Browse Source
Merge branch 'dev' of https://github.com/Neilpang/acme.sh into dev
Merge branch 'dev' of https://github.com/Neilpang/acme.sh into dev
# Conflicts: # README.md # dnsapi/README.mdpull/1878/head
wapplay
6 years ago
43 changed files with 4345 additions and 1963 deletions
-
4Dockerfile
-
127README.md
-
906acme.sh
-
381deploy/README.md
-
140deploy/gcore_cdn.sh
-
282deploy/haproxy.sh
-
58deploy/mailcow.sh
-
59deploy/mydevil.sh
-
2deploy/qiniu.sh
-
114deploy/routeros.sh
-
1210dnsapi/README.md
-
86dnsapi/dns_acmeproxy.sh
-
13dnsapi/dns_cf.sh
-
157dnsapi/dns_cn.sh
-
8dnsapi/dns_cx.sh
-
130dnsapi/dns_ddnss.sh
-
204dnsapi/dns_desec.sh
-
2dnsapi/dns_dgon.sh
-
2dnsapi/dns_gdnsdk.sh
-
79dnsapi/dns_hostingde.sh
-
60dnsapi/dns_loopia.sh
-
97dnsapi/dns_mydevil.sh
-
45dnsapi/dns_namecheap.sh
-
19dnsapi/dns_namecom.sh
-
131dnsapi/dns_nederhost.sh
-
1dnsapi/dns_netcup.sh
-
64dnsapi/dns_nsd.sh
-
4dnsapi/dns_nsone.sh
-
24dnsapi/dns_nsupdate.sh
-
211dnsapi/dns_nw.sh
-
139dnsapi/dns_one.sh
-
217dnsapi/dns_online.sh
-
244dnsapi/dns_openprovider.sh
-
207dnsapi/dns_rackspace.sh
-
261dnsapi/dns_schlundtech.sh
-
164dnsapi/dns_ultra.sh
-
15dnsapi/dns_yandex.sh
-
149dnsapi/dns_zone.sh
-
15notify/mail.sh
-
131notify/mailgun.sh
-
15notify/pop.sh
-
56notify/sendgrid.sh
-
15notify/smtp.sh
906
acme.sh
File diff suppressed because it is too large
View File
File diff suppressed because it is too large
View File
@ -1,383 +1,6 @@ |
|||||
# Using deploy api |
# Using deploy api |
||||
|
|
||||
Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert). |
|
||||
|
deploy hook usage: |
||||
|
|
||||
Here are the scripts to deploy the certs/key to the server/services. |
|
||||
|
https://github.com/Neilpang/acme.sh/wiki/deployhooks |
||||
|
|
||||
## 1. Deploy the certs to your cpanel host |
|
||||
|
|
||||
If you want to deploy using cpanel UAPI see 7. |
|
||||
|
|
||||
(cpanel deploy hook is not finished yet, this is just an example.) |
|
||||
|
|
||||
|
|
||||
|
|
||||
Then you can deploy now: |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_CPANEL_USER=myusername |
|
||||
export DEPLOY_CPANEL_PASSWORD=PASSWORD |
|
||||
acme.sh --deploy -d example.com --deploy-hook cpanel |
|
||||
``` |
|
||||
|
|
||||
## 2. Deploy ssl cert on kong proxy engine based on api |
|
||||
|
|
||||
Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert). |
|
||||
Currently supports Kong-v0.10.x. |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook kong |
|
||||
``` |
|
||||
|
|
||||
## 3. Deploy the cert to remote server through SSH access |
|
||||
|
|
||||
The ssh deploy plugin allows you to deploy certificates to a remote host |
|
||||
using SSH command to connect to the remote server. The ssh plugin is invoked |
|
||||
with the following command... |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d example.com --deploy-hook ssh |
|
||||
``` |
|
||||
Prior to running this for the first time you must tell the plugin where |
|
||||
and how to deploy the certificates. This is done by exporting the following |
|
||||
environment variables. This is not required for subsequent runs as the |
|
||||
values are stored by acme.sh in the domain configuration files. |
|
||||
|
|
||||
Required... |
|
||||
``` |
|
||||
export DEPLOY_SSH_USER=username |
|
||||
``` |
|
||||
Optional... |
|
||||
``` |
|
||||
export DEPLOY_SSH_CMD=custom ssh command |
|
||||
export DEPLOY_SSH_SERVER=url or ip address of remote host |
|
||||
export DEPLOY_SSH_KEYFILE=filename for private key |
|
||||
export DEPLOY_SSH_CERTFILE=filename for certificate file |
|
||||
export DEPLOY_SSH_CAFILE=filename for intermediate CA file |
|
||||
export DEPLOY_SSH_FULLCHAIN=filename for fullchain file |
|
||||
export DEPLOY_SSH_REMOTE_CMD=command to execute on remote host |
|
||||
export DEPLOY_SSH_BACKUP=yes or no |
|
||||
``` |
|
||||
|
|
||||
**DEPLOY_SSH_USER** |
|
||||
Username at the remote host that SSH will login with. Note that |
|
||||
SSH must be able to login to remote host without a password... SSH Keys |
|
||||
must have been exchanged with the remote host. Validate and test that you |
|
||||
can login to USER@URL from the host running acme.sh before using this script. |
|
||||
|
|
||||
The USER@URL at the remote server must also have has permissions to write to |
|
||||
the target location of the certificate files and to execute any commands |
|
||||
(e.g. to stop/start services). |
|
||||
|
|
||||
**DEPLOY_SSH_CMD** |
|
||||
You can customize the ssh command used to connect to the remote host. For example |
|
||||
if you need to connect to a specific port at the remote server you can set this |
|
||||
to, for example, "ssh -p 22" or to use `sshpass` to provide password inline |
|
||||
instead of exchanging ssh keys (this is not recommended, using keys is |
|
||||
more secure). |
|
||||
|
|
||||
**DEPLOY_SSH_SERVER** |
|
||||
URL or IP Address of the remote server. If not provided then the domain |
|
||||
name provided on the acme.sh --deploy command line is used. |
|
||||
|
|
||||
**DEPLOY_SSH_KEYFILE** |
|
||||
Target filename for the private key issued by LetsEncrypt. |
|
||||
|
|
||||
**DEPLOY_SSH_CERTFILE** |
|
||||
Target filename for the certificate issued by LetsEncrypt. |
|
||||
If this is the same as the previous filename (for keyfile) then it is |
|
||||
appended to the same file. |
|
||||
|
|
||||
**DEPLOY_SSH_CAFILE** |
|
||||
Target filename for the CA intermediate certificate issued by LetsEncrypt. |
|
||||
If this is the same as a previous filename (for keyfile or certfile) then |
|
||||
it is appended to the same file. |
|
||||
|
|
||||
**DEPLOY_SSH_FULLCHAIN** |
|
||||
Target filename for the fullchain certificate issued by LetsEncrypt. |
|
||||
If this is the same as a previous filename (for keyfile, certfile or |
|
||||
cafile) then it is appended to the same file. |
|
||||
|
|
||||
**DEPLOY_SSH_REMOTE_CMD** |
|
||||
Command to execute on the remote server after copying any certificates. This |
|
||||
could be any additional command required for example to stop and restart |
|
||||
the service. |
|
||||
|
|
||||
**DEPLOY_SSH_BACKUP** |
|
||||
Before writing a certificate file to the remote server the existing |
|
||||
certificate will be copied to a backup directory on the remote server. |
|
||||
These are placed in a hidden directory in the home directory of the SSH |
|
||||
user |
|
||||
```sh |
|
||||
~/.acme_ssh_deploy/[domain name]-backup-[timestamp] |
|
||||
``` |
|
||||
Any backups older than 180 days will be deleted when new certificates |
|
||||
are deployed. This defaults to "yes" set to "no" to disable backup. |
|
||||
|
|
||||
###Examples using SSH deploy |
|
||||
The following example illustrates deploying certificates to a QNAP NAS |
|
||||
(tested with QTS version 4.2.3) |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_SSH_USER="admin" |
|
||||
export DEPLOY_SSH_KEYFILE="/etc/stunnel/stunnel.pem" |
|
||||
export DEPLOY_SSH_CERTFILE="/etc/stunnel/stunnel.pem" |
|
||||
export DEPLOY_SSH_CAFILE="/etc/stunnel/uca.pem" |
|
||||
export DEPLOY_SSH_REMOTE_CMD="/etc/init.d/stunnel.sh restart" |
|
||||
|
|
||||
acme.sh --deploy -d qnap.example.com --deploy-hook ssh |
|
||||
``` |
|
||||
Note how in this example both the private key and certificate point to |
|
||||
the same file. This will result in the certificate being appended |
|
||||
to the same file as the private key... a common requirement of several |
|
||||
services. |
|
||||
|
|
||||
The next example illustrates deploying certificates to a Unifi |
|
||||
Controller (tested with version 5.4.11). |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_SSH_USER="root" |
|
||||
export DEPLOY_SSH_KEYFILE="/var/lib/unifi/unifi.example.com.key" |
|
||||
export DEPLOY_SSH_FULLCHAIN="/var/lib/unifi/unifi.example.com.cer" |
|
||||
export DEPLOY_SSH_REMOTE_CMD="openssl pkcs12 -export \ |
|
||||
-inkey /var/lib/unifi/unifi.example.com.key \ |
|
||||
-in /var/lib/unifi/unifi.example.com.cer \ |
|
||||
-out /var/lib/unifi/unifi.example.com.p12 \ |
|
||||
-name ubnt -password pass:temppass \ |
|
||||
&& keytool -importkeystore -deststorepass aircontrolenterprise \ |
|
||||
-destkeypass aircontrolenterprise \ |
|
||||
-destkeystore /var/lib/unifi/keystore \ |
|
||||
-srckeystore /var/lib/unifi/unifi.example.com.p12 \ |
|
||||
-srcstoretype PKCS12 -srcstorepass temppass -alias ubnt -noprompt \ |
|
||||
&& service unifi restart" |
|
||||
|
|
||||
acme.sh --deploy -d unifi.example.com --deploy-hook ssh |
|
||||
``` |
|
||||
In this example we execute several commands on the remote host |
|
||||
after the certificate files have been copied... to generate a pkcs12 file |
|
||||
compatible with Unifi, to import it into the Unifi keystore and then finally |
|
||||
to restart the service. |
|
||||
|
|
||||
Note also that once the certificate is imported |
|
||||
into the keystore the individual certificate files are no longer |
|
||||
required. We could if we desired delete those files immediately. If we |
|
||||
do that then we should disable backup at the remote host (as there are |
|
||||
no files to backup -- they were erased during deployment). For example... |
|
||||
```sh |
|
||||
export DEPLOY_SSH_BACKUP=no |
|
||||
# modify the end of the remote command... |
|
||||
&& rm /var/lib/unifi/unifi.example.com.key \ |
|
||||
/var/lib/unifi/unifi.example.com.cer \ |
|
||||
/var/lib/unifi/unifi.example.com.p12 \ |
|
||||
&& service unifi restart |
|
||||
``` |
|
||||
|
|
||||
## 4. Deploy the cert to local vsftpd server |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd |
|
||||
``` |
|
||||
|
|
||||
The default vsftpd conf file is `/etc/vsftpd.conf`, if your vsftpd conf is not in the default location, you can specify one: |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_VSFTPD_CONF="/etc/vsftpd.conf" |
|
||||
|
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd |
|
||||
``` |
|
||||
|
|
||||
The default command to restart vsftpd server is `service vsftpd restart`, if it doesn't work, you can specify one: |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_VSFTPD_RELOAD="/etc/init.d/vsftpd restart" |
|
||||
|
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd |
|
||||
``` |
|
||||
|
|
||||
## 5. Deploy the cert to local exim4 server |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook exim4 |
|
||||
``` |
|
||||
|
|
||||
The default exim4 conf file is `/etc/exim/exim.conf`, if your exim4 conf is not in the default location, you can specify one: |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_EXIM4_CONF="/etc/exim4/exim4.conf.template" |
|
||||
|
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook exim4 |
|
||||
``` |
|
||||
|
|
||||
The default command to restart exim4 server is `service exim4 restart`, if it doesn't work, you can specify one: |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_EXIM4_RELOAD="/etc/init.d/exim4 restart" |
|
||||
|
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook exim4 |
|
||||
``` |
|
||||
|
|
||||
## 6. Deploy the cert to OSX Keychain |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook keychain |
|
||||
``` |
|
||||
|
|
||||
## 7. Deploy to cpanel host using UAPI |
|
||||
|
|
||||
This hook is using UAPI and works in cPanel & WHM version 56 or newer. |
|
||||
``` |
|
||||
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi |
|
||||
``` |
|
||||
DEPLOY_CPANEL_USER is required only if you run the script as root and it should contain cpanel username. |
|
||||
```sh |
|
||||
export DEPLOY_CPANEL_USER=username |
|
||||
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi |
|
||||
``` |
|
||||
Please note, that the cpanel_uapi hook will deploy only the first domain when your certificate will automatically renew. Therefore you should issue a separate certificate for each domain. |
|
||||
|
|
||||
## 8. Deploy the cert to your FRITZ!Box router |
|
||||
|
|
||||
You must specify the credentials that have administrative privileges on the FRITZ!Box in order to deploy the certificate, plus the URL of your FRITZ!Box, through the following environment variables: |
|
||||
```sh |
|
||||
$ export DEPLOY_FRITZBOX_USERNAME=my_username |
|
||||
$ export DEPLOY_FRITZBOX_PASSWORD=the_password |
|
||||
$ export DEPLOY_FRITZBOX_URL=https://fritzbox.example.com |
|
||||
``` |
|
||||
|
|
||||
After the first deployment, these values will be stored in your $HOME/.acme.sh/account.conf. You may now deploy the certificate like this: |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d fritzbox.example.com --deploy-hook fritzbox |
|
||||
``` |
|
||||
|
|
||||
## 9. Deploy the cert to strongswan |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d ftp.example.com --deploy-hook strongswan |
|
||||
``` |
|
||||
|
|
||||
## 10. Deploy the cert to HAProxy |
|
||||
|
|
||||
You must specify the path where you want the concatenated key and certificate chain written. |
|
||||
```sh |
|
||||
export DEPLOY_HAPROXY_PEM_PATH=/etc/haproxy |
|
||||
``` |
|
||||
|
|
||||
You may optionally define the command to reload HAProxy. The value shown below will be used as the default if you don't set this environment variable. |
|
||||
|
|
||||
```sh |
|
||||
export DEPLOY_HAPROXY_RELOAD="/usr/sbin/service haproxy restart" |
|
||||
``` |
|
||||
|
|
||||
You can then deploy the certificate as follows |
|
||||
```sh |
|
||||
acme.sh --deploy -d haproxy.example.com --deploy-hook haproxy |
|
||||
``` |
|
||||
|
|
||||
The path for the PEM file will be stored with the domain configuration and will be available when renewing, so that deploy will happen automatically when renewed. |
|
||||
|
|
||||
## 11. Deploy your cert to Gitlab pages |
|
||||
|
|
||||
You must define the API key and the informations for the project and Gitlab page you are updating the certificate for. |
|
||||
|
|
||||
```sh |
|
||||
# The token can be created in your user settings under "Access Tokens" |
|
||||
export GITLAB_TOKEN="xxxxxxxxxxx" |
|
||||
|
|
||||
# The project ID is displayed on the home page of the project |
|
||||
export GITLAB_PROJECT_ID=12345678 |
|
||||
|
|
||||
# The domain must match the one defined for the Gitlab page, without "https://" |
|
||||
export GITLAB_DOMAIN="www.mydomain.com" |
|
||||
``` |
|
||||
|
|
||||
You can then deploy the certificate as follows |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d www.mydomain.com --deploy-hook gitlab |
|
||||
``` |
|
||||
|
|
||||
## 12. Deploy your cert to Hashicorp Vault |
|
||||
|
|
||||
```sh |
|
||||
export VAULT_PREFIX="acme" |
|
||||
``` |
|
||||
|
|
||||
You can then deploy the certificate as follows |
|
||||
|
|
||||
```sh |
|
||||
acme.sh --deploy -d www.mydomain.com --deploy-hook vault_cli |
|
||||
``` |
|
||||
|
|
||||
Your certs will be saved in Vault using this structure: |
|
||||
|
|
||||
```sh |
|
||||
vault write "${VAULT_PREFIX}/${domain}/cert.pem" value=@"..." |
|
||||
vault write "${VAULT_PREFIX}/${domain}/cert.key" value=@"..." |
|
||||
vault write "${VAULT_PREFIX}/${domain}/chain.pem" value=@"..." |
|
||||
vault write "${VAULT_PREFIX}/${domain}/fullchain.pem" value=@"..." |
|
||||
``` |
|
||||
|
|
||||
You might be using Fabio load balancer (which can get certs from |
|
||||
Vault). It needs a bit different structure of your certs in Vault. It |
|
||||
gets certs only from keys that were saved in `prefix/domain`, like this: |
|
||||
|
|
||||
```bash |
|
||||
vault write <PREFIX>/www.domain.com cert=@cert.pem key=@key.pem |
|
||||
``` |
|
||||
|
|
||||
If you want to save certs in Vault this way just set "FABIO" env |
|
||||
variable to anything (ex: "1") before running `acme.sh`: |
|
||||
|
|
||||
```sh |
|
||||
export FABIO="1" |
|
||||
``` |
|
||||
|
|
||||
## 13. Deploy your certificate to Qiniu.com |
|
||||
|
|
||||
使用 acme.sh 部署到七牛之前，需要确保部署的域名已打开 HTTPS 功能，您可以访问[融合 CDN - 域名管理](https://portal.qiniu.com/cdn/domain) 设置。 |
|
||||
另外还需要先导出 AK/SK 环境变量，您可以访问[密钥管理](https://portal.qiniu.com/user/key) 获得。 |
|
||||
|
|
||||
```sh |
|
||||
$ export QINIU_AK="foo" |
|
||||
$ export QINIU_SK="bar" |
|
||||
``` |
|
||||
|
|
||||
完成准备工作之后，您就可以通过下面的命令开始部署 SSL 证书到七牛上： |
|
||||
|
|
||||
```sh |
|
||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu |
|
||||
``` |
|
||||
|
|
||||
假如您部署的证书为泛域名证书，您还需要设置 `QINIU_CDN_DOMAIN` 变量，指定实际需要部署的域名： |
|
||||
|
|
||||
```sh |
|
||||
$ export QINIU_CDN_DOMAIN="cdn.example.com" |
|
||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu |
|
||||
``` |
|
||||
|
|
||||
### English version |
|
||||
|
|
||||
You should create AccessKey/SecretKey pair in https://portal.qiniu.com/user/key |
|
||||
before deploying your certificate, and please ensure you have enabled HTTPS for |
|
||||
your domain name. You can enable it in https://portal.qiniu.com/cdn/domain. |
|
||||
|
|
||||
```sh |
|
||||
$ export QINIU_AK="foo" |
|
||||
$ export QINIU_SK="bar" |
|
||||
``` |
|
||||
|
|
||||
then you can deploy certificate by following command: |
|
||||
|
|
||||
```sh |
|
||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu |
|
||||
``` |
|
||||
|
|
||||
(Optional), If you are using wildcard certificate, |
|
||||
you may need export `QINIU_CDN_DOMAIN` to specify which domain |
|
||||
you want to update: |
|
||||
|
|
||||
```sh |
|
||||
$ export QINIU_CDN_DOMAIN="cdn.example.com" |
|
||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu |
|
||||
``` |
|
||||
@ -0,0 +1,140 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# Here is the script to deploy the cert to G-Core CDN service (https://gcorelabs.com/ru/) using the G-Core Labs API (https://docs.gcorelabs.com/cdn/). |
||||
|
# Uses command line curl for send requests and jq for parse responses. |
||||
|
# Returns 0 when success. |
||||
|
# |
||||
|
# Written by temoffey <temofffey@gmail.com> |
||||
|
# Public domain, 2019 |
||||
|
|
||||
|
#export DEPLOY_GCORE_CDN_USERNAME=myusername |
||||
|
#export DEPLOY_GCORE_CDN_PASSWORD=mypassword |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#domain keyfile certfile cafile fullchain |
||||
|
|
||||
|
gcore_cdn_deploy() { |
||||
|
_cdomain="$1" |
||||
|
_ckey="$2" |
||||
|
_ccert="$3" |
||||
|
_cca="$4" |
||||
|
_cfullchain="$5" |
||||
|
|
||||
|
_debug _cdomain "$_cdomain" |
||||
|
_debug _ckey "$_ckey" |
||||
|
_debug _ccert "$_ccert" |
||||
|
_debug _cca "$_cca" |
||||
|
_debug _cfullchain "$_cfullchain" |
||||
|
|
||||
|
_fullchain=$(tr '\r\n' '*#' <"$_cfullchain" | sed 's/*#/#/g;s/##/#/g;s/#/\\n/g') |
||||
|
_key=$(tr '\r\n' '*#' <"$_ckey" | sed 's/*#/#/g;s/#/\\n/g') |
||||
|
|
||||
|
_debug _fullchain "$_fullchain" |
||||
|
_debug _key "$_key" |
||||
|
|
||||
|
if [ -z "$DEPLOY_GCORE_CDN_USERNAME" ]; then |
||||
|
if [ -z "$Le_Deploy_gcore_cdn_username" ]; then |
||||
|
_err "Please define the target username: export DEPLOY_GCORE_CDN_USERNAME=username" |
||||
|
return 1 |
||||
|
fi |
||||
|
else |
||||
|
Le_Deploy_gcore_cdn_username="$DEPLOY_GCORE_CDN_USERNAME" |
||||
|
_savedomainconf Le_Deploy_gcore_cdn_username "$Le_Deploy_gcore_cdn_username" |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$DEPLOY_GCORE_CDN_PASSWORD" ]; then |
||||
|
if [ -z "$Le_Deploy_gcore_cdn_password" ]; then |
||||
|
_err "Please define the target password: export DEPLOY_GCORE_CDN_PASSWORD=password" |
||||
|
return 1 |
||||
|
fi |
||||
|
else |
||||
|
Le_Deploy_gcore_cdn_password="$DEPLOY_GCORE_CDN_PASSWORD" |
||||
|
_savedomainconf Le_Deploy_gcore_cdn_password "$Le_Deploy_gcore_cdn_password" |
||||
|
fi |
||||
|
|
||||
|
_info "Get authorization token" |
||||
|
_request="{\"username\":\"$Le_Deploy_gcore_cdn_username\",\"password\":\"$Le_Deploy_gcore_cdn_password\"}" |
||||
|
_debug _request "$_request" |
||||
|
export _H1="Content-Type:application/json" |
||||
|
_response=$(_post "$_request" "https://api.gcdn.co/auth/signin") |
||||
|
_debug _response "$_response" |
||||
|
_regex=".*\"token\":\"\([-._0-9A-Za-z]*\)\".*$" |
||||
|
_debug _regex "$_regex" |
||||
|
_token=$(echo "$_response" | sed -n "s/$_regex/\1/p") |
||||
|
_debug _token "$_token" |
||||
|
|
||||
|
if [ -z "$_token" ]; then |
||||
|
_err "Error G-Core Labs API authorization" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Find CDN resource with cname $_cdomain" |
||||
|
export _H2="Authorization:Token $_token" |
||||
|
_response=$(_get "https://api.gcdn.co/resources") |
||||
|
_debug _response "$_response" |
||||
|
_regex=".*(\"id\".*?\"cname\":\"$_cdomain\".*?})" |
||||
|
_regex="^.*\"cname\":\"$_cdomain\".*$" |
||||
|
_debug _regex "$_regex" |
||||
|
_resource=$(echo "$_response" | sed 's/},{/},\n{/g' | _egrep_o "$_regex") |
||||
|
_debug _resource "$_resource" |
||||
|
_regex=".*\"id\":\([0-9]*\),.*$" |
||||
|
_debug _regex "$_regex" |
||||
|
_resourceId=$(echo "$_resource" | sed -n "s/$_regex/\1/p") |
||||
|
_debug _resourceId "$_resourceId" |
||||
|
_regex=".*\"sslData\":\([0-9]*\)}.*$" |
||||
|
_debug _regex "$_regex" |
||||
|
_sslDataOld=$(echo "$_resource" | sed -n "s/$_regex/\1/p") |
||||
|
_debug _sslDataOld "$_sslDataOld" |
||||
|
_regex=".*\"originGroup\":\([0-9]*\),.*$" |
||||
|
_debug _regex "$_regex" |
||||
|
_originGroup=$(echo "$_resource" | sed -n "s/$_regex/\1/p") |
||||
|
_debug _originGroup "$_originGroup" |
||||
|
|
||||
|
if [ -z "$_resourceId" ] || [ -z "$_originGroup" ]; then |
||||
|
_err "Not found CDN resource with cname $_cdomain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Add new SSL certificate" |
||||
|
_date=$(date "+%d.%m.%Y %H:%M:%S") |
||||
|
_request="{\"name\":\"$_cdomain ($_date)\",\"sslCertificate\":\"$_fullchain\",\"sslPrivateKey\":\"$_key\"}" |
||||
|
_debug _request "$_request" |
||||
|
_response=$(_post "$_request" "https://api.gcdn.co/sslData") |
||||
|
_debug _response "$_response" |
||||
|
_regex=".*\"id\":\([0-9]*\),.*$" |
||||
|
_debug _regex "$_regex" |
||||
|
_sslDataAdd=$(echo "$_response" | sed -n "s/$_regex/\1/p") |
||||
|
_debug _sslDataAdd "$_sslDataAdd" |
||||
|
|
||||
|
if [ -z "$_sslDataAdd" ]; then |
||||
|
_err "Error new SSL certificate add" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Update CDN resource" |
||||
|
_request="{\"originGroup\":$_originGroup,\"sslData\":$_sslDataAdd}" |
||||
|
_debug _request "$_request" |
||||
|
_response=$(_post "$_request" "https://api.gcdn.co/resources/$_resourceId" '' "PUT") |
||||
|
_debug _response "$_response" |
||||
|
_regex=".*\"sslData\":\([0-9]*\)}.*$" |
||||
|
_debug _regex "$_regex" |
||||
|
_sslDataNew=$(echo "$_response" | sed -n "s/$_regex/\1/p") |
||||
|
_debug _sslDataNew "$_sslDataNew" |
||||
|
|
||||
|
if [ "$_sslDataNew" != "$_sslDataAdd" ]; then |
||||
|
_err "Error CDN resource update" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$_sslDataOld" ] || [ "$_sslDataOld" = "null" ]; then |
||||
|
_info "Not found old SSL certificate" |
||||
|
else |
||||
|
_info "Delete old SSL certificate" |
||||
|
_response=$(_post '' "https://api.gcdn.co/sslData/$_sslDataOld" '' "DELETE") |
||||
|
_debug _response "$_response" |
||||
|
fi |
||||
|
|
||||
|
_info "Certificate successfully deployed" |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,58 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#Here is a script to deploy cert to mailcow. |
||||
|
|
||||
|
#returns 0 means success, otherwise error. |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#domain keyfile certfile cafile fullchain |
||||
|
mailcow_deploy() { |
||||
|
_cdomain="$1" |
||||
|
_ckey="$2" |
||||
|
_ccert="$3" |
||||
|
_cca="$4" |
||||
|
_cfullchain="$5" |
||||
|
|
||||
|
_debug _cdomain "$_cdomain" |
||||
|
_debug _ckey "$_ckey" |
||||
|
_debug _ccert "$_ccert" |
||||
|
_debug _cca "$_cca" |
||||
|
_debug _cfullchain "$_cfullchain" |
||||
|
|
||||
|
_mailcow_path="${DEPLOY_MAILCOW_PATH}" |
||||
|
|
||||
|
if [ -z "$_mailcow_path" ]; then |
||||
|
_err "Mailcow path is not found, please define DEPLOY_MAILCOW_PATH." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_ssl_path="${_mailcow_path}/data/assets/ssl/" |
||||
|
if [ ! -d "$_ssl_path" ]; then |
||||
|
_err "Cannot find mailcow ssl path: $_ssl_path" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Copying key and cert" |
||||
|
_real_key="$_ssl_path/key.pem" |
||||
|
if ! cat "$_ckey" >"$_real_key"; then |
||||
|
_err "Error: write key file to: $_real_key" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_real_fullchain="$_ssl_path/cert.pem" |
||||
|
if ! cat "$_cfullchain" >"$_real_fullchain"; then |
||||
|
_err "Error: write cert file to: $_real_fullchain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
DEFAULT_MAILCOW_RELOAD="cd ${_mailcow_path} && docker-compose restart postfix-mailcow dovecot-mailcow nginx-mailcow" |
||||
|
_reload="${DEPLOY_MAILCOW_RELOAD:-$DEFAULT_MAILCOW_RELOAD}" |
||||
|
|
||||
|
_info "Run reload: $_reload" |
||||
|
if eval "$_reload"; then |
||||
|
_info "Reload success!" |
||||
|
fi |
||||
|
return 0 |
||||
|
|
||||
|
} |
||||
@ -0,0 +1,59 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# MyDevil.net API (2019-02-03) |
||||
|
# |
||||
|
# MyDevil.net already supports automatic Let's Encrypt certificates, |
||||
|
# except for wildcard domains. |
||||
|
# |
||||
|
# This script depends on `devil` command that MyDevil.net provides, |
||||
|
# which means that it works only on server side. |
||||
|
# |
||||
|
# Author: Marcin Konicki <https://ahwayakchih.neoni.net> |
||||
|
# |
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
# Usage: mydevil_deploy domain keyfile certfile cafile fullchain |
||||
|
mydevil_deploy() { |
||||
|
_cdomain="$1" |
||||
|
_ckey="$2" |
||||
|
_ccert="$3" |
||||
|
_cca="$4" |
||||
|
_cfullchain="$5" |
||||
|
ip="" |
||||
|
|
||||
|
_debug _cdomain "$_cdomain" |
||||
|
_debug _ckey "$_ckey" |
||||
|
_debug _ccert "$_ccert" |
||||
|
_debug _cca "$_cca" |
||||
|
_debug _cfullchain "$_cfullchain" |
||||
|
|
||||
|
if ! _exists "devil"; then |
||||
|
_err "Could not find 'devil' command." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
ip=$(mydevil_get_ip "$_cdomain") |
||||
|
if [ -z "$ip" ]; then |
||||
|
_err "Could not find IP for domain $_cdomain." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# Delete old certificate first |
||||
|
_info "Removing old certificate for $_cdomain at $ip" |
||||
|
devil ssl www del "$ip" "$_cdomain" |
||||
|
|
||||
|
# Add new certificate |
||||
|
_info "Adding new certificate for $_cdomain at $ip" |
||||
|
devil ssl www add "$ip" "$_cfullchain" "$_ckey" "$_cdomain" || return 1 |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
|
||||
|
# Usage: ip=$(mydevil_get_ip domain.com) |
||||
|
# echo $ip |
||||
|
mydevil_get_ip() { |
||||
|
devil dns list "$1" | cut -w -s -f 3,7 | grep "^A$(printf '\t')" | cut -w -s -f 2 || return 1 |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,114 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# Here is a script to deploy cert to routeros router. |
||||
|
# Deploy the cert to remote routeros |
||||
|
# |
||||
|
# ```sh |
||||
|
# acme.sh --deploy -d ftp.example.com --deploy-hook routeros |
||||
|
# ``` |
||||
|
# |
||||
|
# Before you can deploy the certificate to router os, you need |
||||
|
# to add the id_rsa.pub key to the routeros and assign a user |
||||
|
# to that key. |
||||
|
# |
||||
|
# The user need to have access to ssh, ftp, read and write. |
||||
|
# |
||||
|
# There are no need to enable ftp service for the script to work, |
||||
|
# as they are transmitted over SCP, however ftp is needed to store |
||||
|
# the files on the router. |
||||
|
# |
||||
|
# Then you need to set the environment variables for the |
||||
|
# deploy script to work. |
||||
|
# |
||||
|
# ```sh |
||||
|
# export ROUTER_OS_USERNAME=certuser |
||||
|
# export ROUTER_OS_HOST=router.example.com |
||||
|
# |
||||
|
# acme.sh --deploy -d ftp.example.com --deploy-hook routeros |
||||
|
# ``` |
||||
|
# |
||||
|
# The deploy script will remove previously deployed certificates, |
||||
|
# and it does this with an assumption on how RouterOS names imported |
||||
|
# certificates, adding a "cer_0" suffix at the end. This is true for |
||||
|
# versions 6.32 -> 6.41.3, but it is not guaranteed that it will be |
||||
|
# true for future versions when upgrading. |
||||
|
# |
||||
|
# If the router have other certificates with the same name as the one |
||||
|
# beeing deployed, then this script will remove those certificates. |
||||
|
# |
||||
|
# At the end of the script, the services that use those certificates |
||||
|
# could be updated. Currently only the www-ssl service is beeing |
||||
|
# updated, but more services could be added. |
||||
|
# |
||||
|
# For instance: |
||||
|
# ```sh |
||||
|
# export ROUTER_OS_ADDITIONAL_SERVICES="/ip service set api-ssl certificate=$_cdomain.cer_0" |
||||
|
# ``` |
||||
|
# |
||||
|
# One optional thing to do as well is to create a script that updates |
||||
|
# all the required services and run that script in a single command. |
||||
|
# |
||||
|
# returns 0 means success, otherwise error. |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#domain keyfile certfile cafile fullchain |
||||
|
routeros_deploy() { |
||||
|
_cdomain="$1" |
||||
|
_ckey="$2" |
||||
|
_ccert="$3" |
||||
|
_cca="$4" |
||||
|
_cfullchain="$5" |
||||
|
|
||||
|
_debug _cdomain "$_cdomain" |
||||
|
_debug _ckey "$_ckey" |
||||
|
_debug _ccert "$_ccert" |
||||
|
_debug _cca "$_cca" |
||||
|
_debug _cfullchain "$_cfullchain" |
||||
|
|
||||
|
if [ -z "$ROUTER_OS_HOST" ]; then |
||||
|
_debug "Using _cdomain as ROUTER_OS_HOST, please set if not correct." |
||||
|
ROUTER_OS_HOST="$_cdomain" |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$ROUTER_OS_USERNAME" ]; then |
||||
|
_err "Need to set the env variable ROUTER_OS_USERNAME" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$ROUTER_OS_ADDITIONAL_SERVICES" ]; then |
