Let’s Encrypt 和 华为云的DNS 不大兼容啊

DNS验证基本上失败率>90%,换了阿狸的DNS秒过,MLGBD…

网友回复:

注册 珍爱生命,远离华为

ccf 扫描了一下华为云的DNS,应该是不支持 echo capitalization 导致的 已发工单,需要对DNS服务器做调整,看看他们能否解决 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.cn / 43.254.0.68 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.com / 114.115.192.11 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.com / 139.9.224.17 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.net / 159.138.76.159 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.org X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.org / 159.138.17.59 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.org / 159.138.77.159复制代码

hehe 是这样,所以我每次都要切腾讯DNS

ccf 折腾还是qq,阿里家吧

jqbaobao 华为dns有优先级设置,还有4个ns,两个国内两个国外

swsh007 其他功能是不错,我这里是单纯说Let’s的TXT验证,不管用华为国内国外,都失败 nslookup 查询没问题,但 Let’s 的查询机制不一样 https://unboundtest.com/ 这里可以测试,和 Let’s 的查询机制一样,TXT和CAA查询大概率失败,估计是DNS的兼容性有问题

By小酷 你如果有txt记录,建议全部写成一个,因为华为分开写记录集会变成轮训,写成一个才会全部显示

ccf 我知道他这个机制,我都是写一个记录的, 但问题是,哪怕这个记录里面只有一行TXT,https://unboundtest.com/ 这里也大概率查询失败,Let’s 就更完蛋了 而且 CAA 也是大概率查询失败

By小酷 原来是这个原因,还以为是le不支持我的域名

ccf 之前说要修的,结果现在都没修

注册 你发过工单么?

注册 把需要签证书的域名套上cfp就行

ccf 我说的不是一行,而是有其他的txt记录,你是不是有多个记录集

sky170 Let’s Encrypt部分地区验证超时,还是算了吧

By小酷 不是,我只有一条  TXT 记录集 不管这个记录集合里面有几行,都不行 比如 _acme-challenge.abc.com 这个TXT记录集,以下两种 txt 都有问题 只有一行 “vsebvtrsbtresb” 或者两行 “veavrevasresvre” “xresgvrwbvtreb” 应该不是记录的问题,而是华为DNS并不满足某些RFC标准

请叫我毛线 扫描了一下华为云的DNS,应该是不支持 echo capitalization 导致的 已发工单,需要对DNS服务器做调整,看看他们能否解决 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.cn / 43.254.0.68 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.com / 114.115.192.11 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.com / 139.9.224.17 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.net / 159.138.76.159 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.org X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.org / 159.138.17.59 X        Fatal error: Nameserver doesn’t support echo capitalization. That’s critical if you want to create Letsencrypt certificates. Read https://tools.ietf.org/html/draft-vixie-dnsext-dns0x20-00 (2008). If a dns client asks “ExAmPlE.cOm”, the name server must answer with the same name, not with “example.com”. Creating Letsencrypt certificates isn’t possible. Your name server provider must update the software.: ns1.huaweicloud-dns.org / 159.138.77.159复制代码

ccf Let’s Encrypt  和 DNS.COM 的自定义路线也不兼容 MMP 我用了几天才发现  100多W百度蜘蛛变5000 真是牛P

ccf 华为……就这样吧,我反正不用

注意:本站只对LOC帖子进行收集和归纳,并不审核其内容,若其中内容侵犯到您的权益,请联系长站删除!!本文由IP索引采集整理发布!!ipipn.com欢迎友情链接!!!

相关说明:

1、VIP会员无限制任意下载,免积分。立即前往开通>>

2、下载积分可通过日常 签到绑定邮箱 以及 积分兑换 等途径获得!

3、本站资源大多存储在云盘,如出现链接失效请评论反馈,如有密码,均为:www.ipipn.com。

4、所有站内资源仅供学习交流使用。未经原版权作者许可,禁止用于任何商业环境,否则后果自负。为尊重作者版权,请购买正版作品。

5、站内资源来源于网络公开发表文件或网友分享,如侵犯您的权益,请联系管理员处理。

6、本站提供的源码、模板、软件工具等其他资源,都不包含技术服务,请大家谅解!

7、源码、模板等资源会随着技术、坏境的升级而存在部分问题,还请慎重选择。

PS.源码均收集自网络,如有侵犯阁下权益,请发信件至: [email protected] .


源站网 » Let’s Encrypt 和 华为云的DNS 不大兼容啊

发表评论

赞助本站发展 维持服务器消耗

全站源码免费下载 立刻赞助