dromara / dromara/domain-admin

点击一键部署,成功了,文件验证的验证URL也能正常访问,但是点击验证时却提示域名验证失败

Open
#196 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
2.4k
Forks
389
PR merge metrics
No merged PRs in 30d

Description

点击一键部署,成功了,文件验证的验证URL也能正常访问,但是点击验证时却提示域名验证失败
使用docker部署 1.6.68
nginx为最新版

错误日志,xxx为去敏
```text
2025-07-09 11:09:13 [INFO] permission.py/parse_token:
check_permission: /api/verifyCertificateById

('SELECT "t1"."id", "t1"."username", "t1"."password", "t1"."avatar_url", "t1"."role", "t1"."status", "t1"."create_time", "t1"."update_time" FROM "tb_user" AS "t1" WHERE ("t1"."id" = ?) LIMIT ? OFFSET ?', [1, 1, 0])
('SELECT "t1"."id", "t1"."user_id", "t1"."domain_raw", "t1"."ssl_certificate", "t1"."ssl_certificate_key", "t1"."start_time", "t1"."expire_time", "t1"."directory_type", "t1"."key_type", "t1"."challenge_type", "t1"."challenge_deploy_type_id", "t1"."challenge_deploy_id", "t1"."challenge_deploy_status", "t1"."deploy_verify_path", "t1"."token", "t1"."validation", "t1"."status_url", "t1"."status", "t1"."deploy_type_id", "t1"."deploy_host_id", "t1"."deploy_key_file", "t1"."deploy_fullchain_file", "t1"."deploy_reloadcmd", "t1"."deploy_url", "t1"."deploy_header_raw", "t1"."deploy_params_raw", "t1"."ssl_deploy_status", "t1"."is_auto_renew", "t1"."version", "t1"."create_time", "t1"."update_time" FROM "tb_issue_certificate" AS "t1" WHERE (("t1"."id" = ?) AND ("t1"."user_id" = ?)) LIMIT ?', [6, 1, 1])
('SELECT "t1"."id", "t1"."user_id", "t1"."domain_raw", "t1"."ssl_certificate", "t1"."ssl_certificate_key", "t1"."start_time", "t1"."expire_time", "t1"."directory_type", "t1"."key_type", "t1"."challenge_type", "t1"."challenge_deploy_type_id", "t1"."challenge_deploy_id", "t1"."challenge_deploy_status", "t1"."deploy_verify_path", "t1"."token", "t1"."validation", "t1"."status_url", "t1"."status", "t1"."deploy_type_id", "t1"."deploy_host_id", "t1"."deploy_key_file", "t1"."deploy_fullchain_file", "t1"."deploy_reloadcmd", "t1"."deploy_url", "t1"."deploy_header_raw", "t1"."deploy_params_raw", "t1"."ssl_deploy_status", "t1"."is_auto_renew", "t1"."version", "t1"."create_time", "t1"."update_time" FROM "tb_issue_certificate" AS "t1" WHERE ("t1"."id" = ?) LIMIT ? OFFSET ?', [6, 1, 0])
('SELECT "t1"."id", "t1"."user_id", "t1"."domain_raw", "t1"."ssl_certificate", "t1"."ssl_certificate_key", "t1"."start_time", "t1"."expire_time", "t1"."directory_type", "t1"."key_type", "t1"."challenge_type", "t1"."challenge_deploy_type_id", "t1"."challenge_deploy_id", "t1"."challenge_deploy_status", "t1"."deploy_verify_path", "t1"."token", "t1"."validation", "t1"."status_url", "t1"."status", "t1"."deploy_type_id", "t1"."deploy_host_id", "t1"."deploy_key_file", "t1"."deploy_fullchain_file", "t1"."deploy_reloadcmd", "t1"."deploy_url", "t1"."deploy_header_raw", "t1"."deploy_params_raw", "t1"."ssl_deploy_status", "t1"."is_auto_renew", "t1"."version", "t1"."create_time", "t1"."update_time" FROM "tb_issue_certificate" AS "t1" WHERE ("t1"."id" = ?) LIMIT ? OFFSET ?', [6, 1, 0])
2025-07-09 11:09:13 [INFO] acme_v2_api.py/get_acme_client:
directory_type exists

2025-07-09 11:09:47 [INFO] acme_v2_api.py/select_challenge:
authorizations len: 1

2025-07-09 11:09:47 [INFO] acme_v2_api.py/select_challenge:
challenges len: www.xxx.com - 1