||||
|
_debug "Not enabling additional services" |
||||
|
ROUTER_OS_ADDITIONAL_SERVICES="" |
||||
|
fi |
||||
|
|
||||
|
_info "Trying to push key '$_ckey' to router" |
||||
|
scp "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key" |
||||
|
_info "Trying to push cert '$_cfullchain' to router" |
||||
|
scp "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer" |
||||
|
# shellcheck disable=SC2029 |
||||
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" bash -c "' |
||||
|
|
||||
|
/certificate remove $_cdomain.cer_0 |
||||
|
|
||||
|
/certificate remove $_cdomain.cer_1 |
||||
|
|
||||
|
delay 1 |
||||
|
|
||||
|
/certificate import file-name=$_cdomain.cer passphrase=\"\" |
||||
|
|
||||
|
/certificate import file-name=$_cdomain.key passphrase=\"\" |
||||
|
|
||||
|
delay 1 |
||||
|
|
||||
|
/file remove $_cdomain.cer |
||||
|
|
||||
|
/file remove $_cdomain.key |
||||
|
|
||||
|
delay 2 |
||||
|
|
||||
|
/ip service set www-ssl certificate=$_cdomain.cer_0 |
||||
|
$ROUTER_OS_ADDITIONAL_SERVICES |
||||
|
|
||||
|
'" |
||||
|
return 0 |
||||
|
} |
||||
1210
dnsapi/README.md
File diff suppressed because it is too large
View File
File diff suppressed because it is too large
View File
@ -0,0 +1,86 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
## Acmeproxy DNS provider to be used with acmeproxy (http://github.com/mdbraber/acmeproxy) |
||||
|
## API integration by Maarten den Braber |
||||
|
## |
||||
|
## Report any bugs via https://github.com/mdbraber/acme.sh |
||||
|
|
||||
|
dns_acmeproxy_add() { |
||||
|
fulldomain="${1}" |
||||
|
txtvalue="${2}" |
||||
|
action="present" |
||||
|
|
||||
|
_debug "Calling: _acmeproxy_request() '${fulldomain}' '${txtvalue}' '${action}'" |
||||
|
_acmeproxy_request "$fulldomain" "$txtvalue" "$action" |
||||
|
} |
||||
|
|
||||
|
dns_acmeproxy_rm() { |
||||
|
fulldomain="${1}" |
||||
|
txtvalue="${2}" |
||||
|
action="cleanup" |
||||
|
|
||||
|
_debug "Calling: _acmeproxy_request() '${fulldomain}' '${txtvalue}' '${action}'" |
||||
|
_acmeproxy_request "$fulldomain" "$txtvalue" "$action" |
||||
|
} |
||||
|
|
||||
|
_acmeproxy_request() { |
||||
|
|
||||
|
## Nothing to see here, just some housekeeping |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
action=$3 |
||||
|
|
||||
|
_info "Using acmeproxy" |
||||
|
_debug fulldomain "$fulldomain" |
||||
|
_debug txtvalue "$txtvalue" |
||||
|
|
||||
|
ACMEPROXY_ENDPOINT="${ACMEPROXY_ENDPOINT:-$(_readaccountconf_mutable ACMEPROXY_ENDPOINT)}" |
||||
|
ACMEPROXY_USERNAME="${ACMEPROXY_USERNAME:-$(_readaccountconf_mutable ACMEPROXY_USERNAME)}" |
||||
|
ACMEPROXY_PASSWORD="${ACMEPROXY_PASSWORD:-$(_readaccountconf_mutable ACMEPROXY_PASSWORD)}" |
||||
|
|
||||
|
## Check for the endpoint |
||||
|
if [ -z "$ACMEPROXY_ENDPOINT" ]; then |
||||
|
ACMEPROXY_ENDPOINT="" |
||||
|
_err "You didn't specify the endpoint" |
||||
|
_err "Please set them via 'export ACMEPROXY_ENDPOINT=https://ip:port' and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
## Check for the credentials |
||||
|
if [ -z "$ACMEPROXY_USERNAME" ] || [ -z "$ACMEPROXY_PASSWORD" ]; then |
||||
|
ACMEPROXY_USERNAME="" |
||||
|
ACMEPROXY_PASSWORD="" |
||||
|
_err "You didn't set username and password" |
||||
|
_err "Please set them via 'export ACMEPROXY_USERNAME=...' and 'export ACMEPROXY_PASSWORD=...' and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
## Save the credentials to the account file |
||||
|
_saveaccountconf_mutable ACMEPROXY_ENDPOINT "$ACMEPROXY_ENDPOINT" |
||||
|
_saveaccountconf_mutable ACMEPROXY_USERNAME "$ACMEPROXY_USERNAME" |
||||
|
_saveaccountconf_mutable ACMEPROXY_PASSWORD "$ACMEPROXY_PASSWORD" |
||||
|
|
||||
|
## Base64 encode the credentials |
||||
|
credentials=$(printf "%b" "$ACMEPROXY_USERNAME:$ACMEPROXY_PASSWORD" | _base64) |
||||
|
|
||||
|
## Construct the HTTP Authorization header |
||||
|
export _H1="Authorization: Basic $credentials" |
||||
|
export _H2="Accept: application/json" |
||||
|
export _H3="Content-Type: application/json" |
||||
|
|
||||
|
## Add the challenge record to the acmeproxy grid member |
||||
|
response="$(_post "{\"fqdn\": \"$fulldomain.\", \"value\": \"$txtvalue\"}" "$ACMEPROXY_ENDPOINT/$action" "" "POST")" |
||||
|
|
||||
|
## Let's see if we get something intelligible back from the unit |
||||
|
if echo "$response" | grep "\"$txtvalue\"" >/dev/null; then |
||||
|
_info "Successfully updated the txt record" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Error encountered during record addition" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
@ -0,0 +1,157 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# DNS API for acme.sh for Core-Networks (https://beta.api.core-networks.de/doc/). |
||||
|
# created by 5ll and francis |
||||
|
|
||||
|
CN_API="https://beta.api.core-networks.de" |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
dns_cn_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if ! _cn_login; then |
||||
|
_err "login failed" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _cn_get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "_sub_domain $_sub_domain" |
||||
|
_debug "_domain $_domain" |
||||
|
|
||||
|
_info "Adding record" |
||||
|
curData="{\"name\":\"$_sub_domain\",\"ttl\":120,\"type\":\"TXT\",\"data\":\"$txtvalue\"}" |
||||
|
curResult="$(_post "${curData}" "${CN_API}/dnszones/${_domain}/records/")" |
||||
|
|
||||
|
_debug "curData $curData" |
||||
|
_debug "curResult $curResult" |
||||
|
|
||||
|
if _contains "$curResult" ""; then |
||||
|
_info "Added, OK" |
||||
|
|
||||
|
if ! _cn_commit; then |
||||
|
_err "commiting changes failed" |
||||
|
return 1 |
||||
|
fi |
||||
|
return 0 |
||||
|
|
||||
|
else |
||||
|
_err "Add txt record error." |
||||
|
_debug "curData is $curData" |
||||
|
_debug "curResult is $curResult" |
||||
|
_err "error adding text record, response was $curResult" |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
dns_cn_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if ! _cn_login; then |
||||
|
_err "login failed" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _cn_get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Deleting record" |
||||
|
curData="{\"name\":\"$_sub_domain\",\"data\":\"$txtvalue\"}" |
||||
|
curResult="$(_post "${curData}" "${CN_API}/dnszones/${_domain}/records/delete")" |
||||
|
_debug curData is "$curData" |
||||
|
|
||||
|
_info "commiting changes" |
||||
|
if ! _cn_commit; then |
||||
|
_err "commiting changes failed" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Deletet txt record" |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
################### Private functions below ################################## |
||||
|
_cn_login() { |
||||
|
CN_User="${CN_User:-$(_readaccountconf_mutable CN_User)}" |
||||
|
CN_Password="${CN_Password:-$(_readaccountconf_mutable CN_Password)}" |
||||
|
if [ -z "$CN_User" ] || [ -z "$CN_Password" ]; then |
||||
|
CN_User="" |
||||
|
CN_Password="" |
||||
|
_err "You must export variables: CN_User and CN_Password" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
#save the config variables to the account conf file. |
||||
|
_saveaccountconf_mutable CN_User "$CN_User" |
||||
|
_saveaccountconf_mutable CN_Password "$CN_Password" |
||||
|
|
||||
|
_info "Getting an AUTH-Token" |
||||
|
curData="{\"login\":\"${CN_User}\",\"password\":\"${CN_Password}\"}" |
||||
|
curResult="$(_post "${curData}" "${CN_API}/auth/token")" |
||||
|
_debug "Calling _CN_login: '${curData}' '${CN_API}/auth/token'" |
||||
|
|
||||
|
if _contains "${curResult}" '"token":"'; then |
||||
|
authToken=$(echo "${curResult}" | cut -d ":" -f2 | cut -d "," -f1 | sed 's/^.\(.*\).$/\1/') |
||||
|
export _H1="Authorization: Bearer $authToken" |
||||
|
_info "Successfully acquired AUTH-Token" |
||||
|
_debug "AUTH-Token: '${authToken}'" |
||||
|
_debug "_H1 '${_H1}'" |
||||
|
else |
||||
|
_err "Couldn't acquire an AUTH-Token" |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
# Commit changes |
||||
|
_cn_commit() { |
||||
|
_info "Commiting changes" |
||||
|
_post "" "${CN_API}/dnszones/$h/records/commit" |
||||
|
} |
||||
|
|
||||
|
_cn_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
p=1 |
||||
|
while true; do |
||||
|
|
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
_debug h "$h" |
||||
|
_debug _H1 "${_H1}" |
||||
|
|
||||
|
if [ -z "$h" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_cn_zonelist="$(_get ${CN_API}/dnszones/)" |
||||
|
_debug _cn_zonelist "${_cn_zonelist}" |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "something went wrong while getting the zone list" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$_cn_zonelist" "\"name\":\"$h\"" >/dev/null; then |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
||||
|
_domain=$h |
||||
|
return 0 |
||||
|
else |
||||
|
_debug "Zonelist does not contain domain - iterating " |
||||
|
fi |
||||
|
p=$i |
||||
|
i=$(_math "$i" + 1) |
||||
|
|
||||
|
done |
||||
|
_err "Zonelist does not contain domain - exiting" |
||||
|
return 1 |
||||
|
} |
||||
@ -0,0 +1,130 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#Created by RaidenII, to use DuckDNS's API to add/remove text records |
||||
|
#modified by helbgd @ 03/13/2018 to support ddnss.de |
||||
|
#modified by mod242 @ 04/24/2018 to support different ddnss domains |
||||
|
#Please note: the Wildcard Feature must be turned on for the Host record |
||||
|
#and the checkbox for TXT needs to be enabled |
||||
|
|
||||
|
# Pass credentials before "acme.sh --issue --dns dns_ddnss ..." |
||||
|
# -- |
||||
|
# export DDNSS_Token="aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee" |
||||
|
# -- |
||||
|
# |
||||
|
|
||||
|
DDNSS_DNS_API="https://ddnss.de/upd.php" |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: dns_ddnss_add _acme-challenge.domain.ddnss.de "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_ddnss_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
DDNSS_Token="${DDNSS_Token:-$(_readaccountconf_mutable DDNSS_Token)}" |
||||
|
if [ -z "$DDNSS_Token" ]; then |
||||
|
_err "You must export variable: DDNSS_Token" |
||||
|
_err "The token for your DDNSS account is necessary." |
||||
|
_err "You can look it up in your DDNSS account." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# Now save the credentials. |
||||
|
_saveaccountconf_mutable DDNSS_Token "$DDNSS_Token" |
||||
|
|
||||
|
# Unfortunately, DDNSS does not seems to support lookup domain through API |
||||
|
# So I assume your credentials (which are your domain and token) are correct |
||||
|
# If something goes wrong, we will get a KO response from DDNSS |
||||
|
|
||||
|
if ! _ddnss_get_domain; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# Now add the TXT record to DDNSS DNS |
||||
|
_info "Trying to add TXT record" |
||||
|
if _ddnss_rest GET "key=$DDNSS_Token&host=$_ddnss_domain&txtm=1&txt=$txtvalue"; then |
||||
|
if [ "$response" = "Updated 1 hostname." ]; then |
||||
|
_info "TXT record has been successfully added to your DDNSS domain." |
||||
|
_info "Note that all subdomains under this domain uses the same TXT record." |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Errors happened during adding the TXT record, response=$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
else |
||||
|
_err "Errors happened during adding the TXT record." |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
#Usage: fulldomain txtvalue |
||||
|
#Remove the txt record after validation. |
||||
|
dns_ddnss_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
DDNSS_Token="${DDNSS_Token:-$(_readaccountconf_mutable DDNSS_Token)}" |
||||
|
if [ -z "$DDNSS_Token" ]; then |
||||
|
_err "You must export variable: DDNSS_Token" |
||||
|
_err "The token for your DDNSS account is necessary." |
||||
|
_err "You can look it up in your DDNSS account." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _ddnss_get_domain; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# Now remove the TXT record from DDNS DNS |
||||
|
_info "Trying to remove TXT record" |
||||
|
if _ddnss_rest GET "key=$DDNSS_Token&host=$_ddnss_domain&txtm=1&txt=."; then |
||||
|
if [ "$response" = "Updated 1 hostname." ]; then |
||||
|
_info "TXT record has been successfully removed from your DDNSS domain." |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Errors happened during removing the TXT record, response=$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
else |
||||
|
_err "Errors happened during removing the TXT record." |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
|
||||
|
#fulldomain=_acme-challenge.domain.ddnss.de |
||||
|
#returns |
||||
|
# _ddnss_domain=domain |
||||
|
_ddnss_get_domain() { |
||||
|
|
||||
|
# We'll extract the domain/username from full domain |
||||
|
_ddnss_domain="$(echo "$fulldomain" | _lower_case | _egrep_o '[.][^.][^.]*[.](ddnss|dyn-ip24|dyndns|dyn|dyndns1|home-webserver|myhome-server|dynip)\..*' | cut -d . -f 2-)" |
||||
|
|
||||
|
if [ -z "$_ddnss_domain" ]; then |
||||
|
_err "Error extracting the domain." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#Usage: method URI |
||||
|
_ddnss_rest() { |
||||
|
method=$1 |
||||
|
param="$2" |
||||
|
_debug param "$param" |
||||
|
url="$DDNSS_DNS_API?$param" |
||||
|
_debug url "$url" |
||||
|
|
||||
|
# DDNSS uses GET to update domain info |
||||
|
if [ "$method" = "GET" ]; then |
||||
|
response="$(_get "$url" | sed 's/<[a-zA-Z\/][^>]*>//g' | _tail_n 1)" |
||||
|
else |
||||
|
_err "Unsupported method" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,204 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
# |
||||
|
# deSEC.io Domain API |
||||
|
# |
||||
|
# Author: Zheng Qian |
||||
|
# |
||||
|
# deSEC API doc |
||||
|
# https://desec.readthedocs.io/en/latest/ |
||||
|
|
||||
|
REST_API="https://desec.io/api/v1/domains" |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: dns_desec_add _acme-challenge.foobar.dedyn.io "d41d8cd98f00b204e9800998ecf8427e" |
||||
|
dns_desec_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
_info "Using desec.io api" |
||||
|
_debug fulldomain "$fulldomain" |
||||
|
_debug txtvalue "$txtvalue" |
||||
|
|
||||
|
DEDYN_TOKEN="${DEDYN_TOKEN:-$(_readaccountconf_mutable DEDYN_TOKEN)}" |
||||
|
DEDYN_NAME="${DEDYN_NAME:-$(_readaccountconf_mutable DEDYN_NAME)}" |
||||
|
|
||||
|
if [ -z "$DEDYN_TOKEN" ] || [ -z "$DEDYN_NAME" ]; then |
||||
|
DEDYN_TOKEN="" |
||||
|
DEDYN_NAME="" |
||||
|
_err "You don't specify DEDYN_TOKEN and DEDYN_NAME yet." |
||||
|
_err "Please create you key and try again." |
||||
|
_err "e.g." |
||||
|
_err "export DEDYN_TOKEN=d41d8cd98f00b204e9800998ecf8427e" |
||||
|
_err "export DEDYN_NAME=foobar.dedyn.io" |
||||
|
return 1 |
||||
|
fi |
||||
|
#save the api token and name to the account conf file. |
||||
|
_saveaccountconf_mutable DEDYN_TOKEN "$DEDYN_TOKEN" |
||||
|
_saveaccountconf_mutable DEDYN_NAME "$DEDYN_NAME" |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain" "$REST_API/"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
|
||||
|
# Get existing TXT record |
||||
|
_debug "Getting txt records" |
||||
|
txtvalues="\"\\\"$txtvalue\\\"\"" |
||||
|
_desec_rest GET "$REST_API/$DEDYN_NAME/rrsets/$_sub_domain/TXT/" |
||||
|
|
||||
|
if [ "$_code" = "200" ]; then |
||||
|
oldtxtvalues="$(echo "$response" | _egrep_o "\"records\":\\[\"\\S*\"\\]" | cut -d : -f 2 | tr -d "[]\\\\\"" | sed "s/,/ /g")" |
||||
|
_debug "existing TXT found" |
||||
|
_debug oldtxtvalues "$oldtxtvalues" |
||||
|
if [ -n "$oldtxtvalues" ]; then |
||||
|
for oldtxtvalue in $oldtxtvalues; do |
||||
|
txtvalues="$txtvalues, \"\\\"$oldtxtvalue\\\"\"" |
||||
|
done |
||||
|
fi |
||||
|
fi |
||||
|
_debug txtvalues "$txtvalues" |
||||
|
_info "Adding record" |
||||
|
body="[{\"subname\":\"$_sub_domain\", \"type\":\"TXT\", \"records\":[$txtvalues], \"ttl\":60}]" |
||||
|
|
||||
|
if _desec_rest PUT "$REST_API/$DEDYN_NAME/rrsets/" "$body"; then |
||||
|
if _contains "$response" "$txtvalue"; then |
||||
|
_info "Added, OK" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Add txt record error." |
||||
|
return 1 |
||||
|
fi |
||||
|
fi |
||||
|
|
||||
|
_err "Add txt record error." |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
#Usage: fulldomain txtvalue |
||||
|
#Remove the txt record after validation. |
||||
|
dns_desec_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
_info "Using desec.io api" |
||||
|
_debug fulldomain "$fulldomain" |
||||
|
_debug txtvalue "$txtvalue" |
||||
|
|
||||
|
DEDYN_TOKEN="${DEDYN_TOKEN:-$(_readaccountconf_mutable DEDYN_TOKEN)}" |
||||
|
DEDYN_NAME="${DEDYN_NAME:-$(_readaccountconf_mutable DEDYN_NAME)}" |
||||
|
|
||||
|
if [ -z "$DEDYN_TOKEN" ] || [ -z "$DEDYN_NAME" ]; then |
||||
|
DEDYN_TOKEN="" |
||||
|
DEDYN_NAME="" |
||||
|
_err "You don't specify DEDYN_TOKEN and DEDYN_NAME yet." |
||||
|
_err "Please create you key and try again." |
||||
|
_err "e.g." |
||||
|
_err "export DEDYN_TOKEN=d41d8cd98f00b204e9800998ecf8427e" |
||||
|
_err "export DEDYN_NAME=foobar.dedyn.io" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain" "$REST_API/"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
|
||||
|
# Get existing TXT record |
||||
|
_debug "Getting txt records" |
||||
|
txtvalues="" |
||||
|
_desec_rest GET "$REST_API/$DEDYN_NAME/rrsets/$_sub_domain/TXT/" |
||||
|
|
||||
|
if [ "$_code" = "200" ]; then |
||||
|
oldtxtvalues="$(echo "$response" | _egrep_o "\"records\":\\[\"\\S*\"\\]" | cut -d : -f 2 | tr -d "[]\\\\\"" | sed "s/,/ /g")" |
||||
|
_debug "existing TXT found" |
||||
|
_debug oldtxtvalues "$oldtxtvalues" |
||||
|
if [ -n "$oldtxtvalues" ]; then |
||||
|
for oldtxtvalue in $oldtxtvalues; do |
||||
|
if [ "$txtvalue" != "$oldtxtvalue" ]; then |
||||
|
txtvalues="$txtvalues, \"\\\"$oldtxtvalue\\\"\"" |
||||
|
fi |
||||
|
done |
||||
|
fi |
||||
|
fi |
||||
|
txtvalues="$(echo "$txtvalues" | cut -c3-)" |
||||
|
_debug txtvalues "$txtvalues" |
||||
|
|
||||
|
_info "Deleting record" |
||||
|
body="[{\"subname\":\"$_sub_domain\", \"type\":\"TXT\", \"records\":[$txtvalues], \"ttl\":60}]" |
||||
|
_desec_rest PUT "$REST_API/$DEDYN_NAME/rrsets/" "$body" |
||||
|
if [ "$_code" = "200" ]; then |
||||
|
_info "Deleted, OK" |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
_err "Delete txt record error." |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
|
||||
|
_desec_rest() { |
||||
|
m="$1" |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
|
||||
|
export _H1="Authorization: Token $DEDYN_TOKEN" |
||||
|
export _H2="Accept: application/json" |
||||
|
export _H3="Content-Type: application/json" |
||||
|
|
||||
|
if [ "$m" != "GET" ]; then |
||||
|
_secure_debug2 data "$data" |
||||
|
response="$(_post "$data" "$ep" "" "$m")" |
||||
|
else |
||||
|
response="$(_get "$ep")" |
||||
|
fi |
||||
|
_ret="$?" |
||||
|
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\\r\\n")" |
||||
|
_debug "http response code $_code" |
||||
|
_secure_debug2 response "$response" |
||||
|
if [ "$_ret" != "0" ]; then |
||||
|
_err "error $ep" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
response="$(printf "%s" "$response" | _normalizeJson)" |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _domain=domain.com |
||||
|
_get_root() { |
||||
|
domain="$1" |
||||
|
ep="$2" |
||||
|
i=2 |
||||
|
p=1 |
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
_debug h "$h" |
||||
|
if [ -z "$h" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if ! _desec_rest GET "$ep"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$response" "\"name\":\"$h\"" >/dev/null; then |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
||||
|
_domain=$h |
||||
|
return 0 |
||||
|
fi |
||||
|
p=$i |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
return 1 |
||||
|
} |
||||
@ -0,0 +1,97 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# MyDevil.net API (2019-02-03) |
||||
|
# |
||||
|
# MyDevil.net already supports automatic Let's Encrypt certificates, |
||||
|
# except for wildcard domains. |
||||
|
# |
||||
|
# This script depends on `devil` command that MyDevil.net provides, |
||||
|
# which means that it works only on server side. |
||||
|
# |
||||
|
# Author: Marcin Konicki <https://ahwayakchih.neoni.net> |
||||
|
# |
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: dns_mydevil_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_mydevil_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
domain="" |
||||
|
|
||||
|
if ! _exists "devil"; then |
||||
|
_err "Could not find 'devil' command." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Using mydevil" |
||||
|
|
||||
|
domain=$(mydevil_get_domain "$fulldomain") |
||||
|
if [ -z "$domain" ]; then |
||||
|
_err "Invalid domain name: could not find root domain of $fulldomain." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# No need to check if record name exists, `devil` always adds new record. |
||||
|
# In worst case scenario, we end up with multiple identical records. |
||||
|
|
||||
|
_info "Adding $fulldomain record for domain $domain" |
||||
|
if devil dns add "$domain" "$fulldomain" TXT "$txtvalue"; then |
||||
|
_info "Successfully added TXT record, ready for validation." |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Unable to add DNS record." |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
#Usage: fulldomain txtvalue |
||||
|
#Remove the txt record after validation. |
||||
|
dns_mydevil_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
domain="" |
||||
|
|
||||
|
if ! _exists "devil"; then |
||||
|
_err "Could not find 'devil' command." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Using mydevil" |
||||
|
|
||||
|
domain=$(mydevil_get_domain "$fulldomain") |
||||
|
if [ -z "$domain" ]; then |
||||
|
_err "Invalid domain name: could not find root domain of $fulldomain." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# catch one or more numbers |
||||
|
num='[0-9][0-9]*' |
||||
|
# catch one or more whitespace |
||||
|
w=$(printf '[\t ][\t ]*') |
||||
|
# catch anything, except newline |
||||
|
any='.*' |
||||
|
# filter to make sure we do not delete other records |
||||
|
validRecords="^${num}${w}${fulldomain}${w}TXT${w}${any}${txtvalue}$" |
||||
|
for id in $(devil dns list "$domain" | tail -n+2 | grep "${validRecords}" | cut -w -s -f 1); do |
||||
|
_info "Removing record $id from domain $domain" |
||||
|
devil dns del "$domain" "$id" || _err "Could not remove DNS record." |
||||
|
done |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
|
||||
|
# Usage: domain=$(mydevil_get_domain "_acme-challenge.www.domain.com" || _err "Invalid domain name") |
||||
|
# echo $domain |
||||
|
mydevil_get_domain() { |
||||
|
fulldomain=$1 |
||||
|
domain="" |
||||
|
|
||||
|
for domain in $(devil dns list | cut -w -s -f 1 | tail -n+2); do |
||||
|
if _endswith "$fulldomain" "$domain"; then |
||||
|
printf -- "%s" "$domain" |
||||
|
return 0 |
||||
|
fi |
||||
|
done |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
@ -0,0 +1,131 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#NederHost_Key="sdfgikogfdfghjklkjhgfcdcfghjk" |
||||
|
|
||||
|
NederHost_Api="https://api.nederhost.nl/dns/v1" |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_nederhost_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
NederHost_Key="${NederHost_Key:-$(_readaccountconf_mutable NederHost_Key)}" |
||||
|
if [ -z "$NederHost_Key" ]; then |
||||
|
NederHost_Key="" |
||||
|
_err "You didn't specify a NederHost api key." |
||||
|
_err "You can get yours from https://www.nederhost.nl/mijn_nederhost" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
#save the api key and email to the account conf file. |
||||
|
_saveaccountconf_mutable NederHost_Key "$NederHost_Key" |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
|
||||
|
_info "Adding record" |
||||
|
if _nederhost_rest PATCH "zones/$_domain/records/$fulldomain/TXT" "[{\"content\":\"$txtvalue\",\"ttl\":60}]"; then |
||||
|
if _contains "$response" "$fulldomain"; then |
||||
|
_info "Added, OK" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Add txt record error." |
||||
|
return 1 |
||||
|
fi |
||||
|
fi |
||||
|
_err "Add txt record error." |
||||
|
return 1 |
||||
|
|
||||
|
} |
||||
|
|
||||
|
#fulldomain txtvalue |
||||
|
dns_nederhost_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
NederHost_Key="${NederHost_Key:-$(_readaccountconf_mutable NederHost_Key)}" |
||||
|
if [ -z "$NederHost_Key" ]; then |
||||
|
NederHost_Key="" |
||||
|
_err "You didn't specify a NederHost api key." |
||||
|
_err "You can get yours from https://www.nederhost.nl/mijn_nederhost" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
|
||||
|
_debug "Removing txt record" |
||||
|
_nederhost_rest DELETE "zones/${_domain}/records/$fulldomain/TXT?content=$txtvalue" |
||||
|
|
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _domain=domain.com |
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
p=1 |
||||
|
while true; do |
||||
|
_domain=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
||||
|
_debug _domain "$_domain" |
||||
|
if [ -z "$_domain" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _nederhost_rest GET "zones/${_domain}"; then |
||||
|
if [ "${_code}" = "204" ]; then |
||||
|
return 0 |
||||
|
fi |
||||
|
else |
||||
|
return 1 |
||||
|
fi |
||||
|
p=$i |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
_nederhost_rest() { |
||||
|
m=$1 |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
_debug "$ep" |
||||
|
|
||||
|
export _H1="Authorization: Bearer $NederHost_Key" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
|
||||
|
if [ "$m" != "GET" ]; then |
||||
|
_debug data "$data" |
||||
|
response="$(_post "$data" "$NederHost_Api/$ep" "" "$m")" |
||||
|
else |
||||
|
response="$(_get "$NederHost_Api/$ep")" |
||||
|
fi |
||||
|
|
||||
|
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\\r\\n")" |
||||
|
_debug "http response code $_code" |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "error $ep" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,64 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#Nsd_ZoneFile="/etc/nsd/zones/example.com.zone" |
||||
|
#Nsd_Command="sudo nsd-control reload" |
||||
|
|
||||
|
# args: fulldomain txtvalue |
||||
|
dns_nsd_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
ttlvalue=300 |
||||
|
|
||||
|
Nsd_ZoneFile="${Nsd_ZoneFile:-$(_readdomainconf Nsd_ZoneFile)}" |
||||
|
Nsd_Command="${Nsd_Command:-$(_readdomainconf Nsd_Command)}" |
||||
|
|
||||
|
# Arg checks |
||||
|
if [ -z "$Nsd_ZoneFile" ] || [ -z "$Nsd_Command" ]; then |
||||
|
Nsd_ZoneFile="" |
||||
|
Nsd_Command="" |
||||
|
_err "Specify ENV vars Nsd_ZoneFile and Nsd_Command" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if [ ! -f "$Nsd_ZoneFile" ]; then |
||||
|
Nsd_ZoneFile="" |
||||
|
Nsd_Command="" |
||||
|
_err "No such file: $Nsd_ZoneFile" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_savedomainconf Nsd_ZoneFile "$Nsd_ZoneFile" |
||||
|
_savedomainconf Nsd_Command "$Nsd_Command" |
||||
|
|
||||
|
echo "$fulldomain. $ttlvalue IN TXT \"$txtvalue\"" >>"$Nsd_ZoneFile" |
||||
|
_info "Added TXT record for $fulldomain" |
||||
|
_debug "Running $Nsd_Command" |
||||
|
if eval "$Nsd_Command"; then |
||||
|
_info "Successfully updated the zone" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Problem updating the zone" |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
# args: fulldomain txtvalue |
||||
|
dns_nsd_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
ttlvalue=300 |
||||
|
|
||||
|
Nsd_ZoneFile="${Nsd_ZoneFile:-$(_readdomainconf Nsd_ZoneFile)}" |
||||
|
Nsd_Command="${Nsd_Command:-$(_readdomainconf Nsd_Command)}" |
||||
|
|
||||
|
sed -i "/$fulldomain. $ttlvalue IN TXT \"$txtvalue\"/d" "$Nsd_ZoneFile" |
||||
|
_info "Removed TXT record for $fulldomain" |
||||
|
_debug "Running $Nsd_Command" |
||||
|
if eval "$Nsd_Command"; then |
||||
|
_info "Successfully reloaded NSD " |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Problem reloading NSD" |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
@ -0,0 +1,211 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
######################################################################## |
||||
|
# NocWorx script for acme.sh |
||||
|
# |
||||
|
# Handles DNS Updates for the Following vendors: |
||||
|
# - Nexcess.net |
||||
|
# - Thermo.io |
||||
|
# - Futurehosting.com |
||||
|
# |
||||
|
# Environment variables: |
||||
|
# |
||||
|
# - NW_API_TOKEN (Your API Token) |
||||
|
# - NW_API_ENDPOINT (One of the following listed below) |
||||
|
# |
||||
|
# Endpoints: |
||||
|
# - https://portal.nexcess.net (default) |
||||
|
# - https://core.thermo.io |
||||
|
# - https://my.futurehosting.com |
||||
|
# |
||||
|
# Note: If you do not have an API token, one can be generated at one |
||||
|
# of the following URLs: |
||||
|
# - https://portal.nexcess.net/api-token |
||||
|
# - https://core.thermo.io/api-token |
||||
|
# - https://my.futurehosting.com/api-token |
||||
|
# |
||||
|
# Author: Frank Laszlo <flaszlo@nexcess.net> |
||||
|
|
||||
|
NW_API_VERSION="0" |
||||
|
|
||||
|
# dns_nw_add() - Add TXT record |
||||
|
# Usage: dns_nw_add _acme-challenge.subdomain.domain.com "XyZ123..." |
||||
|
dns_nw_add() { |
||||
|
host="${1}" |
||||
|
txtvalue="${2}" |
||||
|
|
||||
|
_debug host "${host}" |
||||
|
_debug txtvalue "${txtvalue}" |
||||
|
|
||||
|
if ! _check_nw_api_creds; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Using NocWorx (${NW_API_ENDPOINT})" |
||||
|
_debug "Calling: dns_nw_add() '${host}' '${txtvalue}'" |
||||
|
|
||||
|
_debug "Detecting root zone" |
||||
|
if ! _get_root "${host}"; then |
||||
|
_err "Zone for domain does not exist." |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug _zone_id "${_zone_id}" |
||||
|
_debug _sub_domain "${_sub_domain}" |
||||
|
_debug _domain "${_domain}" |
||||
|
|
||||
|
_post_data="{\"zone_id\": \"${_zone_id}\", \"type\": \"TXT\", \"host\": \"${host}\", \"target\": \"${txtvalue}\", \"ttl\": \"300\"}" |
||||
|
|
||||
|
if _rest POST "dns-record" "${_post_data}" && [ -n "${response}" ]; then |
||||
|
_record_id=$(printf "%s\n" "${response}" | _egrep_o "\"record_id\": *[0-9]+" | cut -d : -f 2 | tr -d " " | _head_n 1) |
||||
|
_debug _record_id "${_record_id}" |
||||
|
|
||||
|
if [ -z "$_record_id" ]; then |
||||
|
_err "Error adding the TXT record." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "TXT record successfully added." |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
# dns_nw_rm() - Remove TXT record |
||||
|
# Usage: dns_nw_rm _acme-challenge.subdomain.domain.com "XyZ123..." |
||||
|
dns_nw_rm() { |
||||
|
host="${1}" |
||||
|
txtvalue="${2}" |
||||
|
|
||||
|
_debug host "${host}" |
||||
|
_debug txtvalue "${txtvalue}" |
||||
|
|
||||
|
if ! _check_nw_api_creds; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Using NocWorx (${NW_API_ENDPOINT})" |
||||
|
_debug "Calling: dns_nw_rm() '${host}'" |
||||
|
|
||||
|
_debug "Detecting root zone" |
||||
|
if ! _get_root "${host}"; then |
||||
|
_err "Zone for domain does not exist." |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug _zone_id "${_zone_id}" |
||||
|
_debug _sub_domain "${_sub_domain}" |
||||
|
_debug _domain "${_domain}" |
||||
|
|
||||
|
_parameters="?zone_id=${_zone_id}" |
||||
|
|
||||
|
if _rest GET "dns-record" "${_parameters}" && [ -n "${response}" ]; then |
||||
|
response="$(echo "${response}" | tr -d "\n" | sed 's/^\[\(.*\)\]$/\1/' | sed -e 's/{"record_id":/|"record_id":/g' | sed 's/|/&{/g' | tr "|" "\n")" |
||||
|
_debug response "${response}" |
||||
|
|
||||
|
record="$(echo "${response}" | _egrep_o "{.*\"host\": *\"${_sub_domain}\", *\"target\": *\"${txtvalue}\".*}")" |
||||
|
_debug record "${record}" |
||||
|
|
||||
|
if [ "${record}" ]; then |
||||
|
_record_id=$(printf "%s\n" "${record}" | _egrep_o "\"record_id\": *[0-9]+" | _head_n 1 | cut -d : -f 2 | tr -d \ ) |
||||
|
if [ "${_record_id}" ]; then |
||||
|
_debug _record_id "${_record_id}" |
||||
|
|
||||
|
_rest DELETE "dns-record/${_record_id}" |
||||
|
|
||||
|
_info "TXT record successfully deleted." |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
_check_nw_api_creds() { |
||||
|
NW_API_TOKEN="${NW_API_TOKEN:-$(_readaccountconf_mutable NW_API_TOKEN)}" |
||||
|
NW_API_ENDPOINT="${NW_API_ENDPOINT:-$(_readaccountconf_mutable NW_API_ENDPOINT)}" |
||||
|
|
||||
|
if [ -z "${NW_API_ENDPOINT}" ]; then |
||||
|
NW_API_ENDPOINT="https://portal.nexcess.net" |
||||
|
fi |
||||
|
|
||||
|
if [ -z "${NW_API_TOKEN}" ]; then |
||||
|
_err "You have not defined your NW_API_TOKEN." |
||||
|
_err "Please create your token and try again." |
||||
|
_err "If you need to generate a new token, please visit one of the following URLs:" |
||||
|
_err " - https://portal.nexcess.net/api-token" |
||||
|
_err " - https://core.thermo.io/api-token" |
||||
|
_err " - https://my.futurehosting.com/api-token" |
||||
|
|
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_saveaccountconf_mutable NW_API_TOKEN "${NW_API_TOKEN}" |
||||
|
_saveaccountconf_mutable NW_API_ENDPOINT "${NW_API_ENDPOINT}" |
||||
|
} |
||||
|
|
||||
|
_get_root() { |
||||
|
domain="${1}" |
||||
|
i=2 |
||||
|
p=1 |
||||
|
|
||||
|
if _rest GET "dns-zone"; then |
||||
|
response="$(echo "${response}" | tr -d "\n" | sed 's/^\[\(.*\)\]$/\1/' | sed -e 's/{"zone_id":/|"zone_id":/g' | sed 's/|/&{/g' | tr "|" "\n")" |
||||
|
|
||||
|
_debug response "${response}" |
||||
|
while true; do |
||||
|
h=$(printf "%s" "${domain}" | cut -d . -f $i-100) |
||||
|
_debug h "${h}" |
||||
|
if [ -z "${h}" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
hostedzone="$(echo "${response}" | _egrep_o "{.*\"domain\": *\"${h}\".*}")" |
||||
|
if [ "${hostedzone}" ]; then |
||||
|
_zone_id=$(printf "%s\n" "${hostedzone}" | _egrep_o "\"zone_id\": *[0-9]+" | _head_n 1 | cut -d : -f 2 | tr -d \ ) |
||||
|
if [ "${_zone_id}" ]; then |
||||
|
_sub_domain=$(printf "%s" "${domain}" | cut -d . -f 1-${p}) |
||||
|
_domain="${h}" |
||||
|
return 0 |
||||
|
fi |
||||
|
return 1 |
||||
|
fi |
||||
|
p=$i |
||||
|
i=$(_math "${i}" + 1) |
||||
|
done |
||||
|
fi |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
_rest() { |
||||
|
method="${1}" |
||||
|
ep="/${2}" |
||||
|
data="${3}" |
||||
|
|
||||
|
_debug method "${method}" |
||||
|
_debug ep "${ep}" |
||||
|
|
||||
|
export _H1="Accept: application/json" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
export _H3="Api-Version: ${NW_API_VERSION}" |
||||
|
export _H4="User-Agent: NW-ACME-CLIENT" |
||||
|
export _H5="Authorization: Bearer ${NW_API_TOKEN}" |
||||
|
|
||||
|
if [ "${method}" != "GET" ]; then |
||||
|
_debug data "${data}" |
||||
|
response="$(_post "${data}" "${NW_API_ENDPOINT}${ep}" "" "${method}")" |
||||
|
else |
||||
|
response="$(_get "${NW_API_ENDPOINT}${ep}${data}")" |
||||
|
fi |
||||
|
|
||||
|
if [ "${?}" != "0" ]; then |
||||
|
_err "error ${ep}" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "${response}" |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,139 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
# -*- mode: sh; tab-width: 2; indent-tabs-mode: s; coding: utf-8 -*- |
||||
|
|
||||
|
# one.com ui wrapper for acme.sh |
||||
|
# Author: github: @diseq |
||||
|
# Created: 2019-02-17 |
||||
|
# |
||||
|
# export ONECOM_User="username" |
||||
|
# export ONECOM_Password="password" |
||||
|
# |
||||
|
# Usage: |
||||
|
# acme.sh --issue --dns dns_one -d example.com |
||||
|
# |
||||
|
# only single domain supported atm |
||||
|
|
||||
|
dns_one_add() { |
||||
|
mysubdomain=$(printf -- "%s" "$1" | rev | cut -d"." -f3- | rev) |
||||
|
mydomain=$(printf -- "%s" "$1" | rev | cut -d"." -f1-2 | rev) |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
# get credentials |
||||
|
ONECOM_User="${ONECOM_User:-$(_readaccountconf_mutable ONECOM_User)}" |
||||
|
ONECOM_Password="${ONECOM_Password:-$(_readaccountconf_mutable ONECOM_Password)}" |
||||
|
if [ -z "$ONECOM_User" ] || [ -z "$ONECOM_Password" ]; then |
||||
|
ONECOM_User="" |
||||
|
ONECOM_Password="" |
||||
|
_err "You didn't specify a one.com username and password yet." |
||||
|
_err "Please create the key and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
#save the api key and email to the account conf file. |
||||
|
_saveaccountconf_mutable ONECOM_User "$ONECOM_User" |
||||
|
_saveaccountconf_mutable ONECOM_Password "$ONECOM_Password" |
||||
|
|
||||
|
# Login with user and password |
||||
|
postdata="loginDomain=true" |
||||
|
postdata="$postdata&displayUsername=$ONECOM_User" |
||||
|
postdata="$postdata&username=$ONECOM_User" |
||||
|
postdata="$postdata&targetDomain=$mydomain" |
||||
|
postdata="$postdata&password1=$ONECOM_Password" |
||||
|
postdata="$postdata&loginTarget=" |
||||
|
#_debug postdata "$postdata" |
||||
|
|
||||
|
response="$(_post "$postdata" "https://www.one.com/admin/login.do" "" "POST" "application/x-www-form-urlencoded")" |
||||
|
#_debug response "$response" |
||||
|
|
||||
|
JSESSIONID="$(grep "JSESSIONID" "$HTTP_HEADER" | grep "^[Ss]et-[Cc]ookie:" | _tail_n 1 | _egrep_o 'JSESSIONID=[^;]*;' | tr -d ';')" |
||||
|
_debug jsessionid "$JSESSIONID" |
||||
|
|
||||
|
export _H1="Cookie: ${JSESSIONID}" |
||||
|
|
||||
|
# get entries |
||||
|
response="$(_get "https://www.one.com/admin/api/domains/$mydomain/dns/custom_records")" |
||||
|
_debug response "$response" |
||||
|
|
||||
|
CSRF_G_TOKEN="$(grep "CSRF_G_TOKEN=" "$HTTP_HEADER" | grep "^Set-Cookie:" | _tail_n 1 | _egrep_o 'CSRF_G_TOKEN=[^;]*;' | tr -d ';')" |
||||
|
export _H2="Cookie: ${CSRF_G_TOKEN}" |
||||
|
|
||||
|
# Update the IP address for domain entry |
||||
|
postdata="{\"type\":\"dns_custom_records\",\"attributes\":{\"priority\":0,\"ttl\":600,\"type\":\"TXT\",\"prefix\":\"$mysubdomain\",\"content\":\"$txtvalue\"}}" |
||||
|
_debug postdata "$postdata" |
||||
|
response="$(_post "$postdata" "https://www.one.com/admin/api/domains/$mydomain/dns/custom_records" "" "POST" "application/json")" |
||||
|
response="$(echo "$response" | _normalizeJson)" |
||||
|
_debug response "$response" |
||||
|
|
||||
|
id=$(echo "$response" | sed -n "s/{\"result\":{\"data\":{\"type\":\"dns_custom_records\",\"id\":\"\([^\"]*\)\",\"attributes\":{\"prefix\":\"$mysubdomain\",\"type\":\"TXT\",\"content\":\"$txtvalue\",\"priority\":0,\"ttl\":600}}},\"metadata\":null}/\1/p") |
||||
|
|
||||
|
if [ -z "$id" ]; then |
||||
|
_err "Add txt record error." |
||||
|
return 1 |
||||
|
else |
||||
|
_info "Added, OK ($id)" |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
} |
||||
|
|
||||
|
dns_one_rm() { |
||||
|
mysubdomain=$(printf -- "%s" "$1" | rev | cut -d"." -f3- | rev) |
||||
|
mydomain=$(printf -- "%s" "$1" | rev | cut -d"." -f1-2 | rev) |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
# get credentials |
||||
|
ONECOM_User="${ONECOM_User:-$(_readaccountconf_mutable ONECOM_User)}" |
||||
|
ONECOM_Password="${ONECOM_Password:-$(_readaccountconf_mutable ONECOM_Password)}" |
||||
|
if [ -z "$ONECOM_User" ] || [ -z "$ONECOM_Password" ]; then |
||||
|
ONECOM_User="" |
||||
|
ONECOM_Password="" |
||||
|
_err "You didn't specify a one.com username and password yet." |
||||
|
_err "Please create the key and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# Login with user and password |
||||
|
postdata="loginDomain=true" |
||||
|
postdata="$postdata&displayUsername=$ONECOM_User" |
||||
|
postdata="$postdata&username=$ONECOM_User" |
||||
|
postdata="$postdata&targetDomain=$mydomain" |
||||
|
postdata="$postdata&password1=$ONECOM_Password" |
||||
|
postdata="$postdata&loginTarget=" |
||||
|
|
||||
|
response="$(_post "$postdata" "https://www.one.com/admin/login.do" "" "POST" "application/x-www-form-urlencoded")" |
||||
|
#_debug response "$response" |
||||
|
|
||||
|
JSESSIONID="$(grep "JSESSIONID" "$HTTP_HEADER" | grep "^[Ss]et-[Cc]ookie:" | _tail_n 1 | _egrep_o 'JSESSIONID=[^;]*;' | tr -d ';')" |
||||
|
_debug jsessionid "$JSESSIONID" |
||||
|
|
||||
|
export _H1="Cookie: ${JSESSIONID}" |
||||
|
|
||||
|
# get entries |
||||
|
response="$(_get "https://www.one.com/admin/api/domains/$mydomain/dns/custom_records")" |
||||
|
response="$(echo "$response" | _normalizeJson)" |
||||
|
_debug response "$response" |
||||
|
|
||||
|
CSRF_G_TOKEN="$(grep "CSRF_G_TOKEN=" "$HTTP_HEADER" | grep "^Set-Cookie:" | _tail_n 1 | _egrep_o 'CSRF_G_TOKEN=[^;]*;' | tr -d ';')" |
||||
|
export _H2="Cookie: ${CSRF_G_TOKEN}" |
||||
|
|
||||
|
id=$(printf -- "%s" "$response" | sed -n "s/.*{\"type\":\"dns_custom_records\",\"id\":\"\([^\"]*\)\",\"attributes\":{\"prefix\":\"$mysubdomain\",\"type\":\"TXT\",\"content\":\"$txtvalue\",\"priority\":0,\"ttl\":600}.*/\1/p") |
||||
|
|
||||
|
if [ -z "$id" ]; then |
||||
|
_err "Txt record not found." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# delete entry |
||||
|
response="$(_post "$postdata" "https://www.one.com/admin/api/domains/$mydomain/dns/custom_records/$id" "" "DELETE" "application/json")" |
||||
|
response="$(echo "$response" | _normalizeJson)" |
||||
|
_debug response "$response" |
||||
|
|
||||
|
if [ "$response" = '{"result":null,"metadata":null}' ]; then |
||||
|
_info "Removed, OK" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Removing txt record error." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
} |
||||
@ -0,0 +1,217 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# Online API |
||||
|
# https://console.online.net/en/api/ |
||||
|
# |
||||
|
# Requires Online API key set in ONLINE_API_KEY |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
ONLINE_API="https://api.online.net/api/v1" |
||||
|
|
||||
|
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_online_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if ! _online_check_config; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
_debug _real_dns_version "$_real_dns_version" |
||||
|
|
||||
|
_info "Creating temporary zone version" |
||||
|
_online_create_temporary_zone_version |
||||
|
_info "Enabling temporary zone version" |
||||
|
_online_enable_zone "$_temporary_dns_version" |
||||
|
|
||||
|
_info "Adding record" |
||||
|
_online_create_TXT_record "$_real_dns_version" "$_sub_domain" "$txtvalue" |
||||
|
_info "Disabling temporary version" |
||||
|
_online_enable_zone "$_real_dns_version" |
||||
|
_info "Destroying temporary version" |
||||
|
_online_destroy_zone "$_temporary_dns_version" |
||||
|
|
||||
|
_info "Record added." |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#fulldomain |
||||
|
dns_online_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
if ! _online_check_config; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
_debug _real_dns_version "$_real_dns_version" |
||||
|
|
||||
|
_debug "Getting txt records" |
||||
|
if ! _online_rest GET "domain/$_domain/version/active"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
rid=$(echo "$response" | _egrep_o "\"id\":[0-9]+,\"name\":\"$_sub_domain\",\"data\":\"\\\u0022$txtvalue\\\u0022\"" | cut -d ':' -f 2 | cut -d ',' -f 1) |
||||
|
_debug rid "$rid" |
||||
|
if [ -z "$rid" ]; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Creating temporary zone version" |
||||
|
_online_create_temporary_zone_version |
||||
|
_info "Enabling temporary zone version" |
||||
|
_online_enable_zone "$_temporary_dns_version" |
||||
|
|
||||
|
_info "Removing DNS record" |
||||
|
_online_rest DELETE "domain/$_domain/version/$_real_dns_version/zone/$rid" |
||||
|
_info "Disabling temporary version" |
||||
|
_online_enable_zone "$_real_dns_version" |
||||
|
_info "Destroying temporary version" |
||||
|
_online_destroy_zone "$_temporary_dns_version" |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
|
||||
|
_online_check_config() { |
||||
|
ONLINE_API_KEY="${ONLINE_API_KEY:-$(_readaccountconf_mutable ONLINE_API_KEY)}" |
||||
|
if [ -z "$ONLINE_API_KEY" ]; then |
||||
|
_err "No API key specified for Online API." |
||||
|
_err "Create your key and export it as ONLINE_API_KEY" |
||||
|
return 1 |
||||
|
fi |
||||
|
if ! _online_rest GET "domain/"; then |
||||
|
_err "Invalid API key specified for Online API." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_saveaccountconf_mutable ONLINE_API_KEY "$ONLINE_API_KEY" |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _domain=domain.com |
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
p=1 |
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
if [ -z "$h" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_online_rest GET "domain/$h/version/active" |
||||
|
|
||||
|
if ! _contains "$response" "Domain not found" >/dev/null; then |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
||||
|
_domain="$h" |
||||
|
_real_dns_version=$(echo "$response" | _egrep_o '"uuid_ref":.*' | cut -d ':' -f 2 | cut -d '"' -f 2) |
||||
|
return 0 |
||||
|
fi |
||||
|
p=$i |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
_err "Unable to retrive DNS zone matching this domain" |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
# this function create a temporary zone version |
||||
|
# as online.net does not allow updating an active version |
||||
|
_online_create_temporary_zone_version() { |
||||
|
|
||||
|
_online_rest POST "domain/$_domain/version" "name=acme.sh" |
||||
|
if [ "$?" != "0" ]; then |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_temporary_dns_version=$(echo "$response" | _egrep_o '"uuid_ref":.*' | cut -d ':' -f 2 | cut -d '"' -f 2) |
||||
|
|
||||
|
# Creating a dummy record in this temporary version, because online.net doesn't accept enabling an empty version |
||||
|
_online_create_TXT_record "$_temporary_dns_version" "dummy.acme.sh" "dummy" |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_online_destroy_zone() { |
||||
|
version_id=$1 |
||||
|
_online_rest DELETE "domain/$_domain/version/$version_id" |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
return 1 |
||||
|
fi |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_online_enable_zone() { |
||||
|
version_id=$1 |
||||
|
_online_rest PATCH "domain/$_domain/version/$version_id/enable" |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
return 1 |
||||
|
fi |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_online_create_TXT_record() { |
||||
|
version=$1 |
||||
|
txt_name=$2 |
||||
|
txt_value=$3 |
||||
|
|
||||
|
_online_rest POST "domain/$_domain/version/$version/zone" "type=TXT&name=$txt_name&data=%22$txt_value%22&ttl=60&priority=0" |
||||
|
|
||||
|
# Note : the normal, expected response SHOULD be "Unknown method". |
||||
|
# this happens because the API HTTP response contains a Location: header, that redirect |
||||
|
# to an unknown online.net endpoint. |
||||
|
if [ "$?" != "0" ] || _contains "$response" "Unknown method" || _contains "$response" "\$ref"; then |
||||
|
return 0 |
||||
|
else |
||||
|
_err "error $response" |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
_online_rest() { |
||||
|
m=$1 |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
_debug "$ep" |
||||
|
_online_url="$ONLINE_API/$ep" |
||||
|
_debug2 _online_url "$_online_url" |
||||
|
export _H1="Authorization: Bearer $ONLINE_API_KEY" |
||||
|
export _H2="X-Pretty-JSON: 1" |
||||
|
if [ "$data" ] || [ "$m" != "GET" ]; then |
||||
|
_debug data "$data" |
||||
|
response="$(_post "$data" "$_online_url" "" "$m")" |
||||
|
else |
||||
|
response="$(_get "$_online_url")" |
||||
|
fi |
||||
|
if [ "$?" != "0" ] || _contains "$response" "invalid_grant" || _contains "$response" "Method not allowed"; then |
||||
|
_err "error $response" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,244 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# This is the OpenProvider API wrapper for acme.sh |
||||
|
# |
||||
|
# Author: Sylvia van Os |
||||
|
# Report Bugs here: https://github.com/Neilpang/acme.sh/issues/2104 |
||||
|
# |
||||
|
# export OPENPROVIDER_USER="username" |
||||
|
# export OPENPROVIDER_PASSWORDHASH="hashed_password" |
||||
|
# |
||||
|
# Usage: |
||||
|
# acme.sh --issue --dns dns_openprovider -d example.com |
||||
|
|
||||
|
OPENPROVIDER_API="https://api.openprovider.eu/" |
||||
|
#OPENPROVIDER_API="https://api.cte.openprovider.eu/" # Test API |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: dns_openprovider_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_openprovider_add() { |
||||
|
fulldomain="$1" |
||||
|
txtvalue="$2" |
||||
|
|
||||
|
OPENPROVIDER_USER="${OPENPROVIDER_USER:-$(_readaccountconf_mutable OPENPROVIDER_USER)}" |
||||
|
OPENPROVIDER_PASSWORDHASH="${OPENPROVIDER_PASSWORDHASH:-$(_readaccountconf_mutable OPENPROVIDER_PASSWORDHASH)}" |
||||
|
|
||||
|
if [ -z "$OPENPROVIDER_USER" ] || [ -z "$OPENPROVIDER_PASSWORDHASH" ]; then |
||||
|
_err "You didn't specify the openprovider user and/or password hash." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# save the username and password to the account conf file. |
||||
|
_saveaccountconf_mutable OPENPROVIDER_USER "$OPENPROVIDER_USER" |
||||
|
_saveaccountconf_mutable OPENPROVIDER_PASSWORDHASH "$OPENPROVIDER_PASSWORDHASH" |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _domain_name "$_domain_name" |
||||
|
_debug _domain_extension "$_domain_extension" |
||||
|
|
||||
|
_debug "Getting current records" |
||||
|
existing_items="" |
||||
|
results_retrieved=0 |
||||
|
while true; do |
||||
|
_openprovider_request "$(printf '<searchZoneRecordDnsRequest><name>%s.%s</name><offset>%s</offset></searchZoneRecordDnsRequest>' "$_domain_name" "$_domain_extension" "$results_retrieved")" |
||||
|
|
||||
|
items="$response" |
||||
|
while true; do |
||||
|
item="$(echo "$items" | _egrep_o '<openXML>.*<\/openXML>' | sed -n 's/.*\(<item>.*<\/item>\).*/\1/p')" |
||||
|
_debug existing_items "$existing_items" |
||||
|
_debug results_retrieved "$results_retrieved" |
||||
|
_debug item "$item" |
||||
|
|
||||
|
if [ -z "$item" ]; then |
||||
|
break |
||||
|
fi |
||||
|
|
||||
|
items="$(echo "$items" | sed "s|${item}||")" |
||||
|
|
||||
|
results_retrieved="$(_math "$results_retrieved" + 1)" |
||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)\.'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')" |
||||
|
if [ -z "$new_item" ]; then |
||||
|
# Base record |
||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')" |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$(echo "$new_item" | _egrep_o ".*<type>(A|AAAA|CNAME|MX|SPF|SRV|TXT|TLSA|SSHFP|CAA)<\/type>.*")" ]; then |
||||
|
_debug "not an allowed record type, skipping" "$new_item" |
||||
|
continue |
||||
|
fi |
||||
|
|
||||
|
existing_items="$existing_items$new_item" |
||||
|
done |
||||
|
|
||||
|
total="$(echo "$response" | _egrep_o '<total>.*?<\/total>' | sed -n 's/.*<total>\(.*\)<\/total>.*/\1/p')" |
||||
|
|
||||
|
_debug total "$total" |
||||
|
if [ "$results_retrieved" -eq "$total" ]; then |
||||
|
break |
||||
|
fi |
||||
|
done |
||||
|
|
||||
|
_debug "Creating acme record" |
||||
|
acme_record="$(echo "$fulldomain" | sed -e "s/.$_domain_name.$_domain_extension$//")" |
||||
|
_openprovider_request "$(printf '<modifyZoneDnsRequest><domain><name>%s</name><extension>%s</extension></domain><type>master</type><records><array>%s<item><name>%s</name><type>TXT</type><value>%s</value><ttl>86400</ttl></item></array></records></modifyZoneDnsRequest>' "$_domain_name" "$_domain_extension" "$existing_items" "$acme_record" "$txtvalue")" |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#Usage: fulldomain txtvalue |
||||
|
#Remove the txt record after validation. |
||||
|
dns_openprovider_rm() { |
||||
|
fulldomain="$1" |
||||
|
txtvalue="$2" |
||||
|
|
||||
|
OPENPROVIDER_USER="${OPENPROVIDER_USER:-$(_readaccountconf_mutable OPENPROVIDER_USER)}" |
||||
|
OPENPROVIDER_PASSWORDHASH="${OPENPROVIDER_PASSWORDHASH:-$(_readaccountconf_mutable OPENPROVIDER_PASSWORDHASH)}" |
||||
|
|
||||
|
if [ -z "$OPENPROVIDER_USER" ] || [ -z "$OPENPROVIDER_PASSWORDHASH" ]; then |
||||
|
_err "You didn't specify the openprovider user and/or password hash." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
# save the username and password to the account conf file. |
||||
|
_saveaccountconf_mutable OPENPROVIDER_USER "$OPENPROVIDER_USER" |
||||
|
_saveaccountconf_mutable OPENPROVIDER_PASSWORDHASH "$OPENPROVIDER_PASSWORDHASH" |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _domain_name "$_domain_name" |
||||
|
_debug _domain_extension "$_domain_extension" |
||||
|
|
||||
|
_debug "Getting current records" |
||||
|
existing_items="" |
||||
|
results_retrieved=0 |
||||
|
while true; do |
||||
|
_openprovider_request "$(printf '<searchZoneRecordDnsRequest><name>%s.%s</name><offset>%s</offset></searchZoneRecordDnsRequest>' "$_domain_name" "$_domain_extension" "$results_retrieved")" |
||||
|
|
||||
|
# Remove acme records from items |
||||
|
items="$response" |
||||
|
while true; do |
||||
|
item="$(echo "$items" | _egrep_o '<openXML>.*<\/openXML>' | sed -n 's/.*\(<item>.*<\/item>\).*/\1/p')" |
||||
|
_debug existing_items "$existing_items" |
||||
|
_debug results_retrieved "$results_retrieved" |
||||
|
_debug item "$item" |
||||
|
|
||||
|
if [ -z "$item" ]; then |
||||
|
break |
||||
|
fi |
||||
|
|
||||
|
items="$(echo "$items" | sed "s|${item}||")" |
||||
|
|
||||
|
results_retrieved="$(_math "$results_retrieved" + 1)" |
||||
|
if ! echo "$item" | grep -v "$fulldomain"; then |
||||
|
_debug "acme record, skipping" "$item" |
||||
|
continue |
||||
|
fi |
||||
|
|
||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)\.'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')" |
||||
|
|
||||
|
if [ -z "$new_item" ]; then |
||||
|
# Base record |
||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')" |
||||
|
fi |
||||
|
|
||||
|
if [ -z "$(echo "$new_item" | _egrep_o ".*<type>(A|AAAA|CNAME|MX|SPF|SRV|TXT|TLSA|SSHFP|CAA)<\/type>.*")" ]; then |
||||
|
_debug "not an allowed record type, skipping" "$new_item" |
||||
|
continue |
||||
|
fi |
||||
|
|
||||
|
existing_items="$existing_items$new_item" |
||||
|
done |
||||
|
|
||||
|
total="$(echo "$response" | _egrep_o '<total>.*?<\/total>' | sed -n 's/.*<total>\(.*\)<\/total>.*/\1/p')" |
||||
|
|
||||
|
_debug total "$total" |
||||
|
|
||||
|
if [ "$results_retrieved" -eq "$total" ]; then |
||||
|
break |
||||
|
fi |
||||
|
done |
||||
|
|
||||
|
_debug "Removing acme record" |
||||
|
_openprovider_request "$(printf '<modifyZoneDnsRequest><domain><name>%s</name><extension>%s</extension></domain><type>master</type><records><array>%s</array></records></modifyZoneDnsRequest>' "$_domain_name" "$_domain_extension" "$existing_items")" |
||||
|
|
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _domain_name=domain |
||||
|
# _domain_extension=com |
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
|
||||
|
results_retrieved=0 |
||||
|
while true; do |
||||
|
h=$(echo "$domain" | cut -d . -f $i-100) |
||||
|
_debug h "$h" |
||||
|
if [ -z "$h" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_openprovider_request "$(printf '<searchDomainRequest><domainNamePattern>%s</domainNamePattern><offset>%s</offset></searchDomainRequest>' "$(echo "$h" | cut -d . -f 1)" "$results_retrieved")" |
||||
|
|
||||
|
items="$response" |
||||
|
while true; do |
||||
|
item="$(echo "$items" | _egrep_o '<openXML>.*<\/openXML>' | sed -n 's/.*\(<domain>.*<\/domain>\).*/\1/p')" |
||||
|
_debug existing_items "$existing_items" |
||||
|
_debug results_retrieved "$results_retrieved" |
||||
|
_debug item "$item" |
||||
|
|
||||
|
if [ -z "$item" ]; then |
||||
|
break |
||||
|
fi |
||||
|
|
||||
|
items="$(echo "$items" | sed "s|${item}||")" |
||||
|
|
||||
|
results_retrieved="$(_math "$results_retrieved" + 1)" |
||||
|
|
||||
|
_domain_name="$(echo "$item" | sed -n 's/.*<domain>.*<name>\(.*\)<\/name>.*<\/domain>.*/\1/p')" |
||||
|
_domain_extension="$(echo "$item" | sed -n 's/.*<domain>.*<extension>\(.*\)<\/extension>.*<\/domain>.*/\1/p')" |
||||
|
_debug _domain_name "$_domain_name" |
||||
|
_debug _domain_extension "$_domain_extension" |
||||
|
if [ "$_domain_name.$_domain_extension" = "$h" ]; then |
||||
|
return 0 |
||||
|
fi |
||||
|
done |
||||
|
|
||||
|
total="$(echo "$response" | _egrep_o '<total>.*?<\/total>' | sed -n 's/.*<total>\(.*\)<\/total>.*/\1/p')" |
||||
|
|
||||
|
_debug total "$total" |
||||
|
|
||||
|
if [ "$results_retrieved" -eq "$total" ]; then |
||||
|
results_retrieved=0 |
||||
|
i="$(_math "$i" + 1)" |
||||
|
fi |
||||
|
done |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
_openprovider_request() { |
||||
|
request_xml=$1 |
||||
|
|
||||
|
xml_prefix='<?xml version="1.0" encoding="UTF-8"?>' |
||||
|
xml_content=$(printf '<openXML><credentials><username>%s</username><hash>%s</hash></credentials>%s</openXML>' "$OPENPROVIDER_USER" "$OPENPROVIDER_PASSWORDHASH" "$request_xml") |
||||
|
response="$(_post "$(echo "$xml_prefix$xml_content" | tr -d '\n')" "$OPENPROVIDER_API" "" "POST" "application/xml")" |
||||
|
_debug response "$response" |
||||
|
if ! _contains "$response" "<openXML><reply><code>0</code>.*</reply></openXML>"; then |
||||
|
_err "API request failed." |
||||
|
return 1 |
||||
|
fi |
||||
|
} |
||||
@ -0,0 +1,207 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
# |
||||
|
# |
||||
|
#RACKSPACE_Username="" |
||||
|
# |
||||
|
#RACKSPACE_Apikey="" |
||||
|
|
||||
|
RACKSPACE_Endpoint="https://dns.api.rackspacecloud.com/v1.0" |
||||
|
|
||||
|
# 20190213 - The name & id fields swapped in the API response; fix sed |
||||
|
# 20190101 - Duplicating file for new pull request to dev branch |
||||
|
# Original - tcocca:rackspace_dnsapi https://github.com/Neilpang/acme.sh/pull/1297 |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_rackspace_add() { |
||||
|
fulldomain="$1" |
||||
|
_debug fulldomain="$fulldomain" |
||||
|
txtvalue="$2" |
||||
|
_debug txtvalue="$txtvalue" |
||||
|
_rackspace_check_auth || return 1 |
||||
|
_rackspace_check_rootzone || return 1 |
||||
|
_info "Creating TXT record." |
||||
|
if ! _rackspace_rest POST "$RACKSPACE_Tenant/domains/$_domain_id/records" "{\"records\":[{\"name\":\"$fulldomain\",\"type\":\"TXT\",\"data\":\"$txtvalue\",\"ttl\":300}]}"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
if ! _contains "$response" "$txtvalue" >/dev/null; then |
||||
|
_err "Could not add TXT record." |
||||
|
return 1 |
||||
|
fi |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#fulldomain txtvalue |
||||
|
dns_rackspace_rm() { |
||||
|
fulldomain=$1 |
||||
|
_debug fulldomain="$fulldomain" |
||||
|
txtvalue=$2 |
||||
|
_debug txtvalue="$txtvalue" |
||||
|
_rackspace_check_auth || return 1 |
||||
|
_rackspace_check_rootzone || return 1 |
||||
|
_info "Checking for TXT record." |
||||
|
if ! _get_recordid "$_domain_id" "$fulldomain" "$txtvalue"; then |
||||
|
_err "Could not get TXT record id." |
||||
|
return 1 |
||||
|
fi |
||||
|
if [ "$_dns_record_id" = "" ]; then |
||||
|
_err "TXT record not found." |
||||
|
return 1 |
||||
|
fi |
||||
|
_info "Removing TXT record." |
||||
|
if ! _delete_txt_record "$_domain_id" "$_dns_record_id"; then |
||||
|
_err "Could not remove TXT record $_dns_record_id." |
||||
|
fi |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _domain=domain.com |
||||
|
# _domain_id=sdjkglgdfewsdfg |
||||
|
_get_root_zone() { |
||||
|
domain="$1" |
||||
|
i=2 |
||||
|
p=1 |
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
_debug h "$h" |
||||
|
if [ -z "$h" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
if ! _rackspace_rest GET "$RACKSPACE_Tenant/domains"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
if _contains "$response" "\"name\":\"$h\"" >/dev/null; then |
||||
|
# Response looks like: |
||||
|
# {"ttl":300,"accountId":12345,"id":1111111,"name":"example.com","emailAddress": ...<and so on> |
||||
|
_domain_id=$(echo "$response" | sed -n "s/^.*\"id\":\([^,]*\),\"name\":\"$h\",.*/\1/p") |
||||
|
_debug2 domain_id "$_domain_id" |
||||
|
if [ -n "$_domain_id" ]; then |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
||||
|
_domain=$h |
||||
|
return 0 |
||||
|
fi |
||||
|
return 1 |
||||
|
fi |
||||
|
p=$i |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
_get_recordid() { |
||||
|
domainid="$1" |
||||
|
fulldomain="$2" |
||||
|
txtvalue="$3" |
||||
|
if ! _rackspace_rest GET "$RACKSPACE_Tenant/domains/$domainid/records?name=$fulldomain&type=TXT"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug response "$response" |
||||
|
if ! _contains "$response" "$txtvalue"; then |
||||
|
_dns_record_id=0 |
||||
|
return 0 |
||||
|
fi |
||||
|
_dns_record_id=$(echo "$response" | tr '{' "\n" | grep "\"data\":\"$txtvalue\"" | sed -n 's/^.*"id":"\([^"]*\)".*/\1/p') |
||||
|
_debug _dns_record_id "$_dns_record_id" |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_delete_txt_record() { |
||||
|
domainid="$1" |
||||
|
_dns_record_id="$2" |
||||
|
if ! _rackspace_rest DELETE "$RACKSPACE_Tenant/domains/$domainid/records?id=$_dns_record_id"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug response "$response" |
||||
|
if ! _contains "$response" "RUNNING"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_rackspace_rest() { |
||||
|
m="$1" |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
_debug ep "$ep" |
||||
|
export _H1="Accept: application/json" |
||||
|
export _H2="X-Auth-Token: $RACKSPACE_Token" |
||||
|
export _H3="X-Project-Id: $RACKSPACE_Tenant" |
||||
|
export _H4="Content-Type: application/json" |
||||
|
if [ "$m" != "GET" ]; then |
||||
|
_debug data "$data" |
||||
|
response="$(_post "$data" "$RACKSPACE_Endpoint/$ep" "" "$m")" |
||||
|
retcode=$? |
||||
|
else |
||||
|
_info "Getting $RACKSPACE_Endpoint/$ep" |
||||
|
response="$(_get "$RACKSPACE_Endpoint/$ep")" |
||||
|
retcode=$? |
||||
|
fi |
||||
|
|
||||
|
if [ "$retcode" != "0" ]; then |
||||
|
_err "error $ep" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_rackspace_authorization() { |
||||
|
export _H1="Content-Type: application/json" |
||||
|
data="{\"auth\":{\"RAX-KSKEY:apiKeyCredentials\":{\"username\":\"$RACKSPACE_Username\",\"apiKey\":\"$RACKSPACE_Apikey\"}}}" |
||||
|
_debug data "$data" |
||||
|
response="$(_post "$data" "https://identity.api.rackspacecloud.com/v2.0/tokens" "" "POST")" |
||||
|
retcode=$? |
||||
|
_debug2 response "$response" |
||||
|
if [ "$retcode" != "0" ]; then |
||||
|
_err "Authentication failed." |
||||
|
return 1 |
||||
|
fi |
||||
|
if _contains "$response" "token"; then |
||||
|
RACKSPACE_Token="$(echo "$response" | _normalizeJson | sed -n 's/^.*"token":{.*,"id":"\([^"]*\)",".*/\1/p')" |
||||
|
RACKSPACE_Tenant="$(echo "$response" | _normalizeJson | sed -n 's/^.*"token":{.*,"id":"\([^"]*\)"}.*/\1/p')" |
||||
|
_debug RACKSPACE_Token "$RACKSPACE_Token" |
||||
|
_debug RACKSPACE_Tenant "$RACKSPACE_Tenant" |
||||
|
fi |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_rackspace_check_auth() { |
||||
|
# retrieve the rackspace creds |
||||
|
RACKSPACE_Username="${RACKSPACE_Username:-$(_readaccountconf_mutable RACKSPACE_Username)}" |
||||
|
RACKSPACE_Apikey="${RACKSPACE_Apikey:-$(_readaccountconf_mutable RACKSPACE_Apikey)}" |
||||
|
# check their vals for null |
||||
|
if [ -z "$RACKSPACE_Username" ] || [ -z "$RACKSPACE_Apikey" ]; then |
||||
|
RACKSPACE_Username="" |
||||
|
RACKSPACE_Apikey="" |
||||
|
_err "You didn't specify a Rackspace username and api key." |
||||
|
_err "Please set those values and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
# save the username and api key to the account conf file. |
||||
|
_saveaccountconf_mutable RACKSPACE_Username "$RACKSPACE_Username" |
||||
|
_saveaccountconf_mutable RACKSPACE_Apikey "$RACKSPACE_Apikey" |
||||
|
if [ -z "$RACKSPACE_Token" ]; then |
||||
|
_info "Getting authorization token." |
||||
|
if ! _rackspace_authorization; then |
||||
|
_err "Can not get token." |
||||
|
fi |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
_rackspace_check_rootzone() { |
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root_zone "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug _domain_id "$_domain_id" |
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
} |
||||
@ -0,0 +1,261 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
# -*- mode: sh; tab-width: 2; indent-tabs-mode: s; coding: utf-8 -*- |
||||
|
|
||||
|
# Schlundtech DNS API |
||||
|
# Author: mod242 |
||||
|
# Created: 2019-40-29 |
||||
|
# Completly based on the autoDNS xml api wrapper by auerswald@gmail.com |
||||
|
# |
||||
|
# export SCHLUNDTECH_USER="username" |
||||
|
# export SCHLUNDTECH_PASSWORD="password" |
||||
|
# |
||||
|
# Usage: |
||||
|
# acme.sh --issue --dns dns_schlundtech -d example.com |
||||
|
|
||||
|
SCHLUNDTECH_API="https://gateway.schlundtech.de" |
||||
|
|
||||
|
# Arguments: |
||||
|
# txtdomain |
||||
|
# txt |
||||
|
dns_schlundtech_add() { |
||||
|
fulldomain="$1" |
||||
|
txtvalue="$2" |
||||
|
|
||||
|
SCHLUNDTECH_USER="${SCHLUNDTECH_USER:-$(_readaccountconf_mutable SCHLUNDTECH_USER)}" |
||||
|
SCHLUNDTECH_PASSWORD="${SCHLUNDTECH_PASSWORD:-$(_readaccountconf_mutable SCHLUNDTECH_PASSWORD)}" |
||||
|
|
||||
|
if [ -z "$SCHLUNDTECH_USER" ] || [ -z "$SCHLUNDTECH_PASSWORD" ]; then |
||||
|
_err "You didn't specify schlundtech user and password." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_saveaccountconf_mutable SCHLUNDTECH_USER "$SCHLUNDTECH_USER" |
||||
|
_saveaccountconf_mutable SCHLUNDTECH_PASSWORD "$SCHLUNDTECH_PASSWORD" |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
|
||||
|
if ! _get_autodns_zone "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _zone "$_zone" |
||||
|
_debug _system_ns "$_system_ns" |
||||
|
|
||||
|
_info "Adding TXT record" |
||||
|
|
||||
|
autodns_response="$(_autodns_zone_update "$_zone" "$_sub_domain" "$txtvalue" "$_system_ns")" |
||||
|
|
||||
|
if [ "$?" -eq "0" ]; then |
||||
|
_info "Added, OK" |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
# Arguments: |
||||
|
# txtdomain |
||||
|
# txt |
||||
|
dns_schlundtech_rm() { |
||||
|
fulldomain="$1" |
||||
|
txtvalue="$2" |
||||
|
|
||||
|
SCHLUNDTECH_USER="${SCHLUNDTECH_USER:-$(_readaccountconf_mutable SCHLUNDTECH_USER)}" |
||||
|
SCHLUNDTECH_PASSWORD="${SCHLUNDTECH_PASSWORD:-$(_readaccountconf_mutable SCHLUNDTECH_PASSWORD)}" |
||||
|
|
||||
|
if [ -z "$SCHLUNDTECH_USER" ] || [ -z "$SCHLUNDTECH_PASSWORD" ]; then |
||||
|
_err "You didn't specify schlundtech user and password." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
|
||||
|
if ! _get_autodns_zone "$fulldomain"; then |
||||
|
_err "zone not found" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _zone "$_zone" |
||||
|
_debug _system_ns "$_system_ns" |
||||
|
|
||||
|
_info "Delete TXT record" |
||||
|
|
||||
|
autodns_response="$(_autodns_zone_cleanup "$_zone" "$_sub_domain" "$txtvalue" "$_system_ns")" |
||||
|
|
||||
|
if [ "$?" -eq "0" ]; then |
||||
|
_info "Deleted, OK" |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
|
||||
|
# Arguments: |
||||
|
# fulldomain |
||||
|
# Returns: |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _zone=domain.com |
||||
|
# _system_ns |
||||
|
_get_autodns_zone() { |
||||
|
domain="$1" |
||||
|
|
||||
|
i=2 |
||||
|
p=1 |
||||
|
|
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
_debug h "$h" |
||||
|
|
||||
|
if [ -z "$h" ]; then |
||||
|
# not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
autodns_response="$(_autodns_zone_inquire "$h")" |
||||
|
|
||||
|
if [ "$?" -ne "0" ]; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$autodns_response" "<summary>1</summary>" >/dev/null; then |
||||
|
_zone="$(echo "$autodns_response" | _egrep_o '<name>[^<]*</name>' | cut -d '>' -f 2 | cut -d '<' -f 1)" |
||||
|
_system_ns="$(echo "$autodns_response" | _egrep_o '<system_ns>[^<]*</system_ns>' | cut -d '>' -f 2 | cut -d '<' -f 1)" |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
p=$i |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
_build_request_auth_xml() { |
||||
|
printf "<auth> |
||||
|
<user>%s</user> |
||||
|
<password>%s</password> |
||||
|
<context>10</context> |
||||
|
</auth>" "$SCHLUNDTECH_USER" "$SCHLUNDTECH_PASSWORD" |
||||
|
} |
||||
|
|
||||
|
# Arguments: |
||||
|
# zone |
||||
|
_build_zone_inquire_xml() { |
||||
|
printf "<?xml version=\"1.0\" encoding=\"UTF-8\"?> |
||||
|
<request> |
||||
|
%s |
||||
|
<task> |
||||
|
<code>0205</code> |
||||
|
<view> |
||||
|
<children>1</children> |
||||
|
<limit>1</limit> |
||||
|
</view> |
||||
|
<where> |
||||
|
<key>name</key> |
||||
|
<operator>eq</operator> |
||||
|
<value>%s</value> |
||||
|
</where> |
||||
|
</task> |
||||
|
</request>" "$(_build_request_auth_xml)" "$1" |
||||
|
} |
||||
|
|
||||
|
# Arguments: |
||||
|
# zone |
||||
|
# subdomain |
||||
|
# txtvalue |
||||
|
# system_ns |
||||
|
_build_zone_update_xml() { |
||||
|
printf "<?xml version=\"1.0\" encoding=\"UTF-8\"?> |
||||
|
<request> |
||||
|
%s |
||||
|
<task> |
||||
|
<code>0202001</code> |
||||
|
<default> |
||||
|
<rr_add> |
||||
|
<name>%s</name> |
||||
|
<ttl>600</ttl> |
||||
|
<type>TXT</type> |
||||
|
<value>%s</value> |
||||
|
</rr_add> |
||||
|
</default> |
||||
|
<zone> |
||||
|
<name>%s</name> |
||||
|
<system_ns>%s</system_ns> |
||||
|
</zone> |
||||
|
</task> |
||||
|
</request>" "$(_build_request_auth_xml)" "$2" "$3" "$1" "$4" |
||||
|
} |
||||
|
|
||||
|
# Arguments: |
||||
|
# zone |
||||
|
_autodns_zone_inquire() { |
||||
|
request_data="$(_build_zone_inquire_xml "$1")" |
||||
|
autodns_response="$(_autodns_api_call "$request_data")" |
||||
|
ret="$?" |
||||
|
|
||||
|
printf "%s" "$autodns_response" |
||||
|
return "$ret" |
||||
|
} |
||||
|
|
||||
|
# Arguments: |
||||
|
# zone |
||||
|
# subdomain |
||||
|
# txtvalue |
||||
|
# system_ns |
||||
|
_autodns_zone_update() { |
||||
|
request_data="$(_build_zone_update_xml "$1" "$2" "$3" "$4")" |
||||
|
autodns_response="$(_autodns_api_call "$request_data")" |
||||
|
ret="$?" |
||||
|
|
||||
|
printf "%s" "$autodns_response" |
||||
|
return "$ret" |
||||
|
} |
||||
|
|
||||
|
# Arguments: |
||||
|
# zone |
||||
|
# subdomain |
||||
|
# txtvalue |
||||
|
# system_ns |
||||
|
_autodns_zone_cleanup() { |
||||
|
request_data="$(_build_zone_update_xml "$1" "$2" "$3" "$4")" |
||||
|
# replace 'rr_add>' with 'rr_rem>' in request_data |
||||
|
request_data="$(printf -- "%s" "$request_data" | sed 's/rr_add>/rr_rem>/g')" |
||||
|
autodns_response="$(_autodns_api_call "$request_data")" |
||||
|
ret="$?" |
||||
|
|
||||
|
printf "%s" "$autodns_response" |
||||
|
return "$ret" |
||||
|
} |
||||
|
|
||||
|
# Arguments: |
||||
|
# request_data |
||||
|
_autodns_api_call() { |
||||
|
request_data="$1" |
||||
|
|
||||
|
_debug request_data "$request_data" |
||||
|
|
||||
|
autodns_response="$(_post "$request_data" "$SCHLUNDTECH_API")" |
||||
|
ret="$?" |
||||
|
|
||||
|
_debug autodns_response "$autodns_response" |
||||
|
|
||||
|
if [ "$ret" -ne "0" ]; then |
||||
|
_err "error" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$autodns_response" "<type>success</type>" >/dev/null; then |
||||
|
_info "success" |
||||
|
printf "%s" "$autodns_response" |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
@ -0,0 +1,164 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# |
||||
|
# ULTRA_USR="your_user_goes_here" |
||||
|
# |
||||
|
# ULTRA_PWD="some_password_goes_here" |
||||
|
|
||||
|
ULTRA_API="https://restapi.ultradns.com/v2/" |
||||
|
|
||||
|
#Usage: add _acme-challenge.www.domain.com "some_long_string_of_characters_go_here_from_lets_encrypt" |
||||
|
dns_ultra_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
export txtvalue |
||||
|
ULTRA_USR="${ULTRA_USR:-$(_readaccountconf_mutable ULTRA_USR)}" |
||||
|
ULTRA_PWD="${ULTRA_PWD:-$(_readaccountconf_mutable ULTRA_PWD)}" |
||||
|
if [ -z "$ULTRA_USR" ] || [ -z "$ULTRA_PWD" ]; then |
||||
|
ULTRA_USR="" |
||||
|
ULTRA_PWD="" |
||||
|
_err "You didn't specify an UltraDNS username and password yet" |
||||
|
return 1 |
||||
|
fi |
||||
|
# save the username and password to the account conf file. |
||||
|
_saveaccountconf_mutable ULTRA_USR "$ULTRA_USR" |
||||
|
_saveaccountconf_mutable ULTRA_PWD "$ULTRA_PWD" |
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug _domain_id "${_domain_id}" |
||||
|
_debug _sub_domain "${_sub_domain}" |
||||
|
_debug _domain "${_domain}" |
||||
|
_debug "Getting txt records" |
||||
|
_ultra_rest GET "zones/${_domain_id}/rrsets/TXT?q=value:${fulldomain}" |
||||
|
if printf "%s" "$response" | grep \"totalCount\" >/dev/null; then |
||||
|
_err "Error, it would appear that this record already exists. Please review existing TXT records for this domain." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "Adding record" |
||||
|
if _ultra_rest POST "zones/$_domain_id/rrsets/TXT/${_sub_domain}" '{"ttl":300,"rdata":["'"${txtvalue}"'"]}'; then |
||||
|
if _contains "$response" "Successful"; then |
||||
|
_info "Added, OK" |
||||
|
return 0 |
||||
|
elif _contains "$response" "Resource Record of type 16 with these attributes already exists"; then |
||||
|
_info "Already exists, OK" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Add txt record error." |
||||
|
return 1 |
||||
|
fi |
||||
|
fi |
||||
|
_err "Add txt record error." |
||||
|
|
||||
|
} |
||||
|
|
||||
|
dns_ultra_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
export txtvalue |
||||
|
ULTRA_USR="${ULTRA_USR:-$(_readaccountconf_mutable ULTRA_USR)}" |
||||
|
ULTRA_PWD="${ULTRA_PWD:-$(_readaccountconf_mutable ULTRA_PWD)}" |
||||
|
if [ -z "$ULTRA_USR" ] || [ -z "$ULTRA_PWD" ]; then |
||||
|
ULTRA_USR="" |
||||
|
ULTRA_PWD="" |
||||
|
_err "You didn't specify an UltraDNS username and password yet" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug _domain_id "${_domain_id}" |
||||
|
_debug _sub_domain "${_sub_domain}" |
||||
|
_debug _domain "${domain}" |
||||
|
|
||||
|
_debug "Getting TXT records" |
||||
|
_ultra_rest GET "zones/${_domain_id}/rrsets?q=kind:RECORDS+owner:${_sub_domain}" |
||||
|
|
||||
|
if ! printf "%s" "$response" | grep \"resultInfo\" >/dev/null; then |
||||
|
_err "There was an error in obtaining the resource records for ${_domain_id}" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
count=$(echo "$response" | _egrep_o "\"returnedCount\":[^,]*" | cut -d: -f2 | cut -d'}' -f1) |
||||
|
_debug count "${count}" |
||||
|
if [ "${count}" = "" ]; then |
||||
|
_info "Text record is not present, will not delete anything." |
||||
|
else |
||||
|
if ! _ultra_rest DELETE "zones/$_domain_id/rrsets/TXT/${_sub_domain}" '{"ttl":300,"rdata":["'"${txtvalue}"'"]}'; then |
||||
|
_err "Deleting the record did not succeed, please verify/check." |
||||
|
return 1 |
||||
|
fi |
||||
|
_contains "$response" "" |
||||
|
fi |
||||
|
|
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _domain=domain.com |
||||
|
# _domain_id=sdjkglgdfewsdfg |
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
p=1 |
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
_debug h "$h" |
||||
|
_debug response "$response" |
||||
|
if [ -z "$h" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
if ! _ultra_rest GET "zones"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
if _contains "${response}" "${h}." >/dev/null; then |
||||
|
_domain_id=$(echo "$response" | _egrep_o "${h}") |
||||
|
if [ "$_domain_id" ]; then |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
||||
|
_domain="${h}" |
||||
|
_debug sub_domain "${_sub_domain}" |
||||
|
_debug domain "${_domain}" |
||||
|
return 0 |
||||
|
fi |
||||
|
return 1 |
||||
|
fi |
||||
|
p=$i |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
_ultra_rest() { |
||||
|
m=$1 |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
_debug "$ep" |
||||
|
_debug TOKEN "${AUTH_TOKEN}" |
||||
|
|
||||
|
_ultra_login |
||||
|
export _H1="Content-Type: application/json" |
||||
|
export _H2="Authorization: Bearer ${AUTH_TOKEN}" |
||||
|
|
||||
|
if [ "$m" != "GET" ]; then |
||||
|
_debug data "${data}" |
||||
|
response="$(_post "${data}" "${ULTRA_API}"/"${ep}" "" "${m}")" |
||||
|
else |
||||
|
response="$(_get "$ULTRA_API/$ep")" |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
_ultra_login() { |
||||
|
export _H1="" |
||||
|
export _H2="" |
||||
|
AUTH_TOKEN=$(_post "grant_type=password&username=${ULTRA_USR}&password=${ULTRA_PWD}" "${ULTRA_API}authorization/token" | cut -d, -f3 | cut -d\" -f4) |
||||
|
export AUTH_TOKEN |
||||
|
} |
||||
@ -0,0 +1,149 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# Zone.ee dns API |
||||
|
# https://help.zone.eu/kb/zoneid-api-v2/ |
||||
|
# required ZONE_Username and ZONE_Key |
||||
|
|
||||
|
ZONE_Api="https://api.zone.eu/v2" |
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: dns_zone_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_zone_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
_info "Using zone.ee dns api" |
||||
|
_debug fulldomain "$fulldomain" |
||||
|
_debug txtvalue "$txtvalue" |
||||
|
ZONE_Username="${ZONE_Username:-$(_readaccountconf_mutable ZONE_Username)}" |
||||
|
ZONE_Key="${ZONE_Key:-$(_readaccountconf_mutable ZONE_Key)}" |
||||
|
if [ -z "$ZONE_Username" ] || [ -z "$ZONE_Key" ]; then |
||||
|
ZONE_Username="" |
||||
|
ZONE_Key="" |
||||
|
_err "Zone api key and username must be present." |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable ZONE_Username "$ZONE_Username" |
||||
|
_saveaccountconf_mutable ZONE_Key "$ZONE_Key" |
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "Adding txt record" |
||||
|
|
||||
|
if _zone_rest POST "dns/${_domain}/txt" "{\"name\": \"$fulldomain\", \"destination\": \"$txtvalue\"}"; then |
||||
|
if printf -- "%s" "$response" | grep "$fulldomain" >/dev/null; then |
||||
|
_info "Added, OK" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Adding txt record error." |
||||
|
return 1 |
||||
|
fi |
||||
|
else |
||||
|
_err "Adding txt record error." |
||||
|
fi |
||||
|
} |
||||
|
|
||||
|
#Usage: fulldomain txtvalue |
||||
|
#Remove the txt record after validation. |
||||
|
dns_zone_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
_info "Using zone.ee dns api" |
||||
|
_debug fulldomain "$fulldomain" |
||||
|
_debug txtvalue "$txtvalue" |
||||
|
ZONE_Username="${ZONE_Username:-$(_readaccountconf_mutable ZONE_Username)}" |
||||
|
ZONE_Key="${ZONE_Key:-$(_readaccountconf_mutable ZONE_Key)}" |
||||
|
if [ -z "$ZONE_Username" ] || [ -z "$ZONE_Key" ]; then |
||||
|
ZONE_Username="" |
||||
|
ZONE_Key="" |
||||
|
_err "Zone api key and username must be present." |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable ZONE_Username "$ZONE_Username" |
||||
|
_saveaccountconf_mutable ZONE_Key "$ZONE_Key" |
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "Getting txt records" |
||||
|
_debug _domain "$_domain" |
||||
|
|
||||
|
_zone_rest GET "dns/${_domain}/txt" |
||||
|
|
||||
|
if printf "%s" "$response" | grep \"error\" >/dev/null; then |
||||
|
_err "Error" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
count=$(printf "%s\n" "$response" | _egrep_o "\"name\":\"$fulldomain\"" | wc -l) |
||||
|
_debug count "$count" |
||||
|
if [ "$count" = "0" ]; then |
||||
|
_info "Nothing to remove." |
||||
|
else |
||||
|
record_id=$(printf "%s\n" "$response" | _egrep_o "\"id\":\"[^\"]*\",\"resource_url\":\"[^\"]*\",\"name\":\"$fulldomain\"," | cut -d : -f2 | cut -d , -f1 | tr -d \" | _head_n 1) |
||||
|
if [ -z "$record_id" ]; then |
||||
|
_err "No id found to remove." |
||||
|
return 1 |
||||
|
fi |
||||
|
if ! _zone_rest DELETE "dns/${_domain}/txt/$record_id"; then |
||||
|
_err "Record deleting error." |
||||
|
return 1 |
||||
|
fi |
||||
|
_info "Record deleted" |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
|
||||
|
_zone_rest() { |
||||
|
m=$1 |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
_debug "$ep" |
||||
|
|
||||
|
realm="$(printf "%s" "$ZONE_Username:$ZONE_Key" | _base64)" |
||||
|
|
||||
|
export _H1="Authorization: Basic $realm" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
|
||||
|
if [ "$m" != "GET" ]; then |
||||
|
_debug data "$data" |
||||
|
response="$(_post "$data" "$ZONE_Api/$ep" "" "$m")" |
||||
|
else |
||||
|
response="$(_get "$ZONE_Api/$ep")" |
||||
|
fi |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "error $ep" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
|
|
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
||||
|
_debug h "$h" |
||||
|
if [ -z "$h" ]; then |
||||
|
return 1 |
||||
|
fi |
||||
|
if ! _zone_rest GET "dns/$h/a"; then |
||||
|
return 1 |
||||
|
fi |
||||
|
if _contains "$response" "\"name\":\"$h\"" >/dev/null; then |
||||
|
_domain=$h |
||||
|
return 0 |
||||
|
fi |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
return 0 |
||||
|
} |
||||
@ -0,0 +1,15 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# support local mail app |
||||
|
|
||||
|
mail_send() { |
||||
|
_subject="$1" |
||||
|
_content="$2" |
||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped |
||||
|
_debug "_subject" "$_subject" |
||||
|
_debug "_content" "$_content" |
||||
|
_debug "_statusCode" "$_statusCode" |
||||
|
|
||||
|
_err "Not implemented yet." |
||||
|
return 1 |
||||
|
} |
||||
@ -0,0 +1,131 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#Support mailgun.com api |
||||
|
|
||||
|
#MAILGUN_API_KEY="xxxx" |
||||
|
#MAILGUN_TO="yyyy@gmail.com" |
||||
|
|
||||
|
#MAILGUN_REGION="us|eu" #optional, use "us" as default |
||||
|
#MAILGUN_API_DOMAIN="xxxxxx.com" #optional, use the default sandbox domain |
||||
|
#MAILGUN_FROM="xxx@xxxxx.com" #optional, use the default sendbox account |
||||
|
|
||||
|
_MAILGUN_BASE_US="https://api.mailgun.net/v3" |
||||
|
_MAILGUN_BASE_EU="https://api.eu.mailgun.net/v3" |
||||
|
|
||||
|
_MAILGUN_BASE="$_MAILGUN_BASE_US" |
||||
|
|
||||
|
# subject content statusCode |
||||
|
mailgun_send() { |
||||
|
_subject="$1" |
||||
|
_content="$2" |
||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped |
||||
|
_debug "_statusCode" "$_statusCode" |
||||
|
|
||||
|
MAILGUN_API_KEY="${MAILGUN_API_KEY:-$(_readaccountconf_mutable MAILGUN_API_KEY)}" |
||||
|
if [ -z "$MAILGUN_API_KEY" ]; then |
||||
|
MAILGUN_API_KEY="" |
||||
|
_err "You didn't specify a mailgun api key MAILGUN_API_KEY yet ." |
||||
|
_err "You can get yours from here https://mailgun.com" |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable MAILGUN_API_KEY "$MAILGUN_API_KEY" |
||||
|
|
||||
|
MAILGUN_REGION="${MAILGUN_REGION:-$(_readaccountconf_mutable MAILGUN_REGION)}" |
||||
|
if [ -z "$MAILGUN_REGION" ]; then |
||||
|
MAILGUN_REGION="" |
||||
|
_debug "The MAILGUN_REGION is not set, so use the default us region." |
||||
|
_MAILGUN_BASE="$_MAILGUN_BASE_US" |
||||
|
else |
||||
|
MAILGUN_REGION="$(echo "$MAILGUN_REGION" | _lower_case)" |
||||
|
_saveaccountconf_mutable MAILGUN_REGION "$MAILGUN_REGION" |
||||
|
if [ "$MAILGUN_REGION" = "us" ]; then |
||||
|
_MAILGUN_BASE="$_MAILGUN_BASE_US" |
||||
|
else |
||||
|
_MAILGUN_BASE="$_MAILGUN_BASE_EU" |
||||
|
fi |
||||
|
fi |
||||
|
_debug _MAILGUN_BASE "$_MAILGUN_BASE" |
||||
|
MAILGUN_TO="${MAILGUN_TO:-$(_readaccountconf_mutable MAILGUN_TO)}" |
||||
|
if [ -z "$MAILGUN_TO" ]; then |
||||
|
MAILGUN_TO="" |
||||
|
_err "You didn't specify an email to MAILGUN_TO receive messages." |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable MAILGUN_TO "$MAILGUN_TO" |
||||
|
|
||||
|
MAILGUN_API_DOMAIN="${MAILGUN_API_DOMAIN:-$(_readaccountconf_mutable MAILGUN_API_DOMAIN)}" |
||||
|
if [ -z "$MAILGUN_API_DOMAIN" ]; then |
||||
|
_info "The MAILGUN_API_DOMAIN is not set, try to get the default sending sandbox domain for you." |
||||
|
if ! _mailgun_rest GET "/domains"; then |
||||
|
_err "Can not get sandbox domain." |
||||
|
return 1 |
||||
|
fi |
||||
|
_sendboxDomain="$(echo "$response" | _egrep_o '"name": *"sandbox.*.mailgun.org"' | cut -d : -f 2 | tr -d '" ')" |
||||
|
_debug _sendboxDomain "$_sendboxDomain" |
||||
|
MAILGUN_API_DOMAIN="$_sendboxDomain" |
||||
|
if [ -z "$MAILGUN_API_DOMAIN" ]; then |
||||
|
_err "Can not get sandbox domain for MAILGUN_API_DOMAIN" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "$(__green "When using sandbox domain, you must verify your email first.")" |
||||
|
#todo: add recepient |
||||
|
fi |
||||
|
if [ -z "$MAILGUN_API_DOMAIN" ]; then |
||||
|
_err "Can not get MAILGUN_API_DOMAIN" |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable MAILGUN_API_DOMAIN "$MAILGUN_API_DOMAIN" |
||||
|
|
||||
|
MAILGUN_FROM="${MAILGUN_FROM:-$(_readaccountconf_mutable MAILGUN_FROM)}" |
||||
|
if [ -z "$MAILGUN_FROM" ]; then |
||||
|
MAILGUN_FROM="$PROJECT_NAME@$MAILGUN_API_DOMAIN" |
||||
|
_info "The MAILGUN_FROM is not set, so use the default value: $MAILGUN_FROM" |
||||
|
else |
||||
|
_debug MAILGUN_FROM "$MAILGUN_FROM" |
||||
|
_saveaccountconf_mutable MAILGUN_FROM "$MAILGUN_FROM" |
||||
|
fi |
||||
|
|
||||
|
#send from url |
||||
|
_msg="/$MAILGUN_API_DOMAIN/messages?from=$(printf "%s" "$MAILGUN_FROM" | _url_encode)&to=$(printf "%s" "$MAILGUN_TO" | _url_encode)&subject=$(printf "%s" "$_subject" | _url_encode)&text=$(printf "%s" "$_content" | _url_encode)" |
||||
|
_debug "_msg" "$_msg" |
||||
|
_mailgun_rest POST "$_msg" |
||||
|
if _contains "$response" "Queued. Thank you."; then |
||||
|
_debug "mailgun send success." |
||||
|
return 0 |
||||
|
else |
||||
|
_err "mailgun send error" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
} |
||||
|
|
||||
|
# method uri data |
||||
|
_mailgun_rest() { |
||||
|
_method="$1" |
||||
|
_mguri="$2" |
||||
|
_mgdata="$3" |
||||
|
_debug _mguri "$_mguri" |
||||
|
_mgurl="$_MAILGUN_BASE$_mguri" |
||||
|
_debug _mgurl "$_mgurl" |
||||
|
|
||||
|
_auth="$(printf "%s" "api:$MAILGUN_API_KEY" | _base64)" |
||||
|
export _H1="Authorization: Basic $_auth" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
|
||||
|
if [ "$_method" = "GET" ]; then |
||||
|
response="$(_get "$_mgurl")" |
||||
|
else |
||||
|
_debug _mgdata "$_mgdata" |
||||
|
response="$(_post "$_mgdata" "$_mgurl" "" "$_method")" |
||||
|
fi |
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "Error: $_mguri" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
|
||||
|
} |
||||
@ -0,0 +1,15 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# support pop |
||||
|
|
||||
|
pop_send() { |
||||
|
_subject="$1" |
||||
|
_content="$2" |
||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped |
||||
|
_debug "_subject" "$_subject" |
||||
|
_debug "_content" "$_content" |
||||
|
_debug "_statusCode" "$_statusCode" |
||||
|
|
||||
|
_err "Not implemented yet." |
||||
|
return 1 |
||||
|
} |
||||
@ -0,0 +1,56 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#Support SENDGRID.com api |
||||
|
|
||||
|
#SENDGRID_API_KEY="" |
||||
|
#SENDGRID_TO="xxxx@xxx.com" |
||||
|
#SENDGRID_FROM="xxxx@cccc.com" |
||||
|
|
||||
|
sendgrid_send() { |
||||
|
_subject="$1" |
||||
|
_content="$2" |
||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped |
||||
|
_debug "_statusCode" "$_statusCode" |
||||
|
|
||||
|
SENDGRID_API_KEY="${SENDGRID_API_KEY:-$(_readaccountconf_mutable SENDGRID_API_KEY)}" |
||||
|
if [ -z "$SENDGRID_API_KEY" ]; then |
||||
|
SENDGRID_API_KEY="" |
||||
|
_err "You didn't specify a sendgrid api key SENDGRID_API_KEY yet ." |
||||
|
_err "You can get yours from here https://sendgrid.com" |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable SENDGRID_API_KEY "$SENDGRID_API_KEY" |
||||
|
|
||||
|
SENDGRID_TO="${SENDGRID_TO:-$(_readaccountconf_mutable SENDGRID_TO)}" |
||||
|
if [ -z "$SENDGRID_TO" ]; then |
||||
|
SENDGRID_TO="" |
||||
|
_err "You didn't specify an email to SENDGRID_TO receive messages." |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable SENDGRID_TO "$SENDGRID_TO" |
||||
|
|
||||
|
SENDGRID_FROM="${SENDGRID_FROM:-$(_readaccountconf_mutable SENDGRID_FROM)}" |
||||
|
if [ -z "$SENDGRID_FROM" ]; then |
||||
|
SENDGRID_FROM="" |
||||
|
_err "You didn't specify an email to SENDGRID_FROM receive messages." |
||||
|
return 1 |
||||
|
fi |
||||
|
_saveaccountconf_mutable SENDGRID_FROM "$SENDGRID_FROM" |
||||
|
|
||||
|
export _H1="Authorization: Bearer $SENDGRID_API_KEY" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
|
||||
|
_content="$(echo "$_content" | _json_encode)" |
||||
|
_data="{\"personalizations\": [{\"to\": [{\"email\": \"$SENDGRID_TO\"}]}],\"from\": {\"email\": \"$SENDGRID_FROM\"},\"subject\": \"$_subject\",\"content\": [{\"type\": \"text/plain\", \"value\": \"$_content\"}]}" |
||||
|
response="" #just make shellcheck happy |
||||
|
if _post "$_data" "https://api.sendgrid.com/v3/mail/send"; then |
||||
|
if [ -z "$response" ]; then |
||||
|
_info "sendgrid send sccess." |
||||
|
return 0 |
||||
|
fi |
||||
|
fi |
||||
|
_err "sendgrid send error." |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
|
||||
|
} |
||||
@ -0,0 +1,15 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
# support smtp |
||||
|
|
||||
|
smtp_send() { |
||||
|
_subject="$1" |
||||
|
_content="$2" |
||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped |
||||
|
_debug "_subject" "$_subject" |
||||
|
_debug "_content" "$_content" |
||||
|
_debug "_statusCode" "$_statusCode" |
||||
|
|
||||
|
_err "Not implemented yet." |
||||
|
return 1 |
||||
|
} |
||||
Write
Preview
Loading…
Cancel
Save
Reference in new issue