Normalize fqdn/zone trailing dots, compute _sub_domain relative to zone (or @),
and avoid repeated zone list calls in folder mode. Fixes dnsapi tests failing at
“Detect root zone / Error adding TXT record”.
- Fix _get_root(): proper fqdn normalization and suffix-based zone detection (YC_Zone_ID + YC_Folder_ID)
- Make dns_yc_add merge TXT values instead of overwriting (supports wildcard + parallel challenges)
- Make dns_yc_rm remove only the target value and delete recordset when empty
- Add minimal JSON escaping and safer parsing without jq
- Do not fail when TXT recordset does not yet exist (YC returns 404)
- Properly append TXT values for wildcard certificates
- Remove only the specific TXT value during cleanup
- Delete recordset only when last TXT value is removed
- Ensure POSIX sh compatibility
- Improve credential loading and renew support
- Prevent duplicate TXT entries
- Properly append TXT values instead of overwriting recordset
- Remove only matching TXT value during cleanup
- Support arbitrary FQDN (acmetest compatibility)
- Fix multi-value TXT handling required for wildcard validation
- Use _mktemp and avoid persistent key deletion
- Ensure add/rm run correctly in isolated subshells
Ubiquiti removed keytool (and java) from recent releases of Unifi OS. This moves from keytool to openssl's native pkcs12.
Tested on Unifi Dream Machine which runs Unifi OS and a built-in Unifi controller.
Also added backup of existing files prior to change in case anything goes wrong, and update system configuration with compatible ciphers.
Instead of using comments declare info in a special variable.
Then the variable can be used to print the DNS API provider usage.
The usage can be parsed on UI and show all needed inputs for options.
The info is stored in plain string that it's both human-readable and easy to parse:
dns_example_info='API name
An extended description.
Multiline.
Domains: list of alternative domains to find
Site: the dns provider website e.g. example.com
Docs: Link to ACME.sh wiki for the provider
Options:
VARIABLE1 Title for the option1.
VARIABLE2 Title for the option2. Default "default value".
VARIABLE3 Title for the option3. Description to show on UI. Optional.
Issues: Link to a support ticket on https://github.com/acmesh-official/acme.sh
Author: First Lastname <authoremail@example.com>, Another Author <https://github.com/example>;
'
Here:
VARIABLE1 will be required.
VARIABLE2 will be required too but will be populated with a "default value".
VARIABLE3 is optional and can be empty.
A DNS provider may have alternative options like CloudFlare may use API KEY or API Token.
You can use a second section OptionsAlt: section.
Some providers may have alternative names or domains e.g. Aliyun and AlibabaCloud.
Add them to Domains: section.
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
root
neil
3VAbdAVE
Sergey Ponomarev
Viktor Sokhan