mirror of
https://github.com/certd/certd.git
synced 2026-06-10 18:57:33 +08:00
Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 xiaojunnuo
|
69e6f2362e |
@@ -1,11 +0,0 @@
|
|||||||
#
|
|
||||||
# http://editorconfig.org
|
|
||||||
#
|
|
||||||
|
|
||||||
root = true
|
|
||||||
|
|
||||||
[*]
|
|
||||||
indent_style = space
|
|
||||||
indent_size = 2
|
|
||||||
trim_trailing_whitespace = true
|
|
||||||
|
|
||||||
@@ -1,5 +0,0 @@
|
|||||||
# These are supported funding model platforms
|
|
||||||
|
|
||||||
github: greper
|
|
||||||
buy_me_a_coffee: greper
|
|
||||||
custom: ['https://afdian.com/a/greper']
|
|
||||||
@@ -1,28 +1,21 @@
|
|||||||
---
|
> 感谢您支持certd，请按如下规范提交issue
|
||||||
name: Bug Report
|
|
||||||
about: 错误或问题报告
|
|
||||||
title: "[BUG] "
|
|
||||||
labels: bug
|
|
||||||
---
|
|
||||||
|
|
||||||
|
|
||||||
> 感谢您支持certd，请按如下规范提交issue
|
|
||||||
> 如果有条件，请尽量在[github上提交](https://github.com/certd/certd/issues)
|
> 如果有条件，请尽量在[github上提交](https://github.com/certd/certd/issues)
|
||||||
|
|
||||||
# bug提交
|
|
||||||
## 1、问题描述
|
## 一、问题描述
|
||||||
`请在此处简要描述你所遇到的问题，必要时请贴出相关截图辅助理解和定位`
|
`请在此处简要描述你所遇到的问题，必要时请贴出相关截图辅助理解和定位`
|
||||||
|
|
||||||
### 2、复现步骤
|
### 复现步骤
|
||||||
`请描述复现问题的详细步骤`
|
`请描述复现问题的详细步骤`
|
||||||
`如果非示例页面的问题，最好能提供最小复现示例的代码、或者仓库链接`
|
`如果非示例页面的问题，最好能提供最小复现示例的代码、或者仓库链接`
|
||||||
|
|
||||||
|
|
||||||
### 3.报错截图
|
### 报错截图
|
||||||
`请贴出报错日志截图`
|
`请贴出报错日志截图`
|
||||||
|
|
||||||
### 4、效果截图
|
### 效果截图
|
||||||
`请贴出效果截图`
|
`请贴出效果截图`
|
||||||
#### 4.1. 期望效果
|
#### 1. 期望效果
|
||||||
|
|
||||||
|
#### 2. 实际效果
|
||||||
|
|
||||||
#### 4.2. 实际效果
|
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
---
|
|
||||||
name: Plugin Apply
|
|
||||||
about: 部署插件申请支持
|
|
||||||
title: "[Plugin] "
|
|
||||||
labels: feature
|
|
||||||
---
|
|
||||||
|
|
||||||
> > 感谢您支持certd，请按如下规范提交issue
|
|
||||||
> 如果有条件，请尽量在[github上提交](https://github.com/certd/certd/issues)
|
|
||||||
|
|
||||||
# 新部署插件申请支持
|
|
||||||
|
|
||||||
## 1. 需求描述
|
|
||||||
`请在此处简要描述你的需求`
|
|
||||||
|
|
||||||
|
|
||||||
## 2. 要部署证书应用的信息
|
|
||||||
|
|
||||||
1. 应用名称：
|
|
||||||
|
|
||||||
|
|
||||||
2. 应用网址/项目地址/官方网站：
|
|
||||||
|
|
||||||
|
|
||||||
3. 管理证书界面截图（或者手动部署证书方式介绍及截图）：
|
|
||||||
|
|
||||||
|
|
||||||
4. 是否有API接口，接口地址：
|
|
||||||
|
|
||||||
|
|
||||||
5. 如果没有API接口，网页登录是否需要验证码：
|
|
||||||
|
|
||||||
|
|
||||||
6. 是否可以提供测试账号？（如果可以请留下联系方式或者加作者好友）
|
|
||||||
|
|
||||||
|
|
||||||
@@ -1,36 +0,0 @@
|
|||||||
---
|
|
||||||
name: DNS Provider Apply
|
|
||||||
about: 域名提供商申请支持
|
|
||||||
title: "[DNS] "
|
|
||||||
labels: feature
|
|
||||||
---
|
|
||||||
|
|
||||||
|
|
||||||
> 感谢您支持certd，请按如下规范提交issue
|
|
||||||
> 如果有条件，请尽量在[github上提交](https://github.com/certd/certd/issues)
|
|
||||||
|
|
||||||
# 新域名提供商支持申请
|
|
||||||
|
|
||||||
## 1. 基本信息
|
|
||||||
请填写如下内容：
|
|
||||||
|
|
||||||
1. 域名提供商名称：
|
|
||||||
|
|
||||||
|
|
||||||
2. 管理页面地址：
|
|
||||||
|
|
||||||
|
|
||||||
3. 是否有API接口，接口地址：
|
|
||||||
|
|
||||||
|
|
||||||
4. 如果没有API接口，网页登录是否有验证码：
|
|
||||||
|
|
||||||
|
|
||||||
5. 是否可以提供测试账号？（如果可以请留下联系方式或者加作者好友）
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## 2. 截图
|
|
||||||
|
|
||||||
`域名管理页面截图`
|
|
||||||
|
|
||||||
@@ -1,24 +0,0 @@
|
|||||||
---
|
|
||||||
name: Feature Request
|
|
||||||
about: 新需求、新特性申请支持
|
|
||||||
title: "[Feature] "
|
|
||||||
labels: feature
|
|
||||||
---
|
|
||||||
|
|
||||||
> > 感谢您支持certd，请按如下规范提交issue
|
|
||||||
> 如果有条件，请尽量在[github上提交](https://github.com/certd/certd/issues)
|
|
||||||
|
|
||||||
|
|
||||||
# 新特性申请
|
|
||||||
>注意：这里仅供如果是要申请新的部署插件，请提交插件申请
|
|
||||||
|
|
||||||
## 1. 需求描述，需求背景
|
|
||||||
`请在此处简要描述你所遇到的问题，必要时请贴出相关截图辅助理解`
|
|
||||||
|
|
||||||
|
|
||||||
## 2. 期望效果
|
|
||||||
`必要时可以截图描述你的期望效果`
|
|
||||||
|
|
||||||
|
|
||||||
## 3. 你的解决方案
|
|
||||||
`如果你有解决方案，请描述你的方案`
|
|
||||||
@@ -1,13 +1,9 @@
|
|||||||
name: build-image-for-release
|
name: build-image-for-test
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches: ['v2-dev']
|
branches: ['v2-dev']
|
||||||
paths:
|
paths:
|
||||||
- "trigger/release.trigger"
|
- "build-dev.trigger"
|
||||||
# workflow_run:
|
|
||||||
# workflows: [ "deploy-demo" ]
|
|
||||||
# types:
|
|
||||||
# - completed
|
|
||||||
|
|
||||||
# schedule:
|
# schedule:
|
||||||
# - # 国际时间 19:17 执行，北京时间3:17 ↙↙↙ 改成你想要每天自动执行的时间
|
# - # 国际时间 19:17 执行，北京时间3:17 ↙↙↙ 改成你想要每天自动执行的时间
|
||||||
@@ -24,7 +20,7 @@ jobs:
|
|||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v4
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
lfs: true
|
ref: v2-dev
|
||||||
|
|
||||||
- name: get_certd_version
|
- name: get_certd_version
|
||||||
id: get_certd_version
|
id: get_certd_version
|
||||||
@@ -79,19 +75,17 @@ jobs:
|
|||||||
username: ${{ secrets.dockerhub_username }}
|
username: ${{ secrets.dockerhub_username }}
|
||||||
password: ${{ secrets.dockerhub_password }}
|
password: ${{ secrets.dockerhub_password }}
|
||||||
|
|
||||||
- name: Build default platforms
|
# - name: Build default platforms
|
||||||
uses: docker/build-push-action@v6
|
# uses: docker/build-push-action@v6
|
||||||
with:
|
# with:
|
||||||
platforms: linux/amd64,linux/arm64
|
# platforms: linux/amd64,linux/arm64
|
||||||
push: true
|
# push: true
|
||||||
context: ./packages/ui/
|
# context: ./packages/ui/
|
||||||
tags: |
|
# tags: |
|
||||||
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest
|
# registry.cn-shenzhen.aliyuncs.com/handsfree/certd-dev:latest
|
||||||
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}
|
# greper/certd-dev:latest
|
||||||
greper/certd:latest
|
# ghcr.io/${{ github.repository }}:dev-latest
|
||||||
greper/certd:${{steps.get_certd_version.outputs.result}}
|
|
||||||
ghcr.io/${{ github.repository }}:latest
|
|
||||||
ghcr.io/${{ github.repository }}:${{steps.get_certd_version.outputs.result}}
|
|
||||||
- name: Build armv7
|
- name: Build armv7
|
||||||
uses: docker/build-push-action@v6
|
uses: docker/build-push-action@v6
|
||||||
with:
|
with:
|
||||||
@@ -102,41 +96,4 @@ jobs:
|
|||||||
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:armv7
|
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:armv7
|
||||||
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}-armv7
|
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}-armv7
|
||||||
greper/certd:armv7
|
greper/certd:armv7
|
||||||
greper/certd:${{steps.get_certd_version.outputs.result}}-armv7
|
greper/certd:${{steps.get_certd_version.outputs.result}}-armv7
|
||||||
ghcr.io/${{ github.repository }}:armv7
|
|
||||||
ghcr.io/${{ github.repository }}:${{steps.get_certd_version.outputs.result}}-armv7
|
|
||||||
|
|
||||||
# - name: Build agent
|
|
||||||
# uses: docker/build-push-action@v6
|
|
||||||
# with:
|
|
||||||
# platforms: linux/amd64,linux/arm64
|
|
||||||
# push: true
|
|
||||||
# context: ./packages/ui/agent/
|
|
||||||
# tags: |
|
|
||||||
# registry.cn-shenzhen.aliyuncs.com/handsfree/certd-agent:latest
|
|
||||||
# registry.cn-shenzhen.aliyuncs.com/handsfree/certd-agent:${{steps.get_certd_version.outputs.result}}
|
|
||||||
# greper/certd-agent:latest
|
|
||||||
# greper/certd-agent:${{steps.get_certd_version.outputs.result}}
|
|
||||||
- name: deploy-certd-doc
|
|
||||||
uses: tyrrrz/action-http-request@master
|
|
||||||
with:
|
|
||||||
url: ${{ secrets.WEBHOOK_CERTD_DOC }}
|
|
||||||
method: POST
|
|
||||||
body: |
|
|
||||||
{
|
|
||||||
"CERTD_VERSION": "1.0.0"
|
|
||||||
}
|
|
||||||
headers: |
|
|
||||||
Content-Type: application/json
|
|
||||||
retry-count: 3
|
|
||||||
retry-delay: 5000
|
|
||||||
|
|
||||||
- name: publish_to_atomgit
|
|
||||||
id: publish_to_atomgit
|
|
||||||
run: |
|
|
||||||
rm -rf ./packages/ui/certd-client/dist/**/*.gz
|
|
||||||
zip -r ui.zip ./packages/ui/certd-client/dist
|
|
||||||
export ATOMGIT_TOKEN=${{ secrets.ATOMGIT_TOKEN }}
|
|
||||||
pnpm install
|
|
||||||
npm run publish_to_atomgit
|
|
||||||
working-directory: ./
|
|
||||||
@@ -3,7 +3,7 @@ on:
|
|||||||
push:
|
push:
|
||||||
branches: ['v2-dev']
|
branches: ['v2-dev']
|
||||||
paths:
|
paths:
|
||||||
- "trigger/build.trigger"
|
- "build.trigger"
|
||||||
|
|
||||||
# schedule:
|
# schedule:
|
||||||
# - # 国际时间 19:17 执行，北京时间3:17 ↙↙↙ 改成你想要每天自动执行的时间
|
# - # 国际时间 19:17 执行，北京时间3:17 ↙↙↙ 改成你想要每天自动执行的时间
|
||||||
@@ -68,7 +68,7 @@ jobs:
|
|||||||
registry: ghcr.io
|
registry: ghcr.io
|
||||||
username: ${{ github.actor }}
|
username: ${{ github.actor }}
|
||||||
password: ${{ secrets.GITHUB_TOKEN }}
|
password: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
|
||||||
- name: Login to Docker Hub
|
- name: Login to Docker Hub
|
||||||
uses: docker/login-action@v3
|
uses: docker/login-action@v3
|
||||||
with:
|
with:
|
||||||
@@ -82,4 +82,34 @@ jobs:
|
|||||||
push: true
|
push: true
|
||||||
context: ./packages/ui/
|
context: ./packages/ui/
|
||||||
tags: |
|
tags: |
|
||||||
|
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:latest
|
||||||
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}
|
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}
|
||||||
|
greper/certd:latest
|
||||||
|
greper/certd:${{steps.get_certd_version.outputs.result}}
|
||||||
|
ghcr.io/${{ github.repository }}:latest
|
||||||
|
ghcr.io/${{ github.repository }}:${{steps.get_certd_version.outputs.result}}
|
||||||
|
- name: Build armv7
|
||||||
|
uses: docker/build-push-action@v6
|
||||||
|
with:
|
||||||
|
platforms: linux/arm/v7
|
||||||
|
push: true
|
||||||
|
context: ./packages/ui/
|
||||||
|
tags: |
|
||||||
|
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:armv7
|
||||||
|
registry.cn-shenzhen.aliyuncs.com/handsfree/certd:${{steps.get_certd_version.outputs.result}}-armv7
|
||||||
|
greper/certd:armv7
|
||||||
|
greper/certd:${{steps.get_certd_version.outputs.result}}-armv7
|
||||||
|
ghcr.io/${{ github.repository }}:armv7
|
||||||
|
ghcr.io/${{ github.repository }}:${{steps.get_certd_version.outputs.result}}-armv7
|
||||||
|
|
||||||
|
# - name: Build agent
|
||||||
|
# uses: docker/build-push-action@v6
|
||||||
|
# with:
|
||||||
|
# platforms: linux/amd64,linux/arm64
|
||||||
|
# push: true
|
||||||
|
# context: ./packages/ui/agent/
|
||||||
|
# tags: |
|
||||||
|
# registry.cn-shenzhen.aliyuncs.com/handsfree/certd-agent:latest
|
||||||
|
# registry.cn-shenzhen.aliyuncs.com/handsfree/certd-agent:${{steps.get_certd_version.outputs.result}}
|
||||||
|
# greper/certd-agent:latest
|
||||||
|
# greper/certd-agent:${{steps.get_certd_version.outputs.result}}
|
||||||
|
|||||||
@@ -3,13 +3,12 @@ on:
|
|||||||
push:
|
push:
|
||||||
branches: ['v2-dev']
|
branches: ['v2-dev']
|
||||||
paths:
|
paths:
|
||||||
- "trigger/deploy.trigger"
|
- "deploy.trigger"
|
||||||
workflow_run:
|
workflow_run:
|
||||||
workflows: [ "build-image" ]
|
workflows: [ "build-image" ]
|
||||||
types:
|
types:
|
||||||
- completed
|
- completed
|
||||||
|
|
||||||
|
|
||||||
# schedule:
|
# schedule:
|
||||||
# - # 国际时间 19:17 执行，北京时间3:17 ↙↙↙ 改成你想要每天自动执行的时间
|
# - # 国际时间 19:17 执行，北京时间3:17 ↙↙↙ 改成你想要每天自动执行的时间
|
||||||
# - cron: '17 19 * * *'
|
# - cron: '17 19 * * *'
|
||||||
@@ -44,8 +43,7 @@ jobs:
|
|||||||
- name: deploy-certd-demo
|
- name: deploy-certd-demo
|
||||||
uses: tyrrrz/action-http-request@master
|
uses: tyrrrz/action-http-request@master
|
||||||
with:
|
with:
|
||||||
# 通过webhook 触发 certd-demo来部署
|
url: http://flow-openapi.aliyun.com/pipeline/webhook/lzCzlGrLCOHQaTMMt0mG
|
||||||
url: ${{ secrets.WEBHOOK_CERTD_DEMO }}
|
|
||||||
method: POST
|
method: POST
|
||||||
headers: |
|
headers: |
|
||||||
Content-Type: application/json
|
Content-Type: application/json
|
||||||
@@ -56,3 +54,14 @@ jobs:
|
|||||||
retry-count: 3
|
retry-count: 3
|
||||||
retry-delay: 5000
|
retry-delay: 5000
|
||||||
|
|
||||||
|
- name: deploy-certd-doc
|
||||||
|
uses: tyrrrz/action-http-request@master
|
||||||
|
with:
|
||||||
|
url: http://flow-openapi.aliyun.com/pipeline/webhook/IiSxLDp9aOhgDUxJPytv
|
||||||
|
method: POST
|
||||||
|
body: |
|
||||||
|
{}
|
||||||
|
headers: |
|
||||||
|
Content-Type: application/json
|
||||||
|
retry-count: 3
|
||||||
|
retry-delay: 5000
|
||||||
|
|||||||
@@ -1,58 +0,0 @@
|
|||||||
name: publish-atomgit
|
|
||||||
on:
|
|
||||||
push:
|
|
||||||
branches: ['v2-dev']
|
|
||||||
paths:
|
|
||||||
- "trigger/publish.trigger"
|
|
||||||
# workflow_run:
|
|
||||||
# workflows: [ "deploy-demo" ]
|
|
||||||
# types:
|
|
||||||
# - completed
|
|
||||||
|
|
||||||
# schedule:
|
|
||||||
# - # 国际时间 19:17 执行，北京时间3:17 ↙↙↙ 改成你想要每天自动执行的时间
|
|
||||||
# - cron: '17 19 * * *'
|
|
||||||
permissions:
|
|
||||||
contents: read
|
|
||||||
packages: write
|
|
||||||
|
|
||||||
jobs:
|
|
||||||
publish-atomgit:
|
|
||||||
runs-on: ubuntu-latest
|
|
||||||
steps:
|
|
||||||
- name: Checkout Code
|
|
||||||
uses: actions/checkout@v4
|
|
||||||
with:
|
|
||||||
fetch-depth: 0
|
|
||||||
lfs: true
|
|
||||||
- name: get_certd_version
|
|
||||||
id: get_certd_version
|
|
||||||
uses: actions/github-script@v6
|
|
||||||
with:
|
|
||||||
result-encoding: string
|
|
||||||
script: |
|
|
||||||
const fs = require('fs');
|
|
||||||
const path = require('path');
|
|
||||||
const pnpmWorkspace = "./pnpm-workspace.yaml";
|
|
||||||
fs.unlinkSync(pnpmWorkspace)
|
|
||||||
const jsonFilePath = "./packages/ui/certd-server/package.json";
|
|
||||||
const jsonContent = fs.readFileSync(jsonFilePath, 'utf-8');
|
|
||||||
const pkg = JSON.parse(jsonContent)
|
|
||||||
console.log("certd_version:",pkg.version);
|
|
||||||
return pkg.version
|
|
||||||
- run: |
|
|
||||||
npm install -g pnpm
|
|
||||||
pnpm install
|
|
||||||
npm run build
|
|
||||||
working-directory: ./packages/ui/certd-client
|
|
||||||
|
|
||||||
- name: publish_to_atomgit
|
|
||||||
id: publish_to_atomgit
|
|
||||||
run: |
|
|
||||||
rm -rf ./packages/ui/certd-client/dist/**/*.gz
|
|
||||||
zip -r ui.zip ./packages/ui/certd-client/dist
|
|
||||||
export ATOMGIT_TOKEN=${{ secrets.ATOMGIT_TOKEN }}
|
|
||||||
pnpm install
|
|
||||||
npm run publish_to_atomgit
|
|
||||||
working-directory: ./
|
|
||||||
|
|
||||||
+3
-2
@@ -1,5 +1,6 @@
|
|||||||
./packages/core/lego
|
./packages/core/lego
|
||||||
# IntelliJ project files
|
# IntelliJ project files
|
||||||
|
.vscode/
|
||||||
node_modules/
|
node_modules/
|
||||||
npm-debug.log
|
npm-debug.log
|
||||||
yarn-error.log
|
yarn-error.log
|
||||||
@@ -29,5 +30,5 @@ test/**/*.js
|
|||||||
/packages/ui/certd-server/data/db.sqlite
|
/packages/ui/certd-server/data/db.sqlite
|
||||||
/packages/ui/certd-server/data/keys.yaml
|
/packages/ui/certd-server/data/keys.yaml
|
||||||
/packages/pro/
|
/packages/pro/
|
||||||
test.js
|
|
||||||
.history
|
test.js
|
||||||
@@ -1,6 +1,2 @@
|
|||||||
link-workspace-packages=deep
|
link-workspace-packages=deep
|
||||||
prefer-workspace-packages=true
|
prefer-workspace-packages=true
|
||||||
better_sqlite3_binary_host=https://registry.npmmirror.com/-/binary/better-sqlite3
|
|
||||||
better_sqlite3_binary_host_mirror=https://registry.npmmirror.com/-/binary/better-sqlite3
|
|
||||||
better-sqlite3_binary_host=https://registry.npmmirror.com/-/binary/better-sqlite3
|
|
||||||
better-sqlite3_binary_host_mirror=https://registry.npmmirror.com/-/binary/better-sqlite3
|
|
||||||
Vendored
-73
@@ -1,73 +0,0 @@
|
|||||||
{
|
|
||||||
// 使用 IntelliSense 了解相关属性。
|
|
||||||
// 悬停以查看现有属性的描述。
|
|
||||||
// 欲了解更多信息，请访问: https://go.microsoft.com/fwlink/?linkid=830387
|
|
||||||
"version": "0.2.0",
|
|
||||||
"configurations": [
|
|
||||||
|
|
||||||
{
|
|
||||||
"name": "client",
|
|
||||||
"type": "node",
|
|
||||||
"request": "launch",
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-client",
|
|
||||||
"runtimeExecutable": "pnpm",
|
|
||||||
"runtimeArgs": ["dev"],
|
|
||||||
"console": "integratedTerminal",
|
|
||||||
"internalConsoleOptions": "neverOpen"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "server",
|
|
||||||
"type": "node",
|
|
||||||
"request": "launch",
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-server",
|
|
||||||
"runtimeExecutable": "pnpm",
|
|
||||||
"runtimeArgs": ["dev"],
|
|
||||||
"console": "integratedTerminal",
|
|
||||||
"internalConsoleOptions": "neverOpen"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "server-mysql",
|
|
||||||
"type": "node",
|
|
||||||
"request": "launch",
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-server",
|
|
||||||
"runtimeExecutable": "pnpm",
|
|
||||||
"runtimeArgs": ["dev-mysql"],
|
|
||||||
"console": "integratedTerminal",
|
|
||||||
"internalConsoleOptions": "neverOpen"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "server-pg",
|
|
||||||
"type": "node",
|
|
||||||
"request": "launch",
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-server",
|
|
||||||
"runtimeExecutable": "pnpm",
|
|
||||||
"runtimeArgs": ["dev-pg"],
|
|
||||||
"console": "integratedTerminal",
|
|
||||||
"internalConsoleOptions": "neverOpen"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "server-common",
|
|
||||||
"type": "node",
|
|
||||||
"request": "launch",
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-server",
|
|
||||||
"runtimeExecutable": "pnpm",
|
|
||||||
"runtimeArgs": ["dev-commpro"],
|
|
||||||
"console": "integratedTerminal",
|
|
||||||
"internalConsoleOptions": "neverOpen"
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"name": "server-local-plus",
|
|
||||||
"type": "node",
|
|
||||||
"request": "launch",
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-server",
|
|
||||||
"runtimeExecutable": "npm",
|
|
||||||
"runtimeArgs": ["run", "dev-localplus"],
|
|
||||||
"console": "integratedTerminal",
|
|
||||||
"internalConsoleOptions": "neverOpen",
|
|
||||||
"env": {
|
|
||||||
"plus_use_prod": "false",
|
|
||||||
"PLUS_SERVER_BASE_URL": "http://127.0.0.1:11007"
|
|
||||||
}
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
||||||
Vendored
-14
@@ -1,14 +0,0 @@
|
|||||||
{
|
|
||||||
"eslint.debug": false,
|
|
||||||
"eslint.format.enable": true,
|
|
||||||
"typescript.tsc.autoDetect": "watch",
|
|
||||||
"git.scanRepositories": [
|
|
||||||
"./packages/pro"
|
|
||||||
],
|
|
||||||
"editor.defaultFormatter": "dbaeumer.vscode-eslint",
|
|
||||||
"[typescript]": {
|
|
||||||
"editor.defaultFormatter": "vscode.typescript-language-features"
|
|
||||||
},
|
|
||||||
"editor.tabSize": 2,
|
|
||||||
"explorer.autoReveal": false
|
|
||||||
}
|
|
||||||
Vendored
-52
@@ -1,52 +0,0 @@
|
|||||||
{
|
|
||||||
"version": "2.0.0",
|
|
||||||
"tasks": [
|
|
||||||
{
|
|
||||||
"label": "启动Client",
|
|
||||||
"type": "shell",
|
|
||||||
"command": "npm",
|
|
||||||
"args": ["run", "dev"],
|
|
||||||
"options": {
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-client"
|
|
||||||
},
|
|
||||||
"group": {
|
|
||||||
"kind": "build",
|
|
||||||
"isDefault": true
|
|
||||||
},
|
|
||||||
"presentation": {
|
|
||||||
"echo": true,
|
|
||||||
"reveal": "always",
|
|
||||||
"focus": false,
|
|
||||||
"panel": "shared"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"label": "启动Server",
|
|
||||||
"type": "shell",
|
|
||||||
"command": "npm",
|
|
||||||
"args": ["run", "dev"],
|
|
||||||
"options": {
|
|
||||||
"cwd": "${workspaceFolder}/packages/ui/certd-server"
|
|
||||||
},
|
|
||||||
"group": {
|
|
||||||
"kind": "build",
|
|
||||||
"isDefault": true
|
|
||||||
},
|
|
||||||
"presentation": {
|
|
||||||
"echo": true,
|
|
||||||
"reveal": "always",
|
|
||||||
"focus": false,
|
|
||||||
"panel": "shared"
|
|
||||||
}
|
|
||||||
},
|
|
||||||
{
|
|
||||||
"label": "同时启动Client和Server",
|
|
||||||
"dependsOn": ["启动Client", "启动Server"],
|
|
||||||
"group": {
|
|
||||||
"kind": "build",
|
|
||||||
"isDefault": true
|
|
||||||
},
|
|
||||||
"problemMatcher": []
|
|
||||||
}
|
|
||||||
]
|
|
||||||
}
|
|
||||||
-455
@@ -3,461 +3,6 @@
|
|||||||
All notable changes to this project will be documented in this file.
|
All notable changes to this project will be documented in this file.
