github
/
certd
mirror of https://github.com/certd/certd
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

chore:

pull/361/head
xiaojunnuo 2025-03-25 11:12:24 +08:00
parent fd507f2692
commit c7f31337ce
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
packages/core/acme-client/src/verify.js
View File

@ -132,14 +132,14 @@ export async function walkTxtRecord(recordName) {
async function verifyDnsChallenge(authz, challenge, keyAuthorization, prefix = '_acme-challenge.') { async function verifyDnsChallenge(authz, challenge, keyAuthorization, prefix = '_acme-challenge.') {
const recordName = `${prefix}${authz.identifier.value}`; const recordName = `${prefix}${authz.identifier.value}`;
log(`Resolving DNS TXT from record（解析DNS TXT记录）: ${recordName}`); log(`本地校验TXT记录）: ${recordName}`);
const recordValues = await walkTxtRecord(recordName); const recordValues = await walkTxtRecord(recordName);
log(`DNS query finished successfully（DNS查询成功）, found ${recordValues.length} TXT records`); log(`DNS查询成功, 找到 ${recordValues.length} 条TXT记录`);
if (!recordValues.length || !recordValues.includes(keyAuthorization)) { if (!recordValues.length || !recordValues.includes(keyAuthorization)) {
throw new Error(`Authorization not found in DNS TXT record（没有找到需要的DNS TXT记录）: ${recordName}，need:${keyAuthorization},found:${recordValues}`); throw new Error(`没有找到需要的DNS TXT记录: ${recordName}，期望:${keyAuthorization},结果:${recordValues}`);
} }
log(`Key authorization match for ${challenge.type}/${recordName}, ACME challenge verified（域名所有权校验成功）`); log(`关键授权匹配成功（${challenge.type}/${recordName}）,校验成功, ACME challenge verified`);
return true; return true;
} }