Browse Source
Support Ovh domain api (#273)
Support Ovh domain api (#273)
* support ovh * fix success link * fix OVH issues. * v2.4.3 Support OVH domain apipull/276/head
neil
8 years ago
committed by
GitHub
GitHub
2 changed files with 317 additions and 15 deletions
-
30acme.sh
-
302dnsapi/dns_ovh.sh
@ -0,0 +1,302 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
|
|||
#Applcation Key |
|||
#OVH_AK="sdfsdfsdfljlbjkljlkjsdfoiwje" |
|||
# |
|||
#Application Secret |
|||
#OVH_AS="sdfsafsdfsdfdsfsdfsa" |
|||
# |
|||
#Consumer Key |
|||
#OVH_CK="sdfsdfsdfsdfsdfdsf" |
|||
|
|||
|
|||
#OVH_END_POINT=ovh-eu |
|||
|
|||
|
|||
#'ovh-eu' |
|||
OVH_EU='https://eu.api.ovh.com/1.0' |
|||
|
|||
#'ovh-ca': |
|||
OVH_CA='https://ca.api.ovh.com/1.0' |
|||
|
|||
#'kimsufi-eu' |
|||
KSF_EU='https://eu.api.kimsufi.com/1.0' |
|||
|
|||
#'kimsufi-ca' |
|||
KSF_CA='https://ca.api.kimsufi.com/1.0' |
|||
|
|||
#'soyoustart-eu' |
|||
SYS_EU='https://eu.api.soyoustart.com/1.0' |
|||
|
|||
#'soyoustart-ca' |
|||
SYS_CA='https://ca.api.soyoustart.com/1.0' |
|||
|
|||
#'runabove-ca' |
|||
RAV_CA='https://api.runabove.com/1.0' |
|||
|
|||
|
|||
wiki="https://github.com/Neilpang/acme.sh/wiki/How-to-use-OVH-domain-api" |
|||
|
|||
ovh_success="https://github.com/Neilpang/acme.sh/wiki/OVH-Success" |
|||
|
|||
|
|||
|
|||
_ovh_get_api() { |
|||
_ogaep="$1" |
|||
|
|||
case "${_ogaep}" in |
|||
|
|||
ovh-eu|ovheu) |
|||
printf "%s" $OVH_EU |
|||
return |
|||
;; |
|||
ovh-ca|ovhca) |
|||
printf "%s" $OVH_CA |
|||
return |
|||
;; |
|||
kimsufi-eu|kimsufieu) |
|||
printf "%s" $KSF_EU |
|||
return |
|||
;; |
|||
kimsufi-ca|kimsufica) |
|||
printf "%s" $KSF_CA |
|||
return |
|||
;; |
|||
soyoustart-eu|soyoustarteu) |
|||
printf "%s" $SYS_EU |
|||
return |
|||
;; |
|||
soyoustart-ca|soyoustartca) |
|||
printf "%s" $SYS_CA |
|||
return |
|||
;; |
|||
runabove-ca|runaboveca) |
|||
printf "%s" $RAV_CA |
|||
return |
|||
;; |
|||
|
|||
|
|||
*) |
|||
_err "Unknown parameter : $1" |
|||
return 1 |
|||
;; |
|||
esac |
|||
} |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_ovh_add(){ |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
if [ -z "$OVH_AK" ] || [ -z "$OVH_AS" ] ; then |
|||
_err "You don't specify OVH application key and application secret yet." |
|||
_err "Please create you key and try again." |
|||
return 1 |
|||
fi |
|||
|
|||
#save the api key and email to the account conf file. |
|||
_saveaccountconf OVH_AK "$OVH_AK" |
|||
_saveaccountconf OVH_AS "$OVH_AS" |
|||
|
|||
|
|||
if [ -z "$OVH_END_POINT" ] ; then |
|||
OVH_END_POINT="ovh-eu" |
|||
fi |
|||
_info "Using OVH endpoint: $OVH_END_POINT" |
|||
if [ "$OVH_END_POINT" != "ovh-eu" ] ; then |
|||
_saveaccountconf OVH_END_POINT "$OVH_END_POINT" |
|||
fi |
|||
|
|||
