+++ b/packages/plugins/plugin-cert/src/dns-provider/base.ts
@@ -1,6 +1,5 @@
 import { CreateRecordOptions, DnsProviderContext, DnsProviderDefine, IDnsProvider, RemoveRecordOptions } from "./api.js";
 import { dnsProviderRegistry } from "./registry.js";
-import { Decorator } from "@certd/pipeline";
 import { HttpClient, ILogger } from "@certd/basic";

 export abstract class AbstractDnsProvider<T = any> implements IDnsProvider<T> {
@@ -8,6 +7,12 @@ export abstract class AbstractDnsProvider<T = any> implements IDnsProvider<T> {
  http!: HttpClient;
  logger!: ILogger;

+  usePunyCode(): boolean {
+    //是否使用punycode来添加解析记录
+    //默认都使用原始中文域名来添加
+    return false;
+  }
+
  setCtx(ctx: DnsProviderContext) {
    this.ctx = ctx;
    this.logger = ctx.logger;
@@ -28,15 +33,13 @@ export abstract class AbstractDnsProvider<T = any> implements IDnsProvider<T> {
 export async function createDnsProvider(opts: { dnsProviderType: string; context: DnsProviderContext }): Promise<IDnsProvider> {
  const { dnsProviderType, context } = opts;
  const dnsProviderPlugin = dnsProviderRegistry.get(dnsProviderType);
-  const DnsProviderClass = dnsProviderPlugin.target;
+  const DnsProviderClass = await dnsProviderPlugin.target();
  const dnsProviderDefine = dnsProviderPlugin.define as DnsProviderDefine;
  if (dnsProviderDefine.deprecated) {
    context.logger.warn(dnsProviderDefine.deprecated);
  }
  // @ts-ignore
  const dnsProvider: IDnsProvider = new DnsProviderClass();
-
-  Decorator.inject(dnsProviderDefine.autowire, dnsProvider, context);
  dnsProvider.setCtx(context);
  await dnsProvider.onInstance();
  return dnsProvider;
--- a/packages/plugins/plugin-cert/src/dns-provider/decorator.ts
+++ b/packages/plugins/plugin-cert/src/dns-provider/decorator.ts
@@ -1,6 +1,6 @@
 import { dnsProviderRegistry } from "./registry.js";
 import { DnsProviderDefine } from "./api.js";
-import { Decorator, AUTOWIRE_KEY } from "@certd/pipeline";
+import { Decorator } from "@certd/pipeline";
 import * as _ from "lodash-es";

 // 提供一个唯一 key
@@ -9,22 +9,15 @@ export const DNS_PROVIDER_CLASS_KEY = "pipeline:dns-provider";
 export function IsDnsProvider(define: DnsProviderDefine): ClassDecorator {
  return (target: any) => {
    target = Decorator.target(target);
-    const autowires: any = {};
-    const properties = Decorator.getClassProperties(target);
-    for (const property in properties) {
-      const autowire = Reflect.getMetadata(AUTOWIRE_KEY, target, property);
-      if (autowire) {
-        autowires[property] = autowire;
-      }
-    }
-    _.merge(define, { autowire: autowires });

    Reflect.defineMetadata(DNS_PROVIDER_CLASS_KEY, define, target);

    target.define = define;
    dnsProviderRegistry.register(define.name, {
      define,
-      target,
+      target: async () => {
+        return target;
+      },
    });
  };
 }
--- a/packages/plugins/plugin-cert/src/dns-provider/domain-parser.ts
+++ b/packages/plugins/plugin-cert/src/dns-provider/domain-parser.ts
@@ -1,14 +1,18 @@
 import { IDomainParser, ISubDomainsGetter } from "./api";
 //@ts-ignore
 import psl from "psl";
+import { ILogger, utils, logger as globalLogger } from "@certd/basic";
+import { resolveDomainBySoaRecord } from "@certd/acme-client";

 export class DomainParser implements IDomainParser {
  subDomainsGetter: ISubDomainsGetter;
-  constructor(subDomainsGetter: ISubDomainsGetter) {
+  logger: ILogger;
+  constructor(subDomainsGetter: ISubDomainsGetter, logger?: ILogger) {
    this.subDomainsGetter = subDomainsGetter;
+    this.logger = logger || globalLogger;
  }

-  parseDomain(fullDomain: string) {
+  parseDomainByPsl(fullDomain: string) {
    const parsed = psl.parse(fullDomain) as psl.ParsedDomain;
    if (parsed.error) {
      throw new Error(`解析${fullDomain}域名失败:` + JSON.stringify(parsed.error));
@@ -17,16 +21,46 @@ export class DomainParser implements IDomainParser {
  }

  async parse(fullDomain: string) {
+    this.logger.info(`查找主域名:${fullDomain}`);
+    const cacheKey = `domain_parse:${fullDomain}`;
+    const value = utils.cache.get(cacheKey);
+    if (value) {
+      this.logger.info(`从缓存获取到主域名:${fullDomain}->${value}`);
+      return value;
+    }
+
    const subDomains = await this.subDomainsGetter.getSubDomains();
    if (subDomains && subDomains.length > 0) {
+      const fullDomainDot = "." + fullDomain;
      for (const subDomain of subDomains) {
-        if (fullDomain.endsWith(subDomain)) {
+        if (fullDomainDot.endsWith("." + subDomain)) {
          //找到子域名托管
+          utils.cache.set(cacheKey, subDomain, {
+            ttl: 60 * 1000,
+          });
+          this.logger.info(`获取到子域名托管域名:${fullDomain}->${subDomain}`);
          return subDomain;
        }
      }
    }

-    return this.parseDomain(fullDomain);
+    const res = this.parseDomainByPsl(fullDomain);
+    this.logger.info(`从psl获取主域名:${fullDomain}->${res}`);
+
+    let soaManDomain = null;
+    try {
+      const mainDomain = await resolveDomainBySoaRecord(fullDomain);
+      if (mainDomain) {
+        this.logger.info(`从SOA获取到主域名:${fullDomain}->${mainDomain}`);
+        soaManDomain = mainDomain;
+      }
+    } catch (e) {
+      this.logger.error("从SOA获取主域名失败", e.message);
+    }
+    if (soaManDomain && soaManDomain !== res) {
+      this.logger.warn(`SOA获取的主域名（${soaManDomain}）和psl获取的主域名(${res})不一致，请确认是否有设置子域名托管`);
+    }
+
+    return res;
  }
 }
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/acme.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/acme.ts
@@ -6,8 +6,8 @@ import { Challenge } from "@certd/acme-client/types/rfc8555";
 import { IContext } from "@certd/pipeline";
 import { ILogger, utils } from "@certd/basic";
 import { IDnsProvider, IDomainParser } from "../../dns-provider/index.js";
-import { HttpChallengeUploader } from "./uploads/api.js";
-
+import punycode from "node:punycode";
+import { IOssClient } from "@certd/plugin-lib";
 export type CnameVerifyPlan = {
  type?: string;
  domain: string;
@@ -18,7 +18,7 @@ export type CnameVerifyPlan = {
 export type HttpVerifyPlan = {
  type: string;
  domain: string;
-  httpUploader: HttpChallengeUploader;
+  httpUploader: IOssClient;
 };

 export type DomainVerifyPlan = {
@@ -35,7 +35,6 @@ export type DomainsVerifyPlan = {
 export type Providers = {
  dnsProvider?: IDnsProvider;
  domainsVerifyPlan?: DomainsVerifyPlan;
-  httpUploader?: HttpChallengeUploader;
 };

 export type CertInfo = {
@@ -64,6 +63,7 @@ type AcmeServiceOptions = {
  maxCheckRetryCount?: number;
  userId: number;
  domainParser: IDomainParser;
+  waitDnsDiffuseTime?: number;
 };

 export class AcmeService {
@@ -184,7 +184,7 @@ export class AcmeService {
      return authz.challenges.find((c: any) => c.type === type);
    };

-    const doHttpVerify = async (challenge: any, httpUploader: HttpChallengeUploader) => {
+    const doHttpVerify = async (challenge: any, httpUploader: IOssClient) => {
      const keyAuthorization = await keyAuthorizationGetter(challenge);
      this.logger.info("http校验");
      const filePath = `.well-known/acme-challenge/${challenge.token}`;
@@ -203,14 +203,16 @@ export class AcmeService {
      this.logger.info("dns校验");
      const keyAuthorization = await keyAuthorizationGetter(challenge);

+      const mainDomain = dnsProvider.usePunyCode() ? domain : punycode.toUnicode(domain);
+      fullRecord = dnsProvider.usePunyCode() ? fullRecord : punycode.toUnicode(fullRecord);
      const recordValue = keyAuthorization;
-      let hostRecord = fullRecord.replace(`${domain}`, "");
+      let hostRecord = fullRecord.replace(`${mainDomain}`, "");
      if (hostRecord.endsWith(".")) {
        hostRecord = hostRecord.substring(0, hostRecord.length - 1);
      }

      const recordReq = {
-        domain,
+        domain: mainDomain,
        fullRecord,
        hostRecord,
        type: "TXT",
@@ -247,7 +249,10 @@ export class AcmeService {
              fullRecord = cname.fullRecord;
            }
          } else {
-            this.logger.error("未找到域名Cname校验计划，使用默认的dnsProvider");
+            this.logger.error(`未找到域名${fullDomain}的CNAME校验计划，请修改证书申请配置`);
+          }
+          if (dnsProvider == null) {
+            throw new Error(`未找到域名${fullDomain}CNAME校验计划的DnsProvider，请修改证书申请配置`);
          }
        } else if (domainVerifyPlan.type === "http") {
          const httpVerifyPlan = domainVerifyPlan.httpVerifyPlan;
@@ -286,7 +291,7 @@ export class AcmeService {
   * @returns {Promise}
   */

-  async challengeRemoveFn(authz: any, challenge: any, keyAuthorization: string, recordReq: any, recordRes: any, dnsProvider?: IDnsProvider, httpUploader?: HttpChallengeUploader) {
+  async challengeRemoveFn(authz: any, challenge: any, keyAuthorization: string, recordReq: any, recordRes: any, dnsProvider?: IDnsProvider, httpUploader?: IOssClient) {
    this.logger.info("执行清理");

    /* http-01 */
@@ -321,9 +326,16 @@ export class AcmeService {
    isTest?: boolean;
    privateKeyType?: string;
  }): Promise<CertInfo> {
-    const { email, isTest, domains, csrInfo, dnsProvider, domainsVerifyPlan, httpUploader } = options;
+    const { email, isTest, csrInfo, dnsProvider, domainsVerifyPlan } = options;
    const client: acme.Client = await this.getAcmeClient(email, isTest);

+    let domains = options.domains;
+    const encodingDomains = [];
+    for (const domain of domains) {
+      encodingDomains.push(punycode.toASCII(domain));
+    }
+    domains = encodingDomains;
+
    /* Create CSR */
    const { commonName, altNames } = this.buildCommonNameByDomains(domains);
    let privateKey = null;
@@ -361,14 +373,13 @@ export class AcmeService {
      privateKey
    );

-    if (dnsProvider == null && domainsVerifyPlan == null && httpUploader == null) {
-      throw new Error("dnsProvider 、 domainsVerifyPlan 、 httpUploader不能都为空");
+    if (dnsProvider == null && domainsVerifyPlan == null) {
+      throw new Error("dnsProvider 、 domainsVerifyPlan不能都为空");
    }

    const providers: Providers = {
      dnsProvider,
      domainsVerifyPlan,
-      httpUploader,
    };
    /* 自动申请证书 */
    const crt = await client.auto({
@@ -383,7 +394,7 @@ export class AcmeService {
      ): Promise<{ recordReq?: any; recordRes?: any; dnsProvider?: any; challenge: Challenge; keyAuthorization: string }> => {
        return await this.challengeCreateFn(authz, keyAuthorizationGetter, providers);
      },
-      challengeRemoveFn: async (authz: acme.Authorization, challenge: Challenge, keyAuthorization: string, recordReq: any, recordRes: any, dnsProvider: IDnsProvider): Promise<any> => {
+      challengeRemoveFn: async (authz: acme.Authorization, challenge: Challenge, keyAuthorization: string, recordReq: any, recordRes: any, dnsProvider: IDnsProvider, httpUploader: IOssClient): Promise<any> => {
        return await this.challengeRemoveFn(authz, challenge, keyAuthorization, recordReq, recordRes, dnsProvider, httpUploader);
      },
      signal: this.options.signal,
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/base-convert.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/base-convert.ts
@@ -27,8 +27,8 @@ export abstract class CertApplyBaseConvertPlugin extends AbstractTaskPlugin {
      "1、支持多个域名打到一个证书上，例如： foo.com，*.foo.com，*.bar.com\n" +
      "2、子域名被通配符包含的不要填写，例如：www.foo.com已经被*.foo.com包含，不要填写www.foo.com\n" +
      "3、泛域名只能通配*号那一级（*.foo.com的证书不能用于xxx.yyy.foo.com、不能用于foo.com）\n" +
-      "4、输入一个，空格之后，再输入下一个\n" +
-      "5、如果你配置了子域托管解析，请先[设置托管子域名](#/certd/pipeline/subDomain)",
+      "4、输入一个，空格之后，再输入下一个 \n" +
+      "5、如果您配置了子域托管解析，请先[设置托管子域名](#/certd/pipeline/subDomain)",
  })
  domains!: string[];

--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/index.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/index.ts
@@ -9,8 +9,8 @@ import { CertReader } from "./cert-reader.js";
 import { CertApplyBasePlugin } from "./base.js";
 import { GoogleClient } from "../../libs/google.js";
 import { EabAccess } from "../../access";
-import { httpChallengeUploaderFactory } from "./uploads/factory.js";
 import { DomainParser } from "../../dns-provider/domain-parser.js";
+import { ossClientFactory } from "@certd/plugin-lib";
 export * from "./base.js";
 export type { CertInfo };
 export * from "./cert-reader.js";
@@ -68,9 +68,9 @@ export class CertApplyPlugin extends CertApplyBasePlugin {
      ],
    },
    required: true,
-    helper: `DNS直接验证：域名是在阿里云/腾讯云/华为云/Cloudflare/NameSilo/西数/火山/dns.la/京东云注册的，选它；
-CNAME代理验证：支持任何注册商注册的域名，但第一次需要手动添加CNAME记录；
-HTTP文件验证：不支持泛域名，需要配置网站文件上传`,
+    helper: `1. <b>DNS直接验证</b>：域名dns解析是在阿里云/腾讯云/华为云/CF/NameSilo/西数/火山/dns.la/京东云/51dns的，选它
+2.  <b>CNAME代理验证</b>：支持任何注册商的域名，第一次需要手动添加CNAME记录（建议将DNS服务器修改为阿里云/腾讯云的，然后使用DNS直接验证）
+3.  <b>HTTP文件验证</b>：不支持泛域名，需要配置网站文件上传`,
  })
  challengeType!: string;

@@ -115,6 +115,7 @@ HTTP文件验证：不支持泛域名，需要配置网站文件上传`,
  })
  dnsProviderType!: string;

+  // dns解析授权类型,勿删
  dnsProviderAccessType!: string;

  @TaskInput({
@@ -289,6 +290,17 @@ HTTP文件验证：不支持泛域名，需要配置网站文件上传`,
  })
  maxCheckRetryCount = 20;

+  @TaskInput({
+    title: "等待解析生效时长",
+    value: 30,
+    component: {
+      name: "a-input-number",
+      vModel: "value",
+    },
+    helper: "等待解析生效时长（秒）",
+  })
+  waitDnsDiffuseTime = 30;
+
  acme!: AcmeService;

  eab!: EabAccess;
@@ -326,7 +338,7 @@ HTTP文件验证：不支持泛域名，需要配置网站文件上传`,
    }
    this.eab = eab;
    const subDomainsGetter = await this.ctx.serviceGetter.get<ISubDomainsGetter>("subDomainsGetter");
-    const domainParser = new DomainParser(subDomainsGetter);
+    const domainParser = new DomainParser(subDomainsGetter, this.logger);
    this.acme = new AcmeService({
      userId: this.ctx.user.id,
      userContext: this.userContext,
@@ -340,6 +352,7 @@ HTTP文件验证：不支持泛域名，需要配置网站文件上传`,
      signal: this.ctx.signal,
      maxCheckRetryCount: this.maxCheckRetryCount,
      domainParser,
+      waitDnsDiffuseTime: this.waitDnsDiffuseTime,
    });
  }

