Browse Source
dnsapi/dns_miab.sh MIAB DNS-01 Validation
dnsapi/dns_miab.sh MIAB DNS-01 Validation
Know I'm new to contorting to this project. I i've broke conventions please let me know what I've screwed up and I'll set it right as quickly as possible. Propose this as a new DNS-01 validation script to dynamically add challenge DNS records to MailinaBox (MIAB) DNS. MIAB uses a custom DNS API to manage external DNS records. The script was originally written by Darven Dissek and can be found in his repository: https://framagit.org/DarvenDissek/acme.sh-MIAB-DNS-API/). This has been forked and some slight cleanup applied and change shebang to UNIx shell. The forked repository can be found here: https://github.com/billgertz/MIAB_dns_api. Wrote to Darven but received no reply. Support for this script has been submitted to the OPNsense project via this pull request: https://github.com/opnsense/plugins/pull/1531pull/2534/head
Bill Gertz
5 years ago
committed by
GitHub
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 273 additions and 0 deletions
@ -0,0 +1,273 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
#Name: dns_miab.sh |
|||
# |
|||
#Authors: |
|||
# Darven Dissek 2018 |
|||
# William Gertz 2019 |
|||
# |
|||
# Thanks to Neil Pang for the code reused from acme.sh from HTTP-01 validation |
|||
# used to communicate with the MailintheBox Custom DNS API |
|||
#Report Bugs here: |
|||
# https://github.com/billgertz/MIAB_dns_api (for dns_miab.sh) |
|||
# https://github.com/Neilpang/acme.sh (for acme.sh) |
|||
# |
|||
######## Public functions ##################### |
|||
|
|||
#Usage: dns_miab_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_miab_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using miab" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
|
|||
MIAB_Username="${MIAB_Username:-$(_readaccountconf_mutable MIAB_Username)}" |
|||
MIAB_Password="${MIAB_Password:-$(_readaccountconf_mutable MIAB_Password)}" |
|||
MIAB_Server="${MIAB_Server:-$(_readaccountconf_mutable MIAB_Server)}" |
|||
|
|||
#debug log the environmental variables |
|||
_debug MIAB_Username "$MIAB_Username" |
|||
_debug MIAB_Password "$MIAB_Password" |
|||
_debug MIAB_Server "$MIAB_Server" |
|||
|
|||
if [ -z "$MIAB_Username" ] || [ -z "$MIAB_Password" ] || [ -z "$MIAB_Server" ]; then |
|||
MIAB_Username="" |
|||
MIAB_Password="" |
|||
MIAB_Server="" |
|||
_err "You didn't specify MIAB_Username or MIAB_Password or MIAB_Server." |
|||
_err "Please try again." |
|||
return 1 |
|||
fi |
|||
|
|||
#save the credentials to the account conf file. |
|||
_saveaccountconf_mutable MIAB_Username "$MIAB_Username" |
|||
_saveaccountconf_mutable MIAB_Password "$MIAB_Password" |
|||
_saveaccountconf_mutable MIAB_Server "$MIAB_Server" |
|||
|
|||
baseurl="https://$MIAB_Server/admin/dns/custom/$fulldomain/txt" |
|||
|
|||
#Add the challenge record |
|||
result="$(_miab_post "$txtvalue" "$baseurl" "" "POST" "" "$MIAB_Username" "$MIAB_Password")" |
|||
|
|||
_debug result "$result" |
|||
|
|||
#check if result was good |
|||
if _contains "$result" "updated DNS"; then |
|||
_info "Successfully created the txt record" |
|||
return 0 |
|||
else |
|||
_err "Error encountered during record addition" |
|||
_err "$result" |
|||
return 1 |
|||
fi |
|||
|
|||
} |
|||
|
|||
#Usage: fulldomain txtvalue |
|||
#Remove the txt record after validation. |
|||
dns_miab_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using miab" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
|
|||
MIAB_Username="${MIAB_Username:-$(_readaccountconf_mutable MIAB_Username)}" |
|||
MIAB_Password="${MIAB_Password:-$(_readaccountconf_mutable MIAB_Password)}" |
|||
MIAB_Server="${MIAB_Server:-$(_readaccountconf_mutable MIAB_Server)}" |
|||
|
|||
#debug log the environmental variables |
|||
_debug MIAB_Username "$MIAB_Username" |
|||
_debug MIAB_Password "$MIAB_Password" |
|||
_debug MIAB_Server "$MIAB_Server" |
|||
|
|||
if [ -z "$MIAB_Username" ] || [ -z "$MIAB_Password" ] || [ -z "$MIAB_Server" ]; then |
|||
MIAB_Username="" |
|||
MIAB_Password="" |
|||
MIAB_Server="" |
|||
_err "You didn't specify MIAB_Username or MIAB_Password or MIAB_Server." |
|||
_err "Please try again." |
|||
return 1 |
|||
fi |
|||
|
|||
#save the credentials to the account conf file. |
|||
_saveaccountconf_mutable MIAB_Username "$MIAB_Username" |
|||
_saveaccountconf_mutable MIAB_Password "$MIAB_Password" |
|||
_saveaccountconf_mutable MIAB_Server "$MIAB_Server" |
|||
|
|||
baseurl="https://$MIAB_Server/admin/dns/custom/$fulldomain/txt" |
|||
|
|||
#Remove the challenge record |
|||
result="$(_miab_post "$txtvalue" "$baseurl" "" "DELETE" "" "$MIAB_Username" "$MIAB_Password")" |
|||
|
|||
_debug result $result |
|||
|
|||
#check if result was good |
|||
if _contains "$result" "updated DNS"; then |
|||
_info "Successfully created the txt record" |
|||
return 0 |
|||
else |
|||
_err "Error encountered during record addition" |
|||
_err "$result" |
|||
return 1 |
|||
fi |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _sub_domain=_acme-challenge.www |
|||
# _domain=domain.com |
|||
# _domain_id=sdjkglgdfewsdfg |
|||
_get_root() { |
|||
domain=$1 |
|||
i=2 |
|||
p=1 |
|||
|
|||
while true; do |
|||
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
|||
_debug h "$h" |
|||
if [ -z "$h" ]; then |
|||
#not valid |
|||
return 1 |
|||
fi |
|||
|
|||
if _contains "$response" "\"name\":\"$h\"" >/dev/null; then |
|||
_domain_id=$(printf "%s\n" "$response" | _egrep_o "\[.\"id\":\"[^\"]*\"" | head -n 1 | cut -d : -f 2 | tr -d \") |
|||
|
|||
if [ "$_domain_id" ]; then |
|||
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
|||
_domain=$h |
|||
return 0 |
|||
fi |
|||
|
|||
return 1 |
|||
fi |
|||
|
|||
p=$i |
|||
i=$(_math "$i" + 1) |
|||
done |
|||
|
|||
return 1 |
|||
} |
|||
|
|||
# post changes to MIAB dns (taken from acme.sh) |
|||
_miab_post() { |
|||
body="$1" |
|||
_post_url="$2" |
|||
needbase64="$3" |
|||
httpmethod="$4" |
|||
_postContentType="$5" |
|||
username="$6" |
|||
password="$7" |
|||
|
|||
if [ -z "$httpmethod" ]; then |
|||
httpmethod="POST" |
|||
fi |
|||
|
|||
_debug $httpmethod |
|||
_debug "_post_url" "$_post_url" |
|||
_debug2 "body" "$body" |
|||
_debug2 "_postContentType" "$_postContentType" |
|||
|
|||
_inithttp |
|||
|
|||
if [ "$_ACME_CURL" ] && [ "${ACME_USE_WGET:-0}" = "0" ]; then |
|||
_CURL="$_ACME_CURL" |
|||
|
|||
if [ "$HTTPS_INSECURE" ]; then |
|||
_CURL="$_CURL --insecure " |
|||
fi |
|||
|
|||
_debug "_CURL" "$_CURL" |
|||
|
|||
if [ "$needbase64" ]; then |
|||
if [ "$_postContentType" ]; then |
|||
response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod --user "$username:$password" -H "Content-Type: $_postContentType" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url" | _base64)" |
|||
else |
|||
response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod --user "$username:$password" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url" | _base64)" |
|||
fi |
|||
else |
|||
if [ "$_postContentType" ]; then |
|||
response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod --user "$username:$password" -H "Content-Type: $_postContentType" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url")" |
|||
else |
|||
response="$($_CURL --user-agent "$USER_AGENT" -X $httpmethod --user "$username:$password" -H "$_H1" -H "$_H2" -H "$_H3" -H "$_H4" -H "$_H5" --data "$body" "$_post_url")" |
|||
fi |
|||
fi |
|||
|
|||
_ret="$?" |
|||
|
|||
if [ "$_ret" != "0" ]; then |
|||
_err "Please refer to https://curl.haxx.se/libcurl/c/libcurl-errors.html for error code: $_ret" |
|||
if [ "$DEBUG" ] && [ "$DEBUG" -ge "2" ]; then |
|||
_err "Here is the curl dump log:" |
|||
_err "$(cat "$_CURL_DUMP")" |
|||
fi |
|||
fi |
|||
|
|||
elif [ "$_ACME_WGET" ]; then |
|||
_WGET="$_ACME_WGET" |
|||
|
|||
if [ "$HTTPS_INSECURE" ]; then |
|||
_WGET="$_WGET --no-check-certificate " |
|||
fi |
|||
|
|||
_debug "_WGET" "$_WGET" |
|||
|
|||
if [ "$needbase64" ]; then |
|||
|
|||
if [ "$httpmethod" = "POST" ]; then |
|||
if [ "$_postContentType" ]; then |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" |
|||
else |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" |
|||
fi |
|||
else |
|||
if [ "$_postContentType" ]; then |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" |
|||
else |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER" | _base64)" |
|||
fi |
|||
fi |
|||
|
|||
else |
|||
|
|||
if [ "$httpmethod" = "POST" ]; then |
|||
if [ "$_postContentType" ]; then |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER")" |
|||
else |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --post-data="$body" "$_post_url" 2>"$HTTP_HEADER")" |
|||
fi |
|||
else |
|||
if [ "$_postContentType" ]; then |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --header "Content-Type: $_postContentType" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER")" |
|||
else |
|||
response="$($_WGET -S -O - --user-agent="$USER_AGENT" --header "$_H5" --header "$_H4" --header "$_H3" --header "$_H2" --header "$_H1" --method $httpmethod --body-data="$body" "$_post_url" 2>"$HTTP_HEADER")" |
|||
fi |
|||
fi |
|||
|
|||
fi |
|||
|
|||
_ret="$?" |
|||
|
|||
if [ "$_ret" = "8" ]; then |
|||
_ret=0 |
|||
_debug "wget returns 8, the server returns a 'Bad request' response, lets process the response later." |
|||
fi |
|||
|
|||
if [ "$_ret" != "0" ]; then |
|||
_err "Please refer to https://www.gnu.org/software/wget/manual/html_node/Exit-Status.html for error code: $_ret" |
|||
fi |
|||
|
|||
_sed_i "s/^ *//g" "$HTTP_HEADER" |
|||
|
|||
else |
|||
_ret="$?" |
|||
_err "Neither curl nor wget was found, cannot do $httpmethod." |
|||
fi |
|||
|
|||
_debug "_ret" "$_ret" |
|||
printf "%s" "$response" |
|||
return $_ret |
|||
} |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue