GithubHelp home page GithubHelp logo

certd / certd Goto Github PK

View Code? Open in Web Editor NEW
375.0 10.0 59.0 5.42 MB

免费通配符域名SSL证书全自动申请、续期、部署,支持部署到阿里云、腾讯云、ssh主机。Automatically apply, renew and deploy free Generic domain SSL Certificates。

Home Page: https://certd.handsfree.work/

License: GNU Affero General Public License v3.0

JavaScript 17.49% HTML 0.05% Vue 17.95% Less 0.23% Dockerfile 0.08% Shell 0.08% CSS 5.72% TypeScript 58.40% Raku 0.01%
certbot letencrypt ssl-certificate automation acme-v2 cert auto ssl

certd's People

Contributors

greper avatar jijun avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

certd's Issues

新建任务选项能否发阿里云slb的证书管理也加入进来

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

一、问题描述

请在此处简要描述你所遇到的问题,必要时请贴出相关截图辅助理解和定位

复现步骤

请描述复现问题的详细步骤
如果非示例页面的问题,最好能提供最小复现示例的代码、或者仓库链接

报错截图

请贴出报错日志截图

效果截图

请贴出效果截图

1. 期望效果

2. 实际效果

连接服务器上传证书报错.

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

一、问题描述

连接服务器上传证书报错.

复现步骤

60b3c3b2343311efb96f6039449d4e7

报错截图

b78c3e175d60c3f7a1319447956910a

效果截图

请贴出效果截图

1. 期望效果

有明确的提示什么原因就好了.

2. 实际效果

Certd v1.20.2 版本部分按钮点击无反应

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

一、问题描述

升级到Certd v1.20.2后,很多操作按钮点不动,如下图
1
2
3
同样,点击确定按钮后,原本应该关闭窗口的,也是毫无反应~

另外,提个小小的建议不知是否恰当,像下面这个列表页,是否可以增加一列显示当前证书的到期时间,这样更直观 ~
4

[v2] todo list

  • 执行历史页面重构
  • pipeline详情页增加返回按钮
  • preview部署
  • v2文档编写
  • 支持重新运行单个任务
  • 邮件通知
  • 管理授权
  • 修改密码

希望支持百度智能云部署

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

一、问题描述
目前在使用百度智能云的cdn,感觉要比腾讯云和阿里云的好用一些,并且相对价格比较便宜(没有htts请求数计费),所以希望如果有相对应的开发计划的话,请将百度智能云的cdn的ssl证书自动部署加入其中

但是跑了两次,在DNS解析记录都有生成,但最终流水线失败-加一个失败重试功能

一、问题描述

但是跑了两次,在DNS解析记录都有生成,

复现步骤

请描述复现问题的详细步骤
如果非示例页面的问题,最好能提供最小复现示例的代码、或者仓库链接

报错截图

2c5cb1d5fc12c2fc9a40639044085b7

这种 日志重复打了几十条之后才报错的.
d493b42d1b9c120cd9a1084b936c411

效果截图

1. 期望效果

可能需要一个异步的线程一直去处理这种 慢的问题.直到完成.或用回调方式去监控
那如果是超时的情况,就再启一次.半小时一次,一直重试?
失败后可以自动重试.时间间隔可配置.

2. 实际效果

申请SSL证书失败报错(txt解析未创建成功)

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

问题描述

同一个阿里云授权账号,申请了两个SSL证书,情况如下:
cn-bamboo.com,申请失败,TXT记录未创建成功,报错见下图;
bamboogp.cn,申请成功;
初步猜测是因为域名中包含有横杠,然后代码针对域名检测机制不完善导致~

报错截图

1
2
3

上传证书到主机 任务失败

[root@VM_0_7_centos certd]# npm run certd

[email protected] certd
node index.js

[2022-01-06T18:50:14.189] [INFO] certd - ------------------- Cert-D ---------------------
[2022-01-06T18:50:14.194] [INFO] certd - 任务开始
[2022-01-06T18:50:14.194] [INFO] certd - 证书任务 [".xxx.com"] 开始
[2022-01-06T18:50:14.203] [INFO] certd - 证书还未过期: 2022-04-06T09:09:40.000Z ,剩余 89 天
[2022-01-06T18:50:14.204] [INFO] certd - 暂不更新证书
[2022-01-06T18:50:14.204] [INFO] certd - 证书任务 ["
.xxx.com"] 完成
[2022-01-06T18:50:14.204] [INFO] certd - 证书保存路径: /root/.certd/[email protected]/certs/.xxx.com-54841215a878604fc0374157be69815b/2022.01.06.180944
[2022-01-06T18:50:14.204] [INFO] certd - ----------------------
[2022-01-06T18:50:14.204] [INFO] certd - 部署任务开始
[2022-01-06T18:50:14.205] [INFO] certd - ------------【D1-新部署流程】-----------
[2022-01-06T18:50:14.206] [INFO] certd - ----【上传证书到主机】开始执行
[2022-01-06T18:50:14.304] [INFO] certd - 连接服务器成功
[2022-01-06T18:50:14.359] [INFO] certd - 上传文件: {"localPath":"/root/.certd/[email protected]/certs/
.xxx.com-54841215a878604fc0374157be69815b/2022.01.06.180944/_.xxx.com.crt","remotePath":"/root/ssl"}
执行命令: mkdir -p /root
Client :: ready
[vm.xxxx.cn][close]:code:0
[2022-01-06T18:50:14.462] [ERROR] certd - 流程执行失败 Error: Failure
at SFTPStream._transform (/mnt/certd/node_modules/ssh2-streams/lib/sftp.js:412:27)
at SFTPStream.Transform._write (node:internal/streams/transform:184:23)
at writeOrBuffer (node:internal/streams/writable:389:12)
at _write (node:internal/streams/writable:330:10)
at SFTPStream.Writable.write (node:internal/streams/writable:334:10)
at Channel.ondata (node:internal/streams/readable:754:22)
at Channel.emit (node:events:390:28)
at addChunk (node:internal/streams/readable:315:12)
at readableAddChunk (node:internal/streams/readable:289:9)
at Channel.Readable.push (node:internal/streams/readable:228:10)
at SSH2Stream. (/mnt/certd/node_modules/ssh2/lib/Channel.js:167:15)
at SSH2Stream.emit (node:events:390:28)
at parsePacket (/mnt/certd/node_modules/ssh2-streams/lib/ssh.js:3191:10)
at SSH2Stream._transform (/mnt/certd/node_modules/ssh2-streams/lib/ssh.js:701:13)
at SSH2Stream.Transform._write (node:internal/streams/transform:184:23)
at writeOrBuffer (node:internal/streams/writable:389:12) {
code: 4,
lang: ''
}
[2022-01-06T18:50:14.464] [INFO] certd -
[2022-01-06T18:50:14.465] [INFO] certd - 任务完成
[2022-01-06T18:50:14.465] [INFO] certd - ---------------------------任务结果总览--------------------------
[2022-01-06T18:50:14.465] [INFO] certd - 【更新证书】--------------------------------------- [skip] 还未到过期时间,跳过
[2022-01-06T18:50:14.465] [INFO] certd - 【D1-新部署流程】----------------------------------- [error] 执行失败:Failure
[2022-01-06T18:50:14.465] [INFO] certd - └【上传证书到主机】------------------------------- [error] Failure
[2022-01-06T18:50:14.466] [INFO] certd - 【result】--------------------------------------- [error] D1-新部署流程执行失败:Failure
[2022-01-06T18:50:14.466] [INFO] certd - 【context】 {"certIsNew":false,"D1-新部署流程":{}}
[2022-01-06T18:50:14.466] [ERROR] certd - 任务执行出错 Error: D1-新部署流程执行失败:Failure
at Executor.doRun (file:///mnt/certd/node_modules/@certd/executor/src/index.js:93:15)
at async Executor.run (file:///mnt/certd/node_modules/@certd/executor/src/index.js:28:14)
at async file:///mnt/certd/index.js:18:1
node:internal/process/esm_loader:94
internalBinding('errors').triggerUncaughtException(
^

Error: D1-新部署流程执行失败:Failure
at Executor.doRun (file:///mnt/certd/node_modules/@certd/executor/src/index.js:93:15)
at async Executor.run (file:///mnt/certd/node_modules/@certd/executor/src/index.js:28:14)
at async file:///mnt/certd/index.js:18:1

域名及个人信息,已经做了隐藏。

上传证书到主机超时

一、问题描述

上传证书到主机超时

复现步骤

设置了两台机子,其中一台正常,发现超时的主机正巧是certd部署的机器,怀疑可能跟这个有关。(自己不能ssh自己?)