@@ -446,7 +459,7 @@ HTTP文件验证：不支持泛域名，需要配置网站文件上传`,
            rootDir = rootDir + "/";
          }
          this.logger.info("上传方式", httpRecord.httpUploaderType);
-          const httpUploader = await httpChallengeUploaderFactory.createUploaderByType(httpRecord.httpUploaderType, {
+          const httpUploader = await ossClientFactory.createOssClientByType(httpRecord.httpUploaderType, {
            access,
            rootDir: rootDir,
            ctx: httpUploaderContext,
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/api.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/api.ts
@@ -1,35 +0,0 @@
-import { IAccessService } from "@certd/pipeline";
-import { ILogger, utils } from "@certd/basic";
-
-export type HttpChallengeUploader = {
-  upload: (fileName: string, fileContent: Buffer) => Promise<void>;
-  remove: (fileName: string) => Promise<void>;
-};
-
-export type HttpChallengeUploadContext = {
-  accessService: IAccessService;
-  logger: ILogger;
-  utils: typeof utils;
-};
-
-export abstract class BaseHttpChallengeUploader<A> implements HttpChallengeUploader {
-  rootDir: string;
-  access: A = null;
-  logger: ILogger;
-  utils: typeof utils;
-  ctx: HttpChallengeUploadContext;
-  protected constructor(opts: { rootDir: string; access: A }) {
-    this.rootDir = opts.rootDir;
-    this.access = opts.access;
-  }
-
-  async setCtx(ctx: any) {
-    // set context
-    this.ctx = ctx;
-    this.logger = ctx.logger;
-    this.utils = ctx.utils;
-  }
-
-  abstract remove(fileName: string): Promise<void>;
-  abstract upload(fileName: string, fileContent: Buffer): Promise<void>;
-}
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/alioss.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/alioss.ts
@@ -1,39 +0,0 @@
-import { BaseHttpChallengeUploader } from "../api.js";
-import { AliossAccess, AliyunAccess } from "@certd/plugin-lib";
-import { AliossClient } from "@certd/plugin-lib";
-
-export class AliossHttpChallengeUploader extends BaseHttpChallengeUploader<AliossAccess> {
-  async upload(filePath: string, fileContent: Buffer) {
-    const aliyunAccess = await this.ctx.accessService.getById<AliyunAccess>(this.access.accessId);
-    const client = new AliossClient({
-      access: aliyunAccess,
-      bucket: this.access.bucket,
-      region: this.access.region,
-    });
-
-    const key = this.rootDir + filePath;
-    this.logger.info(`开始上传文件: ${key}`);
-    await client.uploadFile(key, fileContent);
-
-    this.logger.info(`校验文件上传成功: ${filePath}`);
-  }
-
-  async remove(filePath: string) {
-    const key = this.rootDir + filePath;
-    // remove file from alioss
-    const client = await this.getAliossClient();
-    await client.removeFile(key);
-    this.logger.info(`文件删除成功: ${key}`);
-  }
-
-  private async getAliossClient() {
-    const aliyunAccess = await this.ctx.accessService.getById<AliyunAccess>(this.access.accessId);
-    const client = new AliossClient({
-      access: aliyunAccess,
-      bucket: this.access.bucket,
-      region: this.access.region,
-    });
-    await client.init();
-    return client;
-  }
-}
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/ftp.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/ftp.ts
@@ -1,41 +0,0 @@
-import { BaseHttpChallengeUploader } from "../api.js";
-import { FtpAccess, FtpClient } from "@certd/plugin-lib";
-import path from "path";
-import os from "os";
-import fs from "fs";
-
-export class FtpHttpChallengeUploader extends BaseHttpChallengeUploader<FtpAccess> {
-  async upload(filePath: string, fileContent: Buffer) {
-    const client = new FtpClient({
-      access: this.access,
-      logger: this.logger,
-    });
-    await client.connect(async (client) => {
-      const tmpFilePath = path.join(os.tmpdir(), "cert", "http", filePath);
-      const dir = path.dirname(tmpFilePath);
-      if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-      }
-      fs.writeFileSync(tmpFilePath, fileContent);
-      try {
-        // Write file to temp path
-        const path = this.rootDir + filePath;
-        await client.upload(path, tmpFilePath);
-      } finally {
-        // Remove temp file
-        fs.unlinkSync(tmpFilePath);
-      }
-    });
-  }
-
-  async remove(filePath: string) {
-    const client = new FtpClient({
-      access: this.access,
-      logger: this.logger,
-    });
-    await client.connect(async (client) => {
-      const path = this.rootDir + filePath;
-      await client.client.remove(path);
-    });
-  }
-}
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/qiniuoss.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/qiniuoss.ts
@@ -1,31 +0,0 @@
-import { BaseHttpChallengeUploader } from "../api.js";
-import { QiniuOssAccess, QiniuClient, QiniuAccess } from "@certd/plugin-lib";
-
-export class QiniuOssHttpChallengeUploader extends BaseHttpChallengeUploader<QiniuOssAccess> {
-  async upload(filePath: string, fileContent: Buffer) {
-    const qiniuAccess = await this.ctx.accessService.getById<QiniuAccess>(this.access.accessId);
-    const client = new QiniuClient({
-      access: qiniuAccess,
-      logger: this.logger,
-      http: this.ctx.utils.http,
-    });
-    if (this.rootDir.endsWith("/")) {
-      this.rootDir = this.rootDir.slice(0, -1);
-    }
-    await client.uploadFile(this.access.bucket, this.rootDir + filePath, fileContent);
-  }
-
-  async remove(filePath: string) {
-    const qiniuAccess = await this.ctx.accessService.getById<QiniuAccess>(this.access.accessId);
-    const client = new QiniuClient({
-      access: qiniuAccess,
-      logger: this.logger,
-      http: this.ctx.utils.http,
-    });
-
-    if (this.rootDir.endsWith("/")) {
-      this.rootDir = this.rootDir.slice(0, -1);
-    }
-    await client.removeFile(this.access.bucket, this.rootDir + filePath);
-  }
-}
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/sftp.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/sftp.ts
@@ -1,51 +0,0 @@
-import { BaseHttpChallengeUploader } from "../api.js";
-import { SshAccess, SshClient } from "@certd/plugin-lib";
-import path from "path";
-import os from "os";
-import fs from "fs";
-import { SftpAccess } from "@certd/plugin-lib";
-
-export class SftpHttpChallengeUploader extends BaseHttpChallengeUploader<SftpAccess> {
-  async upload(filePath: string, fileContent: Buffer) {
-    const tmpFilePath = path.join(os.tmpdir(), "cert", "http", filePath);
-
-    // Write file to temp path
-    const dir = path.dirname(tmpFilePath);
-    if (!fs.existsSync(dir)) {
-      fs.mkdirSync(dir, { recursive: true });
-    }
-    fs.writeFileSync(tmpFilePath, fileContent);
-
-    const access = await this.ctx.accessService.getById<SshAccess>(this.access.sshAccess);
-    const key = this.rootDir + filePath;
-    try {
-      const client = new SshClient(this.logger);
-      await client.uploadFiles({
-        connectConf: access,
-        mkdirs: true,
-        transports: [
-          {
-            localPath: tmpFilePath,
-            remotePath: key,
-          },
-        ],
-        opts: {
-          mode: this.access?.fileMode ?? undefined,
-        },
-      });
-    } finally {
-      // Remove temp file
-      fs.unlinkSync(tmpFilePath);
-    }
-  }
-
-  async remove(filePath: string) {
-    const access = await this.ctx.accessService.getById<SshAccess>(this.access.sshAccess);
-    const client = new SshClient(this.logger);
-    const key = this.rootDir + filePath;
-    await client.removeFiles({
-      connectConf: access,
-      files: [key],
-    });
-  }
-}
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/tencentcos.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/tencentcos.ts
@@ -1,28 +0,0 @@
-import { BaseHttpChallengeUploader } from "../api.js";
-import { TencentAccess, TencentCosAccess, TencentCosClient } from "@certd/plugin-lib";
-
-export class TencentCosHttpChallengeUploader extends BaseHttpChallengeUploader<TencentCosAccess> {
-  async upload(filePath: string, fileContent: Buffer) {
-    const access = await this.ctx.accessService.getById<TencentAccess>(this.access.accessId);
-    const client = new TencentCosClient({
-      access: access,
-      logger: this.logger,
-      region: this.access.region,
-      bucket: this.access.bucket,
-    });
-    const key = this.rootDir + filePath;
-    await client.uploadFile(key, fileContent);
-  }
-
-  async remove(filePath: string) {
-    const access = await this.ctx.accessService.getById<TencentAccess>(this.access.accessId);
-    const client = new TencentCosClient({
-      access: access,
-      logger: this.logger,
-      region: this.access.region,
-      bucket: this.access.bucket,
-    });
-    const key = this.rootDir + filePath;
-    await client.removeFile(key);
-  }
-}
--- a/packages/plugins/plugin-lib/CHANGELOG.md
+++ b/packages/plugins/plugin-lib/CHANGELOG.md
@@ -3,6 +3,35 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.

+## [1.34.2](https://github.com/certd/certd/compare/v1.34.1...v1.34.2) (2025-05-11)
+
+### Performance Improvements
+
+* http方式支持校验443端口 ([d75fcb7](https://github.com/certd/certd/commit/d75fcb7fec421a9a638eaa27fe9378c84b5e0f19))
+
+## [1.34.1](https://github.com/certd/certd/compare/v1.34.0...v1.34.1) (2025-05-05)
+
+### Performance Improvements
+
+* 支持部署证书到火山dcdn ([5f85219](https://github.com/certd/certd/commit/5f852194953dc1b4e6336770f417507b8f5a33ad))
+
+# [1.34.0](https://github.com/certd/certd/compare/v1.33.8...v1.34.0) (2025-04-28)
+
+### Performance Improvements
+
+* 优化cdnfly插件，支持自动匹配域名部署 ([afd59e9](https://github.com/certd/certd/commit/afd59e9933b2650f41c5d47684c171b93b962065))
+
+## [1.33.8](https://github.com/certd/certd/compare/v1.33.7...v1.33.8) (2025-04-26)
+
+### Bug Fixes
+
+* 修复http上传方式无法清除记录文件的bug ([72a7b51](https://github.com/certd/certd/commit/72a7b51d479602b2c54c6c3ac8d8a0dcb9664e73))
+
+### Performance Improvements
+
+* 七牛oss支持删除过期备份 ([b7113bd](https://github.com/certd/certd/commit/b7113bda2378116d6c116dc583f563cce7cf9f00))
+* 数据库备份支持oss ([308d460](https://github.com/certd/certd/commit/308d4600efe2002f199c33b4594d3071784e58ea))
+
 ## [1.33.7](https://github.com/certd/certd/compare/v1.33.6...v1.33.7) (2025-04-22)

 ### Performance Improvements
--- a/packages/plugins/plugin-lib/package.json
+++ b/packages/plugins/plugin-lib/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@certd/plugin-lib",
  "private": false,
-  "version": "1.33.7",
+  "version": "1.34.2",
  "type": "module",
  "main": "./dist/index.js",
  "types": "./dist/index.d.ts",
@@ -12,14 +12,16 @@
    "dev-build": "npm run build",
    "build3": "rollup -c",
    "build2": "vue-tsc --noEmit && vite build",
-    "preview": "vite preview"
+    "preview": "vite preview",
+    "pub": "npm publish"
  },
  "dependencies": {
    "@alicloud/pop-core": "^1.7.10",
-    "@certd/basic": "^1.33.7",
-    "@certd/pipeline": "^1.33.7",
+    "@aws-sdk/client-s3": "^3.787.0",
+    "@certd/basic": "^1.34.2",
+    "@certd/pipeline": "^1.34.2",
    "@kubernetes/client-node": "0.21.0",
-    "ali-oss": "^6.21.0",
+    "ali-oss": "^6.22.0",
    "basic-ftp": "^5.0.5",
    "cos-nodejs-sdk-v5": "^2.14.6",
    "dayjs": "^1.11.7",
@@ -48,5 +50,5 @@
    "tslib": "^2.8.1",
    "typescript": "^5.4.2"
  },
-  "gitHead": "8abe62886ab50634b4b05abedd2981ec8ee0422e"
+  "gitHead": "6c74148c277432f91014bf1eebd824e7423c6f4b"
 }
--- a/packages/plugins/plugin-lib/src/aliyun/access/aliyun-access.ts
+++ b/packages/plugins/plugin-lib/src/aliyun/access/aliyun-access.ts
@@ -5,6 +5,7 @@ import { IsAccess, AccessInput, BaseAccess } from "@certd/pipeline";
  title: "阿里云授权",
  desc: "",
  icon: "ant-design:aliyun-outlined",
+  order: 0,
 })
 export class AliyunAccess extends BaseAccess {
  @AccessInput({
--- a/packages/plugins/plugin-lib/src/aliyun/lib/oss-client.ts
+++ b/packages/plugins/plugin-lib/src/aliyun/lib/oss-client.ts
@@ -1,4 +1,4 @@
-import { AliyunAccess } from "../access";
+import { AliyunAccess } from "../access/index.js";

 export class AliossClient {
  access: AliyunAccess;
@@ -52,13 +52,36 @@ export class AliossClient {
    }
  }

-  async uploadFile(filePath: string, content: Buffer) {
+  async uploadFile(filePath: string, content: Buffer | string, timeout = 1000 * 60 * 60) {
    await this.init();
-    return await this.client.put(filePath, content);
+    return await this.client.put(filePath, content, {
+      timeout,
+    });
  }

  async removeFile(filePath: string) {
    await this.init();
    return await this.client.delete(filePath);
  }
+
+  async downloadFile(key: string, savePath: string, timeout = 1000 * 60 * 60) {
+    await this.init();
+    return await this.client.get(key, savePath, {
+      timeout,
+    });
+  }
+
+  async listDir(dirKey: string) {
+    await this.init();
+    const res = await this.client.listV2({
+      prefix: dirKey,
+      // max-keys: 100,
+      // continuation-token: "token",
+      // delimiter: "/",
+      // marker: "marker",
+      // encoding-type: "url",
+    });
+
+    return res.objects;
+  }
 }
--- a/packages/plugins/plugin-lib/src/common/index.ts
+++ b/packages/plugins/plugin-lib/src/common/index.ts
@@ -37,6 +37,7 @@ export function createRemoteSelectInputDefine(opts?: {
  multi?: boolean;
  required?: boolean;
  rules?: any;
+  mergeScript?: string;
 }) {
  const title = opts?.title || "请选择";
  const certDomainsInputKey = opts?.certDomainsInputKey || "certDomains";
@@ -65,8 +66,10 @@ export function createRemoteSelectInputDefine(opts?: {
      watches: [certDomainsInputKey, accessIdInputKey, ...watches],
    },
    rules: opts?.rules,
-    required: true,
-    mergeScript: `
+    required: opts.required ?? true,
+    mergeScript:
+      opts.mergeScript ??
+      `
          return {
            component:{
              form: ctx.compute(({form})=>{
@@ -80,3 +83,5 @@ export function createRemoteSelectInputDefine(opts?: {

  return merge(item, opts?.formItem);
 }
+
+
--- a/packages/plugins/plugin-lib/src/ftp/client.ts
+++ b/packages/plugins/plugin-lib/src/ftp/client.ts
@@ -11,7 +11,7 @@ export class FtpClient {
    this.logger = opts.logger;
  }

-  async connect(callback: (client: FtpClient) => Promise<void>) {
+  async connect(callback: (client: FtpClient) => Promise<any>) {
    const ftp = await import("basic-ftp");
    const Client = ftp.Client;
    const client = new Client();
@@ -21,7 +21,7 @@ export class FtpClient {
    this.logger.info("FTP连接成功");
    this.client = client;
    try {
-      await callback(this);
+      return await callback(this);
    } finally {
      if (client) {
        client.close();
@@ -44,4 +44,20 @@ export class FtpClient {
    this.logger.info(`开始删除文件${filePath}`);
    await this.client.remove(filePath, true);
  }
+
+  async listDir(dir: string): Promise<any[]> {
+    if (!dir) {
+      return [];
+    }
+    if (!dir.endsWith("/")) {
+      dir = dir + "/";
+    }
+    this.logger.info(`开始列出目录${dir}`);
+    return await this.client.list(dir);
+  }
+
+  async download(filePath: string, savePath: string): Promise<void> {
+    this.logger.info(`开始下载文件${filePath} -> ${savePath}`);
+    await this.client.downloadTo(savePath, filePath);
+  }
 }
--- a/packages/plugins/plugin-lib/src/index.ts
+++ b/packages/plugins/plugin-lib/src/index.ts
@@ -5,3 +5,5 @@ export * from "./ftp/index.js";
 export * from "./tencent/index.js";
 export * from "./qiniu/index.js";
 export * from "./ctyun/index.js";
+export * from "./oss/index.js";
+export * from "./s3/index.js";
--- a/packages/plugins/plugin-lib/src/oss/api.ts
+++ b/packages/plugins/plugin-lib/src/oss/api.ts
@@ -0,0 +1,90 @@
+import { IAccessService } from "@certd/pipeline";
+import { ILogger, utils } from "@certd/basic";
+import dayjs from "dayjs";
+
+export type OssClientRemoveByOpts = {
+  dir?: string;
+  //删除多少天前的文件
+  beforeDays?: number;
+};
+
+export type OssFileItem = {
+  //文件全路径
+  path: string;
+  size: number;
+  //毫秒时间戳
+  lastModified: number;
+};
+
+export type IOssClient = {
+  upload: (fileName: string, fileContent: Buffer) => Promise<void>;
+  remove: (fileName: string, opts?: { joinRootDir?: boolean }) => Promise<void>;
+
+  download: (fileName: string, savePath: string) => Promise<void>;
+
+  removeBy: (removeByOpts: OssClientRemoveByOpts) => Promise<void>;
+
+  listDir: (dir: string) => Promise<OssFileItem[]>;
+};
+
+export type OssClientContext = {
+  accessService: IAccessService;
+  logger: ILogger;
+  utils: typeof utils;
+};
+
+export abstract class BaseOssClient<A> implements IOssClient {
+  rootDir: string = "";
+  access: A = null;
+  logger: ILogger;
+  utils: typeof utils;
+  ctx: OssClientContext;
+
+  protected constructor(opts: { rootDir?: string; access: A }) {
+    this.rootDir = opts.rootDir || "";
+    this.access = opts.access;
+  }
+
+  join(...strs: string[]) {
+    let res = "";
+    for (const item of strs) {
+      if (item) {
+        if (!res) {
+          res = item;
+        } else {
+          res += "/" + item;
+        }
+      }
+    }
+    res = res.replace(/[\\/]+/g, "/");
+    return res;
+  }
+
+  async setCtx(ctx: any) {
+    // set context
+    this.ctx = ctx;
+    this.logger = ctx.logger;
+    this.utils = ctx.utils;
+    await this.init();
+  }
+
+  async init() {
+    // do nothing
+  }
+
+  abstract remove(fileName: string, opts?: { joinRootDir?: boolean }): Promise<void>;
+  abstract upload(fileName: string, fileContent: Buffer): Promise<void>;
+  abstract download(fileName: string, savePath: string): Promise<void>;
+  abstract listDir(dir: string): Promise<OssFileItem[]>;
+
+  async removeBy(removeByOpts: OssClientRemoveByOpts): Promise<void> {
+    const list = await this.listDir(removeByOpts.dir);
+    // removeByOpts.beforeDays = 0;
+    const beforeDate = dayjs().subtract(removeByOpts.beforeDays, "day");
+    for (const item of list) {
+      if (item.lastModified && item.lastModified < beforeDate.valueOf()) {
+        await this.remove(item.path, { joinRootDir: false });
+      }
+    }
+  }
+}
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/factory.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/factory.ts
@@ -1,30 +1,33 @@
-import { HttpChallengeUploadContext } from "./api";
+import { OssClientContext } from "./api";

-export class HttpChallengeUploaderFactory {
+export class OssClientFactory {
  async getClassByType(type: string) {
    if (type === "alioss") {
      const module = await import("./impls/alioss.js");
-      return module.AliossHttpChallengeUploader;
+      return module.default;
    } else if (type === "ssh") {
      const module = await import("./impls/ssh.js");
-      return module.SshHttpChallengeUploader;
+      return module.default;
    } else if (type === "sftp") {
      const module = await import("./impls/sftp.js");
-      return module.SftpHttpChallengeUploader;
+      return module.default;
    } else if (type === "ftp") {
      const module = await import("./impls/ftp.js");
-      return module.FtpHttpChallengeUploader;
+      return module.default;
    } else if (type === "tencentcos") {
      const module = await import("./impls/tencentcos.js");
-      return module.TencentCosHttpChallengeUploader;
+      return module.default;
    } else if (type === "qiniuoss") {
      const module = await import("./impls/qiniuoss.js");
-      return module.QiniuOssHttpChallengeUploader;
+      return module.default;
+    } else if (type === "s3") {
+      const module = await import("./impls/s3.js");
+      return module.default;
    } else {
      throw new Error(`暂不支持此文件上传方式: ${type}`);
    }
  }
-  async createUploaderByType(type: string, opts: { rootDir: string; access: any; ctx: HttpChallengeUploadContext }) {
+  async createOssClientByType(type: string, opts: { rootDir?: string; access: any; ctx: OssClientContext }) {
    const cls = await this.getClassByType(type);
    if (cls) {
      // @ts-ignore
@@ -35,4 +38,4 @@ export class HttpChallengeUploaderFactory {
  }
 }

-export const httpChallengeUploaderFactory = new HttpChallengeUploaderFactory();
+export const ossClientFactory = new OssClientFactory();
--- a/packages/plugins/plugin-lib/src/oss/impls/alioss.ts
+++ b/packages/plugins/plugin-lib/src/oss/impls/alioss.ts
@@ -0,0 +1,57 @@
+import { BaseOssClient, OssFileItem } from "../api.js";
+import { AliossAccess, AliossClient, AliyunAccess } from "../../aliyun/index.js";
+import dayjs from "dayjs";
+
+export default class AliOssClientImpl extends BaseOssClient<AliossAccess> {
+  client: AliossClient;
+  join(...strs: string[]) {
+    const str = super.join(...strs);
+    if (str.startsWith("/")) {
+      return str.substring(1);
+    }
+    return str;
+  }
+  async init() {
+    const aliyunAccess = await this.ctx.accessService.getById<AliyunAccess>(this.access.accessId);
+    const client = new AliossClient({
+      access: aliyunAccess,
+      bucket: this.access.bucket,
+      region: this.access.region,
+    });
+    await client.init();
+    this.client = client;
+  }
+  async download(filePath: string, savePath: string): Promise<void> {
+    const key = this.join(this.rootDir, filePath);
+    await this.client.downloadFile(key, savePath);
+  }
+  async listDir(dir: string): Promise<OssFileItem[]> {
+    const dirKey = this.join(this.rootDir, dir) + "/";
+    const list = await this.client.listDir(dirKey);
+    this.logger.info(`列出目录: ${dirKey},文件数：${list.length}`);
+    return list.map(item => {
+      return {
+        path: item.name,
+        lastModified: dayjs(item.lastModified).valueOf(),
+        size: item.size,
+      };
+    });
+  }
+  async upload(filePath: string, fileContent: Buffer | string) {
+    const key = this.join(this.rootDir, filePath);
+    this.logger.info(`开始上传文件: ${key}`);
+    await this.client.uploadFile(key, fileContent);
+
+    this.logger.info(`文件上传成功: ${filePath}`);
+  }
+
+  async remove(filePath: string, opts?: { joinRootDir?: boolean }) {
+    if (opts?.joinRootDir !== false) {
+      filePath = this.join(this.rootDir, filePath);
+    }
+    const key = filePath;
+    // remove file from alioss
+    await this.client.removeFile(key);
+    this.logger.info(`文件删除成功: ${key}`);
+  }
+}
--- a/packages/plugins/plugin-lib/src/oss/impls/ftp.ts
+++ b/packages/plugins/plugin-lib/src/oss/impls/ftp.ts
@@ -0,0 +1,78 @@
+import { BaseOssClient } from "../api.js";
+import path from "path";
+import os from "os";
+import fs from "fs";
+import { FtpAccess, FtpClient } from "../../ftp/index.js";
+
+export default class FtpOssClientImpl extends BaseOssClient<FtpAccess> {
+  join(...strs: string[]) {
+    const str = super.join(...strs);
+    if (!str.startsWith("/")) {
+      return "/" + str;
+    }
+    return str;
+  }
+
+  async download(fileName: string, savePath: string) {
+    const client = this.getFtpClient();
+    await client.connect(async client => {
+      const path = this.join(this.rootDir, fileName);
+      await client.download(path, savePath);
+    });
+  }
+  async listDir(dir: string) {
+    const client = this.getFtpClient();
+    return await client.connect(async (client: FtpClient) => {
+      const path = this.join(this.rootDir, dir);
+      const res = await client.listDir(path);
+      return res.map(item => {
+        return {
+          path: this.join(path, item.name),
+          size: item.size,
+          lastModified: item.modifiedAt.getTime(),
+        };
+      });
+    });
+  }
+  async upload(filePath: string, fileContent: Buffer | string) {
+    const client = this.getFtpClient();
+    await client.connect(async client => {
+      let tmpFilePath = fileContent as string;
+      if (typeof fileContent !== "string") {
+        tmpFilePath = path.join(os.tmpdir(), "cert", "oss", filePath);
+        const dir = path.dirname(tmpFilePath);
+        if (!fs.existsSync(dir)) {
+          fs.mkdirSync(dir, { recursive: true });
+        }
+        fs.writeFileSync(tmpFilePath, fileContent);
+      }
+
+      try {
+        // Write file to temp path
+        const path = this.join(this.rootDir, filePath);
+        await client.upload(tmpFilePath, path);
+      } finally {
+        // Remove temp file
+        fs.unlinkSync(tmpFilePath);
+      }
+    });
+  }
+
+  private getFtpClient() {
+    return new FtpClient({
+      access: this.access,
+      logger: this.logger,
+    });
+  }
+
+  async remove(filePath: string, opts?: { joinRootDir?: boolean }) {
+    if (opts?.joinRootDir !== false) {
+      filePath = this.join(this.rootDir, filePath);
+    }
+    const client = this.getFtpClient();
+    await client.connect(async client => {
+      await client.client.remove(filePath);
+      this.logger.info(`删除文件成功: ${filePath}`);
+    });
+  }
+}
--- a/packages/plugins/plugin-lib/src/oss/impls/qiniuoss.ts
+++ b/packages/plugins/plugin-lib/src/oss/impls/qiniuoss.ts
@@ -0,0 +1,50 @@
+import { QiniuAccess, QiniuClient, QiniuOssAccess } from "../../qiniu/index.js";
+import { BaseOssClient, OssFileItem } from "../api.js";
+
+export default class QiniuOssClientImpl extends BaseOssClient<QiniuOssAccess> {
+  client: QiniuClient;
+
+  join(...strs: string[]) {
+    const str = super.join(...strs);
+    if (str.startsWith("/")) {
+      return str.substring(1);
+    }
+    return str;
+  }
+  async init() {
+    const qiniuAccess = await this.ctx.accessService.getById<QiniuAccess>(this.access.accessId);
+    this.client = new QiniuClient({
+      access: qiniuAccess,
+      logger: this.logger,
+      http: this.ctx.utils.http,
+    });
+  }
+
+  async download(fileName: string, savePath: string): Promise<void> {
+    const path = this.join(this.rootDir, fileName);
+    await this.client.downloadFile(this.access.bucket, path, savePath);
+  }
+  async listDir(dir: string): Promise<OssFileItem[]> {
+    const path = this.join(this.rootDir, dir);
+    const res = await this.client.listDir(this.access.bucket, path);
+    return res.items.map(item => {
+      return {
+        path: item.key,
+        size: item.fsize,
+        //ns ，纳秒，去掉低4位 为毫秒
+        lastModified: Math.floor(item.putTime / 10000),
+      };
+    });
+  }
+  async upload(filePath: string, fileContent: Buffer | string) {
+    const path = this.join(this.rootDir, filePath);
+    await this.client.uploadFile(this.access.bucket, path, fileContent);
+  }
+
+  async remove(filePath: string, opts?: { joinRootDir?: boolean }) {
+    if (opts?.joinRootDir !== false) {
+      filePath = this.join(this.rootDir, filePath);
+    }
+    await this.client.removeFile(this.access.bucket, filePath);
+  }
+}
--- a/packages/plugins/plugin-lib/src/oss/impls/s3.ts
+++ b/packages/plugins/plugin-lib/src/oss/impls/s3.ts
@@ -0,0 +1,98 @@
+import { BaseOssClient, OssFileItem } from "../api.js";
+import path from "node:path";
+import { S3Access } from "../../s3/access.js";
+import fs from "fs";
+import dayjs from "dayjs";
+
+export default class S3OssClientImpl extends BaseOssClient<S3Access> {
+  client: any;
+  join(...strs: string[]) {
+    const str = super.join(...strs);
+    if (str.startsWith("/")) {
+      return str.substring(1);
+    }
+    return str;
+  }
+  async init() {
+    // import { S3Client } from "@aws-sdk/client-s3";
+    //@ts-ignore
+    const { S3Client } = await import("@aws-sdk/client-s3");
+    this.client = new S3Client({
+      forcePathStyle: true,
+      //@ts-ignore
+      s3ForcePathStyle: true,
+      credentials: {
+        accessKeyId: this.access.accessKeyId, // 默认 MinIO 访问密钥
+        secretAccessKey: this.access.secretAccessKey, // 默认 MinIO 秘密密钥
+      },
+      region: "us-east-1",
+      endpoint: this.access.endpoint,
+    });
+  }
+
+  async download(filePath: string, savePath: string): Promise<void> {
+    // @ts-ignore
+    const { GetObjectCommand } = await import("@aws-sdk/client-s3");
+    const key = path.join(this.rootDir, filePath);
+    const params = {
+      Bucket: this.access.bucket, // The name of the bucket. For example, 'sample_bucket_101'.
+      Key: key, // The name of the object. For example, 'sample_upload.txt'.
+    };
+    const res = await this.client.send(new GetObjectCommand({ ...params }));
+    const fileContent = fs.createWriteStream(savePath);
+    res.Body.pipe(fileContent);
+
+    this.logger.info(`文件下载成功: ${savePath}`);
+  }
+
+  async listDir(dir: string): Promise<OssFileItem[]> {
+    // @ts-ignore
+    const { ListObjectsCommand } = await import("@aws-sdk/client-s3");
+    const dirKey = this.join(this.rootDir, dir);
+    const params = {
+      Bucket: this.access.bucket, // The name of the bucket. For example, 'sample_bucket_101'.
+      Prefix: dirKey, // The name of the object. For example, 'sample_upload.txt'.
+    };
+    const res = await this.client.send(new ListObjectsCommand({ ...params }));
+    return res.Contents.map(item => {
+      return {
+        path: item.Key,
+        size: item.Size,
+        lastModified: dayjs(item.LastModified).valueOf(),
+      };
+    });
+  }
+  async upload(filePath: string, fileContent: Buffer | string) {
+    // @ts-ignore
+    const { PutObjectCommand } = await import("@aws-sdk/client-s3");
+    const key = path.join(this.rootDir, filePath);
+    this.logger.info(`开始上传文件: ${key}`);
+    const params = {
+      Bucket: this.access.bucket, // The name of the bucket. For example, 'sample_bucket_101'.
+      Key: key, // The name of the object. For example, 'sample_upload.txt'.
+    };
+    if (typeof fileContent === "string") {
+      fileContent = fs.createReadStream(fileContent) as any;
+    }
+    await this.client.send(new PutObjectCommand({ Body: fileContent, ...params }));
+
+    this.logger.info(`文件上传成功: ${filePath}`);
+  }
+
+  async remove(filePath: string, opts?: { joinRootDir?: boolean }) {
+    if (opts?.joinRootDir !== false) {
+      filePath = this.join(this.rootDir, filePath);
+    }
+    const key = filePath;
+    // @ts-ignore
+    const { DeleteObjectCommand } = await import("@aws-sdk/client-s3");
+    await this.client.send(
+      new DeleteObjectCommand({
+        Bucket: this.access.bucket,
+        Key: key,
+      })
+    );
+
+    this.logger.info(`文件删除成功: ${key}`);
+  }
+}
--- a/packages/plugins/plugin-lib/src/oss/impls/sftp.ts
+++ b/packages/plugins/plugin-lib/src/oss/impls/sftp.ts
@@ -0,0 +1,82 @@
+import { BaseOssClient, OssFileItem } from "../api.js";
+import path from "path";
+import os from "os";
+import fs from "fs";
+import { SftpAccess, SshAccess, SshClient } from "../../ssh/index.js";
+
+export default class SftpOssClientImpl extends BaseOssClient<SftpAccess> {
+  async download(fileName: string, savePath: string): Promise<void> {
+    const path = this.join(this.rootDir, fileName);
+    const client = new SshClient(this.logger);
+    const access = await this.ctx.accessService.getById<SshAccess>(this.access.sshAccess);
+    await client.download({
+      connectConf: access,
+      filePath: path,
+      savePath,
+    });
+  }
+
+  async listDir(dir: string): Promise<OssFileItem[]> {
+    const path = this.join(this.rootDir, dir);
+    const client = new SshClient(this.logger);
+    const access = await this.ctx.accessService.getById<SshAccess>(this.access.sshAccess);
+    const res = await client.listDir({
+      connectConf: access,
+      dir: path,
+    });
+
+    return res.map(item => {
+      return {
+        path: this.join(path, item.filename),
+        size: item.size,
+        lastModified: item.attrs.atime * 1000,
+      };
+    });
+  }
+  async upload(filePath: string, fileContent: Buffer | string) {
+    let tmpFilePath = fileContent as string;
+    if (typeof fileContent !== "string") {
+      tmpFilePath = path.join(os.tmpdir(), "cert", "oss", filePath);
+      const dir = path.dirname(tmpFilePath);
+      if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+      }
+      fs.writeFileSync(tmpFilePath, fileContent);
+    }
+
+    const access = await this.ctx.accessService.getById<SshAccess>(this.access.sshAccess);
+    const key = this.join(this.rootDir, filePath);
+    try {
+      const client = new SshClient(this.logger);
+      await client.uploadFiles({
+        connectConf: access,
+        mkdirs: true,
+        transports: [
+          {
+            localPath: tmpFilePath,
+            remotePath: key,
+          },
+        ],
+        uploadType: "sftp",
+        opts: {
+          mode: this.access?.fileMode ?? undefined,
+        },
+      });
+    } finally {
+      // Remove temp file
+      fs.unlinkSync(tmpFilePath);
+    }
+  }
+
+  async remove(filePath: string, opts?: { joinRootDir?: boolean }) {
+    const access = await this.ctx.accessService.getById<SshAccess>(this.access.sshAccess);
+    const client = new SshClient(this.logger);
+    if (opts?.joinRootDir !== false) {
+      filePath = this.join(this.rootDir, filePath);
+    }
+    await client.removeFiles({
+      connectConf: access,
+      files: [filePath],
+    });
+  }
+}
--- a/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/ssh.ts
+++ b/packages/plugins/plugin-cert/src/plugin/cert-plugin/uploads/impls/ssh.ts
@@ -1,10 +1,20 @@
-import { BaseHttpChallengeUploader } from "../api.js";
-import { SshAccess, SshClient } from "@certd/plugin-lib";
+import { BaseOssClient, OssClientRemoveByOpts, OssFileItem } from "../api.js";
 import path from "path";
 import os from "os";
 import fs from "fs";
+import { SshAccess, SshClient } from "../../ssh/index.js";

-export class SshHttpChallengeUploader extends BaseHttpChallengeUploader<SshAccess> {
+//废弃
+export default class SshOssClientImpl extends BaseOssClient<SshAccess> {
+  download(fileName: string, savePath: string): Promise<void> {
+    throw new Error("Method not implemented.");
+  }
+  removeBy(removeByOpts: OssClientRemoveByOpts): Promise<void> {
+    throw new Error("Method not implemented.");
+  }
+  listDir(dir: string): Promise<OssFileItem[]> {
+    throw new Error("Method not implemented.");
+  }
  async upload(filePath: string, fileContent: Buffer) {
    const tmpFilePath = path.join(os.tmpdir(), "cert", "http", filePath);

@@ -34,12 +44,14 @@ export class SshHttpChallengeUploader extends BaseHttpChallengeUploader<SshAcces
    }
  }