2025-07-09 11:09:47 [INFO] acme_v2_api.py/select_challenge:
{'www.xxx.com': [ChallengeBody(chall=HTTP01(token=b'\xe6\xe8F\xb55\xa0vFNZs\x1az7\x0e\x02\xa7\xf3\xb3\x90\x1b\xc1\xbb\xf3bB\xd6+Q\x86\x11\x03'), uri='https://acme.zerossl.com/v2/DV90/chall/xxxxxxxxxxxxxxxxxxx', status=Status(valid), validated=datetime.datetime(2025, 7, 9, 2, 56, 58, tzinfo=datetime.timezone.utc), error=None)]}

2025-07-09 11:09:47 [INFO] acme_v2_api.py/get_acme_client:
directory_type exists

2025-07-09 11:09:47 [INFO] issue_certificate_service.py/verify_certificate:
xxxxxxxxxxxxxxxxxxxaejcOAqfzs5AbwbvzYkLWK1GGEQM.iYcPeh0t4gmE-WvfaSI4MJQerjooZ5iauMCgKWXCB2g

2025-07-09 11:09:52 [DEBUG] issue_certificate_service.py/get_challenge_status:
https://acme.zerossl.com/v2/DV90/chall/xxxxxxxxxxxxxxxxxxx

2025-07-09 11:10:01 [DEBUG] issue_certificate_service.py/get_challenge_status:
{'type': 'urn:ietf:params:acme:error:malformed', 'status': 405, 'detail': 'The request message was malformed'}

2025-07-09 11:10:02 [DEBUG] issue_certificate_service.py/get_challenge_status:
https://acme.zerossl.com/v2/DV90/chall/xxxxxxxxxxxxxxxxxxx

2025-07-09 11:10:03 [DEBUG] issue_certificate_service.py/get_challenge_status:
{'type': 'urn:ietf:params:acme:error:malformed', 'status': 405, 'detail': 'The request message was malformed'}

2025-07-09 11:10:05 [DEBUG] issue_certificate_service.py/get_challenge_status:
https://acme.zerossl.com/v2/DV90/chall/xxxxxxxxxxxxxxxxxxx

2025-07-09 11:10:07 [DEBUG] issue_certificate_service.py/get_challenge_status:
{'type': 'urn:ietf:params:acme:error:malformed', 'status': 405, 'detail': 'The request message was malformed'}

2025-07-09 11:10:10 [DEBUG] issue_certificate_service.py/get_challenge_status:
https://acme.zerossl.com/v2/DV90/chall/xxxxxxxxxxxxxxxxxxx

2025-07-09 11:10:11 [DEBUG] issue_certificate_service.py/get_challenge_status:
{'type': 'urn:ietf:params:acme:error:malformed', 'status': 405, 'detail': 'The request message was malformed'}

2025-07-09 11:10:15 [DEBUG] issue_certificate_service.py/get_challenge_status:
https://acme.zerossl.com/v2/DV90/chall/xxxxxxxxxxxxxxxxxxx

2025-07-09 11:10:16 [DEBUG] issue_certificate_service.py/get_challenge_status:
{'type': 'urn:ietf:params:acme:error:malformed', 'status': 405, 'detail': 'The request message was malformed'}

2025-07-09 11:10:16 [ERROR] handler.py/error_handler:
request.path: /api/verifyCertificateById

2025-07-09 11:10:16 [ERROR] handler.py/error_handler:
Traceback (most recent call last):
File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 1823, in full_dispatch_request
rv = self.dispatch_request()
File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 1799, in dispatch_request
return self.ensure_sync(self.view_functions[rule.endpoint])(**view_args)
File "/app/domain_admin/service/auth_service.py", line 107, in wrapper
ret = func(*args, **kwargs)
File "/app/domain_admin/api/issue_certificate_api.py", line 72, in verify_certificate
issue_certificate_service.verify_certificate(issue_certificate_id, challenge_type)
File "/app/domain_admin/service/issue_certificate_service.py", line 158, in verify_certificate
raise AppException("域名验证失败:{}".format(item['domain']))
domain_admin.utils.flask_ext.app_exception.AppException

```

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.