neil
5 days ago
committed by
GitHub
GitHub
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
13 changed files with 582 additions and 23 deletions
-
44.github/workflows/DNS.yml
-
6.github/workflows/DragonFlyBSD.yml
-
6.github/workflows/FreeBSD.yml
-
8.github/workflows/NetBSD.yml
-
6.github/workflows/Omnios.yml
-
6.github/workflows/OpenBSD.yml
-
8.github/workflows/OpenIndiana.yml
-
6.github/workflows/Solaris.yml
-
56acme.sh
-
10deploy/qiniu.sh
-
216dnsapi/dns_qc.sh
-
229dnsapi/dns_virakcloud.sh
-
4notify/pushover.sh
@ -0,0 +1,216 @@ |
|||
#!/usr/bin/env sh |
|||
# shellcheck disable=SC2034 |
|||
dns_qc_info='QUIC.cloud |
|||
Site: quic.cloud |
|||
Docs: github.com/acmesh-official/acme.sh/wiki/dnsapi#dns_qc |
|||
Options: |
|||
QC_API_KEY QC API Key |
|||
QC_API_EMAIL Your account email |
|||
' |
|||
|
|||
QC_Api="https://api.quic.cloud/v2" |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_qc_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
_debug "Enter dns_qc_add fulldomain: $fulldomain, txtvalue: $txtvalue" |
|||
QC_API_KEY="${QC_API_KEY:-$(_readaccountconf_mutable QC_API_KEY)}" |
|||
QC_API_EMAIL="${QC_API_EMAIL:-$(_readaccountconf_mutable QC_API_EMAIL)}" |
|||
|
|||
if [ "$QC_API_KEY" ]; then |
|||
_saveaccountconf_mutable QC_API_KEY "$QC_API_KEY" |
|||
else |
|||
_err "You didn't specify a QUIC.cloud api key as QC_API_KEY." |
|||
_err "You can get yours from here https://my.quic.cloud/up/api." |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _contains "$QC_API_EMAIL" "@"; then |
|||
_err "It seems that the QC_API_EMAIL=$QC_API_EMAIL is not a valid email address." |
|||
_err "Please check and retry." |
|||
return 1 |
|||
fi |
|||
#save the api key and email to the account conf file. |
|||
_saveaccountconf_mutable QC_API_EMAIL "$QC_API_EMAIL" |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain during add" |
|||
return 1 |
|||
fi |
|||
_debug _domain_id "$_domain_id" |
|||
_debug _sub_domain "$_sub_domain" |
|||
_debug _domain "$_domain" |
|||
|
|||
_debug "Getting txt records" |
|||
_qc_rest GET "zones/${_domain_id}/records" |
|||
|
|||
if ! echo "$response" | tr -d " " | grep \"success\":true >/dev/null; then |
|||
_err "Error failed response from QC GET: $response" |
|||
return 1 |
|||
fi |
|||
|
|||
# For wildcard cert, the main root domain and the wildcard domain have the same txt subdomain name, so |
|||
# we can not use updating anymore. |
|||
# count=$(printf "%s\n" "$response" | _egrep_o "\"count\":[^,]*" | cut -d : -f 2) |
|||
# _debug count "$count" |
|||
# if [ "$count" = "0" ]; then |
|||
_info "Adding txt record" |
|||
if _qc_rest POST "zones/$_domain_id/records" "{\"type\":\"TXT\",\"name\":\"$fulldomain\",\"content\":\"$txtvalue\",\"ttl\":1800}"; then |
|||
if _contains "$response" "$txtvalue"; then |
|||
_info "Added txt record, OK" |
|||
return 0 |
|||
elif _contains "$response" "Same record already exists"; then |
|||
_info "txt record already exists, OK" |
|||
return 0 |
|||
else |
|||
_err "Add txt record error: $response" |
|||
return 1 |
|||
fi |
|||
fi |
|||
_err "Add txt record error: POST failed: $response" |
|||
return 1 |
|||
|
|||
} |
|||
|
|||
#fulldomain txtvalue |
|||
dns_qc_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
_debug "Enter dns_qc_rm fulldomain: $fulldomain, txtvalue: $txtvalue" |
|||
QC_API_KEY="${QC_API_KEY:-$(_readaccountconf_mutable QC_API_KEY)}" |
|||
QC_API_EMAIL="${QC_API_EMAIL:-$(_readaccountconf_mutable QC_API_EMAIL)}" |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain during rm" |
|||
return 1 |
|||
fi |
|||
_debug _domain_id "$_domain_id" |
|||
_debug _sub_domain "$_sub_domain" |
|||
_debug _domain "$_domain" |
|||
|
|||
_debug "Getting txt records" |
|||
_qc_rest GET "zones/${_domain_id}/records" |
|||
|
|||
if ! echo "$response" | tr -d " " | grep \"success\":true >/dev/null; then |
|||
_err "Error rm GET response: $response" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug "Pre-jq response:" "$response" |
|||
# Do not use jq or subsequent code |
|||
#response=$(echo "$response" | jq ".result[] | select(.id) | select(.content == \"$txtvalue\") | select(.type == \"TXT\")") |
|||
#_debug "get txt response" "$response" |
|||
#if [ "${response}" = "" ]; then |
|||
# _info "Don't need to remove txt records." |
|||
# return 0 |
|||
#fi |
|||
#record_id=$(echo "$response" | grep \"id\" | awk -F ' ' '{print $2}' | sed 's/,$//') |
|||
#_debug "txt record_id" "$record_id" |
|||
#Instead of jq |
|||
array=$(echo "$response" | grep -o '\[[^]]*\]' | sed 's/^\[\(.*\)\]$/\1/') |
|||
if [ -z "$array" ]; then |
|||
_err "Expected array in QC response: $response" |
|||
return 1 |
|||
fi |
|||
# Temporary file to hold matched content (one per line) |
|||
tmpfile=$(_mktemp) |
|||
echo "$array" | grep -o '{[^}]*}' | sed 's/^{//;s/}$//' >"$tmpfile" |
|||
record_id="" |
|||
|
|||
while IFS= read -r obj || [ -n "$obj" ]; do |
|||
if echo "$obj" | grep -q '"TXT"' && echo "$obj" | grep -q '"id"' && echo "$obj" | grep -q "$txtvalue"; then |
|||
_debug "response includes" "$obj" |
|||
record_id=$(echo "$obj" | sed 's/^\"id\":\([0-9]\+\).*/\1/') |
|||
break |
|||
fi |
|||
done <"$tmpfile" |
|||
|
|||
rm "$tmpfile" |
|||
|
|||
if [ -z "$record_id" ]; then |
|||
_info "TXT record, or $txtvalue not found, nothing to remove" |
|||
return 0 |
|||
fi |
|||
|
|||
#End of jq replacement |
|||
if ! _qc_rest DELETE "zones/$_domain_id/records/$record_id"; then |
|||
_info "Delete txt record error." |
|||
return 1 |
|||
fi |
|||
|
|||
_info "TXT Record ID: $record_id successfully deleted" |
|||
return 0 |
|||
|
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _sub_domain=_acme-challenge.www |
|||
# _domain=domain.com |
|||
# _domain_id=sdjkglgdfewsdfg |
|||
_get_root() { |
|||
domain=$1 |
|||
i=1 |
|||
p=1 |
|||
|
|||
h=$(printf "%s" "$domain" | cut -d . -f2-) |
|||
_debug h "$h" |
|||
if [ -z "$h" ]; then |
|||
_err "$h ($domain) is an invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _qc_rest GET "zones"; then |
|||
_err "qc_rest failed" |
|||
return 1 |
|||
fi |
|||
|
|||
if _contains "$response" "\"name\":\"$h\"" || _contains "$response" "\"name\":\"$h.\""; then |
|||
_domain_id=$h |
|||
if [ "$_domain_id" ]; then |
|||
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-"$p") |
|||
_domain=$h |
|||
return 0 |
|||
fi |
|||
_err "Empty domain_id $h" |
|||
return 1 |
|||
fi |
|||
_err "Missing domain_id $h" |
|||
return 1 |
|||
} |
|||
|
|||
_qc_rest() { |
|||
m=$1 |
|||
ep="$2" |
|||
data="$3" |
|||
_debug "$ep" |
|||
|
|||
email_trimmed=$(echo "$QC_API_EMAIL" | tr -d '"') |
|||
token_trimmed=$(echo "$QC_API_KEY" | tr -d '"') |
|||
|
|||
export _H1="Content-Type: application/json" |
|||
export _H2="X-Auth-Email: $email_trimmed" |
|||
export _H3="X-Auth-Key: $token_trimmed" |
|||
|
|||
if [ "$m" != "GET" ]; then |
|||
_debug data "$data" |
|||
response="$(_post "$data" "$QC_Api/$ep" "" "$m")" |
|||
else |
|||
response="$(_get "$QC_Api/$ep")" |
|||
fi |
|||
|
|||
if [ "$?" != "0" ]; then |
|||
_err "error $ep" |
|||
return 1 |
|||
fi |
|||
_debug2 response "$response" |
|||
return 0 |
|||
} |
|||
@ -0,0 +1,229 @@ |
|||
#!/usr/bin/env sh |
|||
# shellcheck disable=SC2034 |
|||
dns_virakcloud_info='VirakCloud DNS API |
|||
Site: VirakCloud.com |
|||
Docs: github.com/acmesh-official/acme.sh/wiki/dnsapi#dns_virakcloud |
|||
Options: |
|||
VIRAKCLOUD_API_TOKEN VirakCloud API Bearer Token |
|||
' |
|||
|
|||
VIRAKCLOUD_API_URL="https://public-api.virakcloud.com/dns" |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
#Used to add txt record |
|||
dns_virakcloud_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
VIRAKCLOUD_API_TOKEN="${VIRAKCLOUD_API_TOKEN:-$(_readaccountconf_mutable VIRAKCLOUD_API_TOKEN)}" |
|||
|
|||
if [ -z "$VIRAKCLOUD_API_TOKEN" ]; then |
|||
_err "You haven't configured your VirakCloud API token yet." |
|||
_err "Please set VIRAKCLOUD_API_TOKEN environment variable or run:" |
|||
_err " export VIRAKCLOUD_API_TOKEN=\"your-api-token\"" |
|||
return 1 |
|||
fi |
|||
|
|||
_saveaccountconf_mutable VIRAKCLOUD_API_TOKEN "$VIRAKCLOUD_API_TOKEN" |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
http_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\r\n")" |
|||
if [ "$http_code" = "401" ]; then |
|||
return 1 |
|||
fi |
|||
_err "Invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug _domain "$_domain" |
|||
_debug fulldomain "$fulldomain" |
|||
|
|||
_info "Adding TXT record" |
|||
|
|||
if _virakcloud_rest POST "domains/${_domain}/records" "{\"record\":\"${fulldomain}\",\"type\":\"TXT\",\"ttl\":3600,\"content\":\"${txtvalue}\"}"; then |
|||
if echo "$response" | grep -q "success" || echo "$response" | grep -q "\"data\""; then |
|||
_info "Added, OK" |
|||
return 0 |
|||
elif echo "$response" | grep -q "already exists" || echo "$response" | grep -q "duplicate"; then |
|||
_info "Record already exists, OK" |
|||
return 0 |
|||
else |
|||
_err "Add TXT record error." |
|||
_err "Response: $response" |
|||
return 1 |
|||
fi |
|||
fi |
|||
|
|||
_err "Add TXT record error." |
|||
return 1 |
|||
} |
|||
|
|||
#Usage: fulldomain txtvalue |
|||
#Used to remove the txt record after validation |
|||
dns_virakcloud_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
VIRAKCLOUD_API_TOKEN="${VIRAKCLOUD_API_TOKEN:-$(_readaccountconf_mutable VIRAKCLOUD_API_TOKEN)}" |
|||
|
|||
if [ -z "$VIRAKCLOUD_API_TOKEN" ]; then |
|||
_err "You haven't configured your VirakCloud API token yet." |
|||
return 1 |
|||
fi |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
http_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\r\n")" |
|||
if [ "$http_code" = "401" ]; then |
|||
return 1 |
|||
fi |
|||
_err "Invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug _domain "$_domain" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
|
|||
_info "Removing TXT record" |
|||
|
|||
_debug "Getting list of records to find content ID" |
|||
if ! _virakcloud_rest GET "domains/${_domain}/records" ""; then |
|||
return 1 |
|||
fi |
|||
|
|||
_debug2 "Records response" "$response" |
|||
|
|||
contentid="" |
|||
# Extract innermost objects (content objects) which look like {"id":"...","content_raw":"..."} |
|||
# We filter for the one containing txtvalue |
|||
|
|||
target_obj=$(echo "$response" | grep -o '{[^}]*}' | grep "$txtvalue" | _head_n 1) |
|||
|
|||
if [ -n "$target_obj" ]; then |
|||
contentid=$(echo "$target_obj" | _egrep_o '"id":"[^"]*"' | cut -d '"' -f 4) |
|||
fi |
|||
|
|||
if [ -z "$contentid" ]; then |
|||
_debug "Could not find matching record ID in response" |
|||
_info "Record not found, may have been already removed" |
|||
return 0 |
|||
fi |
|||
|
|||
_debug contentid "$contentid" |
|||
|
|||
if _virakcloud_rest DELETE "domains/${_domain}/records/${fulldomain}/TXT/${contentid}" ""; then |
|||
if echo "$response" | grep -q "success" || [ -z "$response" ]; then |
|||
_info "Removed, OK" |
|||
return 0 |
|||
elif echo "$response" | grep -q "not found" || echo "$response" | grep -q "404"; then |
|||
_info "Record not found, OK" |
|||
return 0 |
|||
else |
|||
_err "Remove TXT record error." |
|||
_err "Response: $response" |
|||
return 1 |
|||
fi |
|||
fi |
|||
|
|||
_err "Remove TXT record error." |
|||
return 1 |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
|
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _domain=domain.com |
|||
_get_root() { |
|||
domain=$1 |
|||
i=1 |
|||
p=1 |
|||
|
|||
# Optimization: skip _acme-challenge subdomain to avoid 422 errors |
|||
if echo "$domain" | grep -q "^_acme-challenge."; then |
|||
i=2 |
|||
fi |
|||
|
|||
while true; do |
|||
h=$(printf "%s" "$domain" | cut -d . -f "$i"-100) |
|||
_debug h "$h" |
|||
|
|||
if [ -z "$h" ]; then |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _virakcloud_rest GET "domains/$h" ""; then |
|||
http_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\r\n")" |
|||
if [ "$http_code" = "401" ]; then |
|||
return 1 |
|||
fi |
|||
p=$i |
|||
i=$(_math "$i" + 1) |
|||
continue |
|||
fi |
|||
|
|||
if echo "$response" | grep -q "\"name\""; then |
|||
_domain="$h" |
|||
return 0 |
|||
fi |
|||
|
|||
p=$i |
|||
i=$(_math "$i" + 1) |
|||
done |
|||
|
|||
return 1 |
|||
} |
|||
|
|||
_virakcloud_rest() { |
|||
m=$1 |
|||
ep="$2" |
|||
data="$3" |
|||
|
|||
_debug "$ep" |
|||
|
|||
export _H1="Content-Type: application/json" |
|||
export _H2="Authorization: Bearer $VIRAKCLOUD_API_TOKEN" |
|||
|
|||
if [ "$m" != "GET" ]; then |
|||
_debug data "$data" |
|||
response="$(_post "$data" "$VIRAKCLOUD_API_URL/$ep" "" "$m")" |
|||
else |
|||
response="$(_get "$VIRAKCLOUD_API_URL/$ep")" |
|||
fi |
|||
|
|||
_ret="$?" |
|||
|
|||
if [ "$_ret" != "0" ]; then |
|||
_err "error on $m $ep" |
|||
return 1 |
|||
fi |
|||
|
|||
http_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\r\n")" |
|||
_debug "http response code" "$http_code" |
|||
|
|||
if [ "$http_code" = "401" ]; then |
|||
_err "VirakCloud API returned 401 Unauthorized." |
|||
_err "Your VIRAKCLOUD_API_TOKEN is invalid or expired." |
|||
_err "Please check your API token and try again." |
|||
return 1 |
|||
fi |
|||
|
|||
if [ "$http_code" = "403" ]; then |
|||
_err "VirakCloud API returned 403 Forbidden." |
|||
_err "Your API token does not have permission to access this resource." |
|||
return 1 |
|||
fi |
|||
|
|||
if [ -n "$http_code" ] && [ "$http_code" -ge 400 ]; then |
|||
_err "VirakCloud API error. HTTP code: $http_code" |
|||
_err "Response: $response" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug2 response "$response" |
|||
return 0 |
|||
} |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue