[{"data":1,"prerenderedAt":298},["ShallowReactive",2],{"docs-dns-validation":3,"docs-nav":255},{"id":4,"title":5,"body":6,"category":241,"dateModified":242,"datePublished":242,"description":157,"draft":243,"extension":244,"icon":245,"meta":246,"navigation":247,"order":248,"path":249,"seo":250,"sitemap":251,"stem":252,"summary":253,"__hash__":254},"docs\u002Fdocs\u002Fdns-validation.md","DNS-01 验证详解",{"type":7,"value":8,"toc":229},"minimark",[9,14,23,27,30,61,64,82,91,95,104,107,132,139,142,147,150,160,163,222,226],[10,11,13],"h2",{"id":12},"dns-01-验证原理","DNS-01 验证原理",[15,16,17,18,22],"p",{},"DNS-01 验证通过在你的域名 DNS 中添加一条指定的 TXT 记录，CA 机构查询该记录以确认你对域名的控制权。它是适用范围最广的验证方式，也是",[19,20,21],"strong",{},"通配符证书唯一支持","的验证方式。",[10,24,26],{"id":25},"手动添加-txt-记录","手动添加 TXT 记录",[15,28,29],{},"提交申请后，系统会生成验证信息：",[31,32,33,40,55],"ul",{},[34,35,36,39],"li",{},[19,37,38],{},"记录类型","：TXT",[34,41,42,45,46,50,51,54],{},[19,43,44],{},"主机记录","：",[47,48,49],"code",{},"_acme-challenge","（多域名时可能带子域前缀，如 ",[47,52,53],{},"_acme-challenge.www","）",[34,56,57,60],{},[19,58,59],{},"记录值","：系统生成的随机字符串",[15,62,63],{},"操作步骤：",[65,66,67,70,73,76,79],"ol",{},[34,68,69],{},"复制系统提供的主机记录和记录值",[34,71,72],{},"登录你的 DNS 管理面板（如阿里云、腾讯云 DNSPod、Cloudflare 等）",[34,74,75],{},"添加对应的 TXT 记录",[34,77,78],{},"等待 DNS 生效（通常一分钟内，也可能需要几分钟）",[34,80,81],{},"回到平台点击「验证」按钮",[83,84,85],"blockquote",{},[15,86,87,90],{},[19,88,89],{},"多域名注意","：申请多域名或同时包含根域名与通配符时，可能生成多条 TXT 记录，需全部添加后才能通过验证。",[10,92,94],{"id":93},"使用云平台-api-自动添加","使用云平台 API 自动添加",[15,96,97,98,103],{},"如果你在平台配置了",[99,100,102],"a",{"href":101},"\u002Fdocs\u002Fcloud-credential","云平台凭证","（如阿里云 AccessKey），平台可以自动为你添加和清理 DNS 记录，无需手动操作。",[15,105,106],{},"自动 DNS 验证的优势：",[31,108,109,115,126],{},[34,110,111,114],{},[19,112,113],{},"免手动","：提交申请后系统自动写入 TXT 记录，验证完成后自动清理",[34,116,117,120,121,125],{},[19,118,119],{},"自动续签前提","：开启",[99,122,124],{"href":123},"\u002Fdocs\u002Fauto-renew","自动续签","必须配置有效的云平台凭证",[34,127,128,131],{},[19,129,130],{},"续签时自动同步","：续签过程中若检测到 DNS 记录未生效，系统会自动重新写入",[15,133,134,135,138],{},"配置方法见",[99,136,137],{"href":101},"云平台凭证配置指南","。",[10,140,141],{"id":141},"验证失败排查",[143,144,146],"h3",{"id":145},"验证一直不通过","验证一直不通过？",[15,148,149],{},"多为 DNS 尚未全球生效或记录值填写有误。可用以下命令检查记录是否已生效：",[151,152,158],"pre",{"className":153,"code":155,"language":156,"meta":157},[154],"language-bash","# Linux \u002F macOS\ndig TXT _acme-challenge.example.com\n\n# Windows\nnslookup -type=TXT _acme-challenge.example.com\n","bash","",[47,159,155],{"__ignoreMap":157},[143,161,162],{"id":162},"常见错误",[164,165,166,179],"table",{},[167,168,169],"thead",{},[170,171,172,176],"tr",{},[173,174,175],"th",{},"错误原因",[173,177,178],{},"解决方法",[180,181,182,191,206,214],"tbody",{},[170,183,184,188],{},[185,186,187],"td",{},"记录值复制不完整",[185,189,190],{},"重新复制完整记录值，注意前后无空格",[170,192,193,196],{},[185,194,195],{},"主机记录填写错误",[185,197,198,199,201,202,205],{},"确认填写 ",[47,200,49],{},"，不是 ",[47,203,204],{},"@"," 或域名本身",[170,207,208,211],{},[185,209,210],{},"DNS 尚未生效",[185,212,213],{},"等待 1-5 分钟后重试，部分 DNS 服务商生效较慢",[170,215,216,219],{},[185,217,218],{},"存在旧的冲突记录",[185,220,221],{},"删除同名旧 TXT 记录后重新添加",[143,223,225],{"id":224},"一个域名需要添加多条记录吗","一个域名需要添加多条记录吗？",[15,227,228],{},"申请多域名或同时包含根域名与通配符时，可能生成多条 TXT 记录，需全部添加。系统会在验证面板中列出所有需要添加的记录，逐条完成即可。",{"title":157,"searchDepth":230,"depth":231,"links":232},2,3,[233,234,235,236],{"id":12,"depth":230,"text":13},{"id":25,"depth":230,"text":26},{"id":93,"depth":230,"text":94},{"id":141,"depth":230,"text":141,"children":237},[238,239,240],{"id":145,"depth":231,"text":146},{"id":162,"depth":231,"text":162},{"id":224,"depth":231,"text":225},"申请与验证","2026-09-09",false,"md",null,{},true,1,"\u002Fdocs\u002Fdns-validation",{"title":5,"description":157},{"loc":249},"docs\u002Fdns-validation","详解 SSL 证书的 DNS-01 验证方式：原理、TXT 记录添加步骤、生效时间，以及云平台 API 自动添加解析。","rMkXCe7qLzTIQRr-ZCXMNcSmaW16BYw66rlalOtP9Pg",[256,260,263,267,269,272,275,278,281,285,286,289,292,295],{"path":123,"title":257,"category":258,"order":259},"SSL证书自动续签配置","部署与续签",5,{"path":261,"title":262,"category":258,"order":248},"\u002Fdocs\u002Fcert-download","证书下载与格式说明",{"path":264,"title":265,"category":266,"order":231},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":101,"title":137,"category":258,"order":268},6,{"path":270,"title":271,"category":266,"order":230},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":273,"title":274,"category":241,"order":259},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传",{"path":276,"title":277,"category":258,"order":231},"\u002Fdocs\u002Fdeploy-cloud","一键部署到阿里云 CDN\u002FESA",{"path":279,"title":280,"category":258,"order":230},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":282,"title":283,"category":258,"order":284},"\u002Fdocs\u002Fdeploy-server","服务器部署客户端安装与使用",4,{"path":249,"title":5,"category":241,"order":248},{"path":287,"title":288,"category":266,"order":248},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":290,"title":291,"category":241,"order":230},"\u002Fdocs\u002Fhttp-validation","HTTP-01 文件验证详解",{"path":293,"title":294,"category":241,"order":284},"\u002Fdocs\u002Fip-certificate","IP 地址证书申请指南",{"path":296,"title":297,"category":241,"order":231},"\u002Fdocs\u002Fwildcard","通配符证书申请",1789011271295]