[{"data":1,"prerenderedAt":318},["ShallowReactive",2],{"docs-http-validation":3,"docs-nav":271},{"id":4,"title":5,"body":6,"category":258,"dateModified":259,"datePublished":260,"description":142,"draft":261,"extension":262,"icon":259,"meta":263,"navigation":264,"order":242,"path":265,"seo":266,"sitemap":267,"stem":268,"summary":269,"__hash__":270},"docs\u002Fdocs\u002Fhttp-validation.md","HTTP-01 文件验证详解",{"type":7,"value":8,"toc":241},"minimark",[9,14,18,25,28,92,95,100,103,123,127,132,135,145,150,153,161,165,168,174,177,180,184,199,203,214,218,225,229,232,238],[10,11,13],"h2",{"id":12},"http-01-验证原理","HTTP-01 验证原理",[15,16,17],"p",{},"HTTP-01 验证通过在你的 Web 服务器上放置一个指定的验证文件，CA 机构通过 HTTP 访问该文件以确认你对域名（或 IP）的控制权。",[15,19,20,21],{},"验证文件路径格式：",[22,23,24],"code",{},"http:\u002F\u002Fexample.com\u002F.well-known\u002Facme-challenge\u002F\u003Ctoken>",[10,26,27],{"id":27},"适用场景",[29,30,31,44],"table",{},[32,33,34],"thead",{},[35,36,37,41],"tr",{},[38,39,40],"th",{},"场景",[38,42,43],{},"是否适用",[45,46,47,56,64,76,84],"tbody",{},[35,48,49,53],{},[50,51,52],"td",{},"域名已解析到服务器且服务正在运行",[50,54,55],{},"✅ 推荐",[35,57,58,61],{},[50,59,60],{},"IP 地址证书（无域名）",[50,62,63],{},"✅ 唯一选择",[35,65,66,73],{},[50,67,68,69,72],{},"通配符证书（",[22,70,71],{},"*.example.com","）",[50,74,75],{},"❌ 不支持，必须用 DNS 验证",[35,77,78,81],{},[50,79,80],{},"域名尚未解析或服务器未启动",[50,82,83],{},"❌ 不适用",[35,85,86,89],{},[50,87,88],{},"服务器在 CDN\u002F负载均衡后面",[50,90,91],{},"⚠️ 需确保验证请求能到达源站",[10,93,94],{"id":94},"验证步骤",[96,97,99],"h3",{"id":98},"_1-获取验证信息","1. 获取验证信息",[15,101,102],{},"提交申请后，系统会在流程页显示验证信息：",[104,105,106,117],"ul",{},[107,108,109,113,114],"li",{},[110,111,112],"strong",{},"验证文件路径","：",[22,115,116],{},"\u002F.well-known\u002Facme-challenge\u002F\u003Ctoken>",[107,118,119,122],{},[110,120,121],{},"验证文件内容","：系统生成的随机字符串",[96,124,126],{"id":125},"_2-部署验证文件","2. 部署验证文件",[15,128,129],{},[110,130,131],{},"方式一：直接放置文件",[15,133,134],{},"将验证文件放到 Web 服务器根目录下的对应路径：",[136,137,143],"pre",{"className":138,"code":140,"language":141,"meta":142},[139],"language-bash","# Nginx 默认根目录示例\nsudo mkdir -p \u002Fvar\u002Fwww\u002Fhtml\u002F.well-known\u002Facme-challenge\u002F\necho \"验证文件内容\" | sudo tee \u002Fvar\u002Fwww\u002Fhtml\u002F.well-known\u002Facme-challenge\u002F\u003Ctoken>\n","bash","",[22,144,140],{"__ignoreMap":142},[15,146,147],{},[110,148,149],{},"方式二：使用 Nginx 配置片段（推荐）",[15,151,152],{},"平台会生成一段 Nginx 配置，直接复制到你的 server 块中即可，无需手动创建文件：",[136,154,159],{"className":155,"code":157,"language":158,"meta":142},[156],"language-nginx","location \u002F.well-known\u002Facme-challenge\u002F {\n    root \u002Fvar\u002Fwww\u002Fhtml;\n}\n","nginx",[22,160,157],{"__ignoreMap":142},[96,162,164],{"id":163},"_3-验证生效","3. 