OVH_API="$(_ovh_get_api $OVH_END_POINT )" |
|||
_debug OVH_API "$OVH_API" |
|||
|
|||
if [ -z "$OVH_CK" ] ; then |
|||
_info "OVH consumer key is empty, Let's get one:" |
|||
if ! _ovh_authentication ; then |
|||
_err "Can not get consumer key." |
|||
fi |
|||
#return and wait for retry. |
|||
return 1; |
|||
fi |
|||
|
|||
|
|||
_info "Checking authentication" |
|||
|
|||
response="$(_ovh_rest GET "domain/")" |
|||
if _contains "$response" "INVALID_CREDENTIAL" ; then |
|||
_err "The consumer key is invalid: $OVH_CK" |
|||
_err "Please retry to create a new one." |
|||
_clearaccountconf OVH_CK |
|||
return 1 |
|||
fi |
|||
_info "Consumer key is ok." |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root $fulldomain ; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
_debug _domain_id "$_domain_id" |
|||
_debug _sub_domain "$_sub_domain" |
|||
_debug _domain "$_domain" |
|||
|
|||
_debug "Getting txt records" |
|||
_ovh_rest GET "domain/zone/$_domain/record?fieldType=TXT&subDomain=$_sub_domain" |
|||
|
|||
if _contains "$response" '\[\]' || _contains "$response" "This service does not exist" ; then |
|||
_info "Adding record" |
|||
if _ovh_rest POST "domain/zone/$_domain/record" "{\"fieldType\":\"TXT\",\"subDomain\":\"$_sub_domain\",\"target\":\"$txtvalue\",\"ttl\":60}"; then |
|||
if _contains "$response" "$txtvalue" ; then |
|||
_ovh_rest POST "domain/zone/$_domain/refresh" |
|||
_debug "Refresh:$response" |
|||
_info "Added, sleeping 10 seconds" |
|||
sleep 10 |
|||
return 0 |
|||
fi |
|||
fi |
|||
_err "Add txt record error." |
|||
else |
|||
_info "Updating record" |
|||
record_id=$(printf "%s" "$response" | tr -d "[]" | cut -d , -f 1) |
|||
if [ -z "$record_id" ] ; then |
|||
_err "Can not get record id." |
|||
return 1 |
|||
fi |
|||
_debug "record_id" $record_id |
|||
|
|||
if _ovh_rest PUT "domain/zone/$_domain/record/$record_id" "{\"target\":\"$txtvalue\",\"subDomain\":\"$_sub_domain\",\"ttl\":60}" ; then |
|||
if _contains "$response" "null" ; then |
|||
_ovh_rest POST "domain/zone/$_domain/refresh" |
|||
_debug "Refresh:$response" |
|||
_info "Updated, sleeping 10 seconds" |
|||
sleep 10 |
|||
return 0; |
|||
fi |
|||
fi |
|||
_err "Update error" |
|||
return 1 |
|||
fi |
|||
|
|||
} |
|||
|
|||
|
|||
#################### Private functions bellow ################################## |
|||
|
|||
_ovh_authentication() { |
|||
|
|||
_H1="X-Ovh-Application: $OVH_AK" |
|||
_H2="Content-type: application/json" |
|||
_H3="" |
|||
_H4="" |
|||
|
|||
_ovhdata='{"accessRules": [{"method": "GET","path": "/*"},{"method": "POST","path": "/*"},{"method": "PUT","path": "/*"},{"method": "DELETE","path": "/*"}],"redirection":"'$ovh_success'"}' |
|||
|
|||
response="$(_post "$_ovhdata" "$OVH_API/auth/credential")" |
|||