-  async remove(filePath: string) {
+  async remove(filePath: string, opts?: { joinRootDir?: boolean }) {
+    if (opts?.joinRootDir !== false) {
+      filePath = this.join(this.rootDir, filePath);
+    }
    const client = new SshClient(this.logger);
-    const key = this.rootDir + filePath;
    await client.removeFiles({
      connectConf: this.access,
-      files: [key],
+      files: [filePath],
    });
  }
 }
--- a/packages/plugins/plugin-lib/src/oss/impls/tencentcos.ts
+++ b/packages/plugins/plugin-lib/src/oss/impls/tencentcos.ts
@@ -0,0 +1,54 @@
+import dayjs from "dayjs";
+import { TencentAccess, TencentCosAccess, TencentCosClient } from "../../tencent/index.js";
+import { BaseOssClient, OssFileItem } from "../api.js";
+
+export default class TencentOssClientImpl extends BaseOssClient<TencentCosAccess> {
+  client: TencentCosClient;
+
+  join(...strs: string[]) {
+    const str = super.join(...strs);
+    if (str.startsWith("/")) {
+      return str.substring(1);
+    }
+    return str;
+  }
+  async init() {
+    const access = await this.ctx.accessService.getById<TencentAccess>(this.access.accessId);
+    this.client = new TencentCosClient({
+      access: access,
+      logger: this.logger,
+      region: this.access.region,
+      bucket: this.access.bucket,
+    });
+  }
+  async download(filePath: string, savePath: string): Promise<void> {
+    const key = this.join(this.rootDir, filePath);
+    await this.client.downloadFile(key, savePath);
+  }
+
+  async listDir(dir: string): Promise<OssFileItem[]> {
+    const dirKey = this.join(this.rootDir, dir) + "/";
+    // @ts-ignore
+    const res: any[] = await this.client.listDir(dirKey);
+    return res.map(item => {
+      return {
+        path: item.Key,
+        size: item.Size,
+        lastModified: dayjs(item.LastModified).valueOf(),
+      };
+    });
+  }
+  async upload(filePath: string, fileContent: Buffer | string) {
+    const key = this.join(this.rootDir, filePath);
+    await this.client.uploadFile(key, fileContent);
+    this.logger.info(`文件上传成功: ${filePath}`);
+  }
+
+  async remove(filePath: string, opts?: { joinRootDir?: boolean }) {
+    if (opts?.joinRootDir !== false) {
+      filePath = this.join(this.rootDir, filePath);
+    }
+    await this.client.removeFile(filePath);
+    this.logger.info(`文件删除成功: ${filePath}`);
+  }
+}
--- a/packages/plugins/plugin-lib/src/oss/index.ts
+++ b/packages/plugins/plugin-lib/src/oss/index.ts
@@ -0,0 +1,2 @@
+export * from "./factory.js";
+export * from "./api.js";
--- a/packages/plugins/plugin-lib/src/qiniu/lib/sdk.ts
+++ b/packages/plugins/plugin-lib/src/qiniu/lib/sdk.ts
@@ -1,5 +1,6 @@
-import { HttpClient, ILogger } from "@certd/basic";
+import { HttpClient, ILogger, safePromise, utils } from "@certd/basic";
 import { QiniuAccess } from "../access.js";
+import fs from "fs";

 export type QiniuCertInfo = {
  key: string;
@@ -76,7 +77,7 @@ export class QiniuClient {
    const http = new HttpClient({ timeout: 10000, middlewares: [auth] });
    console.log("http", http);

-    return new Promise((resolve, reject) => {
+    return safePromise((resolve, reject) => {
      try {
        http.get({
          url: opts.url,
@@ -98,7 +99,7 @@ export class QiniuClient {
    });
  }

-  async uploadFile(bucket: string, key: string, content: Buffer) {
+  async uploadFile(bucket: string, key: string, content: Buffer | string) {
    const sdk = await import("qiniu");
    const qiniu = sdk.default;
    const mac = new qiniu.auth.digest.Mac(this.access.accessKey, this.access.secretKey);
@@ -111,8 +112,15 @@ export class QiniuClient {
    const config = new qiniu.conf.Config();
    const formUploader = new qiniu.form_up.FormUploader(config);
    const putExtra = new qiniu.form_up.PutExtra();
-    // 文件上传
-    const { data, resp } = await formUploader.put(uploadToken, key, content, putExtra);
+    let res: any = {};
+    if (typeof content === "string") {
+      const readableStream = fs.createReadStream(content);
+      res = await formUploader.putStream(uploadToken, key, readableStream, putExtra);
+    } else {
+      // 文件上传
+      res = await formUploader.put(uploadToken, key, content, putExtra);
+    }
+    const { data, resp } = res;
    if (resp.statusCode === 200) {
      this.logger.info("文件上传成功：" + key);
      return data;
@@ -123,12 +131,7 @@ export class QiniuClient {
  }

  async removeFile(bucket: string, key: string) {
-    const sdk = await import("qiniu");
-    const qiniu = sdk.default;
-    const mac = new qiniu.auth.digest.Mac(this.access.accessKey, this.access.secretKey);
-    const config = new qiniu.conf.Config();
-    config.useHttpsDomain = true;
-    const bucketManager = new qiniu.rs.BucketManager(mac, config);
+    const bucketManager = await this.getBucketManager();

    const { resp } = await bucketManager.delete(bucket, key);