验证生效",[15,166,167],{},"确保通过 HTTP（非 HTTPS）可以访问验证文件：",[136,169,172],{"className":170,"code":171,"language":141,"meta":142},[139],"curl http:\u002F\u002Fexample.com\u002F.well-known\u002Facme-challenge\u002F\u003Ctoken>\n",[22,173,171],{"__ignoreMap":142},[15,175,176],{},"返回验证文件内容即表示部署成功，回到平台点击「验证」按钮。",[10,178,179],{"id":179},"常见问题",[96,181,183],{"id":182},"验证失败404-not-found","验证失败：404 Not Found",[104,185,186,193,196],{},[107,187,188,189,192],{},"检查文件路径是否正确（注意 ",[22,190,191],{},".well-known"," 是隐藏目录）",[107,194,195],{},"确认 Web 服务器根目录配置正确",[107,197,198],{},"检查是否有 URL 重写规则拦截了该路径",[96,200,202],{"id":201},"验证失败连接被拒绝","验证失败：连接被拒绝",[104,204,205,208,211],{},[107,206,207],{},"确认服务器 80 端口已开放",[107,209,210],{},"确认域名已正确解析到服务器 IP",[107,212,213],{},"检查防火墙\u002F安全组是否放行 80 端口",[96,215,217],{"id":216},"cdn负载均衡后面的服务器","CDN\u002F负载均衡后面的服务器",[15,219,220,221,224],{},"如果域名指向 CDN 或负载均衡器，需确保 ",[22,222,223],{},"\u002F.well-known\u002Facme-challenge\u002F"," 路径的请求能到达源站，或在 CDN 层直接配置验证文件响应。",[96,226,228],{"id":227},"ip-地址证书验证","IP 地址证书验证",[15,230,231],{},"IP 地址证书只能使用 HTTP-01 验证。验证时直接通过 IP 访问（示例 IP 为 RFC 5737 文档保留网段，实际请替换为你服务器的公网 IP）：",[136,233,236],{"className":234,"code":235,"language":141,"meta":142},[139],"curl http:\u002F\u002F203.0.113.10\u002F.well-known\u002Facme-challenge\u002F\u003Ctoken>\n",[22,237,235],{"__ignoreMap":142},[15,239,240],{},"确保 IP 对应的服务器 80 端口可访问。",{"title":142,"searchDepth":242,"depth":243,"links":244},2,3,[245,246,247,252],{"id":12,"depth":242,"text":13},{"id":27,"depth":242,"text":27},{"id":94,"depth":242,"text":94,"children":248},[249,250,251],{"id":98,"depth":243,"text":99},{"id":125,"depth":243,"text":126},{"id":163,"depth":243,"text":164},{"id":179,"depth":242,"text":179,"children":253},[254,255,256,257],{"id":182,"depth":243,"text":183},{"id":201,"depth":243,"text":202},{"id":216,"depth":243,"text":217},{"id":227,"depth":243,"text":228},"申请与验证",null,"2026-09-09",false,"md",{},true,"\u002Fdocs\u002Fhttp-validation",{"title":5,"description":142},{"loc":265},"docs\u002Fhttp-validation","详解 SSL 证书的 HTTP-01 文件验证方式：原理、验证文件部署步骤、Nginx 配置片段，以及适用场景与限制。","9Mj96XjlJR_TPUk56mceyuYiiqC2lwDzzk_C7e76pMQ",[272,277,281,285,289,292,295,298,301,305,308,311,312,315],{"path":273,"title":274,"category":275,"order":276},"\u002Fdocs\u002Fauto-renew","SSL证书自动续签配置","部署与续签",5,{"path":278,"title":279,"category":275,"order":280},"\u002Fdocs\u002Fcert-download","证书下载与格式说明",1,{"path":282,"title":283,"category":284,"order":243},"\u002Fdocs\u002Fcert-types","证书类型选择：单域名\u002F多域名\u002F通配符\u002FIP","快速开始",{"path":286,"title":287,"category":275,"order":288},"\u002Fdocs\u002Fcloud-credential","云平台凭证配置指南",6,{"path":290,"title":291,"category":284,"order":242},"\u002Fdocs\u002Fcore-concepts","核心概念：SSL证书、DV\u002FOV\u002FEV 与 ACME",{"path":293,"title":294,"category":258,"order":276},"\u002Fdocs\u002Fcsr-management","CSR 管理：在线生成与自定义上传",{"path":296,"title":297,"category":275,"order":243},"\u002Fdocs\u002Fdeploy-cloud","一键部署到阿里云 CDN\u002FESA",{"path":299,"title":300,"category":275,"order":242},"\u002Fdocs\u002Fdeploy-nginx","Nginx 部署 SSL 证书",{"path":302,"title":303,"category":275,"order":304},"\u002Fdocs\u002Fdeploy-server","服务器部署客户端安装与使用",4,{"path":306,"title":307,"category":258,"order":280},"\u002Fdocs\u002Fdns-validation","DNS-01 验证详解",{"path":309,"title":310,"category":284,"order":280},"\u002Fdocs\u002Fgetting-started","5分钟申请你的第一张免费SSL证书",{"path":265,"title":5,"category":258,"order":242},{"path":313,"title":314,"category":258,"order":304},"\u002Fdocs\u002Fip-certificate","IP 地址证书申请指南",{"path":316,"title":317,"category":258,"order":243},"\u002Fdocs\u002Fwildcard","通配符证书申请",1789011271295]