dns_czechia: fix syntax errors and API payload format
- Fix missing 'done' in for-loop within _czechia_pick_zone
- Correct variable naming (use _fd_input instead of _fulldomain)
- Update hostname extraction to correctly send "@" for apex domains
- Fix "Invalid domain" error by normalizing zone names in API calls
- Replaced 'tr' for case conversion with internal '_lower_case' function for better POSIX compatibility.
- Cleaned up redundant helper functions and simplified hostname calculation.
- Fixed ShellCheck SC2140 warnings by using properly escaped JSON strings.
- Aligned code formatting with 'shfmt' requirements (indentation and spacing).
- Updated configuration loading to use standard shell variable defaults.
Refactor the Czechia/Zoner DNS API script to ensure stability and better user experience.
Changes:
- Replaced Bash-specific substitutions with POSIX-compliant code (fixes 'Bad substitution' errors on dash/sh).
- Improved JSON payload construction to be more robust across different shell environments.
- Updated hostname logic to correctly use "@" for apex domains.
- Refined error reporting: API error messages are now captured and displayed in English.
- Cleaned up internal debug messages and aligned them with acme.sh standards.
- Optimized zone picking logic for faster matching in multi-zone setups.
dns_czechia: fix POSIX compatibility for Alpine/BusyBox and cleanup
Replace non-POSIX escape sequences in sed with 'tr' for Alpine/BusyBox compatibility.
Remove unnecessary 'export' from local HTTP header variables.
Fix domain normalization to prevent character stripping in Docker tests.
dns_czechia: remove _lower_case helper and use POSIX-safe lowercasing
Replace internal _lower_case calls with tr-based normalization
to avoid helper dependency and follow acme.sh DNS plugin style.
This PR adds a DNS API plugin for CZECHIA.COM / RegZone (ZONER a.s.).
- Supports ACME DNS-01 TXT record management
- Uses official REST API (Swagger)
- Credentials are stored in account.conf for non-interactive renewals
- IP whitelisting is not required for DNS TXT changes used for SSL automation
(per official REST API terms)
Tested with:
- acme.sh v3.x
- Zones: zoner-test.eu
The error response also contains 'name' in 'zone_name' field,
causing false positives. Check for 'dnssec_status' which only
exists in valid zone responses.
- Added _opusdns_api() for all API requests
- Added _opusdns_init() for config initialization
- Removed duplicate code in add/rm functions
- Removed dead code (orphaned lines 173-178)
- Script now 158 lines (was 255, originally 379)
Instead of fetching all zones and matching, iterate through domain
parts and check each against the API until a valid zone is found.
Same approach as GoDaddy DNS plugin.
Example: _acme-challenge.test.example.com
- Try: test.example.com → 404
- Try: example.com → 200 ✓ → zone found!
Script reduced from 304 to 255 lines.
- Fixed jq path: .pagination.has_next_page instead of .has_next_page
- Fixed grep fallback: remove rrsets before extracting zone names
to avoid matching nested 'name' fields
- Simplified has_next_page detection with simple grep -q
- Added debug output for page zones and has_next status
acme.sh handles DNS propagation checking internally via --dnssleep
and _check_dns_record. Custom propagation checks are unnecessary
and can conflict with acme.sh's own timing.
Removed:
- _opusdns_wait_for_propagation() function
- OPUSDNS_Polling_Interval option
- OPUSDNS_Propagation_Timeout option
Script is now consistent with other DNS API implementations
(Cloudflare, AWS, etc.) which don't have custom propagation checks.
If the random dns challenge string happens to contain 'id',
the parsing method passed a broken, mingled mix of the
record's data and id field, instead of just the id. As a result,
deleting the TXT record failed. We now specifically look for
'"id":', which cannot appear as part of the challenge string.
CZECHIA-COM
alexandergott-afk
JF DAGUIN
Kilian Ries
Patrick Zbinden
Denis Kurz