@@ -139,4 +142,39 @@ export class QiniuClient {
      throw new Error("删除失败:" + JSON.stringify(resp));
    }
  }
+
+  async downloadFile(bucket: string, path: string, savePath: string) {
+    const bucketManager = await this.getBucketManager();
+    const privateBucketDomain = `http://${bucket}.qiniudn.com`;
+    const deadline = Math.floor(Date.now() / 1000) + 3600; // 1小时过期
+    const privateDownloadUrl = bucketManager.privateDownloadUrl(privateBucketDomain, path, deadline);
+
+    await utils.request.download({
+      http: this.http,
+      logger: this.logger,
+      config: {
+        url: privateDownloadUrl,
+        method: "get",
+      },
+      savePath,
+    });
+  }
+
+  private async getBucketManager() {
+    const sdk = await import("qiniu");
+    const qiniu = sdk.default;
+    const mac = new qiniu.auth.digest.Mac(this.access.accessKey, this.access.secretKey);
+    const config = new qiniu.conf.Config();
+    config.useHttpsDomain = true;
+    return new qiniu.rs.BucketManager(mac, config);
+  }
+
+  async listDir(bucket: string, path: string) {
+    const bucketManager = await this.getBucketManager();
+    const res = await bucketManager.listPrefix(bucket, {
+      prefix: path,
+      limit: 1000,
+    });
+    return res.data;
+  }
 }
--- a/packages/plugins/plugin-lib/src/s3/access.ts
+++ b/packages/plugins/plugin-lib/src/s3/access.ts
@@ -0,0 +1,87 @@
+import { AccessInput, BaseAccess, IsAccess } from "@certd/pipeline";
+
+/**
+ * 这个注解将注册一个授权配置
+ * 在certd的后台管理系统中，用户可以选择添加此类型的授权
+ */
+@IsAccess({
+  name: "s3",
+  title: "s3/minio授权",
+  desc: "S3/minio oss授权",
+  icon: "mdi:folder-upload-outline",
+})
+export class S3Access extends BaseAccess {
+  @AccessInput({
+    title: "endpoint",
+    component: {
+      placeholder: "http://xxxxxx:9000",
+      name: "a-input",
+      vModel: "value",
+    },
+    helper: "Minio的地址，如果是aws s3 则无需填写",
+    required: false,
+  })
+  endpoint!: string;
+
+  /**
+   * const minioClient = new S3Client({
+   *   endpoint: "http://localhost:9000",
+   *   forcePathStyle: true,
+   *   credentials: {
+   *     accessKeyId: "minioadmin", // 默认 MinIO 访问密钥
+   *     secretAccessKey: "minioadmin", // 默认 MinIO 秘密密钥
+   *   },
+   *   region: "us-east-1",
+   * });
+   */
+
+  @AccessInput({
+    title: "accessKeyId",
+    component: {
+      placeholder: "accessKeyId",
+    },
+    helper: "accessKeyId",
+    required: true,
+  })
+  accessKeyId!: string;
+
+  @AccessInput({
+    title: "secretAccessKey",
+    component: {
+      placeholder: "secretAccessKey",
+      component: {
+        name: "a-input",
+        vModel: "value",
+      },
+    },
+    helper: "secretAccessKey",
+    encrypt: true,
+    required: true,
+  })
+  secretAccessKey!: string;
+
+  @AccessInput({
+    title: "地区",
+    value: "us-east-1",
+    component: {
+      name: "a-input",
+      vModel: "value",
+    },
+    helper: "region",
+    required: true,
+  })
+  region!: string;
+
+  @AccessInput({
+    title: "存储桶",
+    component: {
+      name: "a-input",
+      vModel: "value",
+    },
+    helper: "bucket 名称",
+    required: true,
+  })
+  bucket!: string;
+}
+
+new S3Access();
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
xiaojunnuo	a1e504c138	v1.34.2	2025-05-11 20:27:04 +08:00
xiaojunnuo	4cc413047c	build: prepare to build	2025-05-11 20:23:52 +08:00
xiaojunnuo	2397097e4d	fix: 修复部署到又拍云强制https无效的bug	2025-05-11 12:29:04 +08:00
xiaojunnuo	c88f959ec9	chore:	2025-05-11 10:55:45 +08:00
xiaojunnuo	0b2e28b62d	fix: 修复刷新流水线页面后，日志不自动更新的bug	2025-05-11 10:55:01 +08:00
xiaojunnuo	c7f2ead696	chore: doc	2025-05-11 10:22:10 +08:00
xiaojunnuo	b454e02d01	chore: doc	2025-05-11 10:04:54 +08:00
xiaojunnuo	47df2ffc3e	chore: doc	2025-05-10 22:05:21 +08:00
xiaojunnuo	d18e431e2f	perf: 支持设置网安备案号	2025-05-10 21:31:32 +08:00
xiaojunnuo	0a147d2db7	chore:	2025-05-10 20:52:23 +08:00
xiaojunnuo	ccdc933064	chore:	2025-05-10 17:29:10 +08:00
xiaojunnuo	023f2d4569	Merge remote-tracking branch 'origin/v2-dev' into v2-dev	2025-05-10 15:05:28 +08:00
xiaojunnuo	06a7371d2b	chore:	2025-05-10 15:04:57 +08:00
xiaojunnuo	626f5d3487	chore:	2025-05-10 13:58:08 +08:00
xiaojunnuo	8cd3b9fe2e	Merge remote-tracking branch 'origin/v2-dev' into v2-dev	2025-05-09 18:51:39 +08:00
xiaojunnuo	716c35d52a	chore: doc	2025-05-09 18:51:08 +08:00
xiaojunnuo	8cc0f3918b	chore: 文档增加插件列表	2025-05-08 23:47:50 +08:00
xiaojunnuo	98b51f0799	chore: 文档增加插件列表	2025-05-08 23:27:46 +08:00
xiaojunnuo	81d6dad548	chore:	2025-05-08 10:29:42 +08:00
xiaojunnuo	41bc11cf96	chore:	2025-05-08 10:29:25 +08:00
xiaojunnuo	721dbe415a	chore:	2025-05-08 10:28:44 +08:00
xiaojunnuo	f5c0b51428	chore:	2025-05-08 10:27:49 +08:00
xiaojunnuo	892c6ad80c	chore:	2025-05-08 10:23:47 +08:00
xiaojunnuo	a47805e494	chore:	2025-05-08 10:22:31 +08:00
xiaojunnuo	9dd49054d1	perf: 集成智能问答机器人	2025-05-07 14:15:32 +08:00
xiaojunnuo	f5d1d1a0b7	chore: 1	2025-05-06 17:52:39 +08:00
xiaojunnuo	d75fcb7fec	perf: http方式支持校验443端口	2025-05-06 17:01:20 +08:00
xiaojunnuo	826be45b6a	chore: 等待解析生效时长可自定义	2025-05-06 11:04:02 +08:00
xiaojunnuo	d35d9c17c5	chore: doc	2025-05-06 10:57:07 +08:00
xiaojunnuo	638c9720cf	chore: 1.34.1	2025-05-06 00:32:38 +08:00
xiaojunnuo	08a190882f	build: trigger build image	2025-05-06 00:32:25 +08:00
xiaojunnuo	bfa7530a39	chore: 1.34.1	2025-05-06 00:32:11 +08:00
xiaojunnuo	6c74148c27	v1.34.1	2025-05-06 00:21:50 +08:00
xiaojunnuo	480cad0fed	build: prepare to build	2025-05-06 00:16:10 +08:00
xiaojunnuo	32be489136	chore: parseDomain优化	2025-05-06 00:14:17 +08:00
xiaojunnuo	11801d8e2e	chore:	2025-05-05 22:20:42 +08:00
xiaojunnuo	1b280a2940	fix: 根据SOA记录判断子域名托管有缺陷，改回手动配置子域名托管记录的方式	2025-05-05 21:43:39 +08:00
xiaojunnuo	424890a1e1	chore: safePromise 优化	2025-04-30 09:38:44 +08:00
xiaojunnuo	5f85219495	perf: 支持部署证书到火山dcdn	2025-04-29 18:40:13 +08:00
xiaojunnuo	a63d687f1c	perf: 支持部署证书到unicloud	2025-04-29 13:36:24 +08:00
xiaojunnuo	f2d6c3ad83	chore: 移除 autowire	2025-04-28 23:34:08 +08:00
xiaojunnuo	0b6941d5ce	chore: 移除autowire特性	2025-04-28 21:55:23 +08:00
xiaojunnuo	048696ee93	fix: 修复宝塔授权测试按钮显示错误的bug	2025-04-28 21:33:07 +08:00
xiaojunnuo	27a405fb1d	build: publish	2025-04-28 17:29:04 +08:00
xiaojunnuo	e2cf65b591	build: trigger build image	2025-04-28 17:28:45 +08:00
xiaojunnuo	9749fc817d	v1.34.0	2025-04-28 17:27:05 +08:00
xiaojunnuo	e6600f2c43	build: prepare to build	2025-04-28 17:24:37 +08:00
xiaojunnuo	a664931e7a	build: prepare to build	2025-04-28 17:14:39 +08:00
xiaojunnuo	a2ba965600	chore:	2025-04-28 17:12:25 +08:00
xiaojunnuo	65255dbb50	chore: 恢复加载插件方式为注解方式	2025-04-28 17:05:14 +08:00
xiaojunnuo	a5cb8761a5	build: prepare to build	2025-04-28 16:58:59 +08:00
xiaojunnuo	e3930e0717	fix: 修复二次认证登录进入错误账号的bug	2025-04-28 16:57:30 +08:00
xiaojunnuo	afd59e9933	perf: 优化cdnfly插件，支持自动匹配域名部署	2025-04-28 00:55:39 +08:00
xiaojunnuo	8087524bef	chore: product info	2025-04-27 22:51:47 +08:00
xiaojunnuo	605440812f	Merge remote-tracking branch 'refs/remotes/origin/v2-dev-plugin-yaml' into v2-dev # Conflicts: # packages/ui/certd-server/export-plugin-yaml.js	2025-04-27 22:50:19 +08:00
xiaojunnuo	b10c6eb615	Merge branch 'v2-dev-yaml' into v2-dev	2025-04-27 21:35:36 +08:00
xiaojunnuo	a96264ff6a	chore:	2025-04-27 15:50:38 +08:00
xiaojunnuo	deb3893820	feat: 从yaml文件注册插件	2025-04-27 15:11:50 +08:00
xiaojunnuo	9b1d822b5b	chore:	2025-04-27 11:05:01 +08:00
xiaojunnuo	5cd61c4c02	build: publish	2025-04-27 01:58:54 +08:00
xiaojunnuo	586fa70eac	build: trigger build image	2025-04-27 01:58:37 +08:00
xiaojunnuo	9b420ad33f	v1.33.8	2025-04-27 01:56:54 +08:00
xiaojunnuo	5891290672	build: prepare to build	2025-04-27 01:54:19 +08:00
xiaojunnuo	72a7b51d47	fix: 修复http上传方式无法清除记录文件的bug	2025-04-27 01:52:42 +08:00
xiaojunnuo	2943e0e58d	chore: oss 库完善	2025-04-27 01:31:46 +08:00
xiaojunnuo	5abce916a8	chore:	2025-04-25 18:45:42 +08:00
xiaojunnuo	89d4be8a0a	chore:	2025-04-25 18:37:29 +08:00
xiaojunnuo	b7113bda23	perf: 七牛oss支持删除过期备份	2025-04-25 18:36:49 +08:00
xiaojunnuo	0088929622	perf: 支持反向代理增加contextPath路径	2025-04-25 18:04:59 +08:00
xiaojunnuo	b3468cf7f2	perf: 支持阿里云中文域名申请	2025-04-25 18:04:24 +08:00
xiaojunnuo	f88c5c8528	chore:	2025-04-25 02:11:23 +08:00
xiaojunnuo	687fdda7f7	chore:	2025-04-25 02:11:08 +08:00
xiaojunnuo	aec51e514c	chore:	2025-04-25 01:44:15 +08:00
xiaojunnuo	308d4600ef	perf: 数据库备份支持oss	2025-04-25 01:26:04 +08:00
xiaojunnuo	50a5fa15bb	fix: 修复token过期后，疯狂打印token过期信息的bug	2025-04-24 23:54:09 +08:00
xiaojunnuo	7d96a57d73	chore:	2025-04-24 17:27:13 +08:00
xiaojunnuo	162ebfd4e0	perf: 支持中文域名	2025-04-24 11:55:14 +08:00
xiaojunnuo	a586a92d5e	perf: 从域名的soa获取主域名，子域名托管无需额外配置	2025-04-24 11:54:54 +08:00
xiaojunnuo	3df20a924f	fix: 修复复制流水线无效的bug	2025-04-24 09:09:38 +08:00
xiaojunnuo	ddcf466e4e	docs: 升级前切记备份数据	2025-04-23 17:59:48 +08:00
xiaojunnuo	5d10cbf18d	fix: 服务器时间获取不准确的bug	2025-04-23 14:55:51 +08:00
xiaojunnuo	8d9afa7592	build: publish	2025-04-22 22:32:56 +08:00
xiaojunnuo	95e05336c2	build: trigger build image	2025-04-22 22:32:18 +08:00
xiaojunnuo	e5a7ada3cf	Merge branch 'v2' into v2-dev-yaml	2025-04-15 21:19:39 +08:00
xiaojunnuo	b76fdd7fe4	Merge branch 'v2-dev' into v2-dev-yaml	2025-04-15 21:19:36 +08:00
xiaojunnuo	91ffb0820a	chore: plugin元数据换成yaml格式	2025-04-15 00:16:57 +08:00
@@ -1 +1 @@
 :08
 :32
@@ -1 +1 @@
 :12
 :23