|
||||||
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
||||||
|
|
||||||
## [1.37.17](https://github.com/certd/certd/compare/v1.37.16...v1.37.17) (2025-12-29)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 发送证书到邮箱插件的邮件模版转为使用邮箱配置中的通用模版 ([c5a3003](https://github.com/certd/certd/commit/c5a3003cf7b640500a90ec2c8961859ffe6fdb18))
|
|
||||||
* 首页最快到期证书，不包含已禁用的流水线 ([d731956](https://github.com/certd/certd/commit/d731956b066e4dbbe24d4de7b3d3679b355eb97c))
|
|
||||||
* 修复部署到华为obs 报错的bug ([dd19afc](https://github.com/certd/certd/commit/dd19afce928a7f36312af9df1e7e5ed3eb1e214a))
|
|
||||||
* 修复从模版创建的流水线不会自动执行的bug ([833808c](https://github.com/certd/certd/commit/833808c5deb716122b241d3d67349d2d6a18bf45))
|
|
||||||
* 修复流水线列表step数量统计错误的bug ([0e5a4fb](https://github.com/certd/certd/commit/0e5a4fb098d3261b690c551cf2b95198cac487e7))
|
|
||||||
* 修复用户删除后，用相同的oauth授权登录报错用户不存在的问题 ([e505916](https://github.com/certd/certd/commit/e5059165259e4d757abc811c0c14bbc4a3dbaee9))
|
|
||||||
* 修复站点ip监控报主站与ip证书过期时间不一致的问题 ([62f8525](https://github.com/certd/certd/commit/62f8525dd5da95dc07ed103f602644c6e5f7f8e3))
|
|
||||||
* 修复serverchan3 没有选择tags报错的bug ([5bbf210](https://github.com/certd/certd/commit/5bbf210394883c4893c365bd16e999490b6e9b41))
|
|
||||||
* telegram 修复消息内存在横杠无法发出的bug ([5f4469e](https://github.com/certd/certd/commit/5f4469e306187c31d8a74d53b17ea3a213420367))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 批量修改定时时间支持随机时间 ([d0f653d](https://github.com/certd/certd/commit/d0f653da9a2970920e961e7404ff04080bccd343))
|
|
||||||
* 批量运行优化，支持普通运行和强制重新运行 ([039c62b](https://github.com/certd/certd/commit/039c62b09b37cdda35d33c6ee9adecad62dee75c))
|
|
||||||
* 升级lego到4.30.1版本 ([136e8dd](https://github.com/certd/certd/commit/136e8dd7c5ff7199ff4b0bcca95b8a03aa847553))
|
|
||||||
* 腾讯云EO增加请求参数打印 ([5b5deac](https://github.com/certd/certd/commit/5b5deac7d98684eda5c68384241a4d62c48d803b))
|
|
||||||
* 优化阿里云esa清理证书时机 ([5359a76](https://github.com/certd/certd/commit/5359a7670fac5a18c4294b37a34227308a0deed6))
|
|
||||||
* 优化源码方式部署，前端无需编译 ([13ddc97](https://github.com/certd/certd/commit/13ddc979ec7953e3db8db76dd23fd85a3b3c7997))
|
|
||||||
* 支持部署到goedge ([44bf4b1](https://github.com/certd/certd/commit/44bf4b1cc1aafa2d711c3b8e408009f0ceb413eb))
|
|
||||||
* 支持从阿里云商用证书订单中获取证书 ([8872466](https://github.com/certd/certd/commit/887246696861c3a0b1f99fd9ad978caea423c650))
|
|
||||||
* 支持授权给管理员查看和下载用户证书 ([1347355](https://github.com/certd/certd/commit/1347355cb117694abe99da385352a19771a32e84))
|
|
||||||
* 支持执行队列，避免同一时间触发流水线太多导致被限制 ([888d959](https://github.com/certd/certd/commit/888d9591fe9730b529e1c355d71f41e7ec9b479d))
|
|
||||||
* 支持aws route53 dns ([cbb8319](https://github.com/certd/certd/commit/cbb8319cfa48673e81ec15894adc3376c173c97e))
|
|
||||||
* 支持ucloud waf（未测试） ([a248367](https://github.com/certd/certd/commit/a248367b154c38661a6797ef64e37ec99d4e2abf))
|
|
||||||
* 支持ucloud，上传到ussl，部署到ucdn ([e61daae](https://github.com/certd/certd/commit/e61daaee2d0dec19710cd4ec759219a071f2435e))
|
|
||||||
* 执行队列数量支持设置 ([cd94488](https://github.com/certd/certd/commit/cd944882c3272adad4a2da94a3889a01fe05fe13))
|
|
||||||
* aws route53 ([8caab1f](https://github.com/certd/certd/commit/8caab1fd9264df548f467b94202d567107b7a30b))
|
|
||||||
* ip证书校验方式提示 ([773cada](https://github.com/certd/certd/commit/773cada57a01fb28ea8602062aaeec3d45109ea9))
|
|
||||||
|
|
||||||
## [1.37.16](https://github.com/certd/certd/compare/v1.37.15...v1.37.16) (2025-12-15)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复ipv6作为证书域名申请证书校验失败的bug ([e4e16bc](https://github.com/certd/certd/commit/e4e16bc6a65bb082c18ca0590226f0987a47d477))
|
|
||||||
* 优化西部数据 500 already exists 的问题 ([2bfad9f](https://github.com/certd/certd/commit/2bfad9fc651da208b610abd921fbfb2fbc04203f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 批量设置定时，支持清除定时 ([63d8bcf](https://github.com/certd/certd/commit/63d8bcf8823f713365042d3c7aee3cf31d44b044))
|
|
||||||
* 新增数据库迁移doc说明文档，优化datetime字段平滑迁移 ([45fbce0](https://github.com/certd/certd/commit/45fbce0c2af5fb3ead6d3dd12a42f8cc1714262f))
|
|
||||||
* 支持彩虹聚合登录 ([6f18693](https://github.com/certd/certd/commit/6f186932ccad4becfdc0087c0539f7b2d0069844))
|
|
||||||
* 支持邮件模版设置 ([a6c0d2c](https://github.com/certd/certd/commit/a6c0d2c6f1fd6b60e6d7af290487c94564fd91ea))
|
|
||||||
* oidc支持使用第三方昵称或账号作为certd用户的用户名 ([b6fea0c](https://github.com/certd/certd/commit/b6fea0c8562abf912daa7d72958ceb2e93575d31))
|
|
||||||
|
|
||||||
## [1.37.15](https://github.com/certd/certd/compare/v1.37.14...v1.37.15) (2025-12-06)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* oidc 支持nonce ([a5ca411](https://github.com/certd/certd/commit/a5ca41131b308b36b17ca359d9709ea8e9b7cee1))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 第三方登录支持gitee ([5cee7d4](https://github.com/certd/certd/commit/5cee7d44f17bd36972f477bc1f270999da558d05))
|
|
||||||
* 邮件模版安全优化 ([adca151](https://github.com/certd/certd/commit/adca151e4f07a4c6a2a753bfa48ee0d4d6469fd2))
|
|
||||||
* 支持部署到中国移动CDN ([4351304](https://github.com/certd/certd/commit/43513049beff407558d2a234415521464165cebc))
|
|
||||||
* 支持k8s apply ([d55954a](https://github.com/certd/certd/commit/d55954a36391ebe6a9397ff7dcfb710193ac5e34))
|
|
||||||
|
|
||||||
## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复注销登录时，第三方登录注销请求失败的报错 ([677e110](https://github.com/certd/certd/commit/677e1101e6cf4451abd8a876cc1d0ddd26a10b88))
|
|
||||||
|
|
||||||
## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复西部数据返回信息乱码问题 ([78b1650](https://github.com/certd/certd/commit/78b1650bdb071c858b3f90d53a700d11ee6de328))
|
|
||||||
* 修复西部数码使用域名级别的key申请证书失败的问题 ([5edc72d](https://github.com/certd/certd/commit/5edc72d47550b8e3364dabda70a41cce75d87956))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 第三方登录允许选择logo ([bb3085e](https://github.com/certd/certd/commit/bb3085ef84201ccd2dc632ba8c5097cb00258be4))
|
|
||||||
* 支持OIDC单点登录 ([fbf12f1](https://github.com/certd/certd/commit/fbf12f16b5eaa7676fd41923587bf6bd2595adba))
|
|
||||||
|
|
||||||
## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复waf tls版本号小写 ([0adcc6a](https://github.com/certd/certd/commit/0adcc6a8d194469be0c26940ed4837fb34929b68))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持微信扫码登录 ([73325aa](https://github.com/certd/certd/commit/73325aaefb0e750a22aaac40929e7bf3f5864996))
|
|
||||||
* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/certd/certd/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
|
|
||||||
|
|
||||||
## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复阿里云 waf tlsVersion参数缺失导致部署失败的问题 ([2fabee6](https://github.com/certd/certd/commit/2fabee647acf64afe689f5bea3603028cd0ba4a2))
|
|
||||||
* 修复备注撑开表格行高的bug ([c7b298c](https://github.com/certd/certd/commit/c7b298c46f0d52b43bd2bb17b374e7970a446446))
|
|
||||||
* 修复域名管理无法创建tencent-eo dns授权的bug ([3406bb5](https://github.com/certd/certd/commit/3406bb5a4a56bb310cddc1a1f410c70909fd129b))
|
|
||||||
* openapi 成功后失败都返回msg ([6e735bb](https://github.com/certd/certd/commit/6e735bbd1e29712e939f775a4db974db70e3b4b0))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* ssh支持ppk格式私钥 ([575ae16](https://github.com/certd/certd/commit/575ae164c863d0b1f9fa0890549a2ee7472fb469))
|
|
||||||
* 优化宝塔网站证书在并发部署时导致nginx配置文件错乱的问题 ([51cc084](https://github.com/certd/certd/commit/51cc08411fd2dbab66d769b495dc1b0bf2f2578c))
|
|
||||||
* 优化天翼云cdn 等待5秒部署完成 ([53c88ad](https://github.com/certd/certd/commit/53c88ad5afe66a3f7c38b9b759747918913a4edc))
|
|
||||||
* 支持oidc单点登录 ([ec75afb](https://github.com/certd/certd/commit/ec75afbc44139dbe9da534d8a8c08a5b91f86d3c))
|
|
||||||
* ssl.com支持ecc ([b5ec047](https://github.com/certd/certd/commit/b5ec04723db48422f71041f4043002e7f5b450b1))
|
|
||||||
|
|
||||||
## [1.37.10](https://github.com/certd/certd/compare/v1.37.9...v1.37.10) (2025-11-19)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化dokploy 部署插件，配置选择serverId ([c9709f2](https://github.com/certd/certd/commit/c9709f26981c1cc9f71c14babb204329fcae0db5))
|
|
||||||
* 站点证书监控备注输入框改成textarea ([70b603d](https://github.com/certd/certd/commit/70b603d601c34f39148c2ab70c655c51babf563d))
|
|
||||||
|
|
||||||
## [1.37.9](https://github.com/certd/certd/compare/v1.37.8...v1.37.9) (2025-11-19)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 商用证书上传保存失败的bug ([075b1dc](https://github.com/certd/certd/commit/075b1dc0eb8c39acc277277b1b334d66b6717ab2))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化阿里云clb 过期证书清理报错的问题 ([d465367](https://github.com/certd/certd/commit/d4653678b2e3643460f918992eeae4044d3a1cc7))
|
|
||||||
|
|
||||||
## [1.37.8](https://github.com/certd/certd/compare/v1.37.7...v1.37.8) (2025-11-17)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* **plugins/woai-cdn:** 修正默认接口域名与帮助链接中的路径 ([#576](https://github.com/certd/certd/issues/576)) @LjyLab ([d20046c](https://github.com/certd/certd/commit/d20046c86681ea177ece434423b7c81a76b437fb))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 修复西数解析记录添加失败的bug，支持部署证书到西数虚拟主机 ([1102952](https://github.com/certd/certd/commit/1102952b4703e8c0bbc17b0700c0ed3ef6f866d3))
|
|
||||||
* 支持回车键触发登录 ([eb5c88f](https://github.com/certd/certd/commit/eb5c88fbb2901f1a9669429a7cd8dc76f6806d01))
|
|
||||||
|
|
||||||
## [1.37.7](https://github.com/certd/certd/compare/v1.37.6...v1.37.7) (2025-11-12)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复点击立即触发运行报错的bug ([e1eef01](https://github.com/certd/certd/commit/e1eef013a856d26fe80a05d9ec6e505e2e31e5f9))
|
|
||||||
* 账号绑定页面某些情况下打不开的bug ([44973eb](https://github.com/certd/certd/commit/44973ebd00e89c0fee8f3b91174157757ce0160f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持使用letencrypt测试环境申请ip证书 ([86ce00a](https://github.com/certd/certd/commit/86ce00adf92ff98fead87a3eaaa6631036708f47))
|
|
||||||
* 支持腾讯云teo dns解析 ([1d23dd2](https://github.com/certd/certd/commit/1d23dd2426bd1e4c4dfea0a9e561d665e045ba9d))
|
|
||||||
|
|
||||||
## [1.37.6](https://github.com/certd/certd/compare/v1.37.5...v1.37.6) (2025-11-10)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复创建流水线报id不能为空的bug ([aac569a](https://github.com/certd/certd/commit/aac569a9259ede43399e0ed5d668e936b984d6dd))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 增加vip时间同步按钮 ([32e4e91](https://github.com/certd/certd/commit/32e4e91ab81008dda422fb53fd6f4d1711c5d80c))
|
|
||||||
* 支持letencrypt测试环境，支持IP证书？ ([1462cdd](https://github.com/certd/certd/commit/1462cddd1eb347b7ff238286b5c977b29a0591ec))
|
|
||||||
* server 增加 "@peculiar/x509" 依赖 ([acdf091](https://github.com/certd/certd/commit/acdf0912d452029f158279fb78155086e4fbac17))
|
|
||||||
|
|
||||||
## [1.37.5](https://github.com/certd/certd/compare/v1.37.4...v1.37.5) (2025-11-08)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复某些情况下编辑流水线，没有立即展示变更效果的bug ([65e5309](https://github.com/certd/certd/commit/65e53092e8d677eb34b7d04d68c6f738165f5de2))
|
|
||||||
* 修复批量修改定时没有立即显示生效的bug ([c166602](https://github.com/certd/certd/commit/c16660254b8d637bd3ca100695934b343875fcbf))
|
|
||||||
* 修复新部署的无法保存公共eab配置的bug ([6b7631e](https://github.com/certd/certd/commit/6b7631ed5e920582d8e2162ec788b9429238ac29))
|
|
||||||
* 修复在苹果手机下输入框被放大的问题 ([5ff7e6e](https://github.com/certd/certd/commit/5ff7e6ef0eaa6bc111d0dd3c5713e1658f9113ad))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持记忆字段排序 ([d46b9c5](https://github.com/certd/certd/commit/d46b9c54b14ec5c892f4eed141fb549485941edd))
|
|
||||||
* 优化任务参数配置界面在手机版下的展示效果 ([0203aa2](https://github.com/certd/certd/commit/0203aa2b6e86e58e5e66a1b9d0278d186aa92554))
|
|
||||||
* 支持列表展示时固定证书最大天数，有助于列表进度条整齐展示 ([4a94eab](https://github.com/certd/certd/commit/4a94eab3935c89a63892661d9cf0d0891e54aa81))
|
|
||||||
* 子域名托管说明 ([b5d8161](https://github.com/certd/certd/commit/b5d8161bc2e686e6c8b552de0c29117a5d405313))
|
|
||||||
* cname方式hostRecord增加user校验 ([bc174f7](https://github.com/certd/certd/commit/bc174f70545e487bd549eff250f8ef69c6d343f3))
|
|
||||||
* doge云插件支持选择CDN域名，以及支持同时部署多个域名 ([041954c](https://github.com/certd/certd/commit/041954c0674fabed54ed2cf5e727fecfb6943d19))
|
|
||||||
* doge云支持删除过期证书 ([335cf93](https://github.com/certd/certd/commit/335cf9397080a5e09074d5a89d03f59bd051cda5))
|
|
||||||
|
|
||||||
## [1.37.4](https://github.com/certd/certd/compare/v1.37.3...v1.37.4) (2025-10-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复站点证书监控复制按钮无效的bug ([efa26a0](https://github.com/certd/certd/commit/efa26a067f06402f30befc016d9934cadcd5a563))
|
|
||||||
* 修复lego模式下 私钥加密类型错误的bug ([f7cf7c1](https://github.com/certd/certd/commit/f7cf7c198d7f77b222099770f81accc637bc6619))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化数据备份效率，流式写入文件 ([c38dbbb](https://github.com/certd/certd/commit/c38dbbb1d72bd00a92fe275b76aea82a791e7199))
|
|
||||||
|
|
||||||
## [1.37.3](https://github.com/certd/certd/compare/v1.37.2...v1.37.3) (2025-10-24)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复并发情况下证书申请日志混乱的bug ([bb2714f](https://github.com/certd/certd/commit/bb2714ff241f9db4a71d805b23a1b0f9f2f6413a))
|
|
||||||
* 修复网络测试，telnet的bug ([c03a70f](https://github.com/certd/certd/commit/c03a70fde23c8e840bd0fdb4fcbca8990f6c65eb))
|
|
||||||
* 修复站点证书监控，证书已经更新到最新日期了，仍然发出警告通知的bug ([1f42f93](https://github.com/certd/certd/commit/1f42f933f07860b27aa3d016e40916ff2b063eac))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 注册页面增加手机注册tab页签 ([6b2f1fc](https://github.com/certd/certd/commit/6b2f1fcd3e058061b814c3331cda8ce1b2d80d73))
|
|
||||||
* 流水线创建时支持添加到证书监控 ([59ba408](https://github.com/certd/certd/commit/59ba4080706548828ef1c0a9cd893c1c9a7d591f))
|
|
||||||
* 流水线支持有效期设置 ([911e69e](https://github.com/certd/certd/commit/911e69e3bc0cdd48b62953b5d0981d640fc1f8ac))
|
|
||||||
* 群辉增加请求超时时长设置 ([b381492](https://github.com/certd/certd/commit/b3814920bdcabc911f860a8e19b5b9b3a04709ac))
|
|
||||||
* 通知支持meow ([c77645e](https://github.com/certd/certd/commit/c77645e1733670214aaca5544cf8759d7e4adda4))
|
|
||||||
* 站点证书监控增加导出和分组功能 ([2ed12c4](https://github.com/certd/certd/commit/2ed12c429eb58274a4f9dd0ed3b66e160d283ded))
|
|
||||||
* 证书监控增加批量删除 ([e578c52](https://github.com/certd/certd/commit/e578c52fdf2f838038062aa4209b655fbae461fb))
|
|
||||||
* esa 自动删除过期证书提示 ([8bf1f82](https://github.com/certd/certd/commit/8bf1f828b9eaa9208f32e8ee7460b86420fed0c7))
|
|
||||||
* ssh 增加禁止-i参数提示 ([3a8931f](https://github.com/certd/certd/commit/3a8931feeffd7157163ff7d46b693e5e1a434b9c))
|
|
||||||
|
|
||||||
## [1.37.2](https://github.com/certd/certd/compare/v1.37.1...v1.37.2) (2025-10-14)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复飞牛证书部署后无法生效的bug ([bf156a1](https://github.com/certd/certd/commit/bf156a13bd443cdadb73c9dff79bbef7231b4401))
|
|
||||||
* aliyunoss 选择证书接入点选择新加坡无法上传的bug ([e00733a](https://github.com/certd/certd/commit/e00733a34644c23ffe926486b15dc96bf2fa4b57))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化start.sh脚本，去掉删除非ui目录的操作及提示 ([7993a7c](https://github.com/certd/certd/commit/7993a7cdb01885535950c63187e3f67d67ba2f75))
|
|
||||||
* 增加飞牛证书id选择的提示 ([5a4d812](https://github.com/certd/certd/commit/5a4d8121462b1afe921d028465687be8c9679814))
|
|
||||||
* 证书监控支持设置证书即将过期天数 ([cd35568](https://github.com/certd/certd/commit/cd35568e042e6ab928685efad51cdbed823d2d4f))
|
|
||||||
* 支持网络测试 ([2bef608](https://github.com/certd/certd/commit/2bef608e07ceb56d52007f290667e0afef401b22))
|
|
||||||
* 支持新网代理方式 ([f612509](https://github.com/certd/certd/commit/f612509cac87b859e81a7a52fe94b2eaccad22f9))
|
|
||||||
* dns支持新网互联 ([f415190](https://github.com/certd/certd/commit/f41519048326d971acd9e0a30462231f77a299a6))
|
|
||||||
* start.sh脚本支持根据当前系统判断是否使用sudo ([567cb7d](https://github.com/certd/certd/commit/567cb7d737023e26ec58403c6f28f109e212d379))
|
|
||||||
|
|
||||||
## [1.37.1](https://github.com/certd/certd/compare/v1.37.0...v1.37.1) (2025-09-29)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复版本比较bug ([109696e](https://github.com/certd/certd/commit/109696e965d68c50c8627ffd40203edd1d2daea5))
|
|
||||||
* 修复某些情况下cname申请证书报错主域名不一致的bug ([2671781](https://github.com/certd/certd/commit/2671781e1bb0838981728d85eacf0e1a25a0fa48))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* cname主域名校验提示优化，显示不一致的两方便于排查问题 ([6ebb365](https://github.com/certd/certd/commit/6ebb3659f42155e4e8da600c493fb5227cd08137))
|
|
||||||
* dns解析支持阿里esa ([9291fa6](https://github.com/certd/certd/commit/9291fa68aa7a88a05c2f888bf3048df36a8fbde3))
|
|
||||||
|
|
||||||
# [1.37.0](https://github.com/certd/certd/compare/v1.36.25...v1.37.0) (2025-09-28)
|
|
||||||
|
|
||||||
### Features
|
|
||||||
|
|
||||||
* @certd/ui-server module import报错的问题 ([0c61d4c](https://github.com/certd/certd/commit/0c61d4c9788677c83c567db5381b9e257ec90bba))
|
|
||||||
* dist打包前检查 ([8f6e5bd](https://github.com/certd/certd/commit/8f6e5bd24b3b65fbfcba36c08f532a3abad2d606))
|
|
||||||
|
|
||||||
## [1.36.25](https://github.com/certd/certd/compare/v1.36.24...v1.36.25) (2025-09-27)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 固定midwayjs版本，修复ui-server import 错误的bug ([eb4d125](https://github.com/certd/certd/commit/eb4d125eaf4a41e88c752d0c68993829589f8f27))
|
|
||||||
|
|
||||||
## [1.36.24](https://github.com/certd/certd/compare/v1.36.23...v1.36.24) (2025-09-27)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复 ui-server 加载失败问题 ([c2ccdbe](https://github.com/certd/certd/commit/c2ccdbec9dd08bca4688eeb2f34d0105eec43ba1))
|
|
||||||
* 修复 ui-server 加载失败问题 ([063f5c3](https://github.com/certd/certd/commit/063f5c3b55e47df22543a64f02e039e84f92cd14))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 重置管理员密码同时会关闭验证码，防止验证码失效之后无法登录 ([03899d4](https://github.com/certd/certd/commit/03899d4d9c76fc2077dacc53ab88e2c9ca41af7c))
|
|
||||||
|
|
||||||
## [1.36.23](https://github.com/certd/certd/compare/v1.36.22...v1.36.23) (2025-09-26)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 授权页面，id列位置不在第一列的bug ([3f1722d](https://github.com/certd/certd/commit/3f1722d54debcb4849dc14521a2da0d9b304b69f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 动态加载验证码script ([dcc396a](https://github.com/certd/certd/commit/dcc396afb7a23aeb8af57c01014b09af5f033e61))
|
|
||||||
* 开启子域名托管之后cname记录支持重置 ([54c8d62](https://github.com/certd/certd/commit/54c8d622437761d350db0f17e07f7517f1911211))
|
|
||||||
* 手动上传证书优化，增加到期前报错提醒 ([3d42bfd](https://github.com/certd/certd/commit/3d42bfd479eaacc4a49c401224815a6e2a0204b0))
|
|
||||||
* 验证码支持测试，登录验证码需要测试通过后才能开启 ([83e6476](https://github.com/certd/certd/commit/83e6476408090b741fabb1b542fb458d9a8b4134))
|
|
||||||
* 支持腾讯云验证码 ([03f317f](https://github.com/certd/certd/commit/03f317ffdb6595ce70e8a2302b05f390c52110c8))
|
|
||||||
|
|
||||||
## [1.36.22](https://github.com/certd/certd/compare/v1.36.21...v1.36.22) (2025-09-23)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复旧版本升级上来报错eab授权的bug ([b76f2e2](https://github.com/certd/certd/commit/b76f2e2008a7fefac4c91179c45c56c7a7a84b71))
|
|
||||||
* 选择授权对话框编辑时，名称字段排在最后的bug ([31cfb09](https://github.com/certd/certd/commit/31cfb09468bda3272f5f63af65ff3e9272220b39))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 7001绑定::地址 ([7188997](https://github.com/certd/certd/commit/7188997dd1979f1c10fa29b30221015e0bd5fe9e))
|
|
||||||
* 登录失败时清除验证码状态 ([1c15bea](https://github.com/certd/certd/commit/1c15beadc7fe8a7c6ec1903b7e722ca2f52e05b3))
|
|
||||||
* 公共cname支持权限校验 ([9cc5f0f](https://github.com/certd/certd/commit/9cc5f0f889d4362ff36e7a1f0e448e02d32ecee7))
|
|
||||||
* 优化连接失败的报错提示 ([71d8e7e](https://github.com/certd/certd/commit/71d8e7edd23ad63fdc01a92766b52ede5074fe7c))
|
|
||||||
* 增加自签名证书提示 ([877c9c4](https://github.com/certd/certd/commit/877c9c4ff99f81d289f67afd96f440c0796b03ea))
|
|
||||||
* add preferred chain for google trust service ([#539](https://github.com/certd/certd/issues/539)) @ZeroClover ([e31d26a](https://github.com/certd/certd/commit/e31d26a8871c6088d9f8c0f580746ff2a810ae0c))
|
|
||||||
* dns支持新网域名解析 ([cf3a78e](https://github.com/certd/certd/commit/cf3a78e1145ff0505c87fbc485d9e731b1aa88a8))
|
|
||||||
* gcore flush plugin ssl_id改为必填项 ([4b90972](https://github.com/certd/certd/commit/4b909723411c57505aa13b07d8699fb9ac77c937))
|
|
||||||
|
|
||||||
## [1.36.21](https://github.com/certd/certd/compare/v1.36.20...v1.36.21) (2025-09-15)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复导入插件对话框无法打开的bug，修复插件编辑页面打开多个代码编辑器消失的bug ([e5a080a](https://github.com/certd/certd/commit/e5a080aebe0d2f3e3c0f86bf863f75069c1bf7ab))
|
|
||||||
* 修复ssl.com报EMAILADDRESS数量不对的bug ([c560cc5](https://github.com/certd/certd/commit/c560cc5adda6e15bf3a8865d874042550a6c2688))
|
|
||||||
|
|
||||||
## [1.36.20](https://github.com/certd/certd/compare/v1.36.19...v1.36.20) (2025-09-13)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复商业版退出登录后，丢失站点个性化设置的bug ([d75dd05](https://github.com/certd/certd/commit/d75dd058d65c85f80c49e1fa7a910e6c6f08e824))
|
|
||||||
* 修复授权类型和名称字段排到最后的bug ([43b7977](https://github.com/certd/certd/commit/43b79778ea9034065f6a15af3296274315597c6b))
|
|
||||||
* 修复证书监控某些情况下报 options.lookup不能为null的bug ([d2ecfe5](https://github.com/certd/certd/commit/d2ecfe5491b2639eb30b5cae293af6062d58bb9f))
|
|
||||||
* 修复证书手动托管时新上传的证书无效的bug ([506385e](https://github.com/certd/certd/commit/506385e5a2600887fe30854e0713583caaa2e689))
|
|
||||||
* 修复secret patch 类型多了type：的bug ([d04f383](https://github.com/certd/certd/commit/d04f3831611011a90ec0594724b9694490d5edd0))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 登录支持极验验证码 ([370db62](https://github.com/certd/certd/commit/370db62bf0aece241859244927beabba32d6a257))
|
|
||||||
* 登录注册、找回密码都支持极验验证码和图片验证码 ([7bdde68](https://github.com/certd/certd/commit/7bdde68ecea29fe2c570fd3cb082139db6c93d93))
|
|
||||||
* 优化加量包展示效果 ([3c65f37](https://github.com/certd/certd/commit/3c65f37d84177ba107d4a6462648af12d2fc4b7a))
|
|
||||||
* 证书到期剩余天数进度条根据实际证书有效期计算 ([#528](https://github.com/certd/certd/issues/528)) nicheng-he ([2d4586b](https://github.com/certd/certd/commit/2d4586b1c42c39f97d2a95b9453cca4bc8bfbe61))
|
|
||||||
* add preferred chain option ([#519](https://github.com/certd/certd/issues/519)) @ZeroClover ([902359f](https://github.com/certd/certd/commit/902359f24ed12eee4f9b65178f1d6a60378351d2))
|
|
||||||
* ssh配置增加脚本类型设置，bash还是sh ([ae41c60](https://github.com/certd/certd/commit/ae41c6038b27c9476e64a2402a8daf247c38a5b6))
|
|
||||||
* start.sh增加sudo ([b7271d7](https://github.com/certd/certd/commit/b7271d7a464773a1bf87d7d1f24d933ba0f86915))
|
|
||||||
|
|
||||||
## [1.36.19](https://github.com/certd/certd/compare/v1.36.18...v1.36.19) (2025-09-05)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 前置任务输出不存在时输出警告提示 ([b59052c](https://github.com/certd/certd/commit/b59052cc43b7b070fabd8b8e914e4c2a5e0ad61c))
|
|
||||||
* 修复批量流水线执行时日志显示错乱的问题 ([4372adc](https://github.com/certd/certd/commit/4372adc703b9a4c785664054ab2a533626d815a8))
|
|
||||||
* 修复远程数据选择无法过滤的bug ([6cbb073](https://github.com/certd/certd/commit/6cbb0739f8428d51b0712f718fe4d236cc087cf9))
|
|
||||||
* 修复mysql下购买套餐加量包无效的bug ([c26ad4c](https://github.com/certd/certd/commit/c26ad4c8075f0606d45b8da13915737968d6191a))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 创建证书时支持选择通知时机 ([0e96bfd](https://github.com/certd/certd/commit/0e96bfdfa377824d204e72923d1176408ae6b300))
|
|
||||||
* 创建k8s secret 时设置type为tls ([79ebabf](https://github.com/certd/certd/commit/79ebabfcfb9e5a534049c84f5f1a642b357fc856))
|
|
||||||
* 去掉宝塔url后面的斜杠 ([8a0c2b9](https://github.com/certd/certd/commit/8a0c2b9b13628da750c25757e0cb8ed3038775ba))
|
|
||||||
* 商业版隐藏文档相关链接 ([4443a1c](https://github.com/certd/certd/commit/4443a1c0308fa6b95a05efd73d15d24b65d641c9))
|
|
||||||
* 商业版隐藏文档相关链接 ([db89561](https://github.com/certd/certd/commit/db8956148083bc4f988226ccf719940d08158a27))
|
|
||||||
* 增加健康检查探针 /health/liveliness 和 /health/readiness ([44019e1](https://github.com/certd/certd/commit/44019e104289fedd32a867db00e9c6cb71b389cc))
|
|
||||||
* 支持根据id更新证书（证书Id不变接口），不过该接口为白名单功能，普通腾讯云账户无法使用 ([fe9c4f3](https://github.com/certd/certd/commit/fe9c4f3391ff07c01dd9a252225f69a129c39050))
|
|
||||||
* 支持godaddy ([b7980aa](https://github.com/certd/certd/commit/b7980aad5ab50f58662eaddf5d84aa82876a98eb))
|
|
||||||
* 支持ssl.com证书颁发机构 ([27b6dfa](https://github.com/certd/certd/commit/27b6dfa4d2ab3bddd284c3a34511a72e1a513a4c))
|
|
||||||
* 子域名托管说明 ([39a0223](https://github.com/certd/certd/commit/39a02235cf4416bb5bd1acd3831241efeaa2f602))
|
|
||||||
* ssh 增加超时断开连接，默认10分钟超时 ([c24a040](https://github.com/certd/certd/commit/c24a040c19cacafc79228d7a7649af93837d94a1))
|
|
||||||
|
|
||||||
## [1.36.18](https://github.com/certd/certd/compare/v1.36.17...v1.36.18) (2025-08-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 更新我爱云CDN域名地址，和部分目录结构 [@tyjsjxh](https://github.com/tyjsjxh) ([#514](https://github.com/certd/certd/issues/514)) ([78e7a81](https://github.com/certd/certd/commit/78e7a81638c2ee779f0ab6c3ba7e5c6f6e064151))
|
|
||||||
* 修复cron选择组件星期显示错误的bug ([eb75e52](https://github.com/certd/certd/commit/eb75e52278f94a72643f7317e6740fb42666c68a))
|
|
||||||
* 修复proxmox某些情况下执行卡住的bug ([ebd6917](https://github.com/certd/certd/commit/ebd6917a1d40ae4d94555c32b7e3c093d0599b94))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 部署到k8s支持自动创建secret ([c09c962](https://github.com/certd/certd/commit/c09c962cb676ca261610aa9f3e5105c9dae43f43))
|
|
||||||
* 短信验证码支持腾讯云 ([9108459](https://github.com/certd/certd/commit/9108459ae42bcd95a59acba164a64e82e5f2cfe6))
|
|
||||||
* 商业版支持自定义插件的参数配置 ([17f23f3](https://github.com/certd/certd/commit/17f23f37516af925d5049291d67d41e4271f81f8))
|
|
||||||
* 腾讯云插件支持国际版 ([58e82d5](https://github.com/certd/certd/commit/58e82d5dbd4ebf089ef239578ef9b68454d17b30))
|
|
||||||
* 腾讯云EO插件支持自动获取zoneid和域名列表 ([70fcdc9](https://github.com/certd/certd/commit/70fcdc9ebbfb7c883c0c8a2138f61a0776a9491b))
|
|
||||||
* 支持部署到阿里云云原生API网关、AI网关 ([2ca20be](https://github.com/certd/certd/commit/2ca20be197720201fceabcce9d927f4dbc1cc872))
|
|
||||||
* 支持部署到华为云obs ([9feb9d0](https://github.com/certd/certd/commit/9feb9d04b3c56ec95c06fcf4fd071eb0e88ffc6f))
|
|
||||||
* 支持部署到dokploy ([7dbdeae](https://github.com/certd/certd/commit/7dbdeaebe0bfee7521a863fe5e6b4a712aec5876))
|
|
||||||
* 支持删除宝塔证书夹中的过期证书 ([3575113](https://github.com/certd/certd/commit/3575113655be751d19f88c64491e98a89042d6a2))
|
|
||||||
* 支持p7b证书格式 ([d9f4a57](https://github.com/certd/certd/commit/d9f4a5793d68a017a5d80ad5385cbda603c4e165))
|
|
||||||
* lecdnv2支持api token ([e448934](https://github.com/certd/certd/commit/e4489343fee7754be07bcfc3323969dc3a30e90c))
|
|
||||||
* openapi返回证书时挑选匹配范围最小的那一个；增加format参数，增加返回值p7b格式，增加detail返回 ([2085bcc](https://github.com/certd/certd/commit/2085bcceb61c3723c9bdfec4c4cc0917631ff5e5))
|
|
||||||
* ssh 配置sudo免密提示 ([e1e7011](https://github.com/certd/certd/commit/e1e7011853ad0c5bd7b09c3690861d5aa34b2db4))
|
|
||||||
|
|
||||||
## [1.36.17](https://github.com/certd/certd/compare/v1.36.16...v1.36.17) (2025-08-17)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复新部署的无法保存公共eab配置的bug ([d5dee75](https://github.com/certd/certd/commit/d5dee75df3bd635a597436e448b2de1407531f3a))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 阿里云 FC3.0 不在要求证书加密方式为旧版， 修复支持的协议类型可以正常选择 ([a34db74](https://github.com/certd/certd/commit/a34db7449eff6ad1dda01de673bf85579fa3865a))
|
|
||||||
* 部署到腾讯云cdn，每个域名增加3每秒延迟 ([f7d43ad](https://github.com/certd/certd/commit/f7d43ad5af4663d4be369820a80d1fd9817ca4ab))
|
|
||||||
* 腾讯云关闭证书通知增加开关选项，在腾讯云授权里面 ([a77c777](https://github.com/certd/certd/commit/a77c777980dd38d97d983124eeed1596879bba95))
|
|
||||||
* 证书申请任务默认不发送申请成功通知 ([0283bd2](https://github.com/certd/certd/commit/0283bd2f978dbcd13d361129135e439dd9fbc180))
|
|
||||||
|
|
||||||
## [1.36.16](https://github.com/certd/certd/compare/v1.36.15...v1.36.16) (2025-08-16)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复授权配置复制功能，无法复制已加密字段的问题 ([221e068](https://github.com/certd/certd/commit/221e068bac3af6cd5d1794f8cd4c2ec5c0bc3f45))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 百度云支持上传到证书托管，支持部署到负载均衡 ([798a48a](https://github.com/certd/certd/commit/798a48aa9686fd5d11cfffb6cd93eadfc40aacb3))
|
|
||||||
* 部署到百度cdn支持自动获取域名列表选择 ([4e432ed](https://github.com/certd/certd/commit/4e432ed03f4fb564e85a2f284ee26b58400b82f5))
|
|
||||||
* 验证码可重试次数设置为3次 ([1bdceee](https://github.com/certd/certd/commit/1bdceeecf4b5daecdd621a05a2596b6eb45ce8ea))
|
|
||||||
* 增加找回密码的验证码可重试次数 [@nicheng-he](https://github.com/nicheng-he) ([#496](https://github.com/certd/certd/issues/496)) ([fe03f99](https://github.com/certd/certd/commit/fe03f9942b5662fb90cad86da10782f5dc3603f5))
|
|
||||||
* 支持阿里云API网关 ([9e1e4ee](https://github.com/certd/certd/commit/9e1e4eeec2859759ca5b07834c9d24cf88a6ad33))
|
|
||||||
* 支持部署到金山云CDN ([dfa74a6](https://github.com/certd/certd/commit/dfa74a69f7cbb9009d3e20c7eecfa1b905a00cf0))
|
|
||||||
* 支持更新金山云cdn证书 ([462e22a](https://github.com/certd/certd/commit/462e22a3b0a94887462fe6aa68e4671a365e0737))
|
|
||||||
* 支持apisix证书部署 ([9b63fb4](https://github.com/certd/certd/commit/9b63fb4ee2c6b56139160c5bf63482dab0869c2b))
|
|
||||||
|
|
||||||
## [1.36.15](https://github.com/certd/certd/compare/v1.36.14...v1.36.15) (2025-08-07)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复 https://cas.undefined.aliyuncs.com 的bug ([60e6aa9](https://github.com/certd/certd/commit/60e6aa9b54a761a47e39acee4a1ff947a745be27))
|
|
||||||
* 修复阿里云clb api接口没有使用region的问题 ([0770f17](https://github.com/certd/certd/commit/0770f174a14313e28d08113e69829ef6cc02d719))
|
|
||||||
* 修复站点监控使用自定义dns解析域名报错的bug ([eb8cd53](https://github.com/certd/certd/commit/eb8cd53de27991321e36dd14e5ce95f42b51351f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 部署到阿里云支持选择bucket和域名 ([013b9c4](https://github.com/certd/certd/commit/013b9c4c7c2adf485d086123ccea448719577fd4))
|
|
||||||
* 清理数据库备份的临时目录 ([fd95549](https://github.com/certd/certd/commit/fd95549de9a5d8cec09772ee2630bb7521e15e1f))
|
|
||||||
* 添加免费通知,OneBot V11协议通知支持 ([#491](https://github.com/certd/certd/issues/491)) [@ayakasuki](https://github.com/ayakasuki) ([be053d4](https://github.com/certd/certd/commit/be053d47e41084f817882400882b64143d036d1a))
|
|
||||||
* 支持webhook部署证书 ([cbe0b1c](https://github.com/certd/certd/commit/cbe0b1c5a6538f232e9a63f1693d20d5acf0a306))
|
|
||||||
* 注册时支持填写用户名 ([fdcfcc7](https://github.com/certd/certd/commit/fdcfcc77a0db87954e0b026635d3ccdd9bc6cee8))
|
|
||||||
* add start:server npm script for quick server launch from root directory ([#484](https://github.com/certd/certd/issues/484)) [@orzyyyy](https://github.com/orzyyyy) ([fae1981](https://github.com/certd/certd/commit/fae1981161080f698c3f1263b712306d63baae64))
|
|
||||||
|
|
||||||
## [1.36.14](https://github.com/certd/certd/compare/v1.36.13...v1.36.14) (2025-07-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复复制流水线为空的bug ([b070773](https://github.com/certd/certd/commit/b0707739fdfbae3d78db4efd3f180db05c4e4164))
|
|
||||||
* 修复商用证书上传第二次运行无法使用pfx格式证书的bug ([251dd1f](https://github.com/certd/certd/commit/251dd1fe457a7b152f43eb6de18f7beb9f0b194e))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 1panel支持 currenNode ([acc8907](https://github.com/certd/certd/commit/acc890730f43d492c9b1bd3668814cf10efdf7b8))
|
|
||||||
* 授权管理支持模糊查询 ([866eb62](https://github.com/certd/certd/commit/866eb6241baa7b21f6eddc649966324c188236c6))
|
|
||||||
* 新增找回密码功能 [@nicheng-he](https://github.com/nicheng-he) ([81ac240](https://github.com/certd/certd/commit/81ac240ac84db0af2f56b6352e227ecb49f38377))
|
|
||||||
* 优化start脚本 ([238ad7c](https://github.com/certd/certd/commit/238ad7ce51f17e1098c624e7f61ee2d98de1e02d))
|
|
||||||
* 运行主机脚本插件支持选择运行策略 ([86b3df1](https://github.com/certd/certd/commit/86b3df194126476e1f58e0952a77e986f62eecce))
|
|
||||||
* cdnfly 支持 账号密码登陆授权 ([e87f6d5](https://github.com/certd/certd/commit/e87f6d56f524dbbb9e3243e382b348b6e49f0d2c))
|
|
||||||
* k8s ack、tke 支持重启ingress ([95715a0](https://github.com/certd/certd/commit/95715a007d931c64fa7dd953d94957398e00a443))
|
|
||||||
|
|
||||||
## [1.36.13](https://github.com/certd/certd/compare/v1.36.12...v1.36.13) (2025-07-23)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复阿里云发送短信验证码失败的bug ([2e6d03f](https://github.com/certd/certd/commit/2e6d03ff001f521f57368e7a62b97ed7b122e8d0))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 阿里云部分插件优化 [@nicheng-he](https://github.com/nicheng-he) ([e3738f6](https://github.com/certd/certd/commit/e3738f6422270d75ec414c15a343248cc4cad6e1))
|
|
||||||
|
|
||||||
## [1.36.12](https://github.com/certd/certd/compare/v1.36.11...v1.36.12) (2025-07-22)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 上传到阿里云cas，证书前缀无效的bug ([b382351](https://github.com/certd/certd/commit/b382351c7b91ec10e1f61d94bec5aad075207ec8))
|
|
||||||
* 修复自定义插件onlyAdmin报错的bug ([4e5e862](https://github.com/certd/certd/commit/4e5e862f5834ad180e4428959c272d444a6f78ab))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 部署到k8s，tke，ack忽悠证书校验 ([ab84835](https://github.com/certd/certd/commit/ab848353621869464a2c9a45fdb5e28d998b8a58))
|
|
||||||
* 首页增加更新日志按钮 ([41ce848](https://github.com/certd/certd/commit/41ce8489dc2f03a705dfa3fbb357769defb56c60))
|
|
||||||
* 增加版本过低提示 ([d1ce360](https://github.com/certd/certd/commit/d1ce36038cab72b5dc1b320d0a708c261ffbdacb))
|
|
||||||
|
|
||||||
## [1.36.11](https://github.com/certd/certd/compare/v1.36.10...v1.36.11) (2025-07-22)
|
## [1.36.11](https://github.com/certd/certd/compare/v1.36.10...v1.36.11) (2025-07-22)
|
||||||
|
|
||||||
### Bug Fixes
|
### Bug Fixes
|
||||||
|
|||||||
@@ -1,6 +1,6 @@
|
|||||||
# Certd
|
# Certd
|
||||||
|
|
||||||
中文 | [English](./README_en.md)
|
[English](./README_en.md) | [中文](./README.md)
|
||||||
|
|
||||||
Certd® 是一个免费的全自动证书管理系统，让你的网站证书永不过期。
|
Certd® 是一个免费的全自动证书管理系统，让你的网站证书永不过期。
|
||||||
后缀d取自linux守护进程的命名风格，意为证书守护进程
|
后缀d取自linux守护进程的命名风格，意为证书守护进程
|
||||||
@@ -17,13 +17,6 @@ Certd® 是一个免费的全自动证书管理系统，让你的网站证书永
|
|||||||
> 流水线数量现已调整为无限制，欢迎大家使用
|
> 流水线数量现已调整为无限制，欢迎大家使用
|
||||||
|
|
||||||
|
|
||||||
|官方开源地址： | |
|
|
||||||
| ---- | ---- |
|
|
||||||
| [Github](https://github.com/certd/certd)|  |
|
|
||||||
| [Gitee](https://gitee.com/certd/certd) |  |
|
|
||||||
| [AtomGit](https://atomgit.com/certd/certd) | |
|
|
||||||
|
|
||||||
|
|
||||||
## 一、特性
|
## 一、特性
|
||||||
本项目不仅支持证书申请过程自动化，还可以自动化部署更新证书，让你的证书永不过期。
|
本项目不仅支持证书申请过程自动化，还可以自动化部署更新证书，让你的证书永不过期。
|
||||||
|
|
||||||
@@ -94,8 +87,8 @@ https://certd.handfree.work/
|
|||||||
1. 【推荐】[Docker方式部署 ](https://certd.docmirror.cn/guide/install/docker/)
|
1. 【推荐】[Docker方式部署 ](https://certd.docmirror.cn/guide/install/docker/)
|
||||||
2. 【推荐】[宝塔面板方式部署 ](https://certd.docmirror.cn/guide/install/docker/)
|
2. 【推荐】[宝塔面板方式部署 ](https://certd.docmirror.cn/guide/install/docker/)
|
||||||
3. 【推荐】[1Panel面板方式部署](https://certd.docmirror.cn/guide/install/1panel/)
|
3. 【推荐】[1Panel面板方式部署](https://certd.docmirror.cn/guide/install/1panel/)
|
||||||
4. 【推荐】[雨云一键部署](https://app.rainyun.com/apps/rca/store/6646/?ref=NzExMDQ2) ： 首充翻倍，每月仅需2.2元
|
4. 【推荐】[雨云一键部署](https://app.rainyun.com/apps/rca/store/6646/?ref=NzExMDQ2_) ： 首充翻倍，每月仅需2.2元
|
||||||
[<img src="https://rainyun-apps.cn-nb1.rains3.com/materials/deploy-on-rainyun-cn.svg">](https://app.rainyun.com/apps/rca/store/6646/?ref=NzExMDQ2)
|
[<img src="https://rainyun-apps.cn-nb1.rains3.com/materials/deploy-on-rainyun-cn.svg">](https://app.rainyun.com/apps/rca/store/6646/?ref=NzExMDQ2_)
|
||||||
5. 【不推荐】[源码方式部署 ](https://certd.docmirror.cn/guide/install/source/)
|
5. 【不推荐】[源码方式部署 ](https://certd.docmirror.cn/guide/install/source/)
|
||||||
|
|
||||||
#### Docker镜像说明：
|
#### Docker镜像说明：
|
||||||
@@ -159,31 +152,29 @@ https://certd.handfree.work/
|
|||||||
|
|
||||||
|
|
||||||
## 八、捐赠
|
## 八、捐赠
|
||||||
|
************************
|
||||||
开源为什么要做专业版收费？
|
支持开源，为爱发电，我已入驻爱发电
|
||||||
1. 纯靠为爱发电不可持续（比如：我的dev-sidecar项目即便是拥有20K+star，也差点凉凉，幸亏有另外大佬接手用爱发电）
|
https://afdian.com/a/greper
|
||||||
2. 没有赞助的项目，作者会比较任性，不会用心倾听用户的心声，不顾用户体验（比如：下意识拒绝需求、频繁破坏性变更升级、全盘推倒重来之类的）
|
|
||||||
3. 没有赞助的项目，交流群的戾气有时候比较重，容易起冲突
|
|
||||||
|
|
||||||
发电权益：
|
发电权益：
|
||||||
1. 可加入发电专属VIP群，可以获得作者一对一技术支持，必要时可以远程协助
|
1. 可加入发电专属群，可以获得作者一对一技术支持
|
||||||
2. 您的需求我们将优先实现，并且可能将作为专业版功能提供
|
2. 您的需求我们将优先实现，并且将作为专业版功能提供
|
||||||
3. 获得专业版功能
|
3. 一年期专业版激活码
|
||||||
|
|
||||||
专业版特权对比
|
专业版特权对比
|
||||||
|
|
||||||
| 功能 | 免费版 | 专业版 |
|
| 功能 | 免费版 | 专业版 |
|
||||||
|---------|---------------------------------------|--------------------------------|
|
|---------|---------------------------------------|--------------------------------|
|
||||||
| 免费证书申请 | 免费无限制 | 免费无限制 |
|
| 免费证书申请 | 免费无限制 | 免费无限制 |
|
||||||
| 域名数量 | 无限制 | 无限制 |
|
| 域名数量 | 无限制 | 无限制 |
|
||||||
| 证书流水线条数 | 无限制 | 无限制 |
|
| 证书流水线条数 | 无限制 | 无限制 |
|
||||||
| 站点证书监控 | 限制1条 | 无限制 |
|
| 站点证书监控 | 限制1条 | 无限制 |
|
||||||
| 自动部署插件 | 阿里云CDN、腾讯云、七牛CDN、主机部署、宝塔、1Panel等大部分插件 | 群晖、威联通、proxmox等 |
|
| 自动部署插件 | 阿里云CDN、腾讯云、七牛CDN、主机部署、宝塔、1Panel等大部分插件 | 群晖 |
|
||||||
| 通知 | 邮件通知、自定义webhook | 邮件免配置、企微、钉钉、飞书、anpush、server酱等 |
|
| 通知 | 邮件通知、自定义webhook | 邮件免配置、企微、钉钉、飞书、anpush、server酱等 |
|
||||||
| 批量操作 | 无 | 流水线模版，流水线复制，批量运行，批量设置通知、定时等 |
|
|
||||||
| VIP群 | 无 | 可加，一对一技术支持，必要时可申请远程协助 |
|
|
||||||
|
|
||||||
|
|
||||||
|
************************
|
||||||
|
|
||||||
## 九、贡献代码
|
## 九、贡献代码
|
||||||
|
|
||||||
1. 本地开发请参考 [贡献插件向导](https://certd.docmirror.cn/guide/development/)
|
1. 本地开发请参考 [贡献插件向导](https://certd.docmirror.cn/guide/development/)
|
||||||
|
|||||||
+1
-12
@@ -1,6 +1,6 @@
|
|||||||
# Certd
|
# Certd
|
||||||
|
|
||||||
[中文](./README.md) | English
|
[English](./README_en.md) | [中文](./README.md)
|
||||||
|
|
||||||
Certd® is a free, fully automated certificate management system that ensures your website certificates never expire. The suffix 'd' is inspired by the naming convention of Linux daemons, representing a certificate daemon.
|
Certd® is a free, fully automated certificate management system that ensures your website certificates never expire. The suffix 'd' is inspired by the naming convention of Linux daemons, representing a certificate daemon.
|
||||||
|
|
||||||
@@ -13,15 +13,6 @@ Certd® is a free, fully automated certificate management system that ensures yo
|
|||||||
|
|
||||||
> The number of pipelines is now unlimited. Welcome to use it.
|
> The number of pipelines is now unlimited. Welcome to use it.
|
||||||
|
|
||||||
|
|
||||||
Official Open Source Address:
|
|
||||||
|
|
||||||
[Github](https://github.com/certd/certd) 
|
|
||||||
[Gitee](https://gitee.com/certd/certd) 
|
|
||||||
[AtomGit](https://atomgit.com/certd/certd) 
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## 1. Features
|
## 1. Features
|
||||||
This project not only supports automated certificate application but also automated certificate deployment and updates, ensuring your certificates never expire.
|
This project not only supports automated certificate application but also automated certificate deployment and updates, ensuring your certificates never expire.
|
||||||
|
|
||||||
@@ -143,8 +134,6 @@ You can also add the author as a friend.
|
|||||||
| QR Code | <img height="230" src="./docs/guide/contact/images/me.png"> |
|
| QR Code | <img height="230" src="./docs/guide/contact/images/me.png"> |
|
||||||
|
|
||||||
## 8. Donation
|
## 8. Donation
|
||||||
************************
|
|
||||||
[](https://github.com/sponsors/greper)
|
|
||||||
************************
|
************************
|
||||||
Support open-source projects and contribute with love. I've joined Afdian.
|
Support open-source projects and contribute with love. I've joined Afdian.
|
||||||
https://afdian.com/a/greper
|
https://afdian.com/a/greper
|
||||||
|
|||||||
@@ -0,0 +1 @@
|
|||||||
|
2
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
12:27
|
||||||
@@ -1,7 +1,7 @@
|
|||||||
import http from 'axios'
|
import http from 'axios'
|
||||||
import fs from 'fs'
|
import fs from 'fs'
|
||||||
//读取 packages/core/pipline/package.json的版本号
|
//读取 packages/core/pipline/package.json的版本号
|
||||||
import {default as packageJson} from '../packages/core/pipeline/package.json' assert { type: "json" };
|
import {default as packageJson} from './packages/core/pipeline/package.json' assert { type: "json" };
|
||||||
|
|
||||||
const certdVersion = packageJson.version
|
const certdVersion = packageJson.version
|
||||||
console.log("certdVersion", certdVersion)
|
console.log("certdVersion", certdVersion)
|
||||||
@@ -0,0 +1 @@
|
|||||||
|
5
|
||||||
@@ -9,11 +9,8 @@ services:
|
|||||||
restart: unless-stopped # 自动重启
|
restart: unless-stopped # 自动重启
|
||||||
volumes:
|
volumes:
|
||||||
# ↓↓↓↓↓ -------------------------------------------------------- 数据库以及证书存储路径,默认存在宿主机的/data/certd/目录下，【您需要定时备份此目录，以保障数据容灾】
|
# ↓↓↓↓↓ -------------------------------------------------------- 数据库以及证书存储路径,默认存在宿主机的/data/certd/目录下，【您需要定时备份此目录，以保障数据容灾】
|
||||||
- /data/certd:/app/data # 只要修改冒号前面的，冒号后面的/app/data切记切记不要动
|
# 只要修改冒号前面的，冒号后面的/app/data不要动
|
||||||
#- /volume1/docker/certd:/app/data:delegated #群晖使用这个配置
|
- /data/certd:/app/data
|
||||||
# ↓↓↓↓↓ -------------------------------------------------------- 如果走时不准，考虑挂载localtime文件
|
|
||||||
#- /etc/localtime:/etc/localtime
|
|
||||||
#- /etc/timezone:/etc/timezone
|
|
||||||
ports: # 端口映射
|
ports: # 端口映射
|
||||||
# ↓↓↓↓ ---------------------------------------------------------- 如果端口有冲突，可以修改第一个7001为其他不冲突的端口号，第二个7001不要动
|
# ↓↓↓↓ ---------------------------------------------------------- 如果端口有冲突，可以修改第一个7001为其他不冲突的端口号，第二个7001不要动
|
||||||
- "7001:7001"
|
- "7001:7001"
|
||||||
@@ -41,14 +38,12 @@ services:
|
|||||||
# - ip6net
|
# - ip6net
|
||||||
environment:
|
environment:
|
||||||
# ↓↓↓↓ ----------------------------------------------------- 使用上海东八时区
|
# ↓↓↓↓ ----------------------------------------------------- 使用上海东八时区
|
||||||
- TZ=Asia/Shanghai
|
# - TZ=Asia/Shanghai
|
||||||
# 设置环境变量即可自定义certd配置
|
# 设置环境变量即可自定义certd配置
|
||||||
# 配置项见： packages/ui/certd-server/src/config/config.default.ts
|
# 配置项见： packages/ui/certd-server/src/config/config.default.ts
|
||||||
# 配置规则： certd_ + 配置项, 点号用_代替
|
# 配置规则： certd_ + 配置项, 点号用_代替
|
||||||
# #↓↓↓↓ ----------------------------- 如果忘记管理员密码，可以设置为true，docker compose up -d 重建容器之后，管理员密码将改成123456，然后请及时修改回false
|
# #↓↓↓↓ ----------------------------- 如果忘记管理员密码，可以设置为true，重启之后，管理员密码将改成123456，然后请及时修改回false
|
||||||
- certd_system_resetAdminPasswd=false
|
- certd_system_resetAdminPasswd=false
|
||||||
# ↓↓↓ 要使用ipv6，将此配置修改为::
|
|
||||||
- certd_koa_hostname=0.0.0.0
|
|
||||||
|
|
||||||
# 默认使用sqlite文件数据库，如果需要使用其他数据库，请设置以下环境变量
|
# 默认使用sqlite文件数据库，如果需要使用其他数据库，请设置以下环境变量
|
||||||
# 注意： 选定使用一种数据库之后，不支持更换数据库。
|
# 注意： 选定使用一种数据库之后，不支持更换数据库。
|
||||||
|
|||||||
@@ -95,10 +95,10 @@ export default defineConfig({
|
|||||||
},
|
},
|
||||||
{
|
{
|
||||||
text: "插件列表", items: [
|
text: "插件列表", items: [
|
||||||
|
{text: "授权提供商", link: "/guide/plugins/access.md"},
|
||||||
{text: "DNS提供商", link: "/guide/plugins/dns-provider.md"},
|
{text: "DNS提供商", link: "/guide/plugins/dns-provider.md"},
|
||||||
{text: "任务插件", link: "/guide/plugins/deploy.md"},
|
{text: "任务插件", link: "/guide/plugins/deploy.md"},
|
||||||
{text: "通知插件", link: "/guide/plugins/notification.md"},
|
{text: "通知插件", link: "/guide/plugins/notification.md"},
|
||||||
{text: "授权提供商", link: "/guide/plugins/access.md"},
|
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
]
|
]
|
||||||
@@ -107,6 +107,7 @@ export default defineConfig({
|
|||||||
text: "常见问题",
|
text: "常见问题",
|
||||||
items: [
|
items: [
|
||||||
{text: "QA", link: "/guide/qa/use.md"},
|
{text: "QA", link: "/guide/qa/use.md"},
|
||||||
|
{text: "常见报错处理", link: "/guide/qa/"},
|
||||||
{text: "群晖证书部署", link: "/guide/use/synology/"},
|
{text: "群晖证书部署", link: "/guide/use/synology/"},
|
||||||
{text: "腾讯云密钥获取", link: "/guide/use/tencent/"},
|
{text: "腾讯云密钥获取", link: "/guide/use/tencent/"},
|
||||||
{text: "连接windows主机", link: "/guide/use/host/windows.md"},
|
{text: "连接windows主机", link: "/guide/use/host/windows.md"},
|
||||||
@@ -119,10 +120,6 @@ export default defineConfig({
|
|||||||
{text: "邮箱配置", link: "/guide/use/email/index.md"},
|
{text: "邮箱配置", link: "/guide/use/email/index.md"},
|
||||||
{text: "IPv6支持", link: "/guide/use/setting/ipv6.md"},
|
{text: "IPv6支持", link: "/guide/use/setting/ipv6.md"},
|
||||||
{text: "ESXi", link: "/guide/use/ESXi/index.md"},
|
{text: "ESXi", link: "/guide/use/ESXi/index.md"},
|
||||||
{text: "宝塔动态IP白名单", link: "/guide/use/baota/white_list.md"},
|
|
||||||
{text: "子域名托管", link: "/guide/use/cert/subdomain.md"},
|
|
||||||
{text: "流水线有效期", link: "/guide/use/pipeline/valid.md"},
|
|
||||||
{text: "IP证书申请", link: "/guide/use/cert/ip.md"},
|
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
{
|
{
|
||||||
|
|||||||
@@ -3,428 +3,6 @@
|
|||||||
All notable changes to this project will be documented in this file.
|
All notable changes to this project will be documented in this file.
|
||||||
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
||||||
|
|
||||||
## [1.37.16](https://github.com/certd/certd/compare/v1.37.15...v1.37.16) (2025-12-15)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复ipv6作为证书域名申请证书校验失败的bug ([e4e16bc](https://github.com/certd/certd/commit/e4e16bc6a65bb082c18ca0590226f0987a47d477))
|
|
||||||
* 优化西部数据 500 already exists 的问题 ([2bfad9f](https://github.com/certd/certd/commit/2bfad9fc651da208b610abd921fbfb2fbc04203f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 批量设置定时，支持清除定时 ([63d8bcf](https://github.com/certd/certd/commit/63d8bcf8823f713365042d3c7aee3cf31d44b044))
|
|
||||||
* 新增数据库迁移doc说明文档，优化datetime字段平滑迁移 ([45fbce0](https://github.com/certd/certd/commit/45fbce0c2af5fb3ead6d3dd12a42f8cc1714262f))
|
|
||||||
* 支持彩虹聚合登录 ([6f18693](https://github.com/certd/certd/commit/6f186932ccad4becfdc0087c0539f7b2d0069844))
|
|
||||||
* 支持邮件模版设置 ([a6c0d2c](https://github.com/certd/certd/commit/a6c0d2c6f1fd6b60e6d7af290487c94564fd91ea))
|
|
||||||
* oidc支持使用第三方昵称或账号作为certd用户的用户名 ([b6fea0c](https://github.com/certd/certd/commit/b6fea0c8562abf912daa7d72958ceb2e93575d31))
|
|
||||||
|
|
||||||
## [1.37.15](https://github.com/certd/certd/compare/v1.37.14...v1.37.15) (2025-12-06)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* oidc 支持nonce ([a5ca411](https://github.com/certd/certd/commit/a5ca41131b308b36b17ca359d9709ea8e9b7cee1))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 第三方登录支持gitee ([5cee7d4](https://github.com/certd/certd/commit/5cee7d44f17bd36972f477bc1f270999da558d05))
|
|
||||||
* 邮件模版安全优化 ([adca151](https://github.com/certd/certd/commit/adca151e4f07a4c6a2a753bfa48ee0d4d6469fd2))
|
|
||||||
* 支持部署到中国移动CDN ([4351304](https://github.com/certd/certd/commit/43513049beff407558d2a234415521464165cebc))
|
|
||||||
* 支持k8s apply ([d55954a](https://github.com/certd/certd/commit/d55954a36391ebe6a9397ff7dcfb710193ac5e34))
|
|
||||||
|
|
||||||
## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复注销登录时，第三方登录注销请求失败的报错 ([677e110](https://github.com/certd/certd/commit/677e1101e6cf4451abd8a876cc1d0ddd26a10b88))
|
|
||||||
|
|
||||||
## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复西部数据返回信息乱码问题 ([78b1650](https://github.com/certd/certd/commit/78b1650bdb071c858b3f90d53a700d11ee6de328))
|
|
||||||
* 修复西部数码使用域名级别的key申请证书失败的问题 ([5edc72d](https://github.com/certd/certd/commit/5edc72d47550b8e3364dabda70a41cce75d87956))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 第三方登录允许选择logo ([bb3085e](https://github.com/certd/certd/commit/bb3085ef84201ccd2dc632ba8c5097cb00258be4))
|
|
||||||
* 支持OIDC单点登录 ([fbf12f1](https://github.com/certd/certd/commit/fbf12f16b5eaa7676fd41923587bf6bd2595adba))
|
|
||||||
|
|
||||||
## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复waf tls版本号小写 ([0adcc6a](https://github.com/certd/certd/commit/0adcc6a8d194469be0c26940ed4837fb34929b68))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持微信扫码登录 ([73325aa](https://github.com/certd/certd/commit/73325aaefb0e750a22aaac40929e7bf3f5864996))
|
|
||||||
* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/certd/certd/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
|
|
||||||
|
|
||||||
## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复阿里云 waf tlsVersion参数缺失导致部署失败的问题 ([2fabee6](https://github.com/certd/certd/commit/2fabee647acf64afe689f5bea3603028cd0ba4a2))
|
|
||||||
* 修复备注撑开表格行高的bug ([c7b298c](https://github.com/certd/certd/commit/c7b298c46f0d52b43bd2bb17b374e7970a446446))
|
|
||||||
* 修复域名管理无法创建tencent-eo dns授权的bug ([3406bb5](https://github.com/certd/certd/commit/3406bb5a4a56bb310cddc1a1f410c70909fd129b))
|
|
||||||
* openapi 成功后失败都返回msg ([6e735bb](https://github.com/certd/certd/commit/6e735bbd1e29712e939f775a4db974db70e3b4b0))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* ssh支持ppk格式私钥 ([575ae16](https://github.com/certd/certd/commit/575ae164c863d0b1f9fa0890549a2ee7472fb469))
|
|
||||||
* 优化宝塔网站证书在并发部署时导致nginx配置文件错乱的问题 ([51cc084](https://github.com/certd/certd/commit/51cc08411fd2dbab66d769b495dc1b0bf2f2578c))
|
|
||||||
* 优化天翼云cdn 等待5秒部署完成 ([53c88ad](https://github.com/certd/certd/commit/53c88ad5afe66a3f7c38b9b759747918913a4edc))
|
|
||||||
* 支持oidc单点登录 ([ec75afb](https://github.com/certd/certd/commit/ec75afbc44139dbe9da534d8a8c08a5b91f86d3c))
|
|
||||||
* ssl.com支持ecc ([b5ec047](https://github.com/certd/certd/commit/b5ec04723db48422f71041f4043002e7f5b450b1))
|
|
||||||
|
|
||||||
## [1.37.10](https://github.com/certd/certd/compare/v1.37.9...v1.37.10) (2025-11-19)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化dokploy 部署插件，配置选择serverId ([c9709f2](https://github.com/certd/certd/commit/c9709f26981c1cc9f71c14babb204329fcae0db5))
|
|
||||||
* 站点证书监控备注输入框改成textarea ([70b603d](https://github.com/certd/certd/commit/70b603d601c34f39148c2ab70c655c51babf563d))
|
|
||||||
|
|
||||||
## [1.37.9](https://github.com/certd/certd/compare/v1.37.8...v1.37.9) (2025-11-19)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 商用证书上传保存失败的bug ([075b1dc](https://github.com/certd/certd/commit/075b1dc0eb8c39acc277277b1b334d66b6717ab2))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化阿里云clb 过期证书清理报错的问题 ([d465367](https://github.com/certd/certd/commit/d4653678b2e3643460f918992eeae4044d3a1cc7))
|
|
||||||
|
|
||||||
## [1.37.8](https://github.com/certd/certd/compare/v1.37.7...v1.37.8) (2025-11-17)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* **plugins/woai-cdn:** 修正默认接口域名与帮助链接中的路径 ([#576](https://github.com/certd/certd/issues/576)) @LjyLab ([d20046c](https://github.com/certd/certd/commit/d20046c86681ea177ece434423b7c81a76b437fb))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 修复西数解析记录添加失败的bug，支持部署证书到西数虚拟主机 ([1102952](https://github.com/certd/certd/commit/1102952b4703e8c0bbc17b0700c0ed3ef6f866d3))
|
|
||||||
* 支持回车键触发登录 ([eb5c88f](https://github.com/certd/certd/commit/eb5c88fbb2901f1a9669429a7cd8dc76f6806d01))
|
|
||||||
|
|
||||||
## [1.37.7](https://github.com/certd/certd/compare/v1.37.6...v1.37.7) (2025-11-12)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复点击立即触发运行报错的bug ([e1eef01](https://github.com/certd/certd/commit/e1eef013a856d26fe80a05d9ec6e505e2e31e5f9))
|
|
||||||
* 账号绑定页面某些情况下打不开的bug ([44973eb](https://github.com/certd/certd/commit/44973ebd00e89c0fee8f3b91174157757ce0160f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持使用letencrypt测试环境申请ip证书 ([86ce00a](https://github.com/certd/certd/commit/86ce00adf92ff98fead87a3eaaa6631036708f47))
|
|
||||||
* 支持腾讯云teo dns解析 ([1d23dd2](https://github.com/certd/certd/commit/1d23dd2426bd1e4c4dfea0a9e561d665e045ba9d))
|
|
||||||
|
|
||||||
## [1.37.6](https://github.com/certd/certd/compare/v1.37.5...v1.37.6) (2025-11-10)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复创建流水线报id不能为空的bug ([aac569a](https://github.com/certd/certd/commit/aac569a9259ede43399e0ed5d668e936b984d6dd))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 增加vip时间同步按钮 ([32e4e91](https://github.com/certd/certd/commit/32e4e91ab81008dda422fb53fd6f4d1711c5d80c))
|
|
||||||
* 支持letencrypt测试环境，支持IP证书？ ([1462cdd](https://github.com/certd/certd/commit/1462cddd1eb347b7ff238286b5c977b29a0591ec))
|
|
||||||
* server 增加 "@peculiar/x509" 依赖 ([acdf091](https://github.com/certd/certd/commit/acdf0912d452029f158279fb78155086e4fbac17))
|
|
||||||
|
|
||||||
## [1.37.5](https://github.com/certd/certd/compare/v1.37.4...v1.37.5) (2025-11-08)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复某些情况下编辑流水线，没有立即展示变更效果的bug ([65e5309](https://github.com/certd/certd/commit/65e53092e8d677eb34b7d04d68c6f738165f5de2))
|
|
||||||
* 修复批量修改定时没有立即显示生效的bug ([c166602](https://github.com/certd/certd/commit/c16660254b8d637bd3ca100695934b343875fcbf))
|
|
||||||
* 修复新部署的无法保存公共eab配置的bug ([6b7631e](https://github.com/certd/certd/commit/6b7631ed5e920582d8e2162ec788b9429238ac29))
|
|
||||||
* 修复在苹果手机下输入框被放大的问题 ([5ff7e6e](https://github.com/certd/certd/commit/5ff7e6ef0eaa6bc111d0dd3c5713e1658f9113ad))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持记忆字段排序 ([d46b9c5](https://github.com/certd/certd/commit/d46b9c54b14ec5c892f4eed141fb549485941edd))
|
|
||||||
* 优化任务参数配置界面在手机版下的展示效果 ([0203aa2](https://github.com/certd/certd/commit/0203aa2b6e86e58e5e66a1b9d0278d186aa92554))
|
|
||||||
* 支持列表展示时固定证书最大天数，有助于列表进度条整齐展示 ([4a94eab](https://github.com/certd/certd/commit/4a94eab3935c89a63892661d9cf0d0891e54aa81))
|
|
||||||
* 子域名托管说明 ([b5d8161](https://github.com/certd/certd/commit/b5d8161bc2e686e6c8b552de0c29117a5d405313))
|
|
||||||
* cname方式hostRecord增加user校验 ([bc174f7](https://github.com/certd/certd/commit/bc174f70545e487bd549eff250f8ef69c6d343f3))
|
|
||||||
* doge云插件支持选择CDN域名，以及支持同时部署多个域名 ([041954c](https://github.com/certd/certd/commit/041954c0674fabed54ed2cf5e727fecfb6943d19))
|
|
||||||
* doge云支持删除过期证书 ([335cf93](https://github.com/certd/certd/commit/335cf9397080a5e09074d5a89d03f59bd051cda5))
|
|
||||||
|
|
||||||
## [1.37.4](https://github.com/certd/certd/compare/v1.37.3...v1.37.4) (2025-10-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复站点证书监控复制按钮无效的bug ([efa26a0](https://github.com/certd/certd/commit/efa26a067f06402f30befc016d9934cadcd5a563))
|
|
||||||
* 修复lego模式下 私钥加密类型错误的bug ([f7cf7c1](https://github.com/certd/certd/commit/f7cf7c198d7f77b222099770f81accc637bc6619))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化数据备份效率，流式写入文件 ([c38dbbb](https://github.com/certd/certd/commit/c38dbbb1d72bd00a92fe275b76aea82a791e7199))
|
|
||||||
|
|
||||||
## [1.37.3](https://github.com/certd/certd/compare/v1.37.2...v1.37.3) (2025-10-24)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复并发情况下证书申请日志混乱的bug ([bb2714f](https://github.com/certd/certd/commit/bb2714ff241f9db4a71d805b23a1b0f9f2f6413a))
|
|
||||||
* 修复网络测试，telnet的bug ([c03a70f](https://github.com/certd/certd/commit/c03a70fde23c8e840bd0fdb4fcbca8990f6c65eb))
|
|
||||||
* 修复站点证书监控，证书已经更新到最新日期了，仍然发出警告通知的bug ([1f42f93](https://github.com/certd/certd/commit/1f42f933f07860b27aa3d016e40916ff2b063eac))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 注册页面增加手机注册tab页签 ([6b2f1fc](https://github.com/certd/certd/commit/6b2f1fcd3e058061b814c3331cda8ce1b2d80d73))
|
|
||||||
* 流水线创建时支持添加到证书监控 ([59ba408](https://github.com/certd/certd/commit/59ba4080706548828ef1c0a9cd893c1c9a7d591f))
|
|
||||||
* 流水线支持有效期设置 ([911e69e](https://github.com/certd/certd/commit/911e69e3bc0cdd48b62953b5d0981d640fc1f8ac))
|
|
||||||
* 群辉增加请求超时时长设置 ([b381492](https://github.com/certd/certd/commit/b3814920bdcabc911f860a8e19b5b9b3a04709ac))
|
|
||||||
* 通知支持meow ([c77645e](https://github.com/certd/certd/commit/c77645e1733670214aaca5544cf8759d7e4adda4))
|
|
||||||
* 站点证书监控增加导出和分组功能 ([2ed12c4](https://github.com/certd/certd/commit/2ed12c429eb58274a4f9dd0ed3b66e160d283ded))
|
|
||||||
* 证书监控增加批量删除 ([e578c52](https://github.com/certd/certd/commit/e578c52fdf2f838038062aa4209b655fbae461fb))
|
|
||||||
* esa 自动删除过期证书提示 ([8bf1f82](https://github.com/certd/certd/commit/8bf1f828b9eaa9208f32e8ee7460b86420fed0c7))
|
|
||||||
* ssh 增加禁止-i参数提示 ([3a8931f](https://github.com/certd/certd/commit/3a8931feeffd7157163ff7d46b693e5e1a434b9c))
|
|
||||||
|
|
||||||
## [1.37.2](https://github.com/certd/certd/compare/v1.37.1...v1.37.2) (2025-10-14)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复飞牛证书部署后无法生效的bug ([bf156a1](https://github.com/certd/certd/commit/bf156a13bd443cdadb73c9dff79bbef7231b4401))
|
|
||||||
* aliyunoss 选择证书接入点选择新加坡无法上传的bug ([e00733a](https://github.com/certd/certd/commit/e00733a34644c23ffe926486b15dc96bf2fa4b57))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化start.sh脚本，去掉删除非ui目录的操作及提示 ([7993a7c](https://github.com/certd/certd/commit/7993a7cdb01885535950c63187e3f67d67ba2f75))
|
|
||||||
* 增加飞牛证书id选择的提示 ([5a4d812](https://github.com/certd/certd/commit/5a4d8121462b1afe921d028465687be8c9679814))
|
|
||||||
* 证书监控支持设置证书即将过期天数 ([cd35568](https://github.com/certd/certd/commit/cd35568e042e6ab928685efad51cdbed823d2d4f))
|
|
||||||
* 支持网络测试 ([2bef608](https://github.com/certd/certd/commit/2bef608e07ceb56d52007f290667e0afef401b22))
|
|
||||||
* 支持新网代理方式 ([f612509](https://github.com/certd/certd/commit/f612509cac87b859e81a7a52fe94b2eaccad22f9))
|
|
||||||
* dns支持新网互联 ([f415190](https://github.com/certd/certd/commit/f41519048326d971acd9e0a30462231f77a299a6))
|
|
||||||
* start.sh脚本支持根据当前系统判断是否使用sudo ([567cb7d](https://github.com/certd/certd/commit/567cb7d737023e26ec58403c6f28f109e212d379))
|
|
||||||
|
|
||||||
## [1.37.1](https://github.com/certd/certd/compare/v1.37.0...v1.37.1) (2025-09-29)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复版本比较bug ([109696e](https://github.com/certd/certd/commit/109696e965d68c50c8627ffd40203edd1d2daea5))
|
|
||||||
* 修复某些情况下cname申请证书报错主域名不一致的bug ([2671781](https://github.com/certd/certd/commit/2671781e1bb0838981728d85eacf0e1a25a0fa48))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* cname主域名校验提示优化，显示不一致的两方便于排查问题 ([6ebb365](https://github.com/certd/certd/commit/6ebb3659f42155e4e8da600c493fb5227cd08137))
|
|
||||||
* dns解析支持阿里esa ([9291fa6](https://github.com/certd/certd/commit/9291fa68aa7a88a05c2f888bf3048df36a8fbde3))
|
|
||||||
|
|
||||||
# [1.37.0](https://github.com/certd/certd/compare/v1.36.25...v1.37.0) (2025-09-28)
|
|
||||||
|
|
||||||
### Features
|
|
||||||
|
|
||||||
* @certd/ui-server module import报错的问题 ([0c61d4c](https://github.com/certd/certd/commit/0c61d4c9788677c83c567db5381b9e257ec90bba))
|
|
||||||
* dist打包前检查 ([8f6e5bd](https://github.com/certd/certd/commit/8f6e5bd24b3b65fbfcba36c08f532a3abad2d606))
|
|
||||||
|
|
||||||
## [1.36.25](https://github.com/certd/certd/compare/v1.36.24...v1.36.25) (2025-09-27)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 固定midwayjs版本，修复ui-server import 错误的bug ([eb4d125](https://github.com/certd/certd/commit/eb4d125eaf4a41e88c752d0c68993829589f8f27))
|
|
||||||
|
|
||||||
## [1.36.24](https://github.com/certd/certd/compare/v1.36.23...v1.36.24) (2025-09-27)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复 ui-server 加载失败问题 ([c2ccdbe](https://github.com/certd/certd/commit/c2ccdbec9dd08bca4688eeb2f34d0105eec43ba1))
|
|
||||||
* 修复 ui-server 加载失败问题 ([063f5c3](https://github.com/certd/certd/commit/063f5c3b55e47df22543a64f02e039e84f92cd14))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 重置管理员密码同时会关闭验证码，防止验证码失效之后无法登录 ([03899d4](https://github.com/certd/certd/commit/03899d4d9c76fc2077dacc53ab88e2c9ca41af7c))
|
|
||||||
|
|
||||||
## [1.36.23](https://github.com/certd/certd/compare/v1.36.22...v1.36.23) (2025-09-26)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 授权页面，id列位置不在第一列的bug ([3f1722d](https://github.com/certd/certd/commit/3f1722d54debcb4849dc14521a2da0d9b304b69f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 动态加载验证码script ([dcc396a](https://github.com/certd/certd/commit/dcc396afb7a23aeb8af57c01014b09af5f033e61))
|
|
||||||
* 开启子域名托管之后cname记录支持重置 ([54c8d62](https://github.com/certd/certd/commit/54c8d622437761d350db0f17e07f7517f1911211))
|
|
||||||
* 手动上传证书优化，增加到期前报错提醒 ([3d42bfd](https://github.com/certd/certd/commit/3d42bfd479eaacc4a49c401224815a6e2a0204b0))
|
|
||||||
* 验证码支持测试，登录验证码需要测试通过后才能开启 ([83e6476](https://github.com/certd/certd/commit/83e6476408090b741fabb1b542fb458d9a8b4134))
|
|
||||||
* 支持腾讯云验证码 ([03f317f](https://github.com/certd/certd/commit/03f317ffdb6595ce70e8a2302b05f390c52110c8))
|
|
||||||
|
|
||||||
## [1.36.22](https://github.com/certd/certd/compare/v1.36.21...v1.36.22) (2025-09-23)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复旧版本升级上来报错eab授权的bug ([b76f2e2](https://github.com/certd/certd/commit/b76f2e2008a7fefac4c91179c45c56c7a7a84b71))
|
|
||||||
* 选择授权对话框编辑时，名称字段排在最后的bug ([31cfb09](https://github.com/certd/certd/commit/31cfb09468bda3272f5f63af65ff3e9272220b39))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 7001绑定::地址 ([7188997](https://github.com/certd/certd/commit/7188997dd1979f1c10fa29b30221015e0bd5fe9e))
|
|
||||||
* 登录失败时清除验证码状态 ([1c15bea](https://github.com/certd/certd/commit/1c15beadc7fe8a7c6ec1903b7e722ca2f52e05b3))
|
|
||||||
* 公共cname支持权限校验 ([9cc5f0f](https://github.com/certd/certd/commit/9cc5f0f889d4362ff36e7a1f0e448e02d32ecee7))
|
|
||||||
* 优化连接失败的报错提示 ([71d8e7e](https://github.com/certd/certd/commit/71d8e7edd23ad63fdc01a92766b52ede5074fe7c))
|
|
||||||
* 增加自签名证书提示 ([877c9c4](https://github.com/certd/certd/commit/877c9c4ff99f81d289f67afd96f440c0796b03ea))
|
|
||||||
* add preferred chain for google trust service ([#539](https://github.com/certd/certd/issues/539)) @ZeroClover ([e31d26a](https://github.com/certd/certd/commit/e31d26a8871c6088d9f8c0f580746ff2a810ae0c))
|
|
||||||
* dns支持新网域名解析 ([cf3a78e](https://github.com/certd/certd/commit/cf3a78e1145ff0505c87fbc485d9e731b1aa88a8))
|
|
||||||
* gcore flush plugin ssl_id改为必填项 ([4b90972](https://github.com/certd/certd/commit/4b909723411c57505aa13b07d8699fb9ac77c937))
|
|
||||||
|
|
||||||
## [1.36.21](https://github.com/certd/certd/compare/v1.36.20...v1.36.21) (2025-09-15)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复导入插件对话框无法打开的bug，修复插件编辑页面打开多个代码编辑器消失的bug ([e5a080a](https://github.com/certd/certd/commit/e5a080aebe0d2f3e3c0f86bf863f75069c1bf7ab))
|
|
||||||
* 修复ssl.com报EMAILADDRESS数量不对的bug ([c560cc5](https://github.com/certd/certd/commit/c560cc5adda6e15bf3a8865d874042550a6c2688))
|
|
||||||
|
|
||||||
## [1.36.20](https://github.com/certd/certd/compare/v1.36.19...v1.36.20) (2025-09-13)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复商业版退出登录后，丢失站点个性化设置的bug ([d75dd05](https://github.com/certd/certd/commit/d75dd058d65c85f80c49e1fa7a910e6c6f08e824))
|
|
||||||
* 修复授权类型和名称字段排到最后的bug ([43b7977](https://github.com/certd/certd/commit/43b79778ea9034065f6a15af3296274315597c6b))
|
|
||||||
* 修复证书监控某些情况下报 options.lookup不能为null的bug ([d2ecfe5](https://github.com/certd/certd/commit/d2ecfe5491b2639eb30b5cae293af6062d58bb9f))
|
|
||||||
* 修复证书手动托管时新上传的证书无效的bug ([506385e](https://github.com/certd/certd/commit/506385e5a2600887fe30854e0713583caaa2e689))
|
|
||||||
* 修复secret patch 类型多了type：的bug ([d04f383](https://github.com/certd/certd/commit/d04f3831611011a90ec0594724b9694490d5edd0))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 登录支持极验验证码 ([370db62](https://github.com/certd/certd/commit/370db62bf0aece241859244927beabba32d6a257))
|
|
||||||
* 登录注册、找回密码都支持极验验证码和图片验证码 ([7bdde68](https://github.com/certd/certd/commit/7bdde68ecea29fe2c570fd3cb082139db6c93d93))
|
|
||||||
* 优化加量包展示效果 ([3c65f37](https://github.com/certd/certd/commit/3c65f37d84177ba107d4a6462648af12d2fc4b7a))
|
|
||||||
* 证书到期剩余天数进度条根据实际证书有效期计算 ([#528](https://github.com/certd/certd/issues/528)) nicheng-he ([2d4586b](https://github.com/certd/certd/commit/2d4586b1c42c39f97d2a95b9453cca4bc8bfbe61))
|
|
||||||
* add preferred chain option ([#519](https://github.com/certd/certd/issues/519)) @ZeroClover ([902359f](https://github.com/certd/certd/commit/902359f24ed12eee4f9b65178f1d6a60378351d2))
|
|
||||||
* ssh配置增加脚本类型设置，bash还是sh ([ae41c60](https://github.com/certd/certd/commit/ae41c6038b27c9476e64a2402a8daf247c38a5b6))
|
|
||||||
* start.sh增加sudo ([b7271d7](https://github.com/certd/certd/commit/b7271d7a464773a1bf87d7d1f24d933ba0f86915))
|
|
||||||
|
|
||||||
## [1.36.19](https://github.com/certd/certd/compare/v1.36.18...v1.36.19) (2025-09-05)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 前置任务输出不存在时输出警告提示 ([b59052c](https://github.com/certd/certd/commit/b59052cc43b7b070fabd8b8e914e4c2a5e0ad61c))
|
|
||||||
* 修复批量流水线执行时日志显示错乱的问题 ([4372adc](https://github.com/certd/certd/commit/4372adc703b9a4c785664054ab2a533626d815a8))
|
|
||||||
* 修复远程数据选择无法过滤的bug ([6cbb073](https://github.com/certd/certd/commit/6cbb0739f8428d51b0712f718fe4d236cc087cf9))
|
|
||||||
* 修复mysql下购买套餐加量包无效的bug ([c26ad4c](https://github.com/certd/certd/commit/c26ad4c8075f0606d45b8da13915737968d6191a))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 创建证书时支持选择通知时机 ([0e96bfd](https://github.com/certd/certd/commit/0e96bfdfa377824d204e72923d1176408ae6b300))
|
|
||||||
* 创建k8s secret 时设置type为tls ([79ebabf](https://github.com/certd/certd/commit/79ebabfcfb9e5a534049c84f5f1a642b357fc856))
|
|
||||||
* 去掉宝塔url后面的斜杠 ([8a0c2b9](https://github.com/certd/certd/commit/8a0c2b9b13628da750c25757e0cb8ed3038775ba))
|
|
||||||
* 商业版隐藏文档相关链接 ([4443a1c](https://github.com/certd/certd/commit/4443a1c0308fa6b95a05efd73d15d24b65d641c9))
|
|
||||||
* 商业版隐藏文档相关链接 ([db89561](https://github.com/certd/certd/commit/db8956148083bc4f988226ccf719940d08158a27))
|
|
||||||
* 增加健康检查探针 /health/liveliness 和 /health/readiness ([44019e1](https://github.com/certd/certd/commit/44019e104289fedd32a867db00e9c6cb71b389cc))
|
|
||||||
* 支持根据id更新证书（证书Id不变接口），不过该接口为白名单功能，普通腾讯云账户无法使用 ([fe9c4f3](https://github.com/certd/certd/commit/fe9c4f3391ff07c01dd9a252225f69a129c39050))
|
|
||||||
* 支持godaddy ([b7980aa](https://github.com/certd/certd/commit/b7980aad5ab50f58662eaddf5d84aa82876a98eb))
|
|
||||||
* 支持ssl.com证书颁发机构 ([27b6dfa](https://github.com/certd/certd/commit/27b6dfa4d2ab3bddd284c3a34511a72e1a513a4c))
|
|
||||||
* 子域名托管说明 ([39a0223](https://github.com/certd/certd/commit/39a02235cf4416bb5bd1acd3831241efeaa2f602))
|
|
||||||
* ssh 增加超时断开连接，默认10分钟超时 ([c24a040](https://github.com/certd/certd/commit/c24a040c19cacafc79228d7a7649af93837d94a1))
|
|
||||||
|
|
||||||
## [1.36.18](https://github.com/certd/certd/compare/v1.36.17...v1.36.18) (2025-08-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 更新我爱云CDN域名地址，和部分目录结构 [@tyjsjxh](https://github.com/tyjsjxh) ([#514](https://github.com/certd/certd/issues/514)) ([78e7a81](https://github.com/certd/certd/commit/78e7a81638c2ee779f0ab6c3ba7e5c6f6e064151))
|
|
||||||
* 修复cron选择组件星期显示错误的bug ([eb75e52](https://github.com/certd/certd/commit/eb75e52278f94a72643f7317e6740fb42666c68a))
|
|
||||||
* 修复proxmox某些情况下执行卡住的bug ([ebd6917](https://github.com/certd/certd/commit/ebd6917a1d40ae4d94555c32b7e3c093d0599b94))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 部署到k8s支持自动创建secret ([c09c962](https://github.com/certd/certd/commit/c09c962cb676ca261610aa9f3e5105c9dae43f43))
|
|
||||||
* 短信验证码支持腾讯云 ([9108459](https://github.com/certd/certd/commit/9108459ae42bcd95a59acba164a64e82e5f2cfe6))
|
|
||||||
* 商业版支持自定义插件的参数配置 ([17f23f3](https://github.com/certd/certd/commit/17f23f37516af925d5049291d67d41e4271f81f8))
|
|
||||||
* 腾讯云插件支持国际版 ([58e82d5](https://github.com/certd/certd/commit/58e82d5dbd4ebf089ef239578ef9b68454d17b30))
|
|
||||||
* 腾讯云EO插件支持自动获取zoneid和域名列表 ([70fcdc9](https://github.com/certd/certd/commit/70fcdc9ebbfb7c883c0c8a2138f61a0776a9491b))
|
|
||||||
* 支持部署到阿里云云原生API网关、AI网关 ([2ca20be](https://github.com/certd/certd/commit/2ca20be197720201fceabcce9d927f4dbc1cc872))
|
|
||||||
* 支持部署到华为云obs ([9feb9d0](https://github.com/certd/certd/commit/9feb9d04b3c56ec95c06fcf4fd071eb0e88ffc6f))
|
|
||||||
* 支持部署到dokploy ([7dbdeae](https://github.com/certd/certd/commit/7dbdeaebe0bfee7521a863fe5e6b4a712aec5876))
|
|
||||||
* 支持删除宝塔证书夹中的过期证书 ([3575113](https://github.com/certd/certd/commit/3575113655be751d19f88c64491e98a89042d6a2))
|
|
||||||
* 支持p7b证书格式 ([d9f4a57](https://github.com/certd/certd/commit/d9f4a5793d68a017a5d80ad5385cbda603c4e165))
|
|
||||||
* lecdnv2支持api token ([e448934](https://github.com/certd/certd/commit/e4489343fee7754be07bcfc3323969dc3a30e90c))
|
|
||||||
* openapi返回证书时挑选匹配范围最小的那一个；增加format参数，增加返回值p7b格式，增加detail返回 ([2085bcc](https://github.com/certd/certd/commit/2085bcceb61c3723c9bdfec4c4cc0917631ff5e5))
|
|
||||||
* ssh 配置sudo免密提示 ([e1e7011](https://github.com/certd/certd/commit/e1e7011853ad0c5bd7b09c3690861d5aa34b2db4))
|
|
||||||
|
|
||||||
## [1.36.17](https://github.com/certd/certd/compare/v1.36.16...v1.36.17) (2025-08-17)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复新部署的无法保存公共eab配置的bug ([d5dee75](https://github.com/certd/certd/commit/d5dee75df3bd635a597436e448b2de1407531f3a))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 阿里云 FC3.0 不在要求证书加密方式为旧版， 修复支持的协议类型可以正常选择 ([a34db74](https://github.com/certd/certd/commit/a34db7449eff6ad1dda01de673bf85579fa3865a))
|
|
||||||
* 部署到腾讯云cdn，每个域名增加3每秒延迟 ([f7d43ad](https://github.com/certd/certd/commit/f7d43ad5af4663d4be369820a80d1fd9817ca4ab))
|
|
||||||
* 腾讯云关闭证书通知增加开关选项，在腾讯云授权里面 ([a77c777](https://github.com/certd/certd/commit/a77c777980dd38d97d983124eeed1596879bba95))
|
|
||||||
* 证书申请任务默认不发送申请成功通知 ([0283bd2](https://github.com/certd/certd/commit/0283bd2f978dbcd13d361129135e439dd9fbc180))
|
|
||||||
|
|
||||||
## [1.36.16](https://github.com/certd/certd/compare/v1.36.15...v1.36.16) (2025-08-16)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复授权配置复制功能，无法复制已加密字段的问题 ([221e068](https://github.com/certd/certd/commit/221e068bac3af6cd5d1794f8cd4c2ec5c0bc3f45))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 百度云支持上传到证书托管，支持部署到负载均衡 ([798a48a](https://github.com/certd/certd/commit/798a48aa9686fd5d11cfffb6cd93eadfc40aacb3))
|
|
||||||
* 部署到百度cdn支持自动获取域名列表选择 ([4e432ed](https://github.com/certd/certd/commit/4e432ed03f4fb564e85a2f284ee26b58400b82f5))
|
|
||||||
* 验证码可重试次数设置为3次 ([1bdceee](https://github.com/certd/certd/commit/1bdceeecf4b5daecdd621a05a2596b6eb45ce8ea))
|
|
||||||
* 增加找回密码的验证码可重试次数 [@nicheng-he](https://github.com/nicheng-he) ([#496](https://github.com/certd/certd/issues/496)) ([fe03f99](https://github.com/certd/certd/commit/fe03f9942b5662fb90cad86da10782f5dc3603f5))
|
|
||||||
* 支持阿里云API网关 ([9e1e4ee](https://github.com/certd/certd/commit/9e1e4eeec2859759ca5b07834c9d24cf88a6ad33))
|
|
||||||
* 支持部署到金山云CDN ([dfa74a6](https://github.com/certd/certd/commit/dfa74a69f7cbb9009d3e20c7eecfa1b905a00cf0))
|
|
||||||
* 支持更新金山云cdn证书 ([462e22a](https://github.com/certd/certd/commit/462e22a3b0a94887462fe6aa68e4671a365e0737))
|
|
||||||
* 支持apisix证书部署 ([9b63fb4](https://github.com/certd/certd/commit/9b63fb4ee2c6b56139160c5bf63482dab0869c2b))
|
|
||||||
|
|
||||||
## [1.36.15](https://github.com/certd/certd/compare/v1.36.14...v1.36.15) (2025-08-07)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复 https://cas.undefined.aliyuncs.com 的bug ([60e6aa9](https://github.com/certd/certd/commit/60e6aa9b54a761a47e39acee4a1ff947a745be27))
|
|
||||||
* 修复阿里云clb api接口没有使用region的问题 ([0770f17](https://github.com/certd/certd/commit/0770f174a14313e28d08113e69829ef6cc02d719))
|
|
||||||
* 修复站点监控使用自定义dns解析域名报错的bug ([eb8cd53](https://github.com/certd/certd/commit/eb8cd53de27991321e36dd14e5ce95f42b51351f))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 部署到阿里云支持选择bucket和域名 ([013b9c4](https://github.com/certd/certd/commit/013b9c4c7c2adf485d086123ccea448719577fd4))
|
|
||||||
* 清理数据库备份的临时目录 ([fd95549](https://github.com/certd/certd/commit/fd95549de9a5d8cec09772ee2630bb7521e15e1f))
|
|
||||||
* 添加免费通知,OneBot V11协议通知支持 ([#491](https://github.com/certd/certd/issues/491)) [@ayakasuki](https://github.com/ayakasuki) ([be053d4](https://github.com/certd/certd/commit/be053d47e41084f817882400882b64143d036d1a))
|
|
||||||
* 支持webhook部署证书 ([cbe0b1c](https://github.com/certd/certd/commit/cbe0b1c5a6538f232e9a63f1693d20d5acf0a306))
|
|
||||||
* 注册时支持填写用户名 ([fdcfcc7](https://github.com/certd/certd/commit/fdcfcc77a0db87954e0b026635d3ccdd9bc6cee8))
|
|
||||||
* add start:server npm script for quick server launch from root directory ([#484](https://github.com/certd/certd/issues/484)) [@orzyyyy](https://github.com/orzyyyy) ([fae1981](https://github.com/certd/certd/commit/fae1981161080f698c3f1263b712306d63baae64))
|
|
||||||
|
|
||||||
## [1.36.14](https://github.com/certd/certd/compare/v1.36.13...v1.36.14) (2025-07-28)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复复制流水线为空的bug ([b070773](https://github.com/certd/certd/commit/b0707739fdfbae3d78db4efd3f180db05c4e4164))
|
|
||||||
* 修复商用证书上传第二次运行无法使用pfx格式证书的bug ([251dd1f](https://github.com/certd/certd/commit/251dd1fe457a7b152f43eb6de18f7beb9f0b194e))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 1panel支持 currenNode ([acc8907](https://github.com/certd/certd/commit/acc890730f43d492c9b1bd3668814cf10efdf7b8))
|
|
||||||
* 授权管理支持模糊查询 ([866eb62](https://github.com/certd/certd/commit/866eb6241baa7b21f6eddc649966324c188236c6))
|
|
||||||
* 新增找回密码功能 [@nicheng-he](https://github.com/nicheng-he) ([81ac240](https://github.com/certd/certd/commit/81ac240ac84db0af2f56b6352e227ecb49f38377))
|
|
||||||
* 优化start脚本 ([238ad7c](https://github.com/certd/certd/commit/238ad7ce51f17e1098c624e7f61ee2d98de1e02d))
|
|
||||||
* 运行主机脚本插件支持选择运行策略 ([86b3df1](https://github.com/certd/certd/commit/86b3df194126476e1f58e0952a77e986f62eecce))
|
|
||||||
* cdnfly 支持 账号密码登陆授权 ([e87f6d5](https://github.com/certd/certd/commit/e87f6d56f524dbbb9e3243e382b348b6e49f0d2c))
|
|
||||||
* k8s ack、tke 支持重启ingress ([95715a0](https://github.com/certd/certd/commit/95715a007d931c64fa7dd953d94957398e00a443))
|
|
||||||
|
|
||||||
## [1.36.13](https://github.com/certd/certd/compare/v1.36.12...v1.36.13) (2025-07-23)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复阿里云发送短信验证码失败的bug ([2e6d03f](https://github.com/certd/certd/commit/2e6d03ff001f521f57368e7a62b97ed7b122e8d0))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 阿里云部分插件优化 [@nicheng-he](https://github.com/nicheng-he) ([e3738f6](https://github.com/certd/certd/commit/e3738f6422270d75ec414c15a343248cc4cad6e1))
|
|
||||||
|
|
||||||
## [1.36.12](https://github.com/certd/certd/compare/v1.36.11...v1.36.12) (2025-07-22)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 上传到阿里云cas，证书前缀无效的bug ([b382351](https://github.com/certd/certd/commit/b382351c7b91ec10e1f61d94bec5aad075207ec8))
|
|
||||||
* 修复自定义插件onlyAdmin报错的bug ([4e5e862](https://github.com/certd/certd/commit/4e5e862f5834ad180e4428959c272d444a6f78ab))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 部署到k8s，tke，ack忽悠证书校验 ([ab84835](https://github.com/certd/certd/commit/ab848353621869464a2c9a45fdb5e28d998b8a58))
|
|
||||||
* 首页增加更新日志按钮 ([41ce848](https://github.com/certd/certd/commit/41ce8489dc2f03a705dfa3fbb357769defb56c60))
|
|
||||||
* 增加版本过低提示 ([d1ce360](https://github.com/certd/certd/commit/d1ce36038cab72b5dc1b320d0a708c261ffbdacb))
|
|
||||||
|
|
||||||
## [1.36.11](https://github.com/certd/certd/compare/v1.36.10...v1.36.11) (2025-07-22)
|
## [1.36.11](https://github.com/certd/certd/compare/v1.36.10...v1.36.11) (2025-07-22)
|
||||||
|
|
||||||
### Bug Fixes
|
### Bug Fixes
|
||||||
|
|||||||
Binary file not shown.
|
After Width: | Height: | Size: 26 KiB |
+1
-11
@@ -5,16 +5,6 @@ Certd 是一款开源、免费、全自动申请和部署更新SSL证书的工
|
|||||||
|
|
||||||
关键字：证书自动申请、证书自动更新、证书自动续期、证书自动续签、证书管理工具
|
关键字：证书自动申请、证书自动更新、证书自动续期、证书自动续签、证书管理工具
|
||||||
|
|
||||||
|
|
||||||
| 官方开源地址： | |
|
|
||||||
| ---- | ---- |
|
|
||||||
| [Github](https://github.com/certd/certd)|  |
|
|
||||||
| [Gitee](https://gitee.com/certd/certd) |  |
|
|
||||||
| [AtomGit](https://atomgit.com/certd/certd) | |
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## 1、关于证书续期
|
## 1、关于证书续期
|
||||||
>* 实际上没有办法不改变证书文件本身情况下直接续期或者续签。
|
>* 实际上没有办法不改变证书文件本身情况下直接续期或者续签。
|
||||||
>* 我们所说的续期，其实就是按照全套流程重新申请一份新证书，然后重新部署上去。
|
>* 我们所说的续期，其实就是按照全套流程重新申请一份新证书，然后重新部署上去。
|
||||||
@@ -25,7 +15,7 @@ Certd 是一款开源、免费、全自动申请和部署更新SSL证书的工
|
|||||||
本项目不仅支持证书申请过程自动化，还可以自动化部署更新证书，让你的证书永不过期。
|
本项目不仅支持证书申请过程自动化，还可以自动化部署更新证书，让你的证书永不过期。
|
||||||
|
|
||||||
* 全自动申请证书（支持所有注册商注册的域名，支持DNS-01、HTTP-01、CNAME代理等多种域名验证方式）
|
* 全自动申请证书（支持所有注册商注册的域名，支持DNS-01、HTTP-01、CNAME代理等多种域名验证方式）
|
||||||
* 全自动部署更新证书（目前支持部署到主机、阿里云、腾讯云等100+部署插件）
|
* 全自动部署更新证书（目前支持部署到主机、阿里云、腾讯云等70+部署插件）
|
||||||
* 支持通配符域名/泛域名，支持多个域名打到一个证书上，支持pem、pfx、der、jks等多种证书格式
|
* 支持通配符域名/泛域名，支持多个域名打到一个证书上，支持pem、pfx、der、jks等多种证书格式
|
||||||
* 邮件通知、webhook通知、企微、钉钉、飞书、anpush等多种通知方式
|
* 邮件通知、webhook通知、企微、钉钉、飞书、anpush等多种通知方式
|
||||||
* 私有化部署，数据保存本地，安装升级非常简单快捷
|
* 私有化部署，数据保存本地，安装升级非常简单快捷
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 82 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 49 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 21 KiB |
@@ -7,36 +7,7 @@ https://1panel.cn/docs/installation/online_installation/
|
|||||||
|
|
||||||
## 二、部署certd
|
## 二、部署certd
|
||||||
|
|
||||||
有两种安装方式
|
|
||||||
|
|
||||||
### 1. 应用商店方式安装【推荐】
|
|
||||||
|
|
||||||
#### 1.1 安装
|
|
||||||
打开`1Panel->应用商店`，更新远程应用，搜索`certd`，点击安装
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### 1.2 访问测试：
|
|
||||||
http://ip:7001
|
|
||||||
https://ip:7002
|
|
||||||
默认账号密码
|
|
||||||
admin/123456
|
|
||||||
登录后请及时修改密码
|
|
||||||
|
|
||||||
#### 1.3 备份
|
|
||||||
|
|
||||||
|
|
||||||
#### 1.4 恢复
|
|
||||||
安装新Certd后，点击导入备份按钮，选择上面备份的文件即可
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
### 2. docker-compose方式安装
|
|
||||||
|
|
||||||
#### 2.1 安装
|
|
||||||
1. 打开`docker-compose.yaml`，整个内容复制下来
|
1. 打开`docker-compose.yaml`，整个内容复制下来
|
||||||
https://gitee.com/certd/certd/raw/v2/docker/run/docker-compose.yaml
|
https://gitee.com/certd/certd/raw/v2/docker/run/docker-compose.yaml
|
||||||
|
|
||||||
@@ -51,7 +22,7 @@ admin/123456
|
|||||||
> 默认使用sqlite数据库，数据保存在`/data/certd`目录下，您可以手动备份该目录
|
> 默认使用sqlite数据库，数据保存在`/data/certd`目录下，您可以手动备份该目录
|
||||||
> certd还支持`mysql`和`postgresql`数据库，[点我了解如何切换其他数据库](../database)
|
> certd还支持`mysql`和`postgresql`数据库，[点我了解如何切换其他数据库](../database)
|
||||||
|
|
||||||
#### 2.2 访问测试
|
3. 访问测试
|
||||||
|
|
||||||
http://ip:7001
|
http://ip:7001
|
||||||
https://ip:7002
|
https://ip:7002
|
||||||
@@ -59,7 +30,7 @@ https://ip:7002
|
|||||||
admin/123456
|
admin/123456
|
||||||
登录后请及时修改密码
|
登录后请及时修改密码
|
||||||
|
|
||||||
#### 2.3 升级
|
## 三、升级
|
||||||
|
|
||||||
1. 找到容器，点击更多->升级
|
1. 找到容器，点击更多->升级
|
||||||
|
|
||||||
@@ -68,11 +39,11 @@ admin/123456
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### 2.4 备份
|
## 四、数据备份
|
||||||
|
|
||||||
> 默认数据保存在`/data/certd`目录下，可以手动备份
|
> 默认数据保存在`/data/certd`目录下，可以手动备份
|
||||||
> 建议配置一条 [数据库备份流水线](../../use/backup/)，自动备份
|
> 建议配置一条 [数据库备份流水线](../../use/backup/)，自动备份
|
||||||
|
|
||||||
#### 2.5 恢复
|
## 五、备份恢复
|
||||||
|
|
||||||
将备份的`db.sqlite`及同目录下的其他文件一起覆盖到原来的位置，重启certd即可
|
将备份的`db.sqlite`及同目录下的其他文件一起覆盖到原来的位置，重启certd即可
|
||||||
|
|||||||
@@ -10,8 +10,7 @@
|
|||||||
* 登录宝塔面板，在菜单栏中点击 Docker，首次进入会提示安装Docker服务，点击立即安装，按提示完成安装
|
* 登录宝塔面板，在菜单栏中点击 Docker，首次进入会提示安装Docker服务，点击立即安装，按提示完成安装
|
||||||
|
|
||||||
### 2、部署certd
|
### 2、部署certd
|
||||||
以下两种方式任选一种：
|
以下两种方式人选一种：
|
||||||
|
|
||||||
#### 2.1 应用商店方式一键部署【推荐】
|
#### 2.1 应用商店方式一键部署【推荐】
|
||||||
|
|
||||||
* 在宝塔Docker应用商店中找到`certd`（要先点右上角更新应用）
|
* 在宝塔Docker应用商店中找到`certd`（要先点右上角更新应用）
|
||||||
@@ -21,13 +20,13 @@
|
|||||||
|
|
||||||
#### 2.2 容器编排方式部署
|
#### 2.2 容器编排方式部署
|
||||||
|
|
||||||
1. 打开`docker-compose.yaml`,整个内容复制下来
|
1. 打开`docker-compose.yaml`,整个内容复制下来
|
||||||
https://gitee.com/certd/certd/raw/v2/docker/run/docker-compose.yaml
|
https://gitee.com/certd/certd/raw/v2/docker/run/docker-compose.yaml
|
||||||
|
|
||||||
|
|
||||||
然后到宝塔里面进到docker->容器编排->添加容器编排
|
然后到宝塔里面进到docker->容器编排->添加容器编排
|
||||||
|
|
||||||
点击确定，等待启动完成
|
点击确定，等待启动完成
|
||||||
|
|
||||||
|
|
||||||
> certd默认使用sqlite数据库，另外支持`mysql`和`postgresql`数据库，[点我了解如何切换其他数据库](../database)
|
> certd默认使用sqlite数据库，另外支持`mysql`和`postgresql`数据库，[点我了解如何切换其他数据库](../database)
|
||||||
@@ -35,16 +34,16 @@
|
|||||||
|
|
||||||
## 二、访问应用
|
## 二、访问应用
|
||||||
|
|
||||||
http://ip:7001
|
http://ip:7001
|
||||||
https://ip:7002
|
https://ip:7002
|
||||||
默认账号密码
|
默认账号密码
|
||||||
admin/123456
|
admin/123456
|
||||||
登录后请及时修改密码
|
登录后请及时修改密码
|
||||||
|
|
||||||
## 三、如何升级
|
## 三、如何升级
|
||||||
宝塔升级certd非常简单
|
宝塔升级certd非常简单
|
||||||
|
|
||||||
打开容器页面： `docker`->`容器编排`->`左侧选择Certd`->`更新镜像`
|
打开容器页面： `docker`->`容器编排`->`左侧选择Certd`->`更新镜像`
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@@ -80,8 +79,5 @@ admin/123456
|
|||||||
### 1. 无法访问Certd
|
### 1. 无法访问Certd
|
||||||
1. 确认服务器的安全规则，是否放开了对应端口
|
1. 确认服务器的安全规则，是否放开了对应端口
|
||||||
2. 确认宝塔防火墙是否放开对应端口
|
2. 确认宝塔防火墙是否放开对应端口
|
||||||
3. 尝试将Certd容器加入宝塔的`bridge`网络
|
3. 尝试将Certd容器加入宝塔的`bridge`网络
|
||||||
|
|
||||||
|
|
||||||
### 2. 动态IP无法加白名单问题
|
|
||||||
[Nginx代理解决方案](../../use/baota/white_list.md)
|
|
||||||
@@ -65,54 +65,9 @@ docker-compose up -d
|
|||||||
|
|
||||||
## 二、从旧版的sqlite切换数据库
|
## 二、从旧版的sqlite切换数据库
|
||||||
|
|
||||||
从旧版`sqlite`迁移到`mysql`或`postgresql`数据库
|
1. 先将`旧certd`升级到最新版 （`建议：备份sqlite数据库` ）
|
||||||
|
2. 按照上面全新安装方式部署一套`新的certd` （`注意：新旧版本的certd要一致`）
|
||||||
|
3. 使用数据库工具将数据从sqlite导入到mysql或postgresql （`注意：flyway_history数据表不要导入`）
|
||||||
|
4. 重启新certd
|
||||||
|
5. 确认没有问题之后，删除旧版certd
|
||||||
|
|
||||||
下面以 `SQLite` 转 `MySQL` 为例进行演示
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### 0.前提条件：
|
|
||||||
1. SQLite版Certd站点已经`升级到最新版` （`建议：备份sqlite数据库` ）
|
|
||||||
2. `全新安装`MySQL版本Certd（`确保是全新的，因为里面的数据会被清空覆盖`）
|
|
||||||
3. 两套Certd站点版本一致
|
|
||||||
|
|
||||||
#### 1. 安装DBeaver工具
|
|
||||||
|
|
||||||
[https://dbeaver.io/download/](https://dbeaver.io/download/)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### 2. 连接到sqlite数据库
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### 3. 连接到mysql或postgresql数据库
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### 4. 开始同步数据
|
|
||||||
|
|
||||||
选择mysql数据库，选择所有的表（`flyway_history除外`），右键导入数据
|
|
||||||
|
|
||||||
> 切记flyway_history数据表不要导入
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
下一步、下一步，直到数据加载设置，勾选`在加载前截断目标表`（此选项很重要，并且会清空mysql certd数据库中的数据）
|
|
||||||
|
|
||||||
|
|
||||||
#### 5. 导入完成
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#### 6. 重启MySQL版本Certd
|
|
||||||
|
|
||||||
访问MySQL版本测试，数据已成功迁移
|
|
||||||
|
|
||||||
确认没有问题之后，删除旧版certd
|
|
||||||
@@ -57,10 +57,6 @@ https://your_server_ip:7002
|
|||||||
|
|
||||||
::: warning
|
::: warning
|
||||||
如果您是第一次升级certd版本，切记切记先备份一下数据
|
如果您是第一次升级certd版本，切记切记先备份一下数据
|
||||||
```
|
|
||||||
# docker-compose.yaml配置
|
|
||||||
- /data/certd:/app/data # 请务必确保 /app/data 这个路径没有改动，固定写死
|
|
||||||
```
|
|
||||||
:::
|
:::
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 74 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 134 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 145 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 102 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 194 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 120 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 157 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 187 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 67 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 105 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 145 KiB |
@@ -4,18 +4,15 @@
|
|||||||
## 一、源码安装
|
## 一、源码安装
|
||||||
|
|
||||||
### 环境要求
|
### 环境要求
|
||||||
- nodejs 22 及以上
|
- nodejs 20 及以上
|
||||||
### 源码启动
|
### 源码启动
|
||||||
```shell
|
```shell
|
||||||
# 克隆代码
|
# 克隆代码
|
||||||
git clone https://github.com/certd/certd --depth=1
|
git clone https://github.com/certd/certd --depth=1
|
||||||
# git checkout v1.x.x # 当v2主干分支代码无法正常启动时，可以尝试此命令，1.x.x换成最新版本号
|
# git checkout v1.x.x # 当v2主干分支代码无法正常启动时，可以尝试此命令，1.x.x换成最新版本号
|
||||||
cd certd
|
cd certd
|
||||||
|
|
||||||
# 启动服务
|
# 启动服务
|
||||||
./start.sh
|
./start.sh
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
```
|
```
|
||||||
>如果是windows，请先安装`git for windows` ，然后右键，选择`open git bash here`打开终端，再执行`./start.sh`命令
|
>如果是windows，请先安装`git for windows` ，然后右键，选择`open git bash here`打开终端，再执行`./start.sh`命令
|
||||||
@@ -24,9 +21,9 @@ cd certd
|
|||||||
|
|
||||||
### 访问测试
|
### 访问测试
|
||||||
|
|
||||||
http://your_server_ip:7001
|
http://your_server_ip:7001
|
||||||
https://your_server_ip:7002
|
https://your_server_ip:7002
|
||||||
默认账号密码：admin/123456
|
默认账号密码：admin/123456
|
||||||
记得修改密码
|
记得修改密码
|
||||||
|
|
||||||
|
|
||||||
@@ -40,7 +37,7 @@ cp -rf ./packages/ui/certd-server/data ../certd-data-backup
|
|||||||
|
|
||||||
git pull
|
git pull
|
||||||
# 如果提示pull失败，可以尝试强制更新
|
# 如果提示pull失败，可以尝试强制更新
|
||||||
# git checkout v2 -f && git pull
|
# git checkout v2 -f && git pull
|
||||||
|
|
||||||
# 先停止旧的服务,7001是certd的默认端口
|
# 先停止旧的服务,7001是certd的默认端口
|
||||||
kill -9 $(lsof -t -i:7001)
|
kill -9 $(lsof -t -i:7001)
|
||||||
@@ -48,31 +45,16 @@ kill -9 $(lsof -t -i:7001)
|
|||||||
./start.sh
|
./start.sh
|
||||||
|
|
||||||
```
|
```
|
||||||
::: warning
|
::: warning
|
||||||
升级certd版本前，切记切记先备份一下数据
|
升级certd版本前，切记切记先备份一下数据
|
||||||
:::
|
:::
|
||||||
|
|
||||||
|
|
||||||
## 三、数据备份
|
## 三、数据备份
|
||||||
> 数据默认保存在 `./packages/ui/certd-server/data` 目录下
|
> 数据默认保存在 `./packages/ui/certd-server/data` 目录下
|
||||||
> 建议配置一条[数据库备份流水线](../../use/backup/) 自动备份
|
> 建议配置一条[数据库备份流水线](../../use/backup/) 自动备份
|
||||||
|
|
||||||
|
|
||||||
## 四、备份恢复
|
## 四、备份恢复
|
||||||
|
|
||||||
将备份的`db.sqlite`及同目录下的其他文件覆盖到原来的位置，重启certd即可
|
将备份的`db.sqlite`及同目录下的其他文件覆盖到原来的位置，重启certd即可
|
||||||
|
|
||||||
## 六、常见问题
|
|
||||||
|
|
||||||
### 1. npm install better-sqlite3 时，提示node-gyp需要vscode环境编译
|
|
||||||
|
|
||||||
1. 首先确保node版本为22以上
|
|
||||||
2. 将下面两行加到 ~/.npmrc 里面
|
|
||||||
3. 重新install
|
|
||||||
> better_sqlite3_binary_host=https://registry.npmmirror.com/-/binary/better-sqlite3
|
|
||||||
> better_sqlite3_binary_host_mirror=https://registry.npmmirror.com/-/binary/better-sqlite3
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
@@ -10,12 +10,6 @@
|
|||||||
|
|
||||||
::: warning
|
::: warning
|
||||||
如果您是第一次升级certd版本，切记切记先备份一下数据
|
如果您是第一次升级certd版本，切记切记先备份一下数据
|
||||||
很多人docker不太会配置，数据目录没有映射出来，升级导致数据丢失
|
|
||||||
```
|
|
||||||
# docker-compose.yaml配置
|
|
||||||
- /data/certd:/app/data # 请务必确保 /app/data 这个路径没有改动，固定写死
|
|
||||||
```
|
|
||||||
具体备份方法可以参考上面每种部署方式升级方法后面的备份章节
|
|
||||||
:::
|
:::
|
||||||
|
|
||||||
## 升级日志
|
## 升级日志
|
||||||
|
|||||||
@@ -9,7 +9,6 @@
|
|||||||
|
|
||||||
https://apifox.com/apidoc/shared-2e76f8c4-7c58-413b-a32d-a1316529af44/254949529e0
|
https://apifox.com/apidoc/shared-2e76f8c4-7c58-413b-a32d-a1316529af44/254949529e0
|
||||||
|
|
||||||
|
|
||||||
## Token生成方法
|
## Token生成方法
|
||||||
|
|
||||||
header中传入x-certd-token即可调用开放接口
|
header中传入x-certd-token即可调用开放接口
|
||||||
@@ -18,18 +17,6 @@ header中传入x-certd-token即可调用开放接口
|
|||||||
3、将content加上keySecret进行签名： sign = md5(content + keySecret)
|
3、将content加上keySecret进行签名： sign = md5(content + keySecret)
|
||||||
4、然后将content和sign分别base64后用.号连接： x-certd-token = base64(content) +"."+base64(sign)
|
4、然后将content和sign分别base64后用.号连接： x-certd-token = base64(content) +"."+base64(sign)
|
||||||
|
|
||||||
|
|
||||||
## 参数
|
|
||||||
支持证书id和域名两种方式获取证书。
|
|
||||||
|
|
||||||
## 创建新的证书申请
|
|
||||||
参数autoApply=true，将在没有证书时自动触发申请证书，检查逻辑如下：
|
|
||||||
1. 如果证书仓库里面有，且没有过期，就直接返回证书
|
|
||||||
2. 如果没有或者已过期，就会去找流水线，有就触发流水线执行
|
|
||||||
3. 如果没有流水线，就创建一个流水线，触发运行（`注意：需要提前在域名管理中配置好域名校验方式，否则会申请失败`）
|
|
||||||
4. 再次采用相同参数请求接口，如果在申请过程中，就会提示`正在申请中`，可轮循获取状态，直到证书申请成功。
|
|
||||||
|
|
||||||
|
|
||||||
## SDK
|
## SDK
|
||||||
待开发
|
待开发
|
||||||
|
|
||||||
|
|||||||
@@ -2,71 +2,50 @@
|
|||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **主机登录授权** | |
|
| 1.| **阿里云授权** | |
|
||||||
| 2.| **阿里云授权** | |
|
| 2.| **EAB授权** | ZeroSSL证书申请需要EAB授权 |
|
||||||
| 3.| **阿里云ESA授权** | |
|
| 3.| **google cloud** | 谷歌云授权 |
|
||||||
| 4.| **腾讯云** | |
|
| 4.| **主机登录授权** | |
|
||||||
| 5.| **华为云授权** | |
|
| 5.| **SFTP授权** | |
|
||||||
| 6.| **火山引擎** | |
|
| 6.| **阿里云OSS授权** | 包含地域和Bucket |
|
||||||
| 7.| **京东云** | |
|
| 7.| **FTP授权** | |
|
||||||
| 8.| **七牛云授权** | |
|
| 8.| **腾讯云** | |
|
||||||
| 9.| **天翼云授权** | |
|
| 9.| **腾讯云COS授权** | 腾讯云对象存储授权，包含地域和存储桶 |
|
||||||
| 10.| **baota授权** | |
|
| 10.| **七牛云授权** | |
|
||||||
| 11.| **百度云授权** | |
|
| 11.| **七牛OSS授权** | |
|
||||||
| 12.| **EAB授权** | ZeroSSL证书申请需要EAB授权 |
|
| 12.| **天翼云授权** | |
|
||||||
| 13.| **google cloud** | 谷歌云授权 |
|
| 13.| **s3/minio授权** | S3/minio oss授权 |
|
||||||
| 14.| **SFTP授权** | |
|
| 14.| **baota授权** | |
|
||||||
| 15.| **阿里云OSS授权** | 包含地域和Bucket |
|
| 15.| **易盾DCDN授权** | https://user.yiduncdn.com |
|
||||||
| 16.| **FTP授权** | |
|
| 16.| **易盾rcdn授权** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) |
|
||||||
| 17.| **腾讯云COS授权** | 腾讯云对象存储授权，包含地域和存储桶 |
|
| 17.| **易发云短信** | sms.yfyidc.cn/ |
|
||||||
| 18.| **七牛OSS授权** | |
|
| 18.| **cdnfly授权** | |
|
||||||
| 19.| **s3/minio授权** | S3/minio oss授权 |
|
| 19.| **群晖登录授权** | |
|
||||||
| 20.| **宝塔云WAF授权** | 用于连接和管理宝塔云WAF服务的授权配置 |
|
| 20.| **k8s授权** | |
|
||||||
| 21.| **易盾DCDN授权** | https://user.yiduncdn.com |
|
| 21.| **1panel授权** | 账号和密码 |
|
||||||
| 22.| **易盾rcdn授权** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) |
|
| 22.| **百度云授权** | |
|
||||||
| 23.| **易发云短信** | sms.yfyidc.cn/ |
|
| 23.| **LeCDN授权** | |
|
||||||
| 24.| **cdnfly授权** | |
|
| 24.| **白山云授权** | |
|
||||||
| 25.| **群晖登录授权** | |
|
| 25.| **plesk授权** | |
|
||||||
| 26.| **k8s授权** | |
|
| 26.| **易支付** | |
|
||||||
| 27.| **1panel授权** | 账号和密码 |
|
| 27.| **支付宝** | |
|
||||||
| 28.| **LeCDN授权** | |
|
| 28.| **微信支付** | |
|
||||||
| 29.| **白山云授权** | |
|
| 29.| **长亭雷池授权** | |
|
||||||
| 30.| **plesk授权** | |
|
| 30.| **lucky** | |
|
||||||
| 31.| **易支付** | |
|
| 31.| **括彩云cdn授权** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) |
|
||||||
| 32.| **支付宝** | |
|
| 32.| **uniCloud** | unicloud授权 |
|
||||||
| 33.| **微信支付** | |
|
| 33.| **华为云授权** | |
|
||||||
| 34.| **长亭雷池授权** | |
|
| 34.| **西部数码授权** | |
|
||||||
| 35.| **lucky** | |
|
| 35.| **多吉云** | |
|
||||||
| 36.| **括彩云cdn授权** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) |
|
| 36.| **我爱云授权** | 我爱云CDN |
|
||||||
| 37.| **uniCloud** | unicloud授权 |
|
| 37.| **CacheFly** | CacheFly |
|
||||||
| 38.| **猫云授权** | |
|
| 38.| **Gcore** | Gcore |
|
||||||
| 39.| **授权插件示例** | |
|
| 39.| **亚马逊云aws授权** | |
|
||||||
| 40.| **西部数码授权** | |
|
| 40.| **dns.la授权** | |
|
||||||
| 41.| **多吉云** | |
|
| 41.| **又拍云** | |
|
||||||
| 42.| **我爱云授权** | 我爱云CDN |
|
| 42.| **火山引擎** | |
|
||||||
| 43.| **CacheFly** | CacheFly |
|
| 43.| **京东云** | |
|
||||||
| 44.| **Gcore** | Gcore |
|
| 44.| **51dns授权** | |
|
||||||
| 45.| **亚马逊云aws授权** | |
|
|
||||||
| 46.| **亚马逊云科技（国区）授权** | |
|
|
||||||
| 47.| **dns.la授权** | |
|
|
||||||
| 48.| **又拍云** | |
|
|
||||||
| 49.| **51dns授权** | |
|
|
||||||
| 50.| **FlexCDN授权** | |
|
|
||||||
| 51.| **farcdn授权** | |
|
|
||||||
| 52.| **cloudflare授权** | |
|
|
||||||
| 53.| **Github授权** | |
|
|
||||||
| 54.| **namesilo授权** | |
|
|
||||||
| 55.| **proxmox** | |
|
|
||||||
| 56.| **网宿授权** | |
|
|
||||||
| 57.| **金山云授权** | |
|
|
||||||
| 58.| **APISIX授权** | |
|
|
||||||
| 59.| **Dokploy授权** | |
|
|
||||||
| 60.| **godaddy授权** | |
|
|
||||||
| 61.| **新网授权** | |
|
|
||||||
| 62.| **新网授权（代理方式）** | |
|
|
||||||
| 63.| **新网互联授权** | 仅支持代理账号，ip需要加入白名单 |
|
|
||||||
| 64.| **中国移动CND授权** | |
|
|
||||||
| 65.| **雨云授权** | https://app.rainyun.com/ |
|
|
||||||
|
|
||||||
<style module>
|
<style module>
|
||||||
table th:first-of-type {
|
table th:first-of-type {
|
||||||
|
|||||||
@@ -1,5 +1,5 @@
|
|||||||
# 任务插件
|
# 任务插件
|
||||||
共 `105` 款任务插件
|
共 `70` 款任务插件
|
||||||
## 1. 证书申请
|
## 1. 证书申请
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
@@ -15,8 +15,6 @@
|
|||||||
| 2.| **IIS-部署到IIS站点** | |
|
| 2.| **IIS-部署到IIS站点** | |
|
||||||
| 3.| **主机-执行远程主机脚本命令** | 可以执行重启nginx等操作让证书生效 |
|
| 3.| **主机-执行远程主机脚本命令** | 可以执行重启nginx等操作让证书生效 |
|
||||||
| 4.| **主机-部署证书到SSH主机** | SFTP上传证书到主机，然后SSH执行部署脚本命令 |
|
| 4.| **主机-部署证书到SSH主机** | SFTP上传证书到主机，然后SSH执行部署脚本命令 |
|
||||||
| 5.| **主机-复制到本机** | 【仅管理员使用】实际上是复制证书到docker容器内的某个路径，需要做目录映射到宿主机 |
|
|
||||||
| 6.| **上传证书到对象存储OSS** | 支持阿里云OSS、腾讯云COS、七牛云KODO、S3、MinIO、FTP、SFTP |
|
|
||||||
## 3. CDN
|
## 3. CDN
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
@@ -24,47 +22,33 @@
|
|||||||
| 1.| **易盾-部署到易盾DCDN** | 主要是防御，http://user.yiduncdn.com/ |
|
| 1.| **易盾-部署到易盾DCDN** | 主要是防御，http://user.yiduncdn.com/ |
|
||||||
| 2.| **易盾-部署到易盾RCDN** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) |
|
| 2.| **易盾-部署到易盾RCDN** | 易盾CDN，每月免费30G，[注册即领](https://rhcdn.yiduncdn.com/register?code=8mn536rrzfbf8) |
|
||||||
| 3.| **cdnfly-部署证书到cdnfly** | cdnfly |
|
| 3.| **cdnfly-部署证书到cdnfly** | cdnfly |
|
||||||
| 4.| **LeCDN-更新证书** | |
|
| 4.| **百度云-部署证书到CDN** | 部署到百度云CDN |
|
||||||
| 5.| **LeCDN-更新证书V2** | 支持新版本LeCDN |
|
| 5.| **LeCDN-更新证书** | |
|
||||||
| 6.| **白山云-更新证书** | |
|
| 6.| **LeCDN-更新证书V2** | 支持新版本LeCDN |
|
||||||
| 7.| **天翼云-部署证书到CDN** | 部署证书到天翼云CDN和全站加速 |
|
| 7.| **白山云-更新证书** | |
|
||||||
| 8.| **括彩云-部署到括彩云CDN** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) |
|
| 8.| **天翼云-部署证书到CDN** | 部署证书到天翼云CDN和全站加速 |
|
||||||
| 9.| **西数-部署到虚拟主机** | 西部数码部署证书到虚拟主机 |
|
| 9.| **括彩云-部署到括彩云CDN** | 括彩云CDN，每月免费30G，[注册即领](https://kuocaicdn.com/register?code=8mn536rrzfbf8) |
|
||||||
| 10.| **多吉云-部署到多吉云CDN** | |
|
| 10.| **多吉云-部署到多吉云CDN** | |
|
||||||
| 11.| **我爱云-部署证书到我爱云CDN** | 部署证书到我爱云CDN |
|
| 11.| **我爱云-部署证书到我爱云CDN** | 部署证书到我爱云CDN |
|
||||||
| 12.| **CacheFly-部署证书到CacheFly** | 部署证书到 CacheFly |
|
| 12.| **CacheFly-部署证书到CacheFly** | 部署证书到 CacheFly |
|
||||||
| 13.| **Gcore-部署证书到Gcore** | 仅上传 并不会部署到cdn |
|
| 13.| **Gcore-部署证书到Gcore** | 仅上传 并不会部署到cdn |
|
||||||
| 14.| **Gcore-刷新Gcore证书** | 刷新现有的证书 |
|
| 14.| **Gcore-刷新Gcore证书** | 刷新现有的证书 |
|
||||||
| 15.| **又拍云-部署证书到CDN/USS** | 支持又拍云CDN，又拍云云存储USS |
|
| 15.| **又拍云-部署证书到CDN/USS** | 支持又拍云CDN，又拍云云存储USS |
|
||||||
| 16.| **FlexCDN-更新证书** | |
|
|
||||||
| 17.| **farcdn-更新证书** | www.farcdn.net |
|
|
||||||
| 18.| **雨云-更新证书** | app.rainyun.com |
|
|
||||||
| 19.| **网宿-更新证书** | 网宿证书自动更新 |
|
|
||||||
| 20.| **金山云-更新CDN证书** | 金山云自动更新CDN证书 |
|
|
||||||
| 21.| **APISIX-更新证书** | 自动更新APISIX证书 |
|
|
||||||
| 22.| **中国移动-部署证书到CDN** | 中国移动自动部署证书到CDN |
|
|
||||||
## 4. 面板
|
## 4. 面板
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **宝塔-面板证书部署** | 部署宝塔面板本身的ssl证书 |
|
| 1.| **宝塔-面板证书部署** | 部署宝塔面板本身的ssl证书 |
|
||||||
| 2.| **宝塔-网站证书部署** | 部署宝塔管理的站点的ssl证书，目前支持宝塔网站站点、docker站点等。本插件也支持aaPanel。 |
|
| 2.| **宝塔-网站证书部署** | 部署宝塔管理的站点的ssl证书，目前支持网站站点、docker站点等 |
|
||||||
| 3.| **宝塔-WAF证书部署** | 部署宝塔云WAF/aaWAF |
|
| 3.| **群晖-部署证书到群晖面板** | Synology，支持6.x以上版本 |
|
||||||
| 4.| **宝塔win-网站证书部署** | 部署到Windows版宝塔管理的站点的ssl证书 |
|
| 4.| **K8S-部署证书到Secret** | 部署证书到k8s的secret |
|
||||||
| 5.| **宝塔-删除过期证书** | 删除证书夹中过期证书 |
|
| 5.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress |
|
||||||
| 6.| **群晖-部署证书到群晖面板** | Synology，支持6.x以上版本 |
|
| 6.| **1Panel-部署证书到1Panel** | 更新1Panel的证书 |
|
||||||
| 7.| **K8S-部署证书到Secret** | 部署证书到k8s的secret |
|
| 7.| **Plesk-部署Plesk网站证书** | |
|
||||||
| 8.| **K8S-Ingress 证书部署** | 部署证书到k8s的Ingress |
|
| 8.| **雷池-更新证书** | 更新长亭雷池WAF的证书 |
|
||||||
| 9.| **K8S-Apply自定义yaml** | apply自定义yaml到k8s |
|
| 9.| **lucky-更新Lucky证书** | |
|
||||||
| 10.| **1Panel-部署证书到1Panel** | 更新1Panel的证书 |
|
| 10.| **uniCloud-部署到服务空间** | 部署到服务空间 |
|
||||||
| 11.| **Plesk-部署Plesk网站证书** | |
|
| 11.| **威联通-部署证书到威联通** | 部署证书到qnap |
|
||||||
| 12.| **雷池-更新证书** | 更新长亭雷池WAF的证书 |
|
|
||||||
| 13.| **lucky-更新Lucky证书** | |
|
|
||||||
| 14.| **uniCloud-部署到服务空间** | 部署到服务空间 |
|
|
||||||
| 15.| **威联通-部署证书到威联通** | 部署证书到qnap |
|
|
||||||
| 16.| **飞牛NAS-部署证书** | |
|
|
||||||
| 17.| **Proxmox-上传证书到Proxmox** | |
|
|
||||||
| 18.| **Dokploy-部署server证书** | 自动更新Dokploy server证书 |
|
|
||||||
## 5. 阿里云
|
## 5. 阿里云
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
@@ -73,24 +57,18 @@
|
|||||||
| 2.| **阿里云-部署至任意云资源** | 【不建议使用】需要消耗阿里云自动部署次数，支持SLB、LIVE、webHosting、VOD、CR、DCDN、DDoS、CDN、ALB、APIGateway、FC、GA、MSE、NLB、OSS、SAE、WAF等云产品 |
|
| 2.| **阿里云-部署至任意云资源** | 【不建议使用】需要消耗阿里云自动部署次数，支持SLB、LIVE、webHosting、VOD、CR、DCDN、DDoS、CDN、ALB、APIGateway、FC、GA、MSE、NLB、OSS、SAE、WAF等云产品 |
|
||||||
| 3.| **阿里云-部署证书至CDN** | 自动部署域名证书至阿里云CDN |
|
| 3.| **阿里云-部署证书至CDN** | 自动部署域名证书至阿里云CDN |
|
||||||
| 4.| **阿里云-部署证书至DCDN** | 依赖证书申请前置任务，自动部署域名证书至阿里云DCDN |
|
| 4.| **阿里云-部署证书至DCDN** | 依赖证书申请前置任务，自动部署域名证书至阿里云DCDN |
|
||||||
| 5.| **阿里云-部署证书至OSS** | 部署域名证书至阿里云OSS自定义域名，不是上传到阿里云oss |
|
| 5.| **阿里云-部署证书至OSS** | 自动部署域名证书至阿里云OSS |
|
||||||
| 6.| **阿里云-上传证书到CAS** | 上传证书到阿里云证书管理服务（CAS），如果不想在阿里云上同一份证书上传多次，可以把此任务作为前置任务，其他阿里云任务证书那一项选择此任务的输出 |
|
| 6.| **阿里云-上传证书到阿里云** | 如果不想在阿里云上同一份证书上传多次，可以把此任务作为前置任务，其他阿里云任务证书那一项选择此任务的输出 |
|
||||||
| 7.| **阿里云-部署至阿里云WAF** | 部署证书到阿里云WAF |
|
| 7.| **阿里云-部署至阿里云WAF** | 部署证书到阿里云WAF |
|
||||||
| 8.| **阿里云-部署至ALB（应用负载均衡）** | ALB,更新监听器的默认证书 |
|
| 8.| **阿里云-部署至ALB（应用负载均衡）** | ALB,更新监听器的默认证书 |
|
||||||
| 9.| **阿里云-部署至NLB（网络负载均衡）** | NLB,网络负载均衡,更新监听器的默认证书 |
|
| 9.| **阿里云-部署至NLB（网络负载均衡）** | NLB,网络负载均衡,更新监听器的默认证书 |
|
||||||
| 10.| **阿里云-部署至CLB(传统负载均衡)** | 部署证书到阿里云CLB(传统负载均衡) |
|
| 10.| **阿里云-部署至SLB(传统负载均衡)** | 部署证书到阿里云SLB(传统负载均衡) |
|
||||||
| 11.| **阿里云-部署至阿里云FC(3.0)** | 部署证书到阿里云函数计算（FC3.0） |
|
| 11.| **阿里云-部署至阿里云FC(3.0)** | 部署证书到阿里云函数计算（FC3.0）,【注意】证书的加密算法必须选择【pkcs1旧版】 |
|
||||||
| 12.| **阿里云-部署至ESA** | 部署证书到阿里云ESA(边缘安全加速)，自动删除过期证书 |
|
|
||||||
| 13.| **阿里云-部署至VOD** | 部署证书到阿里云视频点播（vod） |
|
|
||||||
| 14.| **阿里云-部署证书至API网关** | 自动部署域名证书至阿里云API网关（APIGateway） |
|
|
||||||
| 15.| **阿里云-部署至云原生API网关/AI网关** | 自动部署域名证书至云原生API网关、AI网关 |
|
|
||||||
## 6. 华为云
|
## 6. 华为云
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **华为云-部署证书至CDN** | |
|
| 1.| **华为云-部署证书至CDN** | |
|
||||||
| 2.| **华为云-上传证书至CCM** | 上传证书到华为云云证书管理（CCM） |
|
|
||||||
| 3.| **华为云-部署证书至OBS** | |
|
|
||||||
## 7. 腾讯云
|
## 7. 腾讯云
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
@@ -101,15 +79,9 @@
|
|||||||
| 4.| **腾讯云-部署到CDN-v2** | 推荐使用 |
|
| 4.| **腾讯云-部署到CDN-v2** | 推荐使用 |
|
||||||
| 5.| **腾讯云-上传证书到腾讯云** | 上传成功后输出：tencentCertId |
|
| 5.| **腾讯云-上传证书到腾讯云** | 上传成功后输出：tencentCertId |
|
||||||
| 6.| **腾讯云-部署证书到COS** | 部署到腾讯云COS源站域名证书【注意：很不稳定，需要重试很多次偶尔才能成功一次】 |
|
| 6.| **腾讯云-部署证书到COS** | 部署到腾讯云COS源站域名证书【注意：很不稳定，需要重试很多次偶尔才能成功一次】 |
|
||||||
| 7.| **腾讯云-部署到腾讯云EO** | 腾讯云边缘安全加速平台EdgeOne(EO)，必须配置上传证书到腾讯云任务 |
|
| 7.| **腾讯云-部署到腾讯云EO** | 腾讯云边缘安全加速平台EO，必须配置上传证书到腾讯云任务 |
|
||||||
| 8.| **腾讯云-删除即将过期证书** | 仅删除未使用的证书 |
|
| 8.| **腾讯云-删除即将过期证书** | 仅删除未使用的证书 |
|
||||||
| 9.| **腾讯云-部署到TKE** | 修改TKE集群密钥配置，支持Opaque和TLS证书类型。注意：
|
| 9.| **腾讯云-部署到TKE-ingress** | serverless集群请使用K8S部署插件；Qcloud类型需要【上传到腾讯云】作为前置任务；ApiServer未开启外网访问则需要做域名的内网IP映射 |
|
||||||
1. serverless集群请使用K8S部署插件；
|
|
||||||
2. Opaque类型需要【上传到腾讯云】作为前置任务；
|
|
||||||
3. ApiServer需要开通公网访问（或者certd可访问），实际上底层仍然是通过KubeClient进行部署 |
|
|
||||||
| 10.| **腾讯云-部署到腾讯云直播** | https://console.cloud.tencent.com/live/ |
|
|
||||||
| 11.| **腾讯云-实例开关机** | 腾讯云实例开关机 |
|
|
||||||
| 12.| **腾讯云-更新证书(Id不变)** | 根据证书id一键更新腾讯云证书并自动部署（Id不变），注意该接口为腾讯云白名单功能，非白名单用户无法使用该功能 |
|
|
||||||
## 8. 火山引擎
|
## 8. 火山引擎
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
@@ -119,8 +91,6 @@
|
|||||||
| 3.| **火山引擎-上传证书至证书中心** | 上传证书至火山引擎证书中心 |
|
| 3.| **火山引擎-上传证书至证书中心** | 上传证书至火山引擎证书中心 |
|
||||||
| 4.| **火山引擎-部署证书至ALB** | 部署至火山引擎应用负载均衡 |
|
| 4.| **火山引擎-部署证书至ALB** | 部署至火山引擎应用负载均衡 |
|
||||||
| 5.| **火山引擎-部署证书至Live** | 部署至火山引擎视频直播 |
|
| 5.| **火山引擎-部署证书至Live** | 部署至火山引擎视频直播 |
|
||||||
| 6.| **火山引擎-部署证书至DCDN** | 部署至火山引擎全站加速 |
|
|
||||||
| 7.| **火山引擎-部署证书至VOD** | 部署至火山引擎视频点播(暂不可用) |
|
|
||||||
## 9. 京东云
|
## 9. 京东云
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
@@ -128,43 +98,26 @@
|
|||||||
| 1.| **京东云-部署证书至CDN** | 京东云内容分发网络 |
|
| 1.| **京东云-部署证书至CDN** | 京东云内容分发网络 |
|
||||||
| 2.| **京东云-更新已有证书** | 更新SSL数字证书中的证书 |
|
| 2.| **京东云-更新已有证书** | 更新SSL数字证书中的证书 |
|
||||||
| 3.| **京东云-上传新证书** | 上传证书到SSL数字证书中心 |
|
| 3.| **京东云-上传新证书** | 上传证书到SSL数字证书中心 |
|
||||||
## 10. 百度云
|
## 10. 七牛云
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
|
||||||
|-----|-----|-----|
|
|
||||||
| 1.| **百度云-部署证书到CDN** | 部署到百度云CDN |
|
|
||||||
| 2.| **百度云-部署证书到负载均衡** | 部署到百度云负载均衡，包括BLB、APPBLB |
|
|
||||||
| 3.| **百度云-上传到证书托管** | 上传证书到百度云证书托管中心 |
|
|
||||||
## 11. 七牛云
|
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **七牛云-部署证书至OSS** | 自动部署域名证书至七牛云KODO，注意是自定义源站域名，不是CDN域名 |
|
| 1.| **七牛云-部署证书至OSS** | 自动部署域名证书至七牛云KODO，注意是自定义源站域名，不是CDN域名 |
|
||||||
| 2.| **七牛云-部署证书至CDN/DCDN** | 自动部署域名证书至七牛云CDN、DCDN |
|
| 2.| **七牛云-部署证书至CDN** | 自动部署域名证书至七牛云CDN |
|
||||||
| 3.| **七牛云-上传证书到七牛云** | 上传到七牛云 |
|
## 11. 亚马逊云
|
||||||
## 12. 亚马逊云
|
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **AWS-部署证书到CloudFront** | 部署证书到 AWS CloudFront |
|
| 1.| **AWS-部署证书到CloudFront** | 部署证书到 AWS CloudFront |
|
||||||
| 2.| **AWS-上传证书到ACM** | 上传证书 AWS ACM |
|
## 12. 其他
|
||||||
| 3.| **AWS(国区)-部署证书到CloudFront** | 部署证书到 AWS CloudFront |
|
|
||||||
## 13. 其他
|
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **Demo-测试插件** | |
|
| 1.| **Demo-测试插件** | |
|
||||||
| 2.| **等待** | 等待一段时间 |
|
| 2.| **重启 Certd** | 【仅管理员可用】 重启 certd的https服务，用于更新 Certd 的 ssl 证书 |
|
||||||
| 3.| **邮件发送证书** | 通过邮件发送证书 |
|
| 3.| **自定义js脚本** | 【仅管理员】运行自定义js脚本执行 |
|
||||||
| 4.| **webhook方式部署证书** | 调用webhook部署证书 |
|
| 4.| **等待** | 等待一段时间 |
|
||||||
| 5.| **Github-检查Release版本** | 检查最新Release版本并推送消息 |
|
| 5.| **数据库备份** | 仅支持备份SQLite数据库 |
|
||||||
## 14. 管理
|
|
||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
|
||||||
|-----|-----|-----|
|
|
||||||
| 1.| **重启 Certd** | 【仅管理员可用】 重启 certd的https服务，用于更新 Certd 的 ssl 证书 |
|
|
||||||
| 2.| **自定义js脚本** | 【仅管理员】运行自定义js脚本执行 |
|
|
||||||
| 3.| **数据库备份** | 【仅管理员可用】仅支持备份SQLite数据库 |
|
|
||||||
|
|
||||||
<style module>
|
<style module>
|
||||||
table th:first-of-type {
|
table th:first-of-type {
|
||||||
|
|||||||
@@ -3,23 +3,13 @@
|
|||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **阿里云** | 阿里云DNS解析提供商 |
|
| 1.| **阿里云** | 阿里云DNS解析提供商 |
|
||||||
| 2.| **阿里ESA** | 阿里ESA DNS解析 |
|
| 2.| **腾讯云** | 腾讯云域名DNS解析提供者 |
|
||||||
| 3.| **火山引擎** | 火山引擎DNS解析提供商 |
|
| 3.| **华为云** | 华为云DNS解析提供商 |
|
||||||
| 4.| **京东云** | 京东云DNS解析提供商 |
|
| 4.| **西部数码** | west dns provider |
|
||||||
| 5.| **新网** | 新网域名解析 |
|
| 5.| **dns.la** | dns.la |
|
||||||
| 6.| **新网(代理方式)** | 新网域名解析(代理方式) |
|
| 6.| **火山引擎** | 火山引擎DNS解析提供商 |
|
||||||
| 7.| **腾讯云** | 腾讯云域名DNS解析提供者 |
|
| 7.| **京东云** | 京东云DNS解析提供商 |
|
||||||
| 8.| **腾讯云EO DNS** | 腾讯云EO DNS解析提供者 |
|
| 8.| **51dns** | 51DNS |
|
||||||
| 9.| **华为云** | 华为云DNS解析提供商 |
|
|
||||||
| 10.| **西部数码** | west dns provider |
|
|
||||||
| 11.| **dns.la** | dns.la |
|
|
||||||
| 12.| **雨云** | 雨云DNS解析提供商 |
|
|
||||||
| 13.| **cloudflare** | cloudflare dns provider |
|
|
||||||
| 14.| **namesilo** | namesilo dns provider |
|
|
||||||
| 15.| **godaddy** | GoDaddy |
|
|
||||||
| 16.| **Dns提供商Demo** | dns provider示例 |
|
|
||||||
| 17.| **51dns** | 51DNS |
|
|
||||||
| 18.| **新网互联** | 新网互联 |
|
|
||||||
|
|
||||||
<style module>
|
<style module>
|
||||||
table th:first-of-type {
|
table th:first-of-type {
|
||||||
|
|||||||
@@ -2,10 +2,10 @@
|
|||||||
|
|
||||||
| 序号 | 名称 | 说明 |
|
| 序号 | 名称 | 说明 |
|
||||||
|-----|-----|-----|
|
|-----|-----|-----|
|
||||||
| 1.| **电子邮件** | 电子邮件通知 |
|
| 1.| **企业微信通知** | 企业微信群聊机器人通知 |
|
||||||
| 2.| **自定义webhook** | 根据模版自定义http请求 |
|
| 2.| **电子邮件** | 电子邮件通知 |
|
||||||
| 3.| **企业微信通知** | 企业微信群聊机器人通知 |
|
| 3.| **爱语飞飞微信通知(iyuu)** | https://iyuu.cn/ |
|
||||||
| 4.| **爱语飞飞微信通知(iyuu)** | https://iyuu.cn/ |
|
| 4.| **自定义webhook** | 根据模版自定义http请求 |
|
||||||
| 5.| **Server酱ᵀ** | https://sct.ftqq.com/ |
|
| 5.| **Server酱ᵀ** | https://sct.ftqq.com/ |
|
||||||
| 6.| **Server酱³** | https://doc.sc3.ft07.com/serverchan3 |
|
| 6.| **Server酱³** | https://doc.sc3.ft07.com/serverchan3 |
|
||||||
| 7.| **AnPush** | https://anpush.com |
|
| 7.| **AnPush** | https://anpush.com |
|
||||||
@@ -14,10 +14,6 @@
|
|||||||
| 10.| **Slack通知** | Slack消息推送通知 |
|
| 10.| **Slack通知** | Slack消息推送通知 |
|
||||||
| 11.| **Bark 通知** | Bark 推送通知插件 |
|
| 11.| **Bark 通知** | Bark 推送通知插件 |
|
||||||
| 12.| **飞书通知** | 飞书群聊webhook通知 |
|
| 12.| **飞书通知** | 飞书群聊webhook通知 |
|
||||||
| 13.| **钉钉通知** | 钉钉群聊通知 |
|
|
||||||
| 14.| **VoceChat通知** | https://voce.chat |
|
|
||||||
| 15.| **OneBot V11 通知** | 通过动态拼接URL发送 OneBot V11 协议消息 |
|
|
||||||
| 16.| **MeoW通知** | https://api.chuckfang.com/ |
|
|
||||||
|
|
||||||
<style module>
|
<style module>
|
||||||
table th:first-of-type {
|
table th:first-of-type {
|
||||||
|
|||||||
@@ -0,0 +1,73 @@
|
|||||||
|
# 常见报错解决
|
||||||
|
|
||||||
|
## 1. getaddrinfo ENOTFOUND错误
|
||||||
|
如果出现`getaddrinfo ENOTFOUND`/`getaddrinfo EAI_AGAIN`错误，可以尝试在`docker-compose.yaml`中设置dns
|
||||||
|
```yaml
|
||||||
|
version: '3.3' # 兼容旧版docker-compose
|
||||||
|
services:
|
||||||
|
certd:
|
||||||
|
#↓↓↓↓ ------------ # 如果出现getaddrinfo ENOTFOUND 或 EAI_AGAIN错误，可以尝试设置dns
|
||||||
|
dns:
|
||||||
|
- 223.5.5.5 # 阿里云公共dns
|
||||||
|
- 223.6.6.6
|
||||||
|
# # ↓↓↓↓ ------- # 如果你服务器在腾讯云，可以用这个替换上面阿里云的公共dns
|
||||||
|
# - 119.29.29.29 # 腾讯云公共dns
|
||||||
|
# - 182.254.116.116
|
||||||
|
# # ↓↓↓↓ ------- # 如果你服务器部署在国外，可以用这个替换上面阿里云的公共dns
|
||||||
|
# - 8.8.8.8 # 谷歌公共dns
|
||||||
|
# - 8.8.4.4
|
||||||
|
```
|
||||||
|
|
||||||
|
如果仍然有问题,按如下步骤检查是否能够ping通域名
|
||||||
|
```shell
|
||||||
|
docker exec -it certd /bin/sh
|
||||||
|
ping www.baidu.com
|
||||||
|
ping gg.px.certd.handfree.work
|
||||||
|
ping app.handfree.work
|
||||||
|
```
|
||||||
|
|
||||||
|
如果您是宝塔部署的
|
||||||
|
可以试试将容器网络加入brige网络，看是否解决问题
|
||||||
|
|
||||||
|
|
||||||
|
如果还是不行，请联系我们
|
||||||
|
|
||||||
|
|
||||||
|
## 2. 连接IPv6超时
|
||||||
|
docker-compose 需要放开IPv6网络的配置
|
||||||
|
```yaml
|
||||||
|
services:
|
||||||
|
certd:
|
||||||
|
networks:
|
||||||
|
- ip6net
|
||||||
|
# ↓↓↓↓ -------------------------------------------------------------- 启用ipv6网络，还需要把上面networks的注释放开
|
||||||
|
networks:
|
||||||
|
ip6net:
|
||||||
|
enable_ipv6: true
|
||||||
|
ipam:
|
||||||
|
config:
|
||||||
|
- subnet: 2001:db8::/64
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||
|
## 3. SSL_CERT_NOT_MATCH_DOMAIN_ERROR
|
||||||
|
部署证书任务报类似 `SSL_CERT_NOT_MATCH_DOMAIN_ERROR`错误
|
||||||
|
这是由于当前流水线的证书域名与要部署的目标站点的域名不匹配导致的，在申请证书任务中，增加目标站点域名，重新运行流水线即可
|
||||||
|
|
||||||
|
|
||||||
|
## 4. 没有服务器配置文件，请检查是否开启了外网映射！
|
||||||
|
宝塔网站证书部署报错：`Error: 没有服务器配置文件，请检查是否开启了外网映射！`
|
||||||
|
解决方案：先手动在宝塔网站中设置一次证书
|
||||||
|
|
||||||
|
|
||||||
|
## 5. 如何查看容器日志
|
||||||
|
```shell
|
||||||
|
docker logs -f --tail 200 certd
|
||||||
|
```
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
+2
-42
@@ -1,4 +1,4 @@
|
|||||||
# 常见问题
|
# 使用问题
|
||||||
|
|
||||||
|
|
||||||
## 1. 是否支持IP证书
|
## 1. 是否支持IP证书
|
||||||
@@ -7,48 +7,8 @@
|
|||||||
|
|
||||||
|
|
||||||
## 2. 建议设置多长时间运行一次流水线
|
## 2. 建议设置多长时间运行一次流水线
|
||||||
建议每天运行一次，检查证书过期时间
|
建议每天运行一次，检查证书过期时间
|
||||||
当证书没过期时，自动跳过部署
|
当证书没过期时，自动跳过部署
|
||||||
当证书到期前35天（创建流水线时可以修改），将会自动重新申请证书，自动部署
|
当证书到期前35天（创建流水线时可以修改），将会自动重新申请证书，自动部署
|
||||||
|
|
||||||
|
|
||||||
## 3. too many certificates 错误
|
|
||||||
当出现如下报错时，说明相同的域名短时间内申请超过5次
|
|
||||||
解决方案：可以加多一个子域名，重新执行就可以规避次错误
|
|
||||||
```
|
|
||||||
"detail": too many certificates (5) already issued for this exact set of idantifiers in the last 168hm0s
|
|
||||||
```
|
|
||||||
|
|
||||||
## 4. ssl.com报错 CAA record does not include ssl.com which is required to issue the certificate
|
|
||||||
ssl.com申请证书要求必须设置CAA记录，表示允许ssl.com为该域名颁发证书
|
|
||||||
请按如下格式添加CAA记录
|
|
||||||
|
|
||||||
| 示例 | 类型 | 域名前缀 | flag | tag | 值 |
|
|
||||||
|-------|-----| -- |-----------|--------|----------------------|
|
|
||||||
| 顶级域名 | CAA | @ | 0 | issue | "ssl.com" （注意有双引号） |
|
|
||||||
| 一级泛域名 | CAA | * | 0 | issue/issuewild | "ssl.com" |
|
|
||||||
| 固定子域名 | CAA | sub | 0 | issue |"ssl.com" |
|
|
||||||
|
|
||||||
## 5. address family not supported
|
|
||||||
启动时出现此错误，是由于您的服务器不支持绑定ipv6地址
|
|
||||||
|
|
||||||
请配置环境变量 certd_koa_hostname=0.0.0.0
|
|
||||||
|
|
||||||
在docker-compose.yml中添加如下配置
|
|
||||||
|
|
||||||
```yaml
|
|
||||||
service:
|
|
||||||
certd:
|
|
||||||
environment:
|
|
||||||
certd_koa_hostname: 0.0.0.0
|
|
||||||
```
|
|
||||||
|
|
||||||
## 6. DNS记录问题
|
|
||||||
|
|
||||||
1. DNS 不要设置CAA记录，删除即可
|
|
||||||
|
|
||||||
2. DNSSEC相关报错，DNSSEC管理中删除即可
|
|
||||||
|
|
||||||
3. DNS 有其他平台申请过的_acme-challenge记录，删除即可
|
|
||||||
|
|
||||||
|
|
||||||
|
|||||||
+1
-7
@@ -7,16 +7,10 @@
|
|||||||
|
|
||||||
https://certd.handsfree.work/
|
https://certd.handsfree.work/
|
||||||
|
|
||||||
注册 -> 创建证书流水线 -> 添加部署任务 -> 测试运行
|
> 注意数据将不定期清理，不定期停止定时任务，生产使用请自行部署
|
||||||
|
|
||||||
> 注意demo的数据将不定期清理，生产使用请自行部署
|
|
||||||
> 包含敏感信息，务必自己本地部署进行生产使用
|
> 包含敏感信息，务必自己本地部署进行生产使用
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## 二、私有化部署
|
## 二、私有化部署
|
||||||
|
|
||||||
由于证书、授权信息等属于高度敏感数据，请务必私有化部署，保障数据安全
|
由于证书、授权信息等属于高度敏感数据，请务必私有化部署，保障数据安全
|
||||||
|
|||||||
@@ -5,10 +5,8 @@
|
|||||||
|
|
||||||
配置环境变量
|
配置环境变量
|
||||||
```shell
|
```shell
|
||||||
# docker-compose.yaml
|
ALIYUN_CLIENT_CONNECT_TIMEOUT=10000 # 连接超时，单位毫秒
|
||||||
environment:
|
ALIYUN_CLIENT_READ_TIMEOUT=10000 #读取数据超时，单位毫秒
|
||||||
- ALIYUN_CLIENT_CONNECT_TIMEOUT=16000 # 连接超时，单位毫秒
|
|
||||||
- ALIYUN_CLIENT_READ_TIMEOUT=16000 #读取数据超时，单位毫秒
|
|
||||||
|
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 22 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 30 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 36 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 15 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 7.2 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 27 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 58 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 23 KiB |
@@ -1,98 +0,0 @@
|
|||||||
# 宝塔IP白名单与动态IP问题
|
|
||||||
调用宝塔接口需要添加IP白名单，但当certd部署在动态IP环境下时，IP白名单就不好添加
|
|
||||||
本章节提供两种解决方案：
|
|
||||||
1. 小范围网段放开（简单）
|
|
||||||
2. nginx代理
|
|
||||||
|
|
||||||
## 一、放开小范围网段
|
|
||||||
|
|
||||||
家庭网络IP虽然会变动，但是只会在小范围变的。
|
|
||||||
|
|
||||||
你可以分析规律，将变动的部分，设置成网段即可
|
|
||||||
|
|
||||||
> 比如出现过： 100.25.1.5 ， 100.25.1.8
|
|
||||||
>
|
|
||||||
> 那么你可以配置 100.25.1.1-100.25.1.255
|
|
||||||
|
|
||||||
|
|
||||||
> 如果出现过： 100.25.1.5 ， 100.25.4.8
|
|
||||||
>
|
|
||||||
> 可以尝试配置 100.25.*.*
|
|
||||||
|
|
||||||
## 二、nginx代理方案
|
|
||||||
|
|
||||||
通过在宝塔中配置一个nginx反向代理，代理宝塔自己的地址
|
|
||||||
|
|
||||||
然后在nginx中配置放开certd需要的接口，缩小影响范围
|
|
||||||
|
|
||||||
让nginx来充当防火墙
|
|
||||||
|
|
||||||
架构图如下：
|
|
||||||
```
|
|
||||||
只要将127.0.0.1加入白名单即可
|
|
||||||
↓
|
|
||||||
certd --------> nginx -------> 宝塔
|
|
||||||
↑
|
|
||||||
拦截除更新证书之外的地址
|
|
||||||
```
|
|
||||||
|
|
||||||
### 1. 添加nginx反向代理
|
|
||||||
|
|
||||||
|
|
||||||
### 2. 域名和代理目标
|
|
||||||
|
|
||||||
|
|
||||||
### 3. 设置放开哪些接口
|
|
||||||
|
|
||||||
|
|
||||||
将如下脚本填入上方文本域中，保存
|
|
||||||
```nginx configuration
|
|
||||||
set $allow_access false;
|
|
||||||
|
|
||||||
# 检查请求的URI是否在白名单中
|
|
||||||
if ($request_uri ~* "^/(site\?action=get_site_types)") {
|
|
||||||
# 允许测试
|
|
||||||
set $allow_access true;
|
|
||||||
}
|
|
||||||
if ($request_uri ~* "^/(config\?action=SavePanelSSL)") {
|
|
||||||
# 允许部署到宝塔面板本身证书
|
|
||||||
set $allow_access true;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($request_uri ~* "^/(mod/docker/com/set_ssl|site\?action=SetSSL|ssl\?action=GetSiteDomain|mod/docker/com/get_site_list)") {
|
|
||||||
# 允许部署宝塔网站证书
|
|
||||||
set $allow_access true;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($request_uri ~* "^/(ssl?action=remove_cloud_cert|ssl\?action=get_cert_list)") {
|
|
||||||
# 允许删除宝塔过期证书
|
|
||||||
set $allow_access true;
|
|
||||||
}
|
|
||||||
|
|
||||||
if ($request_uri ~* "^/(datalist/get_data_list|site/set_site_ssl)") {
|
|
||||||
set $allow_access true;
|
|
||||||
}
|
|
||||||
|
|
||||||
# 如果不在白名单，返回403禁止访问
|
|
||||||
if ($allow_access = false) {
|
|
||||||
return 405;
|
|
||||||
}
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
### 4. 接口IP白名单添加127.0.0.1
|
|
||||||
|
|
||||||
|
|
||||||
### 5. certd中宝塔授权配置改成新的这个域名地址
|
|
||||||
|
|
||||||
|
|
||||||
点击测试检查是否ok ，到这里就可以正常部署证书了
|
|
||||||
|
|
||||||
### 6. 安全加强（将请求地址改成https）
|
|
||||||
在宝塔中配置证书部署任务，选择刚才新建的这个网站，给他部署证书
|
|
||||||
勾选强制https
|
|
||||||
|
|
||||||
更换443端口【可选】
|
|
||||||
|
|
||||||
禁止http访问
|
|
||||||
Binary file not shown.