报错截图

image

DNS解析授权中txt记录写到另一个域名中

DNS解析授权中txt记录写到另一个域名中

一、问题描述

证书申请过程中,现申请了一个域名的证书之后,同一个DNS服务商(阿里云)的DNS解析授权存在txt记录写到另一个域名中,比如

复现步骤

申请的bar.com的证书
image
在foo.com的域名解析中出现了主机记录_acme-challenge.bar.com
image

报错截图

然后就导致超时了
image

应该是申请的时候创建到默认那里了,我只能从foo.com把记录复制到bar.com,就可以验证并且成功了
image

前端生成的代码好像没更新, 目前申请acme-client报错signature algorithm not supported

[2022-10-17T16:39:07.587] [ERROR] certd - 任务执行出错 Error: Error finalizing order :: signature algorithm not supported
at AcmeApi.apiRequest (/root/certificate/certd-run/node_modules/@certd/acme-client/src/api.js:54:19)
at processTicksAndRejections (node:internal/process/task_queues:96:5)
at async AcmeClient.finalizeOrder (/root/certificate/certd-run/node_modules/@certd/acme-client/src/client.js:351:22)
at async module.exports (/root/certificate/certd-run/node_modules/@certd/acme-client/src/auto.js:201:5)
at async AcmeService.order (file:///root/certificate/certd-run/node_modules/@certd/certd/src/acme.js:155:17)
at async Certd.doCertApply (file:///root/certificate/certd-run/node_modules/@certd/certd/src/index.js:60:18)
at async Certd.certApply (file:///root/certificate/certd-run/node_modules/@certd/certd/src/index.js:54:12)
at async Executor.runCertd (file:///root/certificate/certd-run/node_modules/@certd/executor/src/index.js:105:18)
at async Executor.doRun (file:///root/certificate/certd-run/node_modules/@certd/executor/src/index.js:52:18)
at async Executor.run (file:///root/certificate/certd-run/node_modules/@certd/executor/src/index.js:28:14)
at async file:///root/certificate/certd-run/index.js:18:1
node:internal/process/esm_loader:94
internalBinding('errors').triggerUncaughtException(
^

Error: Error finalizing order :: signature algorithm not supported
at AcmeApi.apiRequest (/root/certificate/certd-run/node_modules/@certd/acme-client/src/api.js:54:19)
at processTicksAndRejections (node:internal/process/task_queues:96:5)
at async AcmeClient.finalizeOrder (/root/certificate/certd-run/node_modules/@certd/acme-client/src/client.js:351:22)
at async module.exports (/root/certificate/certd-run/node_modules/@certd/acme-client/src/auto.js:201:5)
at async AcmeService.order (file:///root/certificate/certd-run/node_modules/@certd/certd/src/acme.js:155:17)
at async Certd.doCertApply (file:///root/certificate/certd-run/node_modules/@certd/certd/src/index.js:60:18)
at async Certd.certApply (file:///root/certificate/certd-run/node_modules/@certd/certd/src/index.js:54:12)
at async Executor.runCertd (file:///root/certificate/certd-run/node_modules/@certd/executor/src/index.js:105:18)
at async Executor.doRun (file:///root/certificate/certd-run/node_modules/@certd/executor/src/index.js:52:18)
at async Executor.run (file:///root/certificate/certd-run/node_modules/@certd/executor/src/index.js:28:14)
at async file:///root/certificate/certd-run/index.js:18:1

文档错误

文档里面有以下内容

部署到阿里云DNS
type = deployCertToAliyunCDN
部署到腾讯云DNS
type = deployCertToTencentDNS

是否应该是部署到CDN, 误写成了DNS

新需求:批量导入的需求

对于同一CDN账号下有多个的域名的场景,能否在设置的时候,可以批量增加多个域名,然后也编辑的时候也支持批量编辑

请求添加上传证书到阿里云oss的功能

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

一、问题描述

请在此处简要描述你所遇到的问题,必要时请贴出相关截图辅助理解和定位

复现步骤

请描述复现问题的详细步骤
如果非示例页面的问题,最好能提供最小复现示例的代码、或者仓库链接

报错截图

请贴出报错日志截图

效果截图

请贴出效果截图

1. 期望效果

2. 实际效果

部署到腾讯云CDN中无法选择 CDN接口

一、问题描述

在编辑流水线的时候,增加部署到腾讯云CDN 的功能时候,其中的CDN接口没有任何可选项,导致无法进行到下一步,也就无法实现证书部署到腾讯云CDN

复现步骤

编辑任务 -> 部署到腾讯云CDN -> 确定 -> 选择 ** CDN接口 **

报错截图

  • 图示效果如下:
    图片

上传证书到主机失败

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

一、问题描述

上传证书到主机失败,错误提示:

[2024-03-15T17:32:56.390] [ERROR] pipeline - [上传证书到主机]<id:T4LkDUEyIT-E8PV5m39D6> [step] Error: Failure
    at I._transform (/app/node_modules/@certd/plugin-host/dist/bundle.js:1:119388)
    at I.Transform._write (node:internal/streams/transform:205:23)
    at writeOrBuffer (node:internal/streams/writable:391:12)
    at _write (node:internal/streams/writable:332:10)
    at I.Writable.write (node:internal/streams/writable:336:10)
    at u.ondata (node:internal/streams/readable:754:22)
    at u.emit (node:events:513:28)
    at addChunk (node:internal/streams/readable:315:12)
    at readableAddChunk (node:internal/streams/readable:289:9)
    at u.Readable.push (node:internal/streams/readable:228:10) {
  code: 4,
  lang: ''
}

复现步骤

正常添加流程,证书保存路径 /usr/local/nginx/conf/ssl,私钥同,目录已存在。使用 sudo

报错截图

snapshot

请问是否考虑支持直接将证书解压传到本机某个目录

感谢您支持certd,请按如下规范提交issue
如果有条件,请尽量在github上提交

一、问题描述

目前使用docker在机器上部署后,想直接申请证书并解压到某个目录,并自动修改nginx配置,貌似没有插件支持,请问是否考虑支持

有两点想法:
1、增加一个支持执行shell脚本的插件,可以执行多样化的命令
2、或者局限一点,增加一个只解压拷贝证书的插件,专门把证书拷贝到某个目录下

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.