mirror of
https://github.com/plantroon/acme.sh.git
synced 2024-11-04 21:41:46 +00:00
neil
GitHub
commit
0e65fdd6f7
@ -342,7 +342,8 @@ You don't have to do anything manually!
|
|||||||
1. UnoEuro API (https://www.unoeuro.com/)
|
1. UnoEuro API (https://www.unoeuro.com/)
|
||||||
1. INWX (https://www.inwx.de/)
|
1. INWX (https://www.inwx.de/)
|
||||||
1. Servercow (https://servercow.de)
|
1. Servercow (https://servercow.de)
|
||||||
|
1. Namesilo (https://www.namesilo.com)
|
||||||
|
1. InternetX autoDNS API (https://internetx.com)
|
||||||
|
|
||||||
And:
|
And:
|
||||||
|
|
||||||
|
|||||||
@ -651,6 +651,39 @@ acme.sh --issue --dns dns_servercow -d example.com -d www.example.com
|
|||||||
```
|
```
|
||||||
Both, `SERVERCOW_API_Username` and `SERVERCOW_API_Password` will be saved in `~/.acme.sh/account.conf` and will be reused when needed.
|
Both, `SERVERCOW_API_Username` and `SERVERCOW_API_Password` will be saved in `~/.acme.sh/account.conf` and will be reused when needed.
|
||||||
|
|
||||||
|
## 35. Use Namesilo.com API
|
||||||
|
|
||||||
|
You'll need to generate an API key at https://www.namesilo.com/account_api.php
|
||||||
|
Optionally you may restrict the access to an IP range there.
|
||||||
|
|
||||||
|
```
|
||||||
|
export Namesilo_Key="xxxxxxxxxxxxxxxxxxxxxxxx"
|
||||||
|
```
|
||||||
|
|
||||||
|
And now you can issue certs with:
|
||||||
|
|
||||||
|
```
|
||||||
|
acme.sh --issue --dns dns_namesilo --dnssleep 900 -d example.com -d www.example.com
|
||||||
|
```
|
||||||
|
|
||||||
|
## 37. Use autoDNS (InternetX)
|
||||||
|
|
||||||
|
[InternetX](https://www.internetx.com/) offers an [xml api](https://help.internetx.com/display/API/AutoDNS+XML-API) with your standard login credentials, set them like so:
|
||||||
|
|
||||||
|
```
|
||||||
|
export AUTODNS_USER="yourusername"
|
||||||
|
export AUTODNS_PASSWORD="password"
|
||||||
|
export AUTODNS_CONTEXT="context"
|
||||||
|
```
|
||||||
|
|
||||||
|
Then you can issue your certificates with:
|
||||||
|
|
||||||
|
```
|
||||||
|
acme.sh --issue --dns dns_autodns -d example.com -d www.example.com
|
||||||
|
```
|
||||||
|
|
||||||
|
The `AUTODNS_USER`, `AUTODNS_PASSWORD` and `AUTODNS_CONTEXT` settings will be saved in `~/.acme.sh/account.conf` and will be reused when needed.
|
||||||
|
|
||||||
# Use custom API
|
# Use custom API
|
||||||
|
|
||||||
If your API is not supported yet, you can write your own DNS API.
|
If your API is not supported yet, you can write your own DNS API.
|
||||||
|
|||||||
264
dnsapi/dns_autodns.sh
Normal file
264
dnsapi/dns_autodns.sh
Normal file
@ -0,0 +1,264 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
# -*- mode: sh; tab-width: 2; indent-tabs-mode: s; coding: utf-8 -*-
|
||||||
|
|
||||||
|
# This is the InternetX autoDNS xml api wrapper for acme.sh
|
||||||
|
# Author: auerswald@gmail.com
|
||||||
|
# Created: 2018-01-14
|
||||||
|
#
|
||||||
|
# export AUTODNS_USER="username"
|
||||||
|
# export AUTODNS_PASSWORD="password"
|
||||||
|
# export AUTODNS_CONTEXT="context"
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# acme.sh --issue --dns dns_autodns -d example.com
|
||||||
|
|
||||||
|
AUTODNS_API="https://gateway.autodns.com"
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# txtdomain
|
||||||
|
# txt
|
||||||
|
dns_autodns_add() {
|
||||||
|
fulldomain="$1"
|
||||||
|
txtvalue="$2"
|
||||||
|
|
||||||
|
AUTODNS_USER="${AUTODNS_USER:-$(_readaccountconf_mutable AUTODNS_USER)}"
|
||||||
|
AUTODNS_PASSWORD="${AUTODNS_PASSWORD:-$(_readaccountconf_mutable AUTODNS_PASSWORD)}"
|
||||||
|
AUTODNS_CONTEXT="${AUTODNS_CONTEXT:-$(_readaccountconf_mutable AUTODNS_CONTEXT)}"
|
||||||
|
|
||||||
|
if [ -z "$AUTODNS_USER" ] || [ -z "$AUTODNS_CONTEXT" ] || [ -z "$AUTODNS_PASSWORD" ]; then
|
||||||
|
_err "You don't specify autodns user, password and context."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_saveaccountconf_mutable AUTODNS_USER "$AUTODNS_USER"
|
||||||
|
_saveaccountconf_mutable AUTODNS_PASSWORD "$AUTODNS_PASSWORD"
|
||||||
|
_saveaccountconf_mutable AUTODNS_CONTEXT "$AUTODNS_CONTEXT"
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
|
||||||
|
if ! _get_autodns_zone "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _zone "$_zone"
|
||||||
|
_debug _system_ns "$_system_ns"
|
||||||
|
|
||||||
|
_info "Adding TXT record"
|
||||||
|
|
||||||
|
autodns_response="$(_autodns_zone_update "$_zone" "$_sub_domain" "$txtvalue" "$_system_ns")"
|
||||||
|
|
||||||
|
if [ "$?" -eq "0" ]; then
|
||||||
|
_info "Added, OK"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# txtdomain
|
||||||
|
# txt
|
||||||
|
dns_autodns_rm() {
|
||||||
|
fulldomain="$1"
|
||||||
|
txtvalue="$2"
|
||||||
|
|
||||||
|
AUTODNS_USER="${AUTODNS_USER:-$(_readaccountconf_mutable AUTODNS_USER)}"
|
||||||
|
AUTODNS_PASSWORD="${AUTODNS_PASSWORD:-$(_readaccountconf_mutable AUTODNS_PASSWORD)}"
|
||||||
|
AUTODNS_CONTEXT="${AUTODNS_CONTEXT:-$(_readaccountconf_mutable AUTODNS_CONTEXT)}"
|
||||||
|
|
||||||
|
if [ -z "$AUTODNS_USER" ] || [ -z "$AUTODNS_CONTEXT" ] || [ -z "$AUTODNS_PASSWORD" ]; then
|
||||||
|
_err "You don't specify autodns user, password and context."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
|
||||||
|
if ! _get_autodns_zone "$fulldomain"; then
|
||||||
|
_err "zone not found"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _zone "$_zone"
|
||||||
|
_debug _system_ns "$_system_ns"
|
||||||
|
|
||||||
|
_info "Delete TXT record"
|
||||||
|
|
||||||
|
autodns_response="$(_autodns_zone_cleanup "$_zone" "$_sub_domain" "$txtvalue" "$_system_ns")"
|
||||||
|
|
||||||
|
if [ "$?" -eq "0" ]; then
|
||||||
|
_info "Deleted, OK"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# fulldomain
|
||||||
|
# Returns:
|
||||||
|
# _sub_domain=_acme-challenge.www
|
||||||
|
# _zone=domain.com
|
||||||
|
# _system_ns
|
||||||
|
_get_autodns_zone() {
|
||||||
|
domain="$1"
|
||||||
|
|
||||||
|
i=2
|
||||||
|
p=1
|
||||||
|
|
||||||
|
while true; do
|
||||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug h "$h"
|
||||||
|
|
||||||
|
if [ -z "$h" ]; then
|
||||||
|
# not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
autodns_response="$(_autodns_zone_inquire "$h")"
|
||||||
|
|
||||||
|
if [ "$?" -ne "0" ]; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _contains "$autodns_response" "<summary>1</summary>" >/dev/null; then
|
||||||
|
_zone="$(echo "$autodns_response" | _egrep_o '<name>[^<]*</name>' | cut -d '>' -f 2 | cut -d '<' -f 1)"
|
||||||
|
_system_ns="$(echo "$autodns_response" | _egrep_o '<system_ns>[^<]*</system_ns>' | cut -d '>' -f 2 | cut -d '<' -f 1)"
|
||||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
p=$i
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
done
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
_build_request_auth_xml() {
|
||||||
|
printf "<auth>
|
||||||
|
<user>%s</user>
|
||||||
|
<password>%s</password>
|
||||||
|
<context>%s</context>
|
||||||
|
</auth>" "$AUTODNS_USER" "$AUTODNS_PASSWORD" "$AUTODNS_CONTEXT"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
_build_zone_inquire_xml() {
|
||||||
|
printf "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
|
||||||
|
<request>
|
||||||
|
%s
|
||||||
|
<task>
|
||||||
|
<code>0205</code>
|
||||||
|
<view>
|
||||||
|
<children>1</children>
|
||||||
|
<limit>1</limit>
|
||||||
|
</view>
|
||||||
|
<where>
|
||||||
|
<key>name</key>
|
||||||
|
<operator>eq</operator>
|
||||||
|
<value>%s</value>
|
||||||
|
</where>
|
||||||
|
</task>
|
||||||
|
</request>" "$(_build_request_auth_xml)" "$1"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
# subdomain
|
||||||
|
# txtvalue
|
||||||
|
# system_ns
|
||||||
|
_build_zone_update_xml() {
|
||||||
|
printf "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
|
||||||
|
<request>
|
||||||
|
%s
|
||||||
|
<task>
|
||||||
|
<code>0202001</code>
|
||||||
|
<default>
|
||||||
|
<rr_add>
|
||||||
|
<name>%s</name>
|
||||||
|
<ttl>600</ttl>
|
||||||
|
<type>TXT</type>
|
||||||
|
<value>%s</value>
|
||||||
|
</rr_add>
|
||||||
|
</default>
|
||||||
|
<zone>
|
||||||
|
<name>%s</name>
|
||||||
|
<system_ns>%s</system_ns>
|
||||||
|
</zone>
|
||||||
|
</task>
|
||||||
|
</request>" "$(_build_request_auth_xml)" "$2" "$3" "$1" "$4"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
_autodns_zone_inquire() {
|
||||||
|
request_data="$(_build_zone_inquire_xml "$1")"
|
||||||
|
autodns_response="$(_autodns_api_call "$request_data")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return "$ret"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
# subdomain
|
||||||
|
# txtvalue
|
||||||
|
# system_ns
|
||||||
|
_autodns_zone_update() {
|
||||||
|
request_data="$(_build_zone_update_xml "$1" "$2" "$3" "$4")"
|
||||||
|
autodns_response="$(_autodns_api_call "$request_data")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return "$ret"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
# subdomain
|
||||||
|
# txtvalue
|
||||||
|
# system_ns
|
||||||
|
_autodns_zone_cleanup() {
|
||||||
|
request_data="$(_build_zone_update_xml "$1" "$2" "$3" "$4")"
|
||||||
|
# replace 'rr_add>' with 'rr_rem>' in request_data
|
||||||
|
request_data="$(printf -- "%s" "$request_data" | sed 's/rr_add>/rr_rem>/g')"
|
||||||
|
autodns_response="$(_autodns_api_call "$request_data")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return "$ret"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# request_data
|
||||||
|
_autodns_api_call() {
|
||||||
|
request_data="$1"
|
||||||
|
|
||||||
|
_debug request_data "$request_data"
|
||||||
|
|
||||||
|
autodns_response="$(_post "$request_data" "$AUTODNS_API")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
_debug autodns_response "$autodns_response"
|
||||||
|
|
||||||
|
if [ "$ret" -ne "0" ]; then
|
||||||
|
_err "error"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _contains "$autodns_response" "<type>success</type>" >/dev/null; then
|
||||||
|
_info "success"
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
137
dnsapi/dns_namesilo.sh
Executable file
137
dnsapi/dns_namesilo.sh
Executable file
@ -0,0 +1,137 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#Author: meowthink
|
||||||
|
#Created 01/14/2017
|
||||||
|
#Utilize namesilo.com API to finish dns-01 verifications.
|
||||||
|
|
||||||
|
Namesilo_API="https://www.namesilo.com/api"
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#Usage: dns_myapi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
||||||
|
dns_namesilo_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
if [ -z "$Namesilo_Key" ]; then
|
||||||
|
Namesilo_Key=""
|
||||||
|
_err "API token for namesilo.com is missing."
|
||||||
|
_err "Please specify that in your environment variable."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
#save the api key and email to the account conf file.
|
||||||
|
_saveaccountconf Namesilo_Key "$Namesilo_Key"
|
||||||
|
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "Unable to find domain specified."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _domain "$_domain"
|
||||||
|
|
||||||
|
_debug txtvalue "$txtvalue"
|
||||||
|
if _namesilo_rest GET "dnsAddRecord?version=1&type=xml&key=$Namesilo_Key&domain=$_domain&rrtype=TXT&rrhost=$_sub_domain&rrvalue=$txtvalue"; then
|
||||||
|
retcode=$(printf "%s\n" "$response" | _egrep_o "<code>300")
|
||||||
|
if [ "$retcode" ]; then
|
||||||
|
_info "Successfully added TXT record, ready for validation."
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Unable to add the DNS record."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
#Usage: fulldomain txtvalue
|
||||||
|
#Remove the txt record after validation.
|
||||||
|
dns_namesilo_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "Unable to find domain specified."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Get the record id.
|
||||||
|
if _namesilo_rest GET "dnsListRecords?version=1&type=xml&key=$Namesilo_Key&domain=$_domain"; then
|
||||||
|
retcode=$(printf "%s\n" "$response" | _egrep_o "<code>300")
|
||||||
|
if [ "$retcode" ]; then
|
||||||
|
_record_id=$(printf "%s\n" "$response" | _egrep_o "<record_id>([^<]*)</record_id><type>TXT</type><host>$fulldomain</host>" | _egrep_o "<record_id>([^<]*)</record_id>" | sed -r "s/<record_id>([^<]*)<\/record_id>/\1/" | tail -n 1)
|
||||||
|
_debug record_id "$_record_id"
|
||||||
|
_info "Successfully retrieved the record id for ACME challenge."
|
||||||
|
else
|
||||||
|
_err "Unable to retrieve the record id."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Remove the DNS record using record id.
|
||||||
|
if _namesilo_rest GET "dnsDeleteRecord?version=1&type=xml&key=$Namesilo_Key&domain=$_domain&rrid=$_record_id"; then
|
||||||
|
retcode=$(printf "%s\n" "$response" | _egrep_o "<code>300")
|
||||||
|
if [ "$retcode" ]; then
|
||||||
|
_info "Successfully removed the TXT record."
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Unable to remove the DNS record."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
# _acme-challenge.www.domain.com
|
||||||
|
# returns
|
||||||
|
# _sub_domain=_acme-challenge.www
|
||||||
|
# _domain=domain.com
|
||||||
|
_get_root() {
|
||||||
|
domain=$1
|
||||||
|
i=2
|
||||||
|
p=1
|
||||||
|
|
||||||
|
if ! _namesilo_rest GET "listDomains?version=1&type=xml&key=$Namesilo_Key"; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Need to exclude the last field (tld)
|
||||||
|
numfields=$(echo "$domain" | _egrep_o "\." | wc -l)
|
||||||
|
while [ $i -le "$numfields" ]; do
|
||||||
|
host=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug host "$host"
|
||||||
|
if [ -z "$host" ]; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _contains "$response" "$host"; then
|
||||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
|
||||||
|
_domain="$host"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
p=$i
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
done
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
_namesilo_rest() {
|
||||||
|
method=$1
|
||||||
|
param=$2
|
||||||
|
data=$3
|
||||||
|
|
||||||
|
if [ "$method" != "GET" ]; then
|
||||||
|
response="$(_post "$data" "$Namesilo_API/$param" "" "$method")"
|
||||||
|
else
|
||||||
|
response="$(_get "$Namesilo_API/$param")"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$?" != "0" ]; then
|
||||||
|
_err "error $param"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug2 response "$response"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user