fix(deploy): 部署脚本自动开启 Total TLS——多级子域代理记录无证书覆盖 - #69
Merged
Conversation
真机第四发现：unself.demo.handywote.top 是三级子域，Universal SSL
只覆盖 apex + 一级通配（*.handywote.top），代理 A 记录建好后 TLS
handshake failure（sslv3 alert handshake failure）。修法：部署脚本
在 zone 探测后幂等 POST zones/{z}/acm/total_tls enabled:true，为全部
代理主机名逐个签发证书；README 权限表补 SSL and Certificates Edit。
Signed-off-by: huangyinghui <18666119673@163.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
真机第四发现
unself.demo.handywote.top是三级子域，Universal SSL 只覆盖 apex + 一级通配（*.handywote.top），代理 A 记录建好后 TLShandshake failure。修法：部署脚本在 zone 探测后幂等POST zones/{z}/acm/total_tls {enabled:true}，为全部代理主机名逐个签发证书（签发秒级延迟，冒烟前已触发）；README 权限表补SSL and Certificates Edit。测试 61 用例绿。