diff --git a/go.mod b/go.mod
index dff90fd5..d2cf83b2 100644
--- a/go.mod
+++ b/go.mod
@@ -21,7 +21,7 @@ require (
github.com/pocketbase/pocketbase v0.22.18
github.com/qiniu/go-sdk/v7 v7.22.0
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/cdn v1.0.1017
- github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1017
+ github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1030
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/ssl v1.0.992
golang.org/x/crypto v0.28.0
k8s.io/apimachinery v0.31.1
@@ -54,6 +54,7 @@ require (
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect
github.com/technoweenie/multipartstreamer v1.0.1 // indirect
+ github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1030 // indirect
github.com/x448/float16 v0.8.4 // indirect
go.mongodb.org/mongo-driver v1.12.0 // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
diff --git a/go.sum b/go.sum
index f666c84a..17f7c756 100644
--- a/go.sum
+++ b/go.sum
@@ -451,10 +451,14 @@ github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.992/go.mod
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1002/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1017 h1:SXrldOXwgomYuATVAuz5ofpTjB+99qVELgdy5R5kMgI=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1017/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1030 h1:kwiUoCkooUgy7iPyhEEbio7WT21kGJUeZ5JeJfb/dYk=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common v1.0.1030/go.mod h1:r5r4xbfxSaeR04b166HGsBa/R4U3SueirEUpXGuw+Q0=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/dnspod v1.0.1002 h1:QwE0dRkAAbdf+eACnkNULgDn9ZKUJpPWRyXdqJolP5E=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/dnspod v1.0.1002/go.mod h1:WdC0FYbqYhJwQ3kbqri6hVP5HAEp+rzX9FToItTAzUg=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/ssl v1.0.992 h1:A6O89OlCJQUpNxGqC/E5By04UNKBryIt5olQIGOx8mg=
github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/ssl v1.0.992/go.mod h1:BcvC7ZPdSlhRggVq4J1ToJlgv8bmODIAuSo0naFZOLo=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1030 h1:tlHbfQlAfL12J/5XF4indKl0cAA3vEn6TDiGZVsr050=
+github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo v1.0.1030/go.mod h1:8dW6JByZKNDAPnjlXxBk9yDc+QGbldpa0tBRfi1kG+U=
github.com/tjfoc/gmsm v1.3.2/go.mod h1:HaUcFuY0auTiaHB9MHFGCPx5IaLhTUd2atbCFBQXn9w=
github.com/tjfoc/gmsm v1.4.1 h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho=
github.com/tjfoc/gmsm v1.4.1/go.mod h1:j4INPkHWMrhJb38G+J6W4Tw0AbuN8Thu3PbdVYhVcTE=
diff --git a/internal/deployer/deployer.go b/internal/deployer/deployer.go
index 4fcbc732..21deb609 100644
--- a/internal/deployer/deployer.go
+++ b/internal/deployer/deployer.go
@@ -22,6 +22,7 @@ const (
targetTencentECDN = "tencent-ecdn"
targetTencentCLB = "tencent-clb"
targetTencentCOS = "tencent-cos"
+ targetTencentTEO = "tencent-teo"
targetHuaweiCloudCDN = "huaweicloud-cdn"
targetHuaweiCloudELB = "huaweicloud-elb"
targetQiniuCdn = "qiniu-cdn"
@@ -115,6 +116,8 @@ func getWithDeployConfig(record *models.Record, cert *applicant.Certificate, dep
return NewTencentCLBDeployer(option)
case targetTencentCOS:
return NewTencentCOSDeployer(option)
+ case targetTencentTEO:
+ return NewTencentTEODeployer(option)
case targetHuaweiCloudCDN:
return NewHuaweiCloudCDNDeployer(option)
case targetHuaweiCloudELB:
diff --git a/internal/deployer/tencent_teo.go b/internal/deployer/tencent_teo.go
new file mode 100644
index 00000000..930232ef
--- /dev/null
+++ b/internal/deployer/tencent_teo.go
@@ -0,0 +1,111 @@
+package deployer
+
+import (
+ "context"
+ "encoding/json"
+ "fmt"
+ "strings"
+
+ teo "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo/v20220901"
+ "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common"
+ "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/common/profile"
+ ssl "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/ssl/v20191205"
+
+ "github.com/usual2970/certimate/internal/domain"
+ "github.com/usual2970/certimate/internal/utils/rand"
+)
+
+type TencentTEODeployer struct {
+ option *DeployerOption
+ credential *common.Credential
+ infos []string
+}
+
+func NewTencentTEODeployer(option *DeployerOption) (Deployer, error) {
+ access := &domain.TencentAccess{}
+ if err := json.Unmarshal([]byte(option.Access), access); err != nil {
+ return nil, fmt.Errorf("failed to unmarshal tencent access: %w", err)
+ }
+
+ credential := common.NewCredential(
+ access.SecretId,
+ access.SecretKey,
+ )
+
+ return &TencentTEODeployer{
+ option: option,
+ credential: credential,
+ infos: make([]string, 0),
+ }, nil
+}
+
+func (d *TencentTEODeployer) GetID() string {
+ return fmt.Sprintf("%s-%s", d.option.AccessRecord.GetString("name"), d.option.AccessRecord.Id)
+}
+
+func (d *TencentTEODeployer) GetInfo() []string {
+ return d.infos
+}
+
+func (d *TencentTEODeployer) Deploy(ctx context.Context) error {
+ // 上传证书
+ certId, err := d.uploadCert()
+ if err != nil {
+ return fmt.Errorf("failed to upload certificate: %w", err)
+ }
+ d.infos = append(d.infos, toStr("上传证书", certId))
+
+ if err := d.deploy(certId); err != nil {
+ return fmt.Errorf("failed to deploy: %w", err)
+ }
+
+ return nil
+}
+
+func (d *TencentTEODeployer) uploadCert() (string, error) {
+ cpf := profile.NewClientProfile()
+ cpf.HttpProfile.Endpoint = "ssl.tencentcloudapi.com"
+
+ client, _ := ssl.NewClient(d.credential, "", cpf)
+
+ request := ssl.NewUploadCertificateRequest()
+
+ request.CertificatePublicKey = common.StringPtr(d.option.Certificate.Certificate)
+ request.CertificatePrivateKey = common.StringPtr(d.option.Certificate.PrivateKey)
+ request.Alias = common.StringPtr(d.option.Domain + "_" + rand.RandStr(6))
+ request.Repeatable = common.BoolPtr(false)
+
+ response, err := client.UploadCertificate(request)
+ if err != nil {
+ return "", fmt.Errorf("failed to upload certificate: %w", err)
+ }
+
+ return *response.Response.CertificateId, nil
+}
+
+func (d *TencentTEODeployer) deploy(certId string) error {
+ cpf := profile.NewClientProfile()
+ cpf.HttpProfile.Endpoint = "teo.tencentcloudapi.com"
+ // 实例化要请求产品的client对象,clientProfile是可选的
+ client, _ := teo.NewClient(d.credential, "", cpf)
+
+ // 实例化一个请求对象,每个接口都会对应一个request对象
+ request := teo.NewModifyHostsCertificateRequest()
+
+ request.ZoneId = common.StringPtr(getDeployString(d.option.DeployConfig, "zoneId"))
+ request.Mode = common.StringPtr("sslcert")
+ request.ServerCertInfo = []*teo.ServerCertInfo{&teo.ServerCertInfo{
+ CertId: common.StringPtr(certId),
+ }}
+
+ domains := strings.Split(strings.ReplaceAll(d.option.Domain, "\r\n", "\n"),"\n")
+ request.Hosts = common.StringPtrs(domains)
+
+ // 返回的resp是一个DeployCertificateInstanceResponse的实例，与请求对象对应
+ resp, err := client.ModifyHostsCertificate(request)
+ if err != nil {
+ return fmt.Errorf("failed to deploy certificate: %w", err)
+ }
+ d.infos = append(d.infos, toStr("部署证书", resp.Response))
+ return nil
+}
diff --git a/ui/src/components/certimate/DeployEditDialog.tsx b/ui/src/components/certimate/DeployEditDialog.tsx
index be74cd7a..3d33b870 100644
--- a/ui/src/components/certimate/DeployEditDialog.tsx
+++ b/ui/src/components/certimate/DeployEditDialog.tsx
@@ -14,6 +14,7 @@ import DeployToAliyunCDN from "./DeployToAliyunCDN";
import DeployToTencentCDN from "./DeployToTencentCDN";
import DeployToTencentCLB from "./DeployToTencentCLB";
import DeployToTencentCOS from "./DeployToTencentCOS";
+import DeployToTencentTEO from "./DeployToTencentTEO";
import DeployToHuaweiCloudCDN from "./DeployToHuaweiCloudCDN";
import DeployToHuaweiCloudELB from "./DeployToHuaweiCloudELB";
import DeployToQiniuCDN from "./DeployToQiniuCDN";
@@ -128,6 +129,9 @@ const DeployEditDialog = ({ trigger, deployConfig, onSave }: DeployEditDialogPro
case "tencent-cos":
childComponent = <DeployToTencentCOS />;
break;
+ case "tencent-teo":
+ childComponent = <DeployToTencentTEO />;
+ break;
case "huaweicloud-cdn":
childComponent = <DeployToHuaweiCloudCDN />;
break;
diff --git a/ui/src/components/certimate/DeployToTencentTEO.tsx b/ui/src/components/certimate/DeployToTencentTEO.tsx
new file mode 100644
index 00000000..cdd64280
--- /dev/null
+++ b/ui/src/components/certimate/DeployToTencentTEO.tsx
@@ -0,0 +1,131 @@
+import { useEffect } from "react";
+import { useTranslation } from "react-i18next";
+import { z } from "zod";
+import { produce } from "immer";
+
+import { Input } from "@/components/ui/input";
+import { Label } from "@/components/ui/label";
+import { Textarea } from "@/components/ui/textarea";
+import { useDeployEditContext } from "./DeployEdit";
+
+const DeployToTencentTEO = () => {
+ const { t } = useTranslation();
+
+ const { deploy: data, setDeploy, error, setError } = useDeployEditContext();
+
+ useEffect(() => {
+ setError({});
+ }, []);
+
+ useEffect(() => {
+ const resp = domainSchema.safeParse(data.config?.domain);
+ if (!resp.success) {
+ setError({
+ ...error,
+ domain: JSON.parse(resp.error.message)[0].message,
+ });
+ } else {
+ setError({
+ ...error,
+ domain: "",
+ });
+ }
+ }, [data]);
+
+ useEffect(() => {
+ const resp = ZoneIdSchema.safeParse(data.config?.zoneId);
+ if (!resp.success) {
+ setError({
+ ...error,
+ zoneId: JSON.parse(resp.error.message)[0].message,
+ });
+ } else {
+ setError({
+ ...error,
+ zoneId: "",
+ });
+ }
+ }, [data]);
+
+ const domainSchema = z.string().regex(/^(?:\*\.)?([a-zA-Z0-9-]+\.)+[a-zA-Z]{2,}$/, {
+ message: t("common.errmsg.domain_invalid"),
+ });
+
+ const ZoneIdSchema = z.string().regex(/^zone-[0-9a-zA-Z]{9}$/, {
+ message: t("common.errmsg.domain_invalid"),
+ });
+
+ return (
+ <div className="flex flex-col space-y-8">
+ <div>
+ <Label>{t("domain.deployment.form.tencent_teo_zone_id.label")}</Label>
+ <Input
+ placeholder={t("domain.deployment.form.tencent_teo_zone_id.placeholder")}
+ className="w-full mt-1"
+ value={data?.config?.zoneId}
+ onChange={(e) => {
+ const temp = e.target.value;
+
+ const resp = ZoneIdSchema.safeParse(temp);
+ if (!resp.success) {
+ setError({
+ ...error,
+ zoneId: JSON.parse(resp.error.message)[0].message,
+ });
+ } else {
+ setError({
+ ...error,
+ zoneId: "",
+ });
+ }
+
+ const newData = produce(data, (draft) => {
+ if (!draft.config) {
+ draft.config = {};
+ }
+ draft.config.zoneId = temp;
+ });
+ setDeploy(newData);
+ }}
+ />
+ <div className="text-red-600 text-sm mt-1">{error?.zoneId}</div>
+ </div>
+
+ <div>
+ <Label>{t("domain.deployment.form.tencent_teo_domain.label")}</Label>
+ <Textarea
+ placeholder={t("domain.deployment.form.tencent_teo_domain.placeholder")}
+ className="w-full mt-1"
+ value={data?.config?.domain}
+ onChange={(e) => {
+ const temp = e.target.value;
+
+ const resp = domainSchema.safeParse(temp);
+ if (!resp.success) {
+ setError({
+ ...error,
+ domain: JSON.parse(resp.error.message)[0].message,
+ });
+ } else {
+ setError({
+ ...error,
+ domain: "",
+ });
+ }
+
+ const newData = produce(data, (draft) => {
+ if (!draft.config) {
+ draft.config = {};
+ }
+ draft.config.domain = temp;
+ });
+ setDeploy(newData);
+ }}
+ />
+ <div className="text-red-600 text-sm mt-1">{error?.domain}</div>
+ </div>
+ </div>
+ );
+};
+
+export default DeployToTencentTEO;
diff --git a/ui/src/domain/domain.ts b/ui/src/domain/domain.ts
index 6d3175cf..ac17e8e7 100644
--- a/ui/src/domain/domain.ts
+++ b/ui/src/domain/domain.ts
@@ -79,6 +79,7 @@ export const deployTargetsMap: Map<DeployTarget["type"], DeployTarget> = new Map
["tencent-ecdn", "common.provider.tencent.ecdn", "/imgs/providers/tencent.svg"],
["tencent-clb", "common.provider.tencent.clb", "/imgs/providers/tencent.svg"],
["tencent-cos", "common.provider.tencent.cos", "/imgs/providers/tencent.svg"],
+ ["tencent-teo", "common.provider.tencent.teo", "/imgs/providers/tencent.svg"],
["huaweicloud-cdn", "common.provider.huaweicloud.cdn", "/imgs/providers/huaweicloud.svg"],
["huaweicloud-elb", "common.provider.huaweicloud.elb", "/imgs/providers/huaweicloud.svg"],
["qiniu-cdn", "common.provider.qiniu.cdn", "/imgs/providers/qiniu.svg"],
diff --git a/ui/src/i18n/locales/en/nls.common.json b/ui/src/i18n/locales/en/nls.common.json
index b2e3e436..3af39b6d 100644
--- a/ui/src/i18n/locales/en/nls.common.json
+++ b/ui/src/i18n/locales/en/nls.common.json
@@ -61,6 +61,7 @@
"common.provider.tencent.ecdn": "Tencent Cloud - ECDN",
"common.provider.tencent.clb": "Tencent Cloud - CLB",
"common.provider.tencent.cos": "Tencent Cloud - COS",
+ "common.provider.tencent.teo": "Tencent Cloud - TEO",
"common.provider.huaweicloud": "Huawei Cloud",
"common.provider.huaweicloud.cdn": "Huawei Cloud - CDN",
"common.provider.huaweicloud.elb": "Huawei Cloud - ELB",
diff --git a/ui/src/i18n/locales/en/nls.domain.json b/ui/src/i18n/locales/en/nls.domain.json
index 80f1a4d7..6dfd1dbc 100644
--- a/ui/src/i18n/locales/en/nls.domain.json
+++ b/ui/src/i18n/locales/en/nls.domain.json
@@ -73,6 +73,10 @@
"domain.deployment.form.tencent_clb_listener.placeholder": "Please enter listener ID (e.g. lbl-xxxxxxxx). The specific listener should have set the corresponding domain HTTPS forwarding, and the original certificate domain should be consistent with the certificate to be deployed.",
"domain.deployment.form.tencent_clb_domain.label": "Deploy to domain (Wildcard domain is also supported)",
"domain.deployment.form.tencent_clb_domain.placeholder": "Please enter domain to be deployed. If SNI is not enabled, you can leave it blank.",
+ "domain.deployment.form.tencent_teo_zone_id.label": "Zone ID",
+ "domain.deployment.form.tencent_teo_zone_id.placeholder": "Please enter zone id, e.g. zone-xxxxxxxxx",
+ "domain.deployment.form.tencent_teo_domain.label": "Deploy to domain (Wildcard domain is also supported, but should be same as the config on server, one domain each line)",
+ "domain.deployment.form.tencent_teo_domain.placeholder": "Please enter domain to be deployed.",
"domain.deployment.form.huaweicloud_elb_region.label": "Region",
"domain.deployment.form.huaweicloud_elb_region.placeholder": "Please enter region (e.g. cn-north-1)",
"domain.deployment.form.huaweicloud_elb_resource_type.label": "Resource Type",
diff --git a/ui/src/i18n/locales/zh/nls.common.json b/ui/src/i18n/locales/zh/nls.common.json
index 8f82a96d..abb829ed 100644
--- a/ui/src/i18n/locales/zh/nls.common.json
+++ b/ui/src/i18n/locales/zh/nls.common.json
@@ -60,6 +60,7 @@
"common.provider.tencent.cdn": "腾讯云 - CDN",
"common.provider.tencent.ecdn": "腾讯云 - ECDN",
"common.provider.tencent.clb": "腾讯云 - CLB",
+ "common.provider.tencent.teo": "腾讯云 - TEO",
"common.provider.huaweicloud": "华为云",
"common.provider.huaweicloud.cdn": "华为云 - CDN",
"common.provider.huaweicloud.elb": "华为云 - ELB",
diff --git a/ui/src/i18n/locales/zh/nls.domain.json b/ui/src/i18n/locales/zh/nls.domain.json
index ae7f4d0f..749974a9 100644
--- a/ui/src/i18n/locales/zh/nls.domain.json
+++ b/ui/src/i18n/locales/zh/nls.domain.json
@@ -73,6 +73,10 @@
"domain.deployment.form.tencent_clb_listener.placeholder": "请输入监听器 ID（如 lb-xxxxxxxx）",
"domain.deployment.form.tencent_clb_domain.label": "部署到域名（支持泛域名）",
"domain.deployment.form.tencent_clb_domain.placeholder": "请输入部署到的域名, 如未开启 SNI, 可置空忽略此项",
+ "domain.deployment.form.tencent_teo_zone_id.label": "Zone ID",
+ "domain.deployment.form.tencent_teo_zone_id.placeholder": "请输入zoneid, 形如: zone-xxxxxxxxx",
+ "domain.deployment.form.tencent_teo_domain.label": "部署到域名（支持泛域名, 应与服务器上配置的域名完全一致, 每行一个域名。",
+ "domain.deployment.form.tencent_teo_domain.placeholder": "请输入部署到的域名",
"domain.deployment.form.huaweicloud_elb_region.label": "地域",
"domain.deployment.form.huaweicloud_elb_region.placeholder": "请输入地域（如 cn-north-1）",
"domain.deployment.form.huaweicloud_elb_resource_type.label": "资源类型替换方式",