|
Before Width: | Height: | Size: 49 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 76 KiB |
@@ -0,0 +1,10 @@
|
|||||||
|
# 证书申请失败情况
|
||||||
|
|
||||||
|
|
||||||
|
## DNS记录问题
|
||||||
|
|
||||||
|
1. DNS 不要设置CAA记录，删除即可
|
||||||
|
|
||||||
|
2. DNSSEC相关报错，DNSSEC管理中删除即可
|
||||||
|
|
||||||
|
3. DNS 有其他平台申请过的_acme-challenge记录，删除即可
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
# IP证书申请
|
|
||||||
certd已支持IP证书申请
|
|
||||||
|
|
||||||
> 注意：IP证书有效期只有7天。
|
|
||||||
|
|
||||||
## 申请方式
|
|
||||||
相比普通的域名证书申请方式区别在于：
|
|
||||||
1. 域名栏填写IP
|
|
||||||
2. 校验方式选择HTTP（只能HTTP）
|
|
||||||
3. 证书颁发机构选择默认的Let's Encrypt
|
|
||||||
4. 过期更新天数改成2天
|
|
||||||
@@ -1,10 +0,0 @@
|
|||||||
# 二级子域名托管
|
|
||||||
如果你的域名是免费的二级域名（比如：sub.handsfree.work），托管在CF或者阿里云上
|
|
||||||
在使用DNS方式校验时需要设置子域名托管
|
|
||||||
|
|
||||||
[阿里云子域名托管说明](https://help.aliyun.com/zh/dns/pubz-subdomain-management)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
@@ -2,24 +2,19 @@
|
|||||||
|
|
||||||
## 配置步骤
|
## 配置步骤
|
||||||
|
|
||||||
|
1. 创建应用，获取APPID
|
||||||
1. 注册支付宝商家账号
|
|
||||||
* 开通电脑网站支付产品(需营业执照)： https://b.alipay.com/page/product-workspace/all-product
|
|
||||||
|
|
||||||
|
|
||||||
2. 开放平台，创建应用，获取APPID
|
|
||||||
* 登录支付宝开放平台，进入开发者中心，创建网页应用，获取应用的AppId（左上角复制）
|
* 登录支付宝开放平台，进入开发者中心，创建网页应用，获取应用的AppId（左上角复制）
|
||||||
* 开发者中心：https://open.alipay.com/develop/manage
|
* 开发者中心：https://open.alipay.com/develop/manage
|
||||||
|
|
||||||
|
|
||||||
3. 进入应用详情，选择开发设置，配置接口加签方式 （选择密钥类型）
|
2. 进入应用详情，选择开发设置，配置接口加签方式 （选择密钥类型）
|
||||||
|
|
||||||
* 参考文档：https://opendocs.alipay.com/common/02kdnc?pathHash=fb0c752a
|
* 参考文档：https://opendocs.alipay.com/common/02kdnc?pathHash=fb0c752a
|
||||||
* 此步骤完成后，可以获取应用的私钥、支付宝公钥。
|
* 此步骤完成后，可以获取应用的私钥、支付宝公钥。
|
||||||
* 注意：支付宝不会保存应用的私钥，你需要自己保管好私钥。
|
* 注意：支付宝不会保存应用的私钥，你需要自己保管好私钥。
|
||||||
|
|
||||||
|
|
||||||
4. 在Certd后台配置支付宝
|
3. 在Certd后台配置支付宝
|
||||||
|
|
||||||
* 进入“系统”->"设置"->“支付设置”
|
* 进入“系统”->"设置"->“支付设置”
|
||||||
* 启用支付宝，选择“支付宝配置”，点击添加
|
* 启用支付宝，选择“支付宝配置”，点击添加
|
||||||
|
|||||||
@@ -7,14 +7,13 @@
|
|||||||
services:
|
services:
|
||||||
certd:
|
certd:
|
||||||
environment: # 环境变量
|
environment: # 环境变量
|
||||||
- certd_system_resetAdminPasswd=true
|
- certd_system_resetAdminPasswd=false
|
||||||
```
|
```
|
||||||
## 2. 重启容器
|
## 2. 重启容器
|
||||||
```shell
|
```shell
|
||||||
docker compose up -d
|
docker compose up -d
|
||||||
docker logs -f --tail 500 certd
|
docker logs -f --tail 500 certd
|
||||||
# 观察日志，当日志中输出“重置1号管理员用户密码完成”，即可操作下一步
|
# 观察日志，当日志中输出“重置1号管理员用户的密码完成”，即可操作下一步
|
||||||
# 这里会打印1号管理员记录的用户名，如果你修改过管理员用户名，请注意查看此条日志
|
|
||||||
```
|
```
|
||||||
## 3. 恢复环境变量
|
## 3. 恢复环境变量
|
||||||
修改docker-compose.yaml，将`certd_system_resetAdminPasswd`改回`false`
|
修改docker-compose.yaml，将`certd_system_resetAdminPasswd`改回`false`
|
||||||
@@ -24,6 +23,4 @@ docker logs -f --tail 500 certd
|
|||||||
docker compose up -d
|
docker compose up -d
|
||||||
```
|
```
|
||||||
## 5. 默认密码登录
|
## 5. 默认密码登录
|
||||||
使用`原管理员账号/123456`登录系统，请及时修改管理员密码
|
使用`admin/123456`登录系统，请及时修改管理员密码
|
||||||
> 默认管理员账号： admin
|
|
||||||
> 如果忘记管理员账号，请查看修改密码时的启动日志，会打印管理员账号名
|
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 65 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 34 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 55 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 55 KiB |
@@ -1,17 +0,0 @@
|
|||||||
# 流水线有效期功能
|
|
||||||
|
|
||||||
可以为流水线设置有效期，超过有效期后，流水线将停止运行
|
|
||||||
|
|
||||||
## 1. 打开有效期开关
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## 2. 设置有效期
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## 3. 设置完成
|
|
||||||
该流水线将在有效期结束后停止运行
|
|
||||||
|
|
||||||
@@ -18,12 +18,6 @@
|
|||||||
### 3. 配置Certd项目
|
### 3. 配置Certd项目
|
||||||
|
|
||||||
|
|
||||||
建议加上 `:delegated` 提升性能
|
|
||||||
```yaml
|
|
||||||
volumes:
|
|
||||||
↓↓↓↓------加上这个提升性能
|
|
||||||
- /volume1/docker/certd:/app/data:delegated
|
|
||||||
```
|
|
||||||
|
|
||||||
### 4. 外网访问设置
|
### 4. 外网访问设置
|
||||||
|
|
||||||
|
|||||||
Binary file not shown.
|
Before Width: | Height: | Size: 52 KiB |
Binary file not shown.
|
Before Width: | Height: | Size: 54 KiB |
@@ -8,11 +8,8 @@
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## 如何避免收到腾讯云证书过期邮件
|
## 如何避免收到腾讯云证书过期邮件
|
||||||
|
|
||||||
> 新版本已经自动将证书设置为免提醒，certd上传的证书后续都不会再提醒了。
|
|
||||||
|
|
||||||
腾讯云在证书有效期还剩28天时会发送过期通知邮件
|
腾讯云在证书有效期还剩28天时会发送过期通知邮件
|
||||||
您可以通过配置“腾讯云过期证书删除”任务来避免收到此类邮件。
|
您可以通过配置“腾讯云过期证书删除”任务来避免收到此类邮件。
|
||||||
|
|
||||||
@@ -21,17 +18,4 @@
|
|||||||
注意点：
|
注意点：
|
||||||
> 1. 选择腾讯云授权，需授权`服务角色SSL_QCSLinkedRoleInReplaceLoadCertificate`权限
|
> 1. 选择腾讯云授权，需授权`服务角色SSL_QCSLinkedRoleInReplaceLoadCertificate`权限
|
||||||
> 2. `1.26.14`版本之前Certd创建的证书流水线默认是到期前20天才更新证书，需要将之前创建的证书申请任务的更新天数修改为35天，保证删除之前就已经替换掉即将过期证书
|
> 2. `1.26.14`版本之前Certd创建的证书流水线默认是到期前20天才更新证书，需要将之前创建的证书申请任务的更新天数修改为35天，保证删除之前就已经替换掉即将过期证书
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
## TKE service 的 TCP_SSL Opaque类型证书授权
|
|
||||||
|
|
||||||
部署证书到腾讯云TKE，如果报以下错误：
|
|
||||||
`is forbidden: User "xxxxxx-xxxxx" cannot get resource "secrets" in API group "" in the namespace "default"'`
|
|
||||||
则需要单独从授权管理侧再授权子用户的权限
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Binary file not shown.
|
Before Width: | Height: | Size: 194 KiB |
+5
-5
@@ -24,13 +24,13 @@ features:
|
|||||||
- title: 全自动申请证书
|
- title: 全自动申请证书
|
||||||
details: 支持所有注册商注册的域名
|
details: 支持所有注册商注册的域名
|
||||||
- title: 全自动部署证书
|
- title: 全自动部署证书
|
||||||
details: 支持部署到主机、阿里云、腾讯云等，目前已支持100+部署插件
|
details: 支持部署到主机、阿里云、腾讯云等，目前已支持60+部署插件
|
||||||
- title: 多域名、泛域名打到一个证书上
|
- title: 多域名、泛域名打到一个证书上
|
||||||
details: 支持通配符域名/泛域名，支持多个域名打到一个证书上
|
details: 支持通配符域名/泛域名，支持多个域名打到一个证书上
|
||||||
- title: 多证书格式支持
|
- title: 多证书格式支持
|
||||||
details: 支持pem、pfx、der、jks等多种证书格式，支持Google、Letsencrypt、ZeroSSL证书颁发机构
|
details: 支持pem、pfx、der、jks等多种证书格式，支持Google、Letsencrypt、ZeroSSL证书颁发机构
|
||||||
- title: 私有化部署，数据安全
|
- title: 支持私有化部署
|
||||||
details: 授权数据加密存储，保障数据安全，支持SQLite、Postgresql、MySQL多种数据库
|
details: 授权数据加密存储，保障数据安全
|
||||||
- title: 无痛升级
|
- title: 多数据库支持
|
||||||
details: 有手就行，向下兼容，无需担心数据作废
|
details: 支持SQLite、Postgresql、MySQL数据库
|
||||||
---
|
---
|
||||||
|
|||||||
+1
-1
@@ -9,5 +9,5 @@
|
|||||||
}
|
}
|
||||||
},
|
},
|
||||||
"npmClient": "pnpm",
|
"npmClient": "pnpm",
|
||||||
"version": "1.37.17"
|
"version": "1.36.11"
|
||||||
}
|
}
|
||||||
|
|||||||
+8
-13
@@ -8,41 +8,36 @@
|
|||||||
"@lerna-lite/publish": "^3.9.3",
|
"@lerna-lite/publish": "^3.9.3",
|
||||||
"@lerna-lite/run": "^3.9.3",
|
"@lerna-lite/run": "^3.9.3",
|
||||||
"@lerna-lite/version": "^3.9.3",
|
"@lerna-lite/version": "^3.9.3",
|
||||||
"axios": "^1.9.0",
|
|
||||||
"medium-zoom": "^1.1.0",
|
"medium-zoom": "^1.1.0",
|
||||||
"vitepress": "^2.0.0-alpha.4",
|
"vitepress": "^2.0.0-alpha.4",
|
||||||
"vitepress-plugin-lightbox": "^1.0.2"
|
"vitepress-plugin-lightbox": "^1.0.2"
|
||||||
},
|
},
|
||||||
"scripts": {
|
"scripts": {
|
||||||
"start": "lerna bootstrap --hoist",
|
"start": "lerna bootstrap --hoist",
|
||||||
"start:server": "cd ./packages/ui/certd-server && npm start",
|
|
||||||
"devb": "lerna run dev-build",
|
"devb": "lerna run dev-build",
|
||||||
"i-all": "lerna link && lerna exec npm install ",
|
"i-all": "lerna link && lerna exec npm install ",
|
||||||
"publish": "npm run prepublishOnly2 && lerna publish --force-publish=pro/plus-core --conventional-commits --create-release github && npm run afterpublishOnly ",
|
"publish": "npm run prepublishOnly2 && lerna publish --force-publish=pro/plus-core --conventional-commits --create-release github && npm run afterpublishOnly && npm run commitAll",
|
||||||
"afterpublishOnly": "npm run plugin-doc-gen && npm run copylogs && time /t >trigger/build.trigger && git add ./trigger/build.trigger && git commit -m \"build: trigger build image\" && TIMEOUT /T 10 && npm run commitAll",
|
"afterpublishOnly": "npm run copylogs && time /t >build.trigger && git add ./build.trigger && git commit -m \"build: trigger build image\" && TIMEOUT /T 10 && git push",
|
||||||
"transform-sql": "cd ./packages/ui/certd-server/db/ && node --experimental-json-modules transform.js",
|
"transform-sql": "cd ./packages/ui/certd-server/db/ && node --experimental-json-modules transform.js",
|
||||||
"plugin-doc-gen": "cd ./packages/ui/certd-server/ && npm run export-md",
|
|
||||||
"commitAll": "git add . && git commit -m \"build: publish\" && git push && npm run commitPro",
|
"commitAll": "git add . && git commit -m \"build: publish\" && git push && npm run commitPro",
|
||||||
"commitPro": "cd ./packages/pro/ && git add . && git commit -m \"build: publish\" && git push",
|
"commitPro": "cd ./packages/pro/ && git add . && git commit -m \"build: publish\" && git push",
|
||||||
"copylogs": "copyfiles \"CHANGELOG.md\" ./docs/guide/changelogs/",
|
"copylogs": "copyfiles \"CHANGELOG.md\" ./docs/guide/changelogs/",
|
||||||
"prepublishOnly1": "npm run check && lerna run build ",
|
"prepublishOnly1": "npm run check && lerna run build ",
|
||||||
"prepublishOnly2": "npm run check && npm run before-build && lerna run build ",
|
"prepublishOnly2": "npm run check && npm run before-build && lerna run build ",
|
||||||
"before-build": "npm run transform-sql && cd ./packages/core/basic && time /t >build.md && git add ./build.md && git commit -m \"build: prepare to build\"",
|
"before-build": "npm run transform-sql && cd ./packages/core/basic && time /t >build.md && git add ./build.md && git commit -m \"build: prepare to build\"",
|
||||||
"deploy1": "node --experimental-json-modules ./scripts/deploy.js ",
|
"deploy1": "node --experimental-json-modules deploy.js ",
|
||||||
"check": "node --experimental-json-modules ./scripts/publish-check.js",
|
"check": "node --experimental-json-modules publish-check.js",
|
||||||
"init": "lerna run build",
|
"init": "lerna run build",
|
||||||
"init:dev": "lerna run build",
|
"init:dev": "lerna run build",
|
||||||
"docs:dev": "vitepress dev docs",
|
"docs:dev": "vitepress dev docs",
|
||||||
"docs:build": "npm run copylogs && vitepress build docs",
|
"docs:build": "vitepress build docs",
|
||||||
"docs:preview": "vitepress preview docs",
|
"docs:preview": "vitepress preview docs",
|
||||||
"pub": "echo 1",
|
"pub": "echo 1"
|
||||||
"dev": "pnpm run -r --parallel compile ",
|
|
||||||
"release": "time /t >trigger/release.trigger && git add trigger/release.trigger && git commit -m \"build: release\" && git push",
|
|
||||||
"publish_to_atomgit": "node --experimental-json-modules ./scripts/publish-atomgit.js",
|
|
||||||
"get_version": "node --experimental-json-modules ./scripts/version.js"
|
|
||||||
},
|
},
|
||||||
"license": "AGPL-3.0",
|
"license": "AGPL-3.0",
|
||||||
"dependencies": {
|
"dependencies": {
|
||||||
|
"@certd/ui-server": "link:packages/ui/certd-server",
|
||||||
|
"axios": "^1.7.7",
|
||||||
"copyfiles": "^2.4.1",
|
"copyfiles": "^2.4.1",
|
||||||
"lodash-es": "^4.17.21",
|
"lodash-es": "^4.17.21",
|
||||||
"typescript": "^5.4.2"
|
"typescript": "^5.4.2"
|
||||||
|
|||||||
@@ -6,7 +6,7 @@ root = true
|
|||||||
|
|
||||||
[*]
|
[*]
|
||||||
indent_style = space
|
indent_style = space
|
||||||
indent_size = 2
|
indent_size = 4
|
||||||
trim_trailing_whitespace = true
|
trim_trailing_whitespace = true
|
||||||
|
|
||||||
[{*.yml,*.yaml}]
|
[{*.yml,*.yaml}]
|
||||||
|
|||||||
@@ -3,155 +3,6 @@
|
|||||||
All notable changes to this project will be documented in this file.
|
All notable changes to this project will be documented in this file.
|
||||||
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
||||||
|
|
||||||
## [1.37.17](https://github.com/publishlab/node-acme-client/compare/v1.37.16...v1.37.17) (2025-12-29)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* aws route53 ([8caab1f](https://github.com/publishlab/node-acme-client/commit/8caab1fd9264df548f467b94202d567107b7a30b))
|
|
||||||
|
|
||||||
## [1.37.16](https://github.com/publishlab/node-acme-client/compare/v1.37.15...v1.37.16) (2025-12-15)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复ipv6作为证书域名申请证书校验失败的bug ([e4e16bc](https://github.com/publishlab/node-acme-client/commit/e4e16bc6a65bb082c18ca0590226f0987a47d477))
|
|
||||||
|
|
||||||
## [1.37.15](https://github.com/publishlab/node-acme-client/compare/v1.37.14...v1.37.15) (2025-12-06)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.14](https://github.com/publishlab/node-acme-client/compare/v1.37.13...v1.37.14) (2025-12-02)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.13](https://github.com/publishlab/node-acme-client/compare/v1.37.12...v1.37.13) (2025-12-02)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.12](https://github.com/publishlab/node-acme-client/compare/v1.37.11...v1.37.12) (2025-11-29)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持证书颁发机构 LiteSSL ([6be7591](https://github.com/publishlab/node-acme-client/commit/6be75913324e2828d9016eb307ff2d0abbbb2191))
|
|
||||||
|
|
||||||
## [1.37.11](https://github.com/publishlab/node-acme-client/compare/v1.37.10...v1.37.11) (2025-11-28)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* ssl.com支持ecc ([b5ec047](https://github.com/publishlab/node-acme-client/commit/b5ec04723db48422f71041f4043002e7f5b450b1))
|
|
||||||
|
|
||||||
## [1.37.10](https://github.com/publishlab/node-acme-client/compare/v1.37.9...v1.37.10) (2025-11-19)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.9](https://github.com/publishlab/node-acme-client/compare/v1.37.8...v1.37.9) (2025-11-19)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.8](https://github.com/publishlab/node-acme-client/compare/v1.37.7...v1.37.8) (2025-11-17)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.7](https://github.com/publishlab/node-acme-client/compare/v1.37.6...v1.37.7) (2025-11-12)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持使用letencrypt测试环境申请ip证书 ([86ce00a](https://github.com/publishlab/node-acme-client/commit/86ce00adf92ff98fead87a3eaaa6631036708f47))
|
|
||||||
* 支持腾讯云teo dns解析 ([1d23dd2](https://github.com/publishlab/node-acme-client/commit/1d23dd2426bd1e4c4dfea0a9e561d665e045ba9d))
|
|
||||||
|
|
||||||
## [1.37.6](https://github.com/publishlab/node-acme-client/compare/v1.37.5...v1.37.6) (2025-11-10)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持letencrypt测试环境，支持IP证书？ ([1462cdd](https://github.com/publishlab/node-acme-client/commit/1462cddd1eb347b7ff238286b5c977b29a0591ec))
|
|
||||||
|
|
||||||
## [1.37.5](https://github.com/publishlab/node-acme-client/compare/v1.37.4...v1.37.5) (2025-11-08)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.4](https://github.com/publishlab/node-acme-client/compare/v1.37.3...v1.37.4) (2025-10-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.37.3](https://github.com/publishlab/node-acme-client/compare/v1.37.2...v1.37.3) (2025-10-24)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复并发情况下证书申请日志混乱的bug ([bb2714f](https://github.com/publishlab/node-acme-client/commit/bb2714ff241f9db4a71d805b23a1b0f9f2f6413a))
|
|
||||||
|
|
||||||
## [1.37.2](https://github.com/publishlab/node-acme-client/compare/v1.37.1...v1.37.2) (2025-10-14)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* aliyunoss 选择证书接入点选择新加坡无法上传的bug ([e00733a](https://github.com/publishlab/node-acme-client/commit/e00733a34644c23ffe926486b15dc96bf2fa4b57))
|
|
||||||
|
|
||||||
## [1.37.1](https://github.com/publishlab/node-acme-client/compare/v1.37.0...v1.37.1) (2025-09-29)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
# [1.37.0](https://github.com/publishlab/node-acme-client/compare/v1.36.25...v1.37.0) (2025-09-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.25](https://github.com/publishlab/node-acme-client/compare/v1.36.24...v1.36.25) (2025-09-27)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.24](https://github.com/publishlab/node-acme-client/compare/v1.36.23...v1.36.24) (2025-09-27)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.23](https://github.com/publishlab/node-acme-client/compare/v1.36.22...v1.36.23) (2025-09-26)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.22](https://github.com/publishlab/node-acme-client/compare/v1.36.21...v1.36.22) (2025-09-23)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.21](https://github.com/publishlab/node-acme-client/compare/v1.36.20...v1.36.21) (2025-09-15)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.20](https://github.com/publishlab/node-acme-client/compare/v1.36.19...v1.36.20) (2025-09-13)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.19](https://github.com/publishlab/node-acme-client/compare/v1.36.18...v1.36.19) (2025-09-05)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持ssl.com证书颁发机构 ([27b6dfa](https://github.com/publishlab/node-acme-client/commit/27b6dfa4d2ab3bddd284c3a34511a72e1a513a4c))
|
|
||||||
|
|
||||||
## [1.36.18](https://github.com/publishlab/node-acme-client/compare/v1.36.17...v1.36.18) (2025-08-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.17](https://github.com/publishlab/node-acme-client/compare/v1.36.16...v1.36.17) (2025-08-17)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.16](https://github.com/publishlab/node-acme-client/compare/v1.36.15...v1.36.16) (2025-08-16)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 部署到百度cdn支持自动获取域名列表选择 ([4e432ed](https://github.com/publishlab/node-acme-client/commit/4e432ed03f4fb564e85a2f284ee26b58400b82f5))
|
|
||||||
|
|
||||||
## [1.36.15](https://github.com/publishlab/node-acme-client/compare/v1.36.14...v1.36.15) (2025-08-07)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.14](https://github.com/publishlab/node-acme-client/compare/v1.36.13...v1.36.14) (2025-07-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.13](https://github.com/publishlab/node-acme-client/compare/v1.36.12...v1.36.13) (2025-07-23)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.12](https://github.com/publishlab/node-acme-client/compare/v1.36.11...v1.36.12) (2025-07-22)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
|
||||||
|
|
||||||
## [1.36.11](https://github.com/publishlab/node-acme-client/compare/v1.36.10...v1.36.11) (2025-07-22)
|
## [1.36.11](https://github.com/publishlab/node-acme-client/compare/v1.36.10...v1.36.11) (2025-07-22)
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/acme-client
|
**Note:** Version bump only for package @certd/acme-client
|
||||||
|
|||||||
@@ -3,7 +3,7 @@
|
|||||||
"description": "Simple and unopinionated ACME client",
|
"description": "Simple and unopinionated ACME client",
|
||||||
"private": false,
|
"private": false,
|
||||||
"author": "nmorsman",
|
"author": "nmorsman",
|
||||||
"version": "1.37.17",
|
"version": "1.36.11",
|
||||||
"type": "module",
|
"type": "module",
|
||||||
"module": "scr/index.js",
|
"module": "scr/index.js",
|
||||||
"main": "src/index.js",
|
"main": "src/index.js",
|
||||||
@@ -18,10 +18,10 @@
|
|||||||
"types"
|
"types"
|
||||||
],
|
],
|
||||||
"dependencies": {
|
"dependencies": {
|
||||||
"@certd/basic": "^1.37.17",
|
"@certd/basic": "^1.36.11",
|
||||||
"@peculiar/x509": "^1.11.0",
|
"@peculiar/x509": "^1.11.0",
|
||||||
"asn1js": "^3.0.5",
|
"asn1js": "^3.0.5",
|
||||||
"axios": "^1.9.0",
|
"axios": "^1.7.2",
|
||||||
"debug": "^4.3.5",
|
"debug": "^4.3.5",
|
||||||
"http-proxy-agent": "^7.0.2",
|
"http-proxy-agent": "^7.0.2",
|
||||||
"https-proxy-agent": "^7.0.5",
|
"https-proxy-agent": "^7.0.5",
|
||||||
@@ -52,8 +52,7 @@
|
|||||||
"lint-types": "tsd",
|
"lint-types": "tsd",
|
||||||
"prepublishOnly": "npm run build-docs",
|
"prepublishOnly": "npm run build-docs",
|
||||||
"test": "mocha -t 60000 \"test/setup.js\" \"test/**/*.spec.js\"",
|
"test": "mocha -t 60000 \"test/setup.js\" \"test/**/*.spec.js\"",
|
||||||
"pub": "npm publish",
|
"pub": "npm publish"
|
||||||
"compile": "tsc --skipLibCheck --watch"
|
|
||||||
},
|
},
|
||||||
"repository": {
|
"repository": {
|
||||||
"type": "git",
|
"type": "git",
|
||||||
@@ -70,5 +69,5 @@
|
|||||||
"bugs": {
|
"bugs": {
|
||||||
"url": "https://github.com/publishlab/node-acme-client/issues"
|
"url": "https://github.com/publishlab/node-acme-client/issues"
|
||||||
},
|
},
|
||||||
"gitHead": "fa14f6219810ddbfcf1dde7b69963ee8a36c80c4"
|
"gitHead": "7f9c4e52ac5c3837b251d3b2508457ce802e11cb"
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -28,6 +28,7 @@ class AcmeApi {
|
|||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
console.log(locationUrl, mapping);
|
||||||
return locationUrl;
|
return locationUrl;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -2,11 +2,9 @@
|
|||||||
* ACME auto helper
|
* ACME auto helper
|
||||||
*/
|
*/
|
||||||
import { readCsrDomains } from "./crypto/index.js";
|
import { readCsrDomains } from "./crypto/index.js";
|
||||||
|
import { log } from "./logger.js";
|
||||||
import { wait } from "./wait.js";
|
import { wait } from "./wait.js";
|
||||||
import { CancelError } from "./error.js";
|
import { CancelError } from "./error.js";
|
||||||
import { domainUtils } from '@certd/basic';
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
const defaultOpts = {
|
const defaultOpts = {
|
||||||
@@ -47,9 +45,6 @@ export default async (client, userOpts) => {
|
|||||||
accountPayload.externalAccountBinding = opts.externalAccountBinding;
|
accountPayload.externalAccountBinding = opts.externalAccountBinding;
|
||||||
}
|
}
|
||||||
|
|
||||||
const log = (...args)=>{
|
|
||||||
return client.logger.info(...args);
|
|
||||||
}
|
|
||||||
/**
|
/**
|
||||||
* Register account
|
* Register account
|
||||||
*/
|
*/
|
||||||
@@ -68,7 +63,7 @@ export default async (client, userOpts) => {
|
|||||||
* Parse domains from CSR
|
* Parse domains from CSR
|
||||||
*/
|
*/
|
||||||
|
|
||||||
log("[auto] Parsing domains from Certificate Signing Request");
|
log("[auto] Parsing domains from Certificate Signing Request ");
|
||||||
const { commonName, altNames } = readCsrDomains(opts.csr);
|
const { commonName, altNames } = readCsrDomains(opts.csr);
|
||||||
const uniqueDomains = Array.from(new Set([commonName].concat(altNames).filter((d) => d)));
|
const uniqueDomains = Array.from(new Set([commonName].concat(altNames).filter((d) => d)));
|
||||||
|
|
||||||
@@ -79,21 +74,9 @@ export default async (client, userOpts) => {
|
|||||||
*/
|
*/
|
||||||
|
|
||||||
log("[auto] Placing new certificate order with ACME provider");
|
log("[auto] Placing new certificate order with ACME provider");
|
||||||
|
const orderPayload = { identifiers: uniqueDomains.map((d) => ({ type: "dns", value: d })) };
|
||||||
let hasIp = false
|
if (opts.profile && client.sslProvider === 'letsencrypt' ){
|
||||||
const orderPayload = { identifiers: uniqueDomains.map((d) =>{
|
|
||||||
// 判断是否为IP（v4或v6），否则按域名处理
|
|
||||||
const type = domainUtils.isIp(d) ? 'ip' : 'dns';
|
|
||||||
if(type === 'ip'){
|
|
||||||
hasIp = true
|
|
||||||
}
|
|
||||||
return { type, value: d }
|
|
||||||
}) };
|
|
||||||
if (opts.profile && client.sslProvider.startsWith("letsencrypt") ){
|
|
||||||
orderPayload.profile = opts.profile;
|
orderPayload.profile = opts.profile;
|
||||||
if(hasIp){
|
|
||||||
orderPayload.profile = "shortlived"
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
const order = await client.createOrder(orderPayload);
|
const order = await client.createOrder(orderPayload);
|
||||||
const authorizations = await client.getAuthorizations(order);
|
const authorizations = await client.getAuthorizations(order);
|
||||||
@@ -272,7 +255,7 @@ export default async (client, userOpts) => {
|
|||||||
await wait(waitDnsDiffuseTime * 1000)
|
await wait(waitDnsDiffuseTime * 1000)
|
||||||
}
|
}
|
||||||
|
|
||||||
log("开始向提供商请求检查验证");
|
log("开始向提供商请求挑战验证");
|
||||||
await runPromisePa(completeChallengeTasks, 1000);
|
await runPromisePa(completeChallengeTasks, 1000);
|
||||||
} catch (e) {
|
} catch (e) {
|
||||||
log(`证书申请失败${e.message}`);
|
log(`证书申请失败${e.message}`);
|
||||||
|
|||||||
@@ -3,9 +3,9 @@
|
|||||||
*/
|
*/
|
||||||
import axios from 'axios';
|
import axios from 'axios';
|
||||||
import { parseRetryAfterHeader } from './util.js';
|
import { parseRetryAfterHeader } from './util.js';
|
||||||
|
import { log } from './logger.js';
|
||||||
const { AxiosError } = axios;
|
const { AxiosError } = axios;
|
||||||
import {getGlobalAgents, HttpError} from '@certd/basic'
|
import {getGlobalAgents, HttpError} from '@certd/basic'
|
||||||
import { log } from './logger.js';
|
|
||||||
/**
|
/**
|
||||||
* Defaults
|
* Defaults
|
||||||
*/
|
*/
|
||||||
|
|||||||
@@ -5,9 +5,10 @@
|
|||||||
*/
|
*/
|
||||||
import { createHash } from 'crypto';
|
import { createHash } from 'crypto';
|
||||||
import { getPemBodyAsB64u } from './crypto/index.js';
|
import { getPemBodyAsB64u } from './crypto/index.js';
|
||||||
|
import { log } from './logger.js';
|
||||||
import HttpClient from './http.js';
|
import HttpClient from './http.js';
|
||||||
import AcmeApi from './api.js';
|
import AcmeApi from './api.js';
|
||||||
import {createChallengeFn} from './verify.js';
|
import verify from './verify.js';
|
||||||
import * as util from './util.js';
|
import * as util from './util.js';
|
||||||
import auto from './auto.js';
|
import auto from './auto.js';
|
||||||
import { CancelError } from './error.js';
|
import { CancelError } from './error.js';
|
||||||
@@ -103,13 +104,8 @@ class AcmeClient {
|
|||||||
max: this.opts.backoffMax,
|
max: this.opts.backoffMax,
|
||||||
};
|
};
|
||||||
|
|
||||||
this.http = new HttpClient(this.opts.directoryUrl, this.opts.accountKey, this.opts.externalAccountBinding, this.opts.urlMapping, opts.logger);
|
this.http = new HttpClient(this.opts.directoryUrl, this.opts.accountKey, this.opts.externalAccountBinding, this.opts.urlMapping);
|
||||||
this.api = new AcmeApi(this.http, this.opts.accountUrl);
|
this.api = new AcmeApi(this.http, this.opts.accountUrl);
|
||||||
this.logger = opts.logger;
|
|
||||||
}
|
|
||||||
|
|
||||||
log(...args) {
|
|
||||||
this.logger.info(...args);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@@ -181,7 +177,7 @@ class AcmeClient {
|
|||||||
this.getAccountUrl();
|
this.getAccountUrl();
|
||||||
|
|
||||||
/* Account URL exists */
|
/* Account URL exists */
|
||||||
this.log('Account URL exists, returning updateAccount()');
|
log('Account URL exists, returning updateAccount()');
|
||||||
return this.updateAccount(data);
|
return this.updateAccount(data);
|
||||||
}
|
}
|
||||||
catch (e) {
|
catch (e) {
|
||||||
@@ -189,7 +185,7 @@ class AcmeClient {
|
|||||||
|
|
||||||
/* HTTP 200: Account exists */
|
/* HTTP 200: Account exists */
|
||||||
if (resp.status === 200) {
|
if (resp.status === 200) {
|
||||||
this.log('Account already exists (HTTP 200), returning updateAccount()');
|
log('Account already exists (HTTP 200), returning updateAccount()');
|
||||||
return this.updateAccount(data);
|
return this.updateAccount(data);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -218,7 +214,7 @@ class AcmeClient {
|
|||||||
this.api.getAccountUrl();
|
this.api.getAccountUrl();
|
||||||
}
|
}
|
||||||
catch (e) {
|
catch (e) {
|
||||||
this.log('No account URL found, returning createAccount()');
|
log('No account URL found, returning createAccount()');
|
||||||
return this.createAccount(data);
|
return this.createAccount(data);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -492,9 +488,6 @@ class AcmeClient {
|
|||||||
throw new Error('Unable to verify ACME challenge, URL not found');
|
throw new Error('Unable to verify ACME challenge, URL not found');
|
||||||
}
|
}
|
||||||
|
|
||||||
const {challenges} = createChallengeFn({logger:this.logger});
|
|
||||||
|
|
||||||
const verify = challenges
|
|
||||||
if (typeof verify[challenge.type] === 'undefined') {
|
if (typeof verify[challenge.type] === 'undefined') {
|
||||||
throw new Error(`Unable to verify ACME challenge, unknown type: ${challenge.type}`);
|
throw new Error(`Unable to verify ACME challenge, unknown type: ${challenge.type}`);
|
||||||
}
|
}
|
||||||
@@ -509,13 +502,8 @@ class AcmeClient {
|
|||||||
await verify[challenge.type](authz, challenge, keyAuthorization);
|
await verify[challenge.type](authz, challenge, keyAuthorization);
|
||||||
};
|
};
|
||||||
|
|
||||||
this.log('Waiting for ACME challenge verification（等待ACME检查验证）');
|
log('Waiting for ACME challenge verification（等待ACME挑战验证）', this.backoffOpts);
|
||||||
|
return util.retry(verifyFn, this.backoffOpts);
|
||||||
|
|
||||||
const log = (...args)=>{
|
|
||||||
this.logger.info(...args)
|
|
||||||
}
|
|
||||||
return util.retry(verifyFn, this.backoffOpts,log);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@@ -582,7 +570,7 @@ class AcmeClient {
|
|||||||
const resp = await this.api.apiRequest(item.url, null, [200]);
|
const resp = await this.api.apiRequest(item.url, null, [200]);
|
||||||
|
|
||||||
/* Verify status */
|
/* Verify status */
|
||||||
this.log(`[${d}] Item has status（检查状态）: ${resp.data.status}`);
|
log(`[${d}] Item has status（挑战状态）: ${resp.data.status}`);
|
||||||
|
|
||||||
if (invalidStates.includes(resp.data.status)) {
|
if (invalidStates.includes(resp.data.status)) {
|
||||||
abort();
|
abort();
|
||||||
@@ -598,7 +586,7 @@ class AcmeClient {
|
|||||||
throw new Error(`[${d}] Unexpected item status: ${resp.data.status}`);
|
throw new Error(`[${d}] Unexpected item status: ${resp.data.status}`);
|
||||||
};
|
};
|
||||||
|
|
||||||
this.log(`[${d}] Waiting for valid status （等待valid状态）: ${item.url}`, this.backoffOpts);
|
log(`[${d}] Waiting for valid status （等待valid状态）: ${item.url}`, this.backoffOpts);
|
||||||
return util.retry(verifyFn, this.backoffOpts);
|
return util.retry(verifyFn, this.backoffOpts);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -19,7 +19,7 @@ import { getJwk } from './crypto/index.js';
|
|||||||
*/
|
*/
|
||||||
|
|
||||||
class HttpClient {
|
class HttpClient {
|
||||||
constructor(directoryUrl, accountKey, externalAccountBinding = {}, urlMapping = {},logger) {
|
constructor(directoryUrl, accountKey, externalAccountBinding = {}, urlMapping = {}) {
|
||||||
this.directoryUrl = directoryUrl;
|
this.directoryUrl = directoryUrl;
|
||||||
this.accountKey = accountKey;
|
this.accountKey = accountKey;
|
||||||
this.externalAccountBinding = externalAccountBinding;
|
this.externalAccountBinding = externalAccountBinding;
|
||||||
@@ -31,7 +31,6 @@ class HttpClient {
|
|||||||
this.directoryMaxAge = 86400;
|
this.directoryMaxAge = 86400;
|
||||||
this.directoryTimestamp = 0;
|
this.directoryTimestamp = 0;
|
||||||
this.urlMapping = urlMapping;
|
this.urlMapping = urlMapping;
|
||||||
this.log = logger? logger.info.bind(logger) : log;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@@ -49,7 +48,7 @@ class HttpClient {
|
|||||||
for (const key in this.urlMapping.mappings) {
|
for (const key in this.urlMapping.mappings) {
|
||||||
if (url.includes(key)) {
|
if (url.includes(key)) {
|
||||||
const newUrl = url.replace(key, this.urlMapping.mappings[key]);
|
const newUrl = url.replace(key, this.urlMapping.mappings[key]);
|
||||||
this.log(`use reverse proxy: ${newUrl}`);
|
log(`use reverse proxy: ${newUrl}`);
|
||||||
url = newUrl;
|
url = newUrl;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
@@ -66,10 +65,10 @@ class HttpClient {
|
|||||||
opts.headers['Content-Type'] = 'application/jose+json';
|
opts.headers['Content-Type'] = 'application/jose+json';
|
||||||
|
|
||||||
/* Request */
|
/* Request */
|
||||||
this.log(`HTTP request: ${method} ${url}`);
|
log(`HTTP request: ${method} ${url}`);
|
||||||
const resp = await axios.request(opts);
|
const resp = await axios.request(opts);
|
||||||
|
|
||||||
this.log(`RESP ${resp.status} ${method} ${url}`);
|
log(`RESP ${resp.status} ${method} ${url}`);
|
||||||
return resp;
|
return resp;
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -86,7 +85,7 @@ class HttpClient {
|
|||||||
const age = (now - this.directoryTimestamp);
|
const age = (now - this.directoryTimestamp);
|
||||||
|
|
||||||
if (!this.directoryCache || (age > this.directoryMaxAge)) {
|
if (!this.directoryCache || (age > this.directoryMaxAge)) {
|
||||||
this.log(`Refreshing ACME directory, age: ${age}`);
|
log(`Refreshing ACME directory, age: ${age}`);
|
||||||
const resp = await this.request(this.directoryUrl, 'get');
|
const resp = await this.request(this.directoryUrl, 'get');
|
||||||
|
|
||||||
if (resp.status >= 400) {
|
if (resp.status >= 400) {
|
||||||
@@ -188,7 +187,7 @@ class HttpClient {
|
|||||||
|
|
||||||
/* Nonce */
|
/* Nonce */
|
||||||
if (nonce) {
|
if (nonce) {
|
||||||
this.log(`Using nonce: ${nonce}`);
|
log(`Using nonce: ${nonce}`);
|
||||||
header.nonce = nonce;
|
header.nonce = nonce;
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -315,7 +314,7 @@ class HttpClient {
|
|||||||
nonce = resp.headers['replay-nonce'] || null;
|
nonce = resp.headers['replay-nonce'] || null;
|
||||||
attempts += 1;
|
attempts += 1;
|
||||||
|
|
||||||
this.log(`Caught invalid nonce error, retrying (${attempts}/${this.maxBadNonceRetries}) signed request to: ${url}`);
|
log(`Caught invalid nonce error, retrying (${attempts}/${this.maxBadNonceRetries}) signed request to: ${url}`);
|
||||||
return this.signedRequest(url, payload, { kid, nonce, includeExternalAccountBinding }, attempts);
|
return this.signedRequest(url, payload, { kid, nonce, includeExternalAccountBinding }, attempts);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
@@ -21,42 +21,12 @@ export const directory = {
|
|||||||
staging: 'https://acme-staging-v02.api.letsencrypt.org/directory',
|
staging: 'https://acme-staging-v02.api.letsencrypt.org/directory',
|
||||||
production: 'https://acme-v02.api.letsencrypt.org/directory',
|
production: 'https://acme-v02.api.letsencrypt.org/directory',
|
||||||
},
|
},
|
||||||
letsencrypt_staging: {
|
|
||||||
production: 'https://acme-staging-v02.api.letsencrypt.org/directory',
|
|
||||||
},
|
|
||||||
zerossl: {
|
zerossl: {
|
||||||
staging: 'https://acme.zerossl.com/v2/DV90',
|
staging: 'https://acme.zerossl.com/v2/DV90',
|
||||||
production: 'https://acme.zerossl.com/v2/DV90',
|
production: 'https://acme.zerossl.com/v2/DV90',
|
||||||
},
|
},
|
||||||
sslcom:{
|
|
||||||
staging: 'https://acme.ssl.com/sslcom-dv-rsa',
|
|
||||||
production: 'https://acme.ssl.com/sslcom-dv-rsa',
|
|
||||||
ec: 'https://acme.ssl.com/sslcom-dv-ecc',
|
|
||||||
},
|
|
||||||
litessl: {
|
|
||||||
staging: 'https://acme.litessl.com/acme/v2/directory',
|
|
||||||
production: 'https://acme.litessl.com/acme/v2/directory',
|
|
||||||
},
|
|
||||||
};
|
};
|
||||||
|
|
||||||
export function getDirectoryUrl(opts) {
|
|
||||||
const {sslProvider, pkType} = opts
|
|
||||||
const list= directory[sslProvider]
|
|
||||||
if (!list) {
|
|
||||||
throw new Error(`sslProvider ${sslProvider} not found`)
|
|
||||||
}
|
|
||||||
let pkTypePrefix = pkType || 'rsa'
|
|
||||||
if (pkType) {
|
|
||||||
pkTypePrefix = pkType.toLowerCase().split("_")[0]
|
|
||||||
}
|
|
||||||
|
|
||||||
if (pkTypePrefix && list[pkTypePrefix]) {
|
|
||||||
return list[pkTypePrefix]
|
|
||||||
}
|
|
||||||
|
|
||||||
return list.production
|
|
||||||
}
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Crypto
|
* Crypto
|
||||||
*/
|
*/
|
||||||
|
|||||||
@@ -48,7 +48,7 @@ class Backoff {
|
|||||||
* @returns {Promise}
|
* @returns {Promise}
|
||||||
*/
|
*/
|
||||||
|
|
||||||
async function retryPromise(fn, attempts, backoff, logger = log) {
|
async function retryPromise(fn, attempts, backoff) {
|
||||||
let aborted = false;
|
let aborted = false;
|
||||||
|
|
||||||
try {
|
try {
|
||||||
@@ -60,12 +60,12 @@ async function retryPromise(fn, attempts, backoff, logger = log) {
|
|||||||
throw e;
|
throw e;
|
||||||
}
|
}
|
||||||
|
|
||||||
logger(`Promise rejected: ${e.message}`);
|
log(`Promise rejected: ${e.message}`);
|
||||||
const duration = backoff.duration();
|
const duration = backoff.duration();
|
||||||
logger(`Promise rejected attempt #${backoff.attempts}, ${duration}ms 后重试: ${e.message}`);
|
log(`Promise rejected attempt #${backoff.attempts}, ${duration}ms 后重试: ${e.message}`);
|
||||||
|
|
||||||
await new Promise((resolve) => { setTimeout(resolve, duration); });
|
await new Promise((resolve) => { setTimeout(resolve, duration); });
|
||||||
return retryPromise(fn, attempts, backoff, logger);
|
return retryPromise(fn, attempts, backoff);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -80,9 +80,9 @@ async function retryPromise(fn, attempts, backoff, logger = log) {
|
|||||||
* @returns {Promise}
|
* @returns {Promise}
|
||||||
*/
|
*/
|
||||||
|
|
||||||
function retry(fn, { attempts = 5, min = 5000, max = 30000 } = {}, logger = log) {
|
function retry(fn, { attempts = 5, min = 5000, max = 30000 } = {}) {
|
||||||
const backoff = new Backoff({ min, max });
|
const backoff = new Backoff({ min, max });
|
||||||
return retryPromise(fn, attempts, backoff, logger);
|
return retryPromise(fn, attempts, backoff);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@@ -216,21 +216,21 @@ function formatResponseError(resp) {
|
|||||||
* @returns {Promise<string>} Root domain name
|
* @returns {Promise<string>} Root domain name
|
||||||
*/
|
*/
|
||||||
|
|
||||||
async function resolveDomainBySoaRecord(recordName, logger = log) {
|
async function resolveDomainBySoaRecord(recordName) {
|
||||||
try {
|
try {
|
||||||
await dns.resolveSoa(recordName);
|
await dns.resolveSoa(recordName);
|
||||||
logger(`找到${recordName}的SOA记录`);
|
log(`找到${recordName}的SOA记录`);
|
||||||
return recordName;
|
return recordName;
|
||||||
}
|
}
|
||||||
catch (e) {
|
catch (e) {
|
||||||
logger(`找不到${recordName}的SOA记录,继续往主域名查找`);
|
log(`找不到${recordName}的SOA记录,继续往主域名查找`);
|
||||||
const parentRecordName = recordName.split('.').slice(1).join('.');
|
const parentRecordName = recordName.split('.').slice(1).join('.');
|
||||||
|
|
||||||
if (!parentRecordName.includes('.')) {
|
if (!parentRecordName.includes('.')) {
|
||||||
throw new Error('SOA record查找失败');
|
throw new Error('SOA record查找失败');
|
||||||
}
|
}
|
||||||
|
|
||||||
return resolveDomainBySoaRecord(parentRecordName,logger);
|
return resolveDomainBySoaRecord(parentRecordName);
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -241,18 +241,18 @@ async function resolveDomainBySoaRecord(recordName, logger = log) {
|
|||||||
* @returns {Promise<dns.Resolver>} DNS resolver
|
* @returns {Promise<dns.Resolver>} DNS resolver
|
||||||
*/
|
*/
|
||||||
|
|
||||||
async function getAuthoritativeDnsResolver(recordName, logger = log) {
|
async function getAuthoritativeDnsResolver(recordName) {
|
||||||
logger(`获取域名${recordName}的权威NS服务器: `);
|
log(`获取域名${recordName}的权威NS服务器: `);
|
||||||
const resolver = new dns.Resolver();
|
const resolver = new dns.Resolver();
|
||||||
|
|
||||||
try {
|
try {
|
||||||
/* Resolve root domain by SOA */
|
/* Resolve root domain by SOA */
|
||||||
const domain = await resolveDomainBySoaRecord(recordName,logger);
|
const domain = await resolveDomainBySoaRecord(recordName);
|
||||||
|
|
||||||
/* Resolve authoritative NS addresses */
|
/* Resolve authoritative NS addresses */
|
||||||
logger(`获取到权威NS服务器name: ${domain}`);
|
log(`获取到权威NS服务器name: ${domain}`);
|
||||||
const nsRecords = await dns.resolveNs(domain);
|
const nsRecords = await dns.resolveNs(domain);
|
||||||
logger(`域名权威NS服务器：${nsRecords}`);
|
log(`域名权威NS服务器：${nsRecords}`);
|
||||||
const nsAddrArray = await Promise.all(nsRecords.map(async (r) => dns.resolve4(r)));
|
const nsAddrArray = await Promise.all(nsRecords.map(async (r) => dns.resolve4(r)));
|
||||||
const nsAddresses = [].concat(...nsAddrArray).filter((a) => a);
|
const nsAddresses = [].concat(...nsAddrArray).filter((a) => a);
|
||||||
|
|
||||||
@@ -261,16 +261,16 @@ async function getAuthoritativeDnsResolver(recordName, logger = log) {
|
|||||||
}
|
}
|
||||||
|
|
||||||
/* Authoritative NS success */
|
/* Authoritative NS success */
|
||||||
logger(`Found ${nsAddresses.length} authoritative NS addresses for domain: ${domain}`);
|
log(`Found ${nsAddresses.length} authoritative NS addresses for domain: ${domain}`);
|
||||||
resolver.setServers(nsAddresses);
|
resolver.setServers(nsAddresses);
|
||||||
}
|
}
|
||||||
catch (e) {
|
catch (e) {
|
||||||
logger(`Authoritative NS lookup error（获取权威NS服务器地址失败）: ${e.message}`);
|
log(`Authoritative NS lookup error（获取权威NS服务器地址失败）: ${e.message}`);
|
||||||
}
|
}
|
||||||
|
|
||||||
/* Return resolver */
|
/* Return resolver */
|
||||||
const addresses = resolver.getServers();
|
const addresses = resolver.getServers();
|
||||||
logger(`DNS resolver addresses（域名的权威NS服务器地址）: ${addresses.join(', ')}`);
|
log(`DNS resolver addresses（域名的权威NS服务器地址）: ${addresses.join(', ')}`);
|
||||||
|
|
||||||
return resolver;
|
return resolver;
|
||||||
}
|
}
|
||||||
|
|||||||
@@ -4,22 +4,14 @@
|
|||||||
|
|
||||||
import dnsSdk from "dns"
|
import dnsSdk from "dns"
|
||||||
import https from 'https'
|
import https from 'https'
|
||||||
import {log as defaultLog} from './logger.js'
|
import {log} from './logger.js'
|
||||||
import axios from './axios.js'
|
import axios from './axios.js'
|
||||||
import * as util from './util.js'
|
import * as util from './util.js'
|
||||||
import {isAlpnCertificateAuthorizationValid} from './crypto/index.js'
|
import {isAlpnCertificateAuthorizationValid} from './crypto/index.js'
|
||||||
import {utils} from '@certd/basic'
|
|
||||||
|
|
||||||
const dns = dnsSdk.promises
|
const dns = dnsSdk.promises
|
||||||
|
/**
|
||||||
|
|
||||||
export function createChallengeFn(opts = {}){
|
|
||||||
const logger = opts?.logger || {info:defaultLog,error:defaultLog,warn:defaultLog,debug:defaultLog}
|
|
||||||
|
|
||||||
const log = function(...args){
|
|
||||||
logger.info(...args)
|
|
||||||
}
|
|
||||||
/**
|
|
||||||
* Verify ACME HTTP challenge
|
* Verify ACME HTTP challenge
|
||||||
*
|
*
|
||||||
* https://datatracker.ietf.org/doc/html/rfc8555#section-8.3
|
* https://datatracker.ietf.org/doc/html/rfc8555#section-8.3
|
||||||
@@ -60,15 +52,11 @@ async function verifyHttpChallenge(authz, challenge, keyAuthorization, suffix =
|
|||||||
}
|
}
|
||||||
|
|
||||||
const httpPort = axios.defaults.acmeSettings.httpChallengePort || 80;
|
const httpPort = axios.defaults.acmeSettings.httpChallengePort || 80;
|
||||||
let host = authz.identifier.value;
|
const challengeUrl = `http://${authz.identifier.value}:${httpPort}${suffix}`;
|
||||||
if(utils.domain.isIpv6(host)){
|
|
||||||
host = `[${host}]`;
|
|
||||||
}
|
|
||||||
const challengeUrl = `http://${host}:${httpPort}${suffix}`;
|
|
||||||
|
|
||||||
if (!await doQuery(challengeUrl)) {
|
if (!await doQuery(challengeUrl)) {
|
||||||
const httpsPort = axios.defaults.acmeSettings.httpsChallengePort || 443;
|
const httpsPort = axios.defaults.acmeSettings.httpsChallengePort || 443;
|
||||||
const httpsChallengeUrl = `https://${host}:${httpsPort}${suffix}`;
|
const httpsChallengeUrl = `https://${authz.identifier.value}:${httpsPort}${suffix}`;
|
||||||
const res = await doQuery(httpsChallengeUrl)
|
const res = await doQuery(httpsChallengeUrl)
|
||||||
if (!res) {
|
if (!res) {
|
||||||
throw new Error(`[error] 验证失败，请检查以上测试url是否可以正常访问`);
|
throw new Error(`[error] 验证失败，请检查以上测试url是否可以正常访问`);
|
||||||
@@ -124,7 +112,7 @@ async function walkDnsChallengeRecord(recordName, resolver = dns,deep = 0) {
|
|||||||
return records
|
return records
|
||||||
}
|
}
|
||||||
|
|
||||||
async function walkTxtRecord(recordName,deep = 0) {
|
export async function walkTxtRecord(recordName,deep = 0) {
|
||||||
if(deep >5){
|
if(deep >5){
|
||||||
log(`walkTxtRecord too deep (#${deep}) , skip walk`)
|
log(`walkTxtRecord too deep (#${deep}) , skip walk`)
|
||||||
return []
|
return []
|
||||||
@@ -148,7 +136,7 @@ async function walkDnsChallengeRecord(recordName, resolver = dns,deep = 0) {
|
|||||||
try{
|
try{
|
||||||
/* Authoritative DNS resolver */
|
/* Authoritative DNS resolver */
|
||||||
log(`从域名权威服务器获取TXT解析记录`);
|
log(`从域名权威服务器获取TXT解析记录`);
|
||||||
const authoritativeResolver = await util.getAuthoritativeDnsResolver(recordName,log);
|
const authoritativeResolver = await util.getAuthoritativeDnsResolver(recordName);
|
||||||
const res = await walkDnsChallengeRecord(recordName, authoritativeResolver,deep);
|
const res = await walkDnsChallengeRecord(recordName, authoritativeResolver,deep);
|
||||||
if (res && res.length > 0) {
|
if (res && res.length > 0) {
|
||||||
for (const item of res) {
|
for (const item of res) {
|
||||||
@@ -185,8 +173,7 @@ async function verifyDnsChallenge(authz, challenge, keyAuthorization, prefix = '
|
|||||||
recordValues = [...new Set(recordValues)];
|
recordValues = [...new Set(recordValues)];
|
||||||
log(`DNS查询成功, 找到 ${recordValues.length} 条TXT记录：${recordValues}`);
|
log(`DNS查询成功, 找到 ${recordValues.length} 条TXT记录：${recordValues}`);
|
||||||
if (!recordValues.length || !recordValues.includes(keyAuthorization)) {
|
if (!recordValues.length || !recordValues.includes(keyAuthorization)) {
|
||||||
const err = `没有找到需要的DNS TXT记录: ${recordName}，期望:${keyAuthorization},结果:${recordValues}`
|
throw new Error(`没有找到需要的DNS TXT记录: ${recordName}，期望:${keyAuthorization},结果:${recordValues}`);
|
||||||
throw new Error(err);
|
|
||||||
}
|
}
|
||||||
|
|
||||||
log(`关键授权匹配成功（${challenge.type}/${recordName}）:${keyAuthorization}，校验成功， ACME challenge verified`);
|
log(`关键授权匹配成功（${challenge.type}/${recordName}）:${keyAuthorization}，校验成功， ACME challenge verified`);
|
||||||
@@ -220,13 +207,12 @@ async function verifyTlsAlpnChallenge(authz, challenge, keyAuthorization) {
|
|||||||
return true;
|
return true;
|
||||||
}
|
}
|
||||||
|
|
||||||
return {
|
/**
|
||||||
challenges:{
|
* Export API
|
||||||
'http-01': verifyHttpChallenge,
|
*/
|
||||||
'dns-01': verifyDnsChallenge,
|
|
||||||
'tls-alpn-01': verifyTlsAlpnChallenge,
|
|
||||||
},
|
|
||||||
walkTxtRecord,
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
export default {
|
||||||
|
'http-01': verifyHttpChallenge,
|
||||||
|
'dns-01': verifyDnsChallenge,
|
||||||
|
'tls-alpn-01': verifyTlsAlpnChallenge,
|
||||||
|
};
|
||||||
|
|||||||
+1
-8
@@ -49,7 +49,6 @@ export interface ClientOptions {
|
|||||||
backoffMax?: number;
|
backoffMax?: number;
|
||||||
urlMapping?: UrlMapping;
|
urlMapping?: UrlMapping;
|
||||||
signal?: AbortSignal;
|
signal?: AbortSignal;
|
||||||
logger?:any
|
|
||||||
}
|
}
|
||||||
|
|
||||||
export interface ClientExternalAccountBindingOptions {
|
export interface ClientExternalAccountBindingOptions {
|
||||||
@@ -108,17 +107,12 @@ export const directory: {
|
|||||||
staging: string,
|
staging: string,
|
||||||
production: string
|
production: string
|
||||||
},
|
},
|
||||||
letsencrypt_staging: {
|
|
||||||
production: string
|
|
||||||
},
|
|
||||||
zerossl: {
|
zerossl: {
|
||||||
staging: string,
|
staging: string,
|
||||||
production: string
|
production: string
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
|
||||||
export function getDirectoryUrl(opts:{sslProvider:string, pkType: string}): string;
|
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Crypto
|
* Crypto
|
||||||
*/
|
*/
|
||||||
@@ -209,8 +203,7 @@ export const agents: any;
|
|||||||
|
|
||||||
export function setLogger(fn: (message: any, ...args: any[]) => void): void;
|
export function setLogger(fn: (message: any, ...args: any[]) => void): void;
|
||||||
|
|
||||||
export function createChallengeFn(opts?: {logger?:any}): any;
|
export function walkTxtRecord(record: any): Promise<string[]>;
|
||||||
// export function walkTxtRecord(record: any): Promise<string[]>;
|
|
||||||
export function getAuthoritativeDnsResolver(record:string): Promise<any>;
|
export function getAuthoritativeDnsResolver(record:string): Promise<any>;
|
||||||
|
|
||||||
export const CancelError: typeof CancelError;
|
export const CancelError: typeof CancelError;
|
||||||
|
|||||||
@@ -26,4 +26,3 @@ dist-ssr
|
|||||||
test/user.secret.*
|
test/user.secret.*
|
||||||
test/**/*.js
|
test/**/*.js
|
||||||
src/**/*.spec.ts
|
src/**/*.spec.ts
|
||||||
test.mjs
|
|
||||||
|
|||||||
@@ -3,154 +3,6 @@
|
|||||||
All notable changes to this project will be documented in this file.
|
All notable changes to this project will be documented in this file.
|
||||||
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
|
||||||
|
|
||||||
## [1.37.17](https://github.com/certd/certd/compare/v1.37.16...v1.37.17) (2025-12-29)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.16](https://github.com/certd/certd/compare/v1.37.15...v1.37.16) (2025-12-15)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复ipv6作为证书域名申请证书校验失败的bug ([e4e16bc](https://github.com/certd/certd/commit/e4e16bc6a65bb082c18ca0590226f0987a47d477))
|
|
||||||
|
|
||||||
## [1.37.15](https://github.com/certd/certd/compare/v1.37.14...v1.37.15) (2025-12-06)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.14](https://github.com/certd/certd/compare/v1.37.13...v1.37.14) (2025-12-02)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.13](https://github.com/certd/certd/compare/v1.37.12...v1.37.13) (2025-12-02)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.12](https://github.com/certd/certd/compare/v1.37.11...v1.37.12) (2025-11-29)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.11](https://github.com/certd/certd/compare/v1.37.10...v1.37.11) (2025-11-28)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化宝塔网站证书在并发部署时导致nginx配置文件错乱的问题 ([51cc084](https://github.com/certd/certd/commit/51cc08411fd2dbab66d769b495dc1b0bf2f2578c))
|
|
||||||
* 优化天翼云cdn 等待5秒部署完成 ([53c88ad](https://github.com/certd/certd/commit/53c88ad5afe66a3f7c38b9b759747918913a4edc))
|
|
||||||
* ssl.com支持ecc ([b5ec047](https://github.com/certd/certd/commit/b5ec04723db48422f71041f4043002e7f5b450b1))
|
|
||||||
|
|
||||||
## [1.37.10](https://github.com/certd/certd/compare/v1.37.9...v1.37.10) (2025-11-19)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.9](https://github.com/certd/certd/compare/v1.37.8...v1.37.9) (2025-11-19)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.8](https://github.com/certd/certd/compare/v1.37.7...v1.37.8) (2025-11-17)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.7](https://github.com/certd/certd/compare/v1.37.6...v1.37.7) (2025-11-12)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持使用letencrypt测试环境申请ip证书 ([86ce00a](https://github.com/certd/certd/commit/86ce00adf92ff98fead87a3eaaa6631036708f47))
|
|
||||||
|
|
||||||
## [1.37.6](https://github.com/certd/certd/compare/v1.37.5...v1.37.6) (2025-11-10)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.5](https://github.com/certd/certd/compare/v1.37.4...v1.37.5) (2025-11-08)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.4](https://github.com/certd/certd/compare/v1.37.3...v1.37.4) (2025-10-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.3](https://github.com/certd/certd/compare/v1.37.2...v1.37.3) (2025-10-24)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.37.2](https://github.com/certd/certd/compare/v1.37.1...v1.37.2) (2025-10-14)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 支持网络测试 ([2bef608](https://github.com/certd/certd/commit/2bef608e07ceb56d52007f290667e0afef401b22))
|
|
||||||
|
|
||||||
## [1.37.1](https://github.com/certd/certd/compare/v1.37.0...v1.37.1) (2025-09-29)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
# [1.37.0](https://github.com/certd/certd/compare/v1.36.25...v1.37.0) (2025-09-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.25](https://github.com/certd/certd/compare/v1.36.24...v1.36.25) (2025-09-27)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.24](https://github.com/certd/certd/compare/v1.36.23...v1.36.24) (2025-09-27)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.23](https://github.com/certd/certd/compare/v1.36.22...v1.36.23) (2025-09-26)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.22](https://github.com/certd/certd/compare/v1.36.21...v1.36.22) (2025-09-23)
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 优化连接失败的报错提示 ([71d8e7e](https://github.com/certd/certd/commit/71d8e7edd23ad63fdc01a92766b52ede5074fe7c))
|
|
||||||
* 增加自签名证书提示 ([877c9c4](https://github.com/certd/certd/commit/877c9c4ff99f81d289f67afd96f440c0796b03ea))
|
|
||||||
* dns支持新网域名解析 ([cf3a78e](https://github.com/certd/certd/commit/cf3a78e1145ff0505c87fbc485d9e731b1aa88a8))
|
|
||||||
|
|
||||||
## [1.36.21](https://github.com/certd/certd/compare/v1.36.20...v1.36.21) (2025-09-15)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.20](https://github.com/certd/certd/compare/v1.36.19...v1.36.20) (2025-09-13)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.19](https://github.com/certd/certd/compare/v1.36.18...v1.36.19) (2025-09-05)
|
|
||||||
|
|
||||||
### Bug Fixes
|
|
||||||
|
|
||||||
* 修复批量流水线执行时日志显示错乱的问题 ([4372adc](https://github.com/certd/certd/commit/4372adc703b9a4c785664054ab2a533626d815a8))
|
|
||||||
|
|
||||||
### Performance Improvements
|
|
||||||
|
|
||||||
* 去掉宝塔url后面的斜杠 ([8a0c2b9](https://github.com/certd/certd/commit/8a0c2b9b13628da750c25757e0cb8ed3038775ba))
|
|
||||||
|
|
||||||
## [1.36.18](https://github.com/certd/certd/compare/v1.36.17...v1.36.18) (2025-08-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.17](https://github.com/certd/certd/compare/v1.36.16...v1.36.17) (2025-08-17)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.16](https://github.com/certd/certd/compare/v1.36.15...v1.36.16) (2025-08-16)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.15](https://github.com/certd/certd/compare/v1.36.14...v1.36.15) (2025-08-07)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.14](https://github.com/certd/certd/compare/v1.36.13...v1.36.14) (2025-07-28)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.13](https://github.com/certd/certd/compare/v1.36.12...v1.36.13) (2025-07-23)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.12](https://github.com/certd/certd/compare/v1.36.11...v1.36.12) (2025-07-22)
|
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
|
||||||
|
|
||||||
## [1.36.11](https://github.com/certd/certd/compare/v1.36.10...v1.36.11) (2025-07-22)
|
## [1.36.11](https://github.com/certd/certd/compare/v1.36.10...v1.36.11) (2025-07-22)
|
||||||
|
|
||||||
**Note:** Version bump only for package @certd/basic
|
**Note:** Version bump only for package @certd/basic
|
||||||
|
|||||||
@@ -1 +1 @@
|
|||||||
22:29
|
12:23
|
||||||
|
|||||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user