- Added _get_root() helper function for proper zone detection
- Fixed zone ID extraction to match dns/auth_zone/* pattern
- Added _infoblox_rest() wrapper for API calls with proper auth
- Improved error handling for authentication failures
- Added support for wildcard certificates (multiple TXT records)
- Filter by exact txtvalue when deleting records
- Follow acme.sh best practices and conventions
Tested with:
- Standard domain certificates
- Wildcard certificates (*.domain.com)
- Multiple subdomains
- Staging and production Let's Encrypt
- Add direct zone access before falling back to zones list
- This makes zone detection more reliable and faster by attempting
to access the zone directly first, which is more efficient than
listing all zones and searching through them
Updates the dns_opnsense.sh Bourne shell script for OPNSense v25.7 series:
1. Fixes historical error in rm_record() [used incorrect response variable]
2. Improves debug messaging in rm_record()
3. Fixes _get_root() for change in OPNsense API
* Response is now split into pseudo-rows
* We now iterate through pseudo-rows for matching domainname field
4. Fixes _existingchallenge() for change in OPNsense API
* Fixes unreliable regex for uuid
* Adds domain regex and %domain field
5. Fixes historical error in _existingchallenge() [incorrect variable syntax]
Resolves#6467
Signed-off-by: benyamin-codez <115509179+benyamin-codez@users.noreply.github.com>
Markus G.
ufozone
Bob Perper
neil
hostup
Stefan Riegel
SunMar
asavin
Mason
Peter Lindegaard Hansen
Philipp Klapp
pentadam
An
Vmichelin
benyamin-codez