[{"data":1,"prerenderedAt":234},["ShallowReactive",2],{"docs:\u002Fdocs\u002Fdeleg":3},{"id":4,"title":5,"body":6,"description":226,"extension":227,"meta":228,"navigation":229,"path":230,"seo":231,"stem":232,"__hash__":233},"docs\u002Fdocs\u002Fdeleg\u002Findex.md","域名托管介绍与配置",{"type":7,"value":8,"toc":214},"minimark",[9,18,22,48,51,54,59,72,76,79,143,151,160,164,167,188,191,206],[10,11,12,13,17],"p",{},"域名托管(DNS 委托)是给「频繁申请证书」准备的能力:在你的域名 DNS 里配置",[14,15,16],"strong",{},"一条"," CNAME 记录,之后每次申请证书的 TXT 验证记录都由系统自动写入,你不再需要碰 DNS。",[19,20,21],"h2",{"id":21},"原理",[23,24,25,34,41],"ol",{},[26,27,28,29,33],"li",{},"你在平台的「域名托管」页添加域名,系统分配一个专属委托名(形如 ",[30,31,32],"code",{},"xxxx.dns.sslee.cn",")。",[26,35,36,37,40],{},"你在自己的 DNS 控制台给域名添加一条 CNAME 记录,把 ",[30,38,39],{},"_acme-challenge"," 指向这个委托名。",[26,42,43,44,47],{},"之后申请证书时,Let's Encrypt 要查的 ",[30,45,46],{},"_acme-challenge.你的域名"," 会沿着 CNAME 找到平台侧记录,TXT 值由系统在申请期间自动写入、校验后清理。",[10,49,50],{},"配置一次长期有效,删除托管后申请要改回手动解析。",[19,52,53],{"id":53},"配置步骤",[55,56,58],"h3",{"id":57},"_1-添加托管","1. 添加托管",[10,60,61,62,67,68,71],{},"进入控制台的 ",[63,64,66],"a",{"href":65},"\u002Fdeleg","域名托管页",",输入要托管的域名(例如 ",[30,69,70],{},"example.com","),点「添加托管」。系统分配委托名并弹出配置指引。",[55,73,75],{"id":74},"_2-添加-cname-记录","2. 添加 CNAME 记录",[10,77,78],{},"按指引在你的 DNS 控制台添加一条记录:",[80,81,82,95],"table",{},[83,84,85],"thead",{},[86,87,88,92],"tr",{},[89,90,91],"th",{},"字段",[89,93,94],{},"填什么",[96,97,98,112,123,133],"tbody",{},[86,99,100,104],{},[101,102,103],"td",{},"主机记录",[101,105,106,108,109,111],{},[30,107,39],{},"(控制台域名选 ",[30,110,70],{}," 时);子域托管时按指引的完整名称反推",[86,113,114,117],{},[101,115,116],{},"完整名称",[101,118,119,122],{},[30,120,121],{},"_acme-challenge.example.com","(不确定就整条照抄)",[86,124,125,128],{},[101,126,127],{},"记录类型",[101,129,130],{},[30,131,132],{},"CNAME",[86,134,135,138],{},[101,136,137],{},"记录值",[101,139,140,141],{},"系统分配的委托名,形如 ",[30,142,32],{},[144,145,148],"callout",{"title":146,"type":147},"Cloudflare 用户注意","warning",[10,149,150],{},"Cloudflare 上这条 CNAME 的代理状态必须选「仅 DNS」(灰云)。开启代理(橙云)会把主机记录解析成 IP,CNAME 委托链直接失效。",[144,152,155],{"title":153,"type":154},"同名冲突","danger",[10,156,157,159],{},[30,158,39],{}," 主机记录下如果已经有其他解析记录(比如以前手动申请留下的 TXT),要先删掉再加 CNAME,否则委托链不生效。",[55,161,163],{"id":162},"_3-检测生效","3. 检测生效",[10,165,166],{},"回到托管页点「检测生效」。检测要沿着解析链递归查一遍,耗时几秒。常见不通过原因(检测结论会写在指引弹窗里):",[168,169,170,176,182],"ul",{},[26,171,172,175],{},[14,173,174],{},"主机记录被解析成了 IP 地址"," — Cloudflare 代理没关,改「仅 DNS」。",[26,177,178,181],{},[14,179,180],{},"该主机记录下已存在其他解析记录"," — 删掉同名记录再试。",[26,183,184,187],{},[14,185,186],{},"解析尚未生效"," — 公共解析还在缓存上一条记录,稍等几分钟再点检测。",[19,189,190],{"id":190},"托管之后",[168,192,193,200,203],{},[26,194,195,199],{},[63,196,198],{"href":197},"\u002Fdocs\u002Fssl","申请证书"," 时该域名自动走「系统自动解析」,申请页只显示记录名称,等待生效即可。",[26,201,202],{},"托管列表里可以随时「重新检测」或「删除托管」。删除只是解除委托关系,不删你的任何 DNS 记录。",[26,204,205],{},"删除托管后再重新添加,拿到的委托名不变,不需要回头重配 CNAME。",[10,207,208,209,213],{},"覆盖规则(泛域名、二级子域)见 ",[63,210,212],{"href":211},"\u002Fdocs\u002Fdeleg\u002Fwildcard","泛域名与子域覆盖","。",{"title":215,"searchDepth":216,"depth":216,"links":217},"",3,[218,220,225],{"id":21,"depth":219,"text":21},2,{"id":53,"depth":219,"text":53,"children":221},[222,223,224],{"id":57,"depth":216,"text":58},{"id":74,"depth":216,"text":75},{"id":162,"depth":216,"text":163},{"id":190,"depth":219,"text":190},"域名托管(CNAME 委托)的原理与配置方法:添加托管、在 DNS 控制台加一条 CNAME、检测生效,之后申请证书的解析记录由系统自动写入。","md",{},true,"\u002Fdocs\u002Fdeleg",{"title":5,"description":226},"docs\u002Fdeleg\u002Findex","-kWTjKuq9tOYuH2jLk7HtjoXAhlzsoKBOg3n-jGaN10",1793537574521]