You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
79 lines
2.5 KiB
79 lines
2.5 KiB
#!/usr/bin/env sh
|
|
|
|
######## Public functions #####################
|
|
ECHO=$(command -v echo)
|
|
NSUPDATE=$(command -v nsupdate)
|
|
NSUPDATE_COMMANDS_FILE="/tmp/nsupdate"
|
|
|
|
#Usage: dns_nsupdate_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
|
dns_nsupdate_add() {
|
|
fulldomain=$1
|
|
txtvalue=$2
|
|
_checkKeyFile || return 1
|
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
|
# save the dns server and key to the account conf file.
|
|
_saveaccountconf NSUPDATE_SERVER "${NSUPDATE_SERVER}"
|
|
_saveaccountconf NSUPDATE_SERVER_PORT "${NSUPDATE_SERVER_PORT}"
|
|
_saveaccountconf NSUPDATE_KEY "${NSUPDATE_KEY}"
|
|
if ! [ -z "$NSUPDATE_ZONE" ]; then
|
|
_saveaccountconf NSUPDATE_ZONE "${NSUPDATE_ZONE}"
|
|
fi
|
|
_info "adding ${fulldomain}. 60 in txt \"${txtvalue}\""
|
|
|
|
$ECHO "server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}" >${NSUPDATE_COMMANDS_FILE}
|
|
if ! [ -z "$NSUPDATE_ZONE" ]; then
|
|
$ECHO "zone ${NSUPDATE_ZONE}" >>${NSUPDATE_COMMANDS_FILE}
|
|
fi
|
|
$ECHO "update add ${fulldomain}. 60 in txt \"${txtvalue}\"" >>${NSUPDATE_COMMANDS_FILE}
|
|
$ECHO "send" >>${NSUPDATE_COMMANDS_FILE}
|
|
|
|
_debug "$(cat ${NSUPDATE_COMMANDS_FILE})"
|
|
|
|
if ! $NSUPDATE -k "${NSUPDATE_KEY}" -v ${NSUPDATE_COMMANDS_FILE}; then
|
|
_err "error updating domain"
|
|
rm ${NSUPDATE_COMMANDS_FILE}
|
|
return 1
|
|
fi
|
|
rm ${NSUPDATE_COMMANDS_FILE}
|
|
return 0
|
|
}
|
|
|
|
#Usage: dns_nsupdate_rm _acme-challenge.www.domain.com
|
|
dns_nsupdate_rm() {
|
|
fulldomain=$1
|
|
_checkKeyFile || return 1
|
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
|
_info "removing ${fulldomain}. txt"
|
|
|
|
$ECHO "server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}" >${NSUPDATE_COMMANDS_FILE}
|
|
if ! [ -z "$NSUPDATE_ZONE" ]; then
|
|
$ECHO "zone ${NSUPDATE_ZONE}" >>${NSUPDATE_COMMANDS_FILE}
|
|
fi
|
|
$ECHO "update delete ${fulldomain}. txt" >>${NSUPDATE_COMMANDS_FILE}
|
|
$ECHO "send" >>${NSUPDATE_COMMANDS_FILE}
|
|
|
|
_debug "$(cat ${NSUPDATE_COMMANDS_FILE})"
|
|
|
|
if ! $NSUPDATE -k "${NSUPDATE_KEY}" -v ${NSUPDATE_COMMANDS_FILE}; then
|
|
_err "error updating domain"
|
|
rm ${NSUPDATE_COMMANDS_FILE}
|
|
return 1
|
|
fi
|
|
rm ${NSUPDATE_COMMANDS_FILE}
|
|
return 0
|
|
}
|
|
|
|
#################### Private functions below ##################################
|
|
|
|
_checkKeyFile() {
|
|
if [ -z "${NSUPDATE_KEY}" ]; then
|
|
_err "you must specify a path to the nsupdate key file"
|
|
return 1
|
|
fi
|
|
if [ ! -r "${NSUPDATE_KEY}" ]; then
|
|
_err "key ${NSUPDATE_KEY} is unreadable"
|
|
return 1
|
|
fi
|
|
}
|