_debug3 response "$response" |
|||
validationUrl="$(echo "$response" | _egrep_o "validationUrl\":\"[^\"]*\"" | _egrep_o "http.*\"" | tr -d '"')" |
|||
if [ -z "$validationUrl" ] ; then |
|||
_err "Unable to get validationUrl" |
|||
return 1 |
|||
fi |
|||
_debug validationUrl "$validationUrl" |
|||
|
|||
consumerKey="$(echo "$response" | _egrep_o "consumerKey\":\"[^\"]*\"" | cut -d : -f 2 | tr -d '"')" |
|||
if [ -z "$consumerKey" ] ; then |
|||
_err "Unable to get consumerKey" |
|||
return 1 |
|||
fi |
|||
_debug consumerKey "$consumerKey" |
|||
|
|||
OVH_CK="$consumerKey" |
|||
_saveaccountconf OVH_CK "$OVH_CK" |
|||
|
|||
_info "Please open this link to do authentication: $(__green "$validationUrl" )" |
|||
|
|||
_info "Here is a guide for you: $(__green "$wiki" )" |
|||
_info "Please retry after the authentication is done." |
|||
|
|||
} |
|||
|
|||
|
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _sub_domain=_acme-challenge.www |
|||
# _domain=domain.com |
|||
# _domain_id=sdjkglgdfewsdfg |
|||
_get_root() { |
|||
domain=$1 |
|||
i=2 |
|||
p=1 |
|||
while [ '1' ] ; do |
|||
h=$(printf $domain | cut -d . -f $i-100) |
|||
if [ -z "$h" ] ; then |
|||
#not valid |
|||
return 1; |
|||
fi |
|||
|
|||
if ! _ovh_rest GET "domain/zone/$h" ; then |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _contains "$response" "This service does not exist" >/dev/null ; then |
|||
_sub_domain=$(printf $domain | cut -d . -f 1-$p) |
|||
_domain=$h |
|||
return 0 |
|||
fi |
|||
p=$i |
|||
i=$(expr $i + 1) |
|||
done |
|||
return 1 |
|||
} |
|||
|
|||
_ovh_timestamp() { |
|||
_H1="" |
|||
_H2="" |
|||
_H3="" |
|||
_H4="" |
|||
_H5="" |
|||
_get "$OVH_API/auth/time" "" 30 |
|||
} |
|||
|
|||
_ovh_rest() { |
|||
m=$1 |
|||
ep="$2" |
|||
data="$3" |
|||
_debug $ep |
|||
|
|||
|
|||
_ovh_url="$OVH_API/$ep" |
|||
_debug2 _ovh_url "$_ovh_url" |
|||
_ovh_t="$(_ovh_timestamp)" |
|||
_debug2 _ovh_t "$_ovh_t" |
|||
_ovh_p="$OVH_AS+$OVH_CK+$m+$_ovh_url+$data+$_ovh_t" |
|||
_debug _ovh_p "$_ovh_p" |
|||
_ovh_hex="$(printf "%s" "$_ovh_p" | _digest sha1 hex)" |
|||
_debug2 _ovh_hex "$_ovh_hex" |
|||
|
|||
|
|||
_H1="X-Ovh-Application: $OVH_AK" |
|||
_H2="X-Ovh-Signature: \$1\$$_ovh_hex" |
|||
_debug2 _H2 "$_H2" |
|||
_H3="X-Ovh-Timestamp: $_ovh_t" |
|||
_H4="X-Ovh-Consumer: $OVH_CK" |
|||
_H5="Content-Type: application/json;charset=utf-8" |
|||
if [ "$data" ] || [ "$m" = "POST" ] || [ "$m" = "PUT" ] ; then |
|||
_debug data "$data" |
|||
response="$(_post "$data" "$_ovh_url" "" $m)" |
|||
else |
|||
response="$(_get "$_ovh_url")" |
|||
fi |
|||
|
|||
if [ "$?" != "0" ] ; then |
|||
_err "error $ep" |
|||
return 1 |
|||
fi |
|||
_debug2 response "$response" |
|||
return 0 |
|||
} |
|||
|
|||
|
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue