mirror of
https://github.com/plantroon/acme.sh.git
synced 2024-12-22 13:11:41 +00:00
Merge branch 'dev' into dev
This commit is contained in:
neil
GitHub
commit
130b67821c
115
README.md
115
README.md
@ -45,25 +45,25 @@ Twitter: [@neilpangxa](https://twitter.com/neilpangxa)
|
|||||||
|
|
||||||
| NO | Status| Platform|
|
| NO | Status| Platform|
|
||||||
|----|-------|---------|
|
|----|-------|---------|
|
||||||
|1|[](https://github.com/Neilpang/letest#here-are-the-latest-status)| Ubuntu
|
|1|[](https://github.com/Neilpang/letest#here-are-the-latest-status)| Ubuntu
|
||||||
|2|[](https://github.com/Neilpang/letest#here-are-the-latest-status)| Debian
|
|2|[](https://github.com/Neilpang/letest#here-are-the-latest-status)| Debian
|
||||||
|3|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|CentOS
|
|3|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|CentOS
|
||||||
|4|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Windows (cygwin with curl, openssl and crontab included)
|
|4|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Windows (cygwin with curl, openssl and crontab included)
|
||||||
|5|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|FreeBSD
|
|5|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|FreeBSD
|
||||||
|6|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|pfsense
|
|6|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|pfsense
|
||||||
|7|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|openSUSE
|
|7|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|openSUSE
|
||||||
|8|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Alpine Linux (with curl)
|
|8|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Alpine Linux (with curl)
|
||||||
|9|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Archlinux
|
|9|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Archlinux
|
||||||
|10|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|fedora
|
|10|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|fedora
|
||||||
|11|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Kali Linux
|
|11|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Kali Linux
|
||||||
|12|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Oracle Linux
|
|12|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Oracle Linux
|
||||||
|13|[](https://github.com/Neilpang/letest#here-are-the-latest-status)| Proxmox https://pve.proxmox.com/wiki/HTTPSCertificateConfiguration#Let.27s_Encrypt_using_acme.sh
|
|13|[](https://github.com/Neilpang/letest#here-are-the-latest-status)| Proxmox https://pve.proxmox.com/wiki/HTTPSCertificateConfiguration#Let.27s_Encrypt_using_acme.sh
|
||||||
|14|-----| Cloud Linux https://github.com/Neilpang/le/issues/111
|
|14|-----| Cloud Linux https://github.com/Neilpang/le/issues/111
|
||||||
|15|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|OpenBSD
|
|15|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|OpenBSD
|
||||||
|16|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Mageia
|
|16|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Mageia
|
||||||
|17|-----| OpenWRT: Tested and working. See [wiki page](https://github.com/Neilpang/acme.sh/wiki/How-to-run-on-OpenWRT)
|
|17|-----| OpenWRT: Tested and working. See [wiki page](https://github.com/Neilpang/acme.sh/wiki/How-to-run-on-OpenWRT)
|
||||||
|18|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|SunOS/Solaris
|
|18|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|SunOS/Solaris
|
||||||
|19|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Gentoo Linux
|
|19|[](https://github.com/Neilpang/letest#here-are-the-latest-status)|Gentoo Linux
|
||||||
|20|[](https://travis-ci.org/Neilpang/acme.sh)|Mac OSX
|
|20|[](https://travis-ci.org/Neilpang/acme.sh)|Mac OSX
|
||||||
|
|
||||||
For all build statuses, check our [weekly build project](https://github.com/Neilpang/acmetest):
|
For all build statuses, check our [weekly build project](https://github.com/Neilpang/acmetest):
|
||||||
@ -74,6 +74,7 @@ https://github.com/Neilpang/acmetest
|
|||||||
|
|
||||||
- Letsencrypt.org CA(default)
|
- Letsencrypt.org CA(default)
|
||||||
- [BuyPass.com CA](https://github.com/Neilpang/acme.sh/wiki/BuyPass.com-CA)
|
- [BuyPass.com CA](https://github.com/Neilpang/acme.sh/wiki/BuyPass.com-CA)
|
||||||
|
- [Pebble strict Mode](https://github.com/letsencrypt/pebble)
|
||||||
|
|
||||||
# Supported modes
|
# Supported modes
|
||||||
|
|
||||||
@ -289,85 +290,9 @@ If your DNS provider supports API access, we can use that API to automatically i
|
|||||||
|
|
||||||
You don't have to do anything manually!
|
You don't have to do anything manually!
|
||||||
|
|
||||||
### Currently acme.sh supports:
|
### Currently acme.sh supports most of the dns providers:
|
||||||
|
|
||||||
1. CloudFlare.com API
|
https://github.com/Neilpang/acme.sh/wiki/dnsapi
|
||||||
1. DNSPod.cn API
|
|
||||||
1. CloudXNS.com API
|
|
||||||
1. GoDaddy.com API
|
|
||||||
1. PowerDNS.com API
|
|
||||||
1. OVH, kimsufi, soyoustart and runabove API
|
|
||||||
1. nsupdate API
|
|
||||||
1. LuaDNS.com API
|
|
||||||
1. DNSMadeEasy.com API
|
|
||||||
1. AWS Route 53
|
|
||||||
1. aliyun.com(阿里云) API
|
|
||||||
1. ISPConfig 3.1 API
|
|
||||||
1. Alwaysdata.com API
|
|
||||||
1. Linode.com API
|
|
||||||
1. FreeDNS (https://freedns.afraid.org/)
|
|
||||||
1. cyon.ch
|
|
||||||
1. Domain-Offensive/Resellerinterface/Domainrobot API
|
|
||||||
1. Gandi LiveDNS API
|
|
||||||
1. Knot DNS API
|
|
||||||
1. DigitalOcean API (native)
|
|
||||||
1. ClouDNS.net API
|
|
||||||
1. Infoblox NIOS API (https://www.infoblox.com/)
|
|
||||||
1. VSCALE (https://vscale.io/)
|
|
||||||
1. Dynu API (https://www.dynu.com)
|
|
||||||
1. DNSimple API
|
|
||||||
1. NS1.com API
|
|
||||||
1. DuckDNS.org API
|
|
||||||
1. Name.com API
|
|
||||||
1. Dyn Managed DNS API
|
|
||||||
1. Yandex PDD API (https://pdd.yandex.ru)
|
|
||||||
1. Hurricane Electric DNS service (https://dns.he.net)
|
|
||||||
1. UnoEuro API (https://www.unoeuro.com/)
|
|
||||||
1. INWX (https://www.inwx.de/)
|
|
||||||
1. Servercow (https://servercow.de)
|
|
||||||
1. Namesilo (https://www.namesilo.com)
|
|
||||||
1. InternetX autoDNS API (https://internetx.com)
|
|
||||||
1. Azure DNS
|
|
||||||
1. selectel.com(selectel.ru) DNS API
|
|
||||||
1. zonomi.com DNS API
|
|
||||||
1. DreamHost.com API
|
|
||||||
1. DirectAdmin API
|
|
||||||
1. KingHost (https://www.kinghost.com.br/)
|
|
||||||
1. Zilore (https://zilore.com)
|
|
||||||
1. Loopia.se API
|
|
||||||
1. acme-dns (https://github.com/joohoi/acme-dns)
|
|
||||||
1. TELE3 (https://www.tele3.cz)
|
|
||||||
1. EUSERV.EU (https://www.euserv.eu)
|
|
||||||
1. DNSPod.com API (https://www.dnspod.com)
|
|
||||||
1. Google Cloud DNS API
|
|
||||||
1. ConoHa (https://www.conoha.jp)
|
|
||||||
1. netcup DNS API (https://www.netcup.de)
|
|
||||||
1. GratisDNS.dk (https://gratisdns.dk)
|
|
||||||
1. Namecheap API (https://www.namecheap.com/)
|
|
||||||
1. MyDNS.JP API (https://www.mydns.jp/)
|
|
||||||
1. hosting.de (https://www.hosting.de)
|
|
||||||
1. Neodigit.net API (https://www.neodigit.net)
|
|
||||||
1. Exoscale.com API (https://www.exoscale.com/)
|
|
||||||
1. PointDNS API (https://pointhq.com/)
|
|
||||||
1. Active24.cz API (https://www.active24.cz/)
|
|
||||||
1. do.de API (https://www.do.de/)
|
|
||||||
1. Nexcess API (https://www.nexcess.net)
|
|
||||||
1. Thermo.io API (https://www.thermo.io)
|
|
||||||
1. Futurehosting API (https://www.futurehosting.com)
|
|
||||||
1. Rackspace Cloud DNS (https://www.rackspace.com)
|
|
||||||
1. Online.net API (https://online.net/)
|
|
||||||
|
|
||||||
And:
|
|
||||||
|
|
||||||
**lexicon DNS API: https://github.com/Neilpang/acme.sh/wiki/How-to-use-lexicon-dns-api
|
|
||||||
(DigitalOcean, DNSimple, DNSMadeEasy, DNSPark, EasyDNS, Namesilo, NS1, PointHQ, Rage4 and Vultr etc.)**
|
|
||||||
|
|
||||||
|
|
||||||
**More APIs coming soon...**
|
|
||||||
|
|
||||||
If your DNS provider is not on the supported list above, you can write your own DNS API script easily. If you do, please consider submitting a [Pull Request](https://github.com/Neilpang/acme.sh/pulls) and contribute it to the project.
|
|
||||||
|
|
||||||
For more details: [How to use DNS API](dnsapi)
|
|
||||||
|
|
||||||
# 9. Use DNS manual mode:
|
# 9. Use DNS manual mode:
|
||||||
|
|
||||||
|
|||||||
381
deploy/README.md
381
deploy/README.md
@ -1,383 +1,6 @@
|
|||||||
# Using deploy api
|
# Using deploy api
|
||||||
|
|
||||||
Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert).
|
deploy hook usage:
|
||||||
|
|
||||||
Here are the scripts to deploy the certs/key to the server/services.
|
https://github.com/Neilpang/acme.sh/wiki/deployhooks
|
||||||
|
|
||||||
## 1. Deploy the certs to your cpanel host
|
|
||||||
|
|
||||||
If you want to deploy using cpanel UAPI see 7.
|
|
||||||
|
|
||||||
(cpanel deploy hook is not finished yet, this is just an example.)
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
Then you can deploy now:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_CPANEL_USER=myusername
|
|
||||||
export DEPLOY_CPANEL_PASSWORD=PASSWORD
|
|
||||||
acme.sh --deploy -d example.com --deploy-hook cpanel
|
|
||||||
```
|
|
||||||
|
|
||||||
## 2. Deploy ssl cert on kong proxy engine based on api
|
|
||||||
|
|
||||||
Before you can deploy your cert, you must [issue the cert first](https://github.com/Neilpang/acme.sh/wiki/How-to-issue-a-cert).
|
|
||||||
Currently supports Kong-v0.10.x.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook kong
|
|
||||||
```
|
|
||||||
|
|
||||||
## 3. Deploy the cert to remote server through SSH access
|
|
||||||
|
|
||||||
The ssh deploy plugin allows you to deploy certificates to a remote host
|
|
||||||
using SSH command to connect to the remote server. The ssh plugin is invoked
|
|
||||||
with the following command...
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d example.com --deploy-hook ssh
|
|
||||||
```
|
|
||||||
Prior to running this for the first time you must tell the plugin where
|
|
||||||
and how to deploy the certificates. This is done by exporting the following
|
|
||||||
environment variables. This is not required for subsequent runs as the
|
|
||||||
values are stored by acme.sh in the domain configuration files.
|
|
||||||
|
|
||||||
Required...
|
|
||||||
```
|
|
||||||
export DEPLOY_SSH_USER=username
|
|
||||||
```
|
|
||||||
Optional...
|
|
||||||
```
|
|
||||||
export DEPLOY_SSH_CMD=custom ssh command
|
|
||||||
export DEPLOY_SSH_SERVER=url or ip address of remote host
|
|
||||||
export DEPLOY_SSH_KEYFILE=filename for private key
|
|
||||||
export DEPLOY_SSH_CERTFILE=filename for certificate file
|
|
||||||
export DEPLOY_SSH_CAFILE=filename for intermediate CA file
|
|
||||||
export DEPLOY_SSH_FULLCHAIN=filename for fullchain file
|
|
||||||
export DEPLOY_SSH_REMOTE_CMD=command to execute on remote host
|
|
||||||
export DEPLOY_SSH_BACKUP=yes or no
|
|
||||||
```
|
|
||||||
|
|
||||||
**DEPLOY_SSH_USER**
|
|
||||||
Username at the remote host that SSH will login with. Note that
|
|
||||||
SSH must be able to login to remote host without a password... SSH Keys
|
|
||||||
must have been exchanged with the remote host. Validate and test that you
|
|
||||||
can login to USER@URL from the host running acme.sh before using this script.
|
|
||||||
|
|
||||||
The USER@URL at the remote server must also have has permissions to write to
|
|
||||||
the target location of the certificate files and to execute any commands
|
|
||||||
(e.g. to stop/start services).
|
|
||||||
|
|
||||||
**DEPLOY_SSH_CMD**
|
|
||||||
You can customize the ssh command used to connect to the remote host. For example
|
|
||||||
if you need to connect to a specific port at the remote server you can set this
|
|
||||||
to, for example, "ssh -p 22" or to use `sshpass` to provide password inline
|
|
||||||
instead of exchanging ssh keys (this is not recommended, using keys is
|
|
||||||
more secure).
|
|
||||||
|
|
||||||
**DEPLOY_SSH_SERVER**
|
|
||||||
URL or IP Address of the remote server. If not provided then the domain
|
|
||||||
name provided on the acme.sh --deploy command line is used.
|
|
||||||
|
|
||||||
**DEPLOY_SSH_KEYFILE**
|
|
||||||
Target filename for the private key issued by LetsEncrypt.
|
|
||||||
|
|
||||||
**DEPLOY_SSH_CERTFILE**
|
|
||||||
Target filename for the certificate issued by LetsEncrypt.
|
|
||||||
If this is the same as the previous filename (for keyfile) then it is
|
|
||||||
appended to the same file.
|
|
||||||
|
|
||||||
**DEPLOY_SSH_CAFILE**
|
|
||||||
Target filename for the CA intermediate certificate issued by LetsEncrypt.
|
|
||||||
If this is the same as a previous filename (for keyfile or certfile) then
|
|
||||||
it is appended to the same file.
|
|
||||||
|
|
||||||
**DEPLOY_SSH_FULLCHAIN**
|
|
||||||
Target filename for the fullchain certificate issued by LetsEncrypt.
|
|
||||||
If this is the same as a previous filename (for keyfile, certfile or
|
|
||||||
cafile) then it is appended to the same file.
|
|
||||||
|
|
||||||
**DEPLOY_SSH_REMOTE_CMD**
|
|
||||||
Command to execute on the remote server after copying any certificates. This
|
|
||||||
could be any additional command required for example to stop and restart
|
|
||||||
the service.
|
|
||||||
|
|
||||||
**DEPLOY_SSH_BACKUP**
|
|
||||||
Before writing a certificate file to the remote server the existing
|
|
||||||
certificate will be copied to a backup directory on the remote server.
|
|
||||||
These are placed in a hidden directory in the home directory of the SSH
|
|
||||||
user
|
|
||||||
```sh
|
|
||||||
~/.acme_ssh_deploy/[domain name]-backup-[timestamp]
|
|
||||||
```
|
|
||||||
Any backups older than 180 days will be deleted when new certificates
|
|
||||||
are deployed. This defaults to "yes" set to "no" to disable backup.
|
|
||||||
|
|
||||||
###Examples using SSH deploy
|
|
||||||
The following example illustrates deploying certificates to a QNAP NAS
|
|
||||||
(tested with QTS version 4.2.3)
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_SSH_USER="admin"
|
|
||||||
export DEPLOY_SSH_KEYFILE="/etc/stunnel/stunnel.pem"
|
|
||||||
export DEPLOY_SSH_CERTFILE="/etc/stunnel/stunnel.pem"
|
|
||||||
export DEPLOY_SSH_CAFILE="/etc/stunnel/uca.pem"
|
|
||||||
export DEPLOY_SSH_REMOTE_CMD="/etc/init.d/stunnel.sh restart"
|
|
||||||
|
|
||||||
acme.sh --deploy -d qnap.example.com --deploy-hook ssh
|
|
||||||
```
|
|
||||||
Note how in this example both the private key and certificate point to
|
|
||||||
the same file. This will result in the certificate being appended
|
|
||||||
to the same file as the private key... a common requirement of several
|
|
||||||
services.
|
|
||||||
|
|
||||||
The next example illustrates deploying certificates to a Unifi
|
|
||||||
Controller (tested with version 5.4.11).
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_SSH_USER="root"
|
|
||||||
export DEPLOY_SSH_KEYFILE="/var/lib/unifi/unifi.example.com.key"
|
|
||||||
export DEPLOY_SSH_FULLCHAIN="/var/lib/unifi/unifi.example.com.cer"
|
|
||||||
export DEPLOY_SSH_REMOTE_CMD="openssl pkcs12 -export \
|
|
||||||
-inkey /var/lib/unifi/unifi.example.com.key \
|
|
||||||
-in /var/lib/unifi/unifi.example.com.cer \
|
|
||||||
-out /var/lib/unifi/unifi.example.com.p12 \
|
|
||||||
-name ubnt -password pass:temppass \
|
|
||||||
&& keytool -importkeystore -deststorepass aircontrolenterprise \
|
|
||||||
-destkeypass aircontrolenterprise \
|
|
||||||
-destkeystore /var/lib/unifi/keystore \
|
|
||||||
-srckeystore /var/lib/unifi/unifi.example.com.p12 \
|
|
||||||
-srcstoretype PKCS12 -srcstorepass temppass -alias ubnt -noprompt \
|
|
||||||
&& service unifi restart"
|
|
||||||
|
|
||||||
acme.sh --deploy -d unifi.example.com --deploy-hook ssh
|
|
||||||
```
|
|
||||||
In this example we execute several commands on the remote host
|
|
||||||
after the certificate files have been copied... to generate a pkcs12 file
|
|
||||||
compatible with Unifi, to import it into the Unifi keystore and then finally
|
|
||||||
to restart the service.
|
|
||||||
|
|
||||||
Note also that once the certificate is imported
|
|
||||||
into the keystore the individual certificate files are no longer
|
|
||||||
required. We could if we desired delete those files immediately. If we
|
|
||||||
do that then we should disable backup at the remote host (as there are
|
|
||||||
no files to backup -- they were erased during deployment). For example...
|
|
||||||
```sh
|
|
||||||
export DEPLOY_SSH_BACKUP=no
|
|
||||||
# modify the end of the remote command...
|
|
||||||
&& rm /var/lib/unifi/unifi.example.com.key \
|
|
||||||
/var/lib/unifi/unifi.example.com.cer \
|
|
||||||
/var/lib/unifi/unifi.example.com.p12 \
|
|
||||||
&& service unifi restart
|
|
||||||
```
|
|
||||||
|
|
||||||
## 4. Deploy the cert to local vsftpd server
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd
|
|
||||||
```
|
|
||||||
|
|
||||||
The default vsftpd conf file is `/etc/vsftpd.conf`, if your vsftpd conf is not in the default location, you can specify one:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_VSFTPD_CONF="/etc/vsftpd.conf"
|
|
||||||
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd
|
|
||||||
```
|
|
||||||
|
|
||||||
The default command to restart vsftpd server is `service vsftpd restart`, if it doesn't work, you can specify one:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_VSFTPD_RELOAD="/etc/init.d/vsftpd restart"
|
|
||||||
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook vsftpd
|
|
||||||
```
|
|
||||||
|
|
||||||
## 5. Deploy the cert to local exim4 server
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook exim4
|
|
||||||
```
|
|
||||||
|
|
||||||
The default exim4 conf file is `/etc/exim/exim.conf`, if your exim4 conf is not in the default location, you can specify one:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_EXIM4_CONF="/etc/exim4/exim4.conf.template"
|
|
||||||
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook exim4
|
|
||||||
```
|
|
||||||
|
|
||||||
The default command to restart exim4 server is `service exim4 restart`, if it doesn't work, you can specify one:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_EXIM4_RELOAD="/etc/init.d/exim4 restart"
|
|
||||||
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook exim4
|
|
||||||
```
|
|
||||||
|
|
||||||
## 6. Deploy the cert to OSX Keychain
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook keychain
|
|
||||||
```
|
|
||||||
|
|
||||||
## 7. Deploy to cpanel host using UAPI
|
|
||||||
|
|
||||||
This hook is using UAPI and works in cPanel & WHM version 56 or newer.
|
|
||||||
```
|
|
||||||
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi
|
|
||||||
```
|
|
||||||
DEPLOY_CPANEL_USER is required only if you run the script as root and it should contain cpanel username.
|
|
||||||
```sh
|
|
||||||
export DEPLOY_CPANEL_USER=username
|
|
||||||
acme.sh --deploy -d example.com --deploy-hook cpanel_uapi
|
|
||||||
```
|
|
||||||
Please note, that the cpanel_uapi hook will deploy only the first domain when your certificate will automatically renew. Therefore you should issue a separate certificate for each domain.
|
|
||||||
|
|
||||||
## 8. Deploy the cert to your FRITZ!Box router
|
|
||||||
|
|
||||||
You must specify the credentials that have administrative privileges on the FRITZ!Box in order to deploy the certificate, plus the URL of your FRITZ!Box, through the following environment variables:
|
|
||||||
```sh
|
|
||||||
$ export DEPLOY_FRITZBOX_USERNAME=my_username
|
|
||||||
$ export DEPLOY_FRITZBOX_PASSWORD=the_password
|
|
||||||
$ export DEPLOY_FRITZBOX_URL=https://fritzbox.example.com
|
|
||||||
```
|
|
||||||
|
|
||||||
After the first deployment, these values will be stored in your $HOME/.acme.sh/account.conf. You may now deploy the certificate like this:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d fritzbox.example.com --deploy-hook fritzbox
|
|
||||||
```
|
|
||||||
|
|
||||||
## 9. Deploy the cert to strongswan
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d ftp.example.com --deploy-hook strongswan
|
|
||||||
```
|
|
||||||
|
|
||||||
## 10. Deploy the cert to HAProxy
|
|
||||||
|
|
||||||
You must specify the path where you want the concatenated key and certificate chain written.
|
|
||||||
```sh
|
|
||||||
export DEPLOY_HAPROXY_PEM_PATH=/etc/haproxy
|
|
||||||
```
|
|
||||||
|
|
||||||
You may optionally define the command to reload HAProxy. The value shown below will be used as the default if you don't set this environment variable.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export DEPLOY_HAPROXY_RELOAD="/usr/sbin/service haproxy restart"
|
|
||||||
```
|
|
||||||
|
|
||||||
You can then deploy the certificate as follows
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d haproxy.example.com --deploy-hook haproxy
|
|
||||||
```
|
|
||||||
|
|
||||||
The path for the PEM file will be stored with the domain configuration and will be available when renewing, so that deploy will happen automatically when renewed.
|
|
||||||
|
|
||||||
## 11. Deploy your cert to Gitlab pages
|
|
||||||
|
|
||||||
You must define the API key and the informations for the project and Gitlab page you are updating the certificate for.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
# The token can be created in your user settings under "Access Tokens"
|
|
||||||
export GITLAB_TOKEN="xxxxxxxxxxx"
|
|
||||||
|
|
||||||
# The project ID is displayed on the home page of the project
|
|
||||||
export GITLAB_PROJECT_ID=12345678
|
|
||||||
|
|
||||||
# The domain must match the one defined for the Gitlab page, without "https://"
|
|
||||||
export GITLAB_DOMAIN="www.mydomain.com"
|
|
||||||
```
|
|
||||||
|
|
||||||
You can then deploy the certificate as follows
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d www.mydomain.com --deploy-hook gitlab
|
|
||||||
```
|
|
||||||
|
|
||||||
## 12. Deploy your cert to Hashicorp Vault
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export VAULT_PREFIX="acme"
|
|
||||||
```
|
|
||||||
|
|
||||||
You can then deploy the certificate as follows
|
|
||||||
|
|
||||||
```sh
|
|
||||||
acme.sh --deploy -d www.mydomain.com --deploy-hook vault_cli
|
|
||||||
```
|
|
||||||
|
|
||||||
Your certs will be saved in Vault using this structure:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
vault write "${VAULT_PREFIX}/${domain}/cert.pem" value=@"..."
|
|
||||||
vault write "${VAULT_PREFIX}/${domain}/cert.key" value=@"..."
|
|
||||||
vault write "${VAULT_PREFIX}/${domain}/chain.pem" value=@"..."
|
|
||||||
vault write "${VAULT_PREFIX}/${domain}/fullchain.pem" value=@"..."
|
|
||||||
```
|
|
||||||
|
|
||||||
You might be using Fabio load balancer (which can get certs from
|
|
||||||
Vault). It needs a bit different structure of your certs in Vault. It
|
|
||||||
gets certs only from keys that were saved in `prefix/domain`, like this:
|
|
||||||
|
|
||||||
```bash
|
|
||||||
vault write <PREFIX>/www.domain.com cert=@cert.pem key=@key.pem
|
|
||||||
```
|
|
||||||
|
|
||||||
If you want to save certs in Vault this way just set "FABIO" env
|
|
||||||
variable to anything (ex: "1") before running `acme.sh`:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
export FABIO="1"
|
|
||||||
```
|
|
||||||
|
|
||||||
## 13. Deploy your certificate to Qiniu.com
|
|
||||||
|
|
||||||
使用 acme.sh 部署到七牛之前，需要确保部署的域名已打开 HTTPS 功能，您可以访问[融合 CDN - 域名管理](https://portal.qiniu.com/cdn/domain) 设置。
|
|
||||||
另外还需要先导出 AK/SK 环境变量，您可以访问[密钥管理](https://portal.qiniu.com/user/key) 获得。
|
|
||||||
|
|
||||||
```sh
|
|
||||||
$ export QINIU_AK="foo"
|
|
||||||
$ export QINIU_SK="bar"
|
|
||||||
```
|
|
||||||
|
|
||||||
完成准备工作之后，您就可以通过下面的命令开始部署 SSL 证书到七牛上：
|
|
||||||
|
|
||||||
```sh
|
|
||||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu
|
|
||||||
```
|
|
||||||
|
|
||||||
假如您部署的证书为泛域名证书，您还需要设置 `QINIU_CDN_DOMAIN` 变量，指定实际需要部署的域名：
|
|
||||||
|
|
||||||
```sh
|
|
||||||
$ export QINIU_CDN_DOMAIN="cdn.example.com"
|
|
||||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu
|
|
||||||
```
|
|
||||||
|
|
||||||
### English version
|
|
||||||
|
|
||||||
You should create AccessKey/SecretKey pair in https://portal.qiniu.com/user/key
|
|
||||||
before deploying your certificate, and please ensure you have enabled HTTPS for
|
|
||||||
your domain name. You can enable it in https://portal.qiniu.com/cdn/domain.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
$ export QINIU_AK="foo"
|
|
||||||
$ export QINIU_SK="bar"
|
|
||||||
```
|
|
||||||
|
|
||||||
then you can deploy certificate by following command:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu
|
|
||||||
```
|
|
||||||
|
|
||||||
(Optional), If you are using wildcard certificate,
|
|
||||||
you may need export `QINIU_CDN_DOMAIN` to specify which domain
|
|
||||||
you want to update:
|
|
||||||
|
|
||||||
```sh
|
|
||||||
$ export QINIU_CDN_DOMAIN="cdn.example.com"
|
|
||||||
$ acme.sh --deploy -d example.com --deploy-hook qiniu
|
|
||||||
```
|
|
||||||
|
|||||||
140
deploy/gcore_cdn.sh
Normal file
140
deploy/gcore_cdn.sh
Normal file
@ -0,0 +1,140 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# Here is the script to deploy the cert to G-Core CDN service (https://gcorelabs.com/ru/) using the G-Core Labs API (https://docs.gcorelabs.com/cdn/).
|
||||||
|
# Uses command line curl for send requests and jq for parse responses.
|
||||||
|
# Returns 0 when success.
|
||||||
|
#
|
||||||
|
# Written by temoffey <temofffey@gmail.com>
|
||||||
|
# Public domain, 2019
|
||||||
|
|
||||||
|
#export DEPLOY_GCORE_CDN_USERNAME=myusername
|
||||||
|
#export DEPLOY_GCORE_CDN_PASSWORD=mypassword
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#domain keyfile certfile cafile fullchain
|
||||||
|
|
||||||
|
gcore_cdn_deploy() {
|
||||||
|
_cdomain="$1"
|
||||||
|
_ckey="$2"
|
||||||
|
_ccert="$3"
|
||||||
|
_cca="$4"
|
||||||
|
_cfullchain="$5"
|
||||||
|
|
||||||
|
_debug _cdomain "$_cdomain"
|
||||||
|
_debug _ckey "$_ckey"
|
||||||
|
_debug _ccert "$_ccert"
|
||||||
|
_debug _cca "$_cca"
|
||||||
|
_debug _cfullchain "$_cfullchain"
|
||||||
|
|
||||||
|
_fullchain=$(tr '\r\n' '*#' <"$_cfullchain" | sed 's/*#/#/g;s/##/#/g;s/#/\\n/g')
|
||||||
|
_key=$(tr '\r\n' '*#' <"$_ckey" | sed 's/*#/#/g;s/#/\\n/g')
|
||||||
|
|
||||||
|
_debug _fullchain "$_fullchain"
|
||||||
|
_debug _key "$_key"
|
||||||
|
|
||||||
|
if [ -z "$DEPLOY_GCORE_CDN_USERNAME" ]; then
|
||||||
|
if [ -z "$Le_Deploy_gcore_cdn_username" ]; then
|
||||||
|
_err "Please define the target username: export DEPLOY_GCORE_CDN_USERNAME=username"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
Le_Deploy_gcore_cdn_username="$DEPLOY_GCORE_CDN_USERNAME"
|
||||||
|
_savedomainconf Le_Deploy_gcore_cdn_username "$Le_Deploy_gcore_cdn_username"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$DEPLOY_GCORE_CDN_PASSWORD" ]; then
|
||||||
|
if [ -z "$Le_Deploy_gcore_cdn_password" ]; then
|
||||||
|
_err "Please define the target password: export DEPLOY_GCORE_CDN_PASSWORD=password"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
Le_Deploy_gcore_cdn_password="$DEPLOY_GCORE_CDN_PASSWORD"
|
||||||
|
_savedomainconf Le_Deploy_gcore_cdn_password "$Le_Deploy_gcore_cdn_password"
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Get authorization token"
|
||||||
|
_request="{\"username\":\"$Le_Deploy_gcore_cdn_username\",\"password\":\"$Le_Deploy_gcore_cdn_password\"}"
|
||||||
|
_debug _request "$_request"
|
||||||
|
export _H1="Content-Type:application/json"
|
||||||
|
_response=$(_post "$_request" "https://api.gcdn.co/auth/signin")
|
||||||
|
_debug _response "$_response"
|
||||||
|
_regex=".*\"token\":\"\([-._0-9A-Za-z]*\)\".*$"
|
||||||
|
_debug _regex "$_regex"
|
||||||
|
_token=$(echo "$_response" | sed -n "s/$_regex/\1/p")
|
||||||
|
_debug _token "$_token"
|
||||||
|
|
||||||
|
if [ -z "$_token" ]; then
|
||||||
|
_err "Error G-Core Labs API authorization"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Find CDN resource with cname $_cdomain"
|
||||||
|
export _H2="Authorization:Token $_token"
|
||||||
|
_response=$(_get "https://api.gcdn.co/resources")
|
||||||
|
_debug _response "$_response"
|
||||||
|
_regex=".*(\"id\".*?\"cname\":\"$_cdomain\".*?})"
|
||||||
|
_regex="^.*\"cname\":\"$_cdomain\".*$"
|
||||||
|
_debug _regex "$_regex"
|
||||||
|
_resource=$(echo "$_response" | sed 's/},{/},\n{/g' | _egrep_o "$_regex")
|
||||||
|
_debug _resource "$_resource"
|
||||||
|
_regex=".*\"id\":\([0-9]*\),.*$"
|
||||||
|
_debug _regex "$_regex"
|
||||||
|
_resourceId=$(echo "$_resource" | sed -n "s/$_regex/\1/p")
|
||||||
|
_debug _resourceId "$_resourceId"
|
||||||
|
_regex=".*\"sslData\":\([0-9]*\)}.*$"
|
||||||
|
_debug _regex "$_regex"
|
||||||
|
_sslDataOld=$(echo "$_resource" | sed -n "s/$_regex/\1/p")
|
||||||
|
_debug _sslDataOld "$_sslDataOld"
|
||||||
|
_regex=".*\"originGroup\":\([0-9]*\),.*$"
|
||||||
|
_debug _regex "$_regex"
|
||||||
|
_originGroup=$(echo "$_resource" | sed -n "s/$_regex/\1/p")
|
||||||
|
_debug _originGroup "$_originGroup"
|
||||||
|
|
||||||
|
if [ -z "$_resourceId" ] || [ -z "$_originGroup" ]; then
|
||||||
|
_err "Not found CDN resource with cname $_cdomain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Add new SSL certificate"
|
||||||
|
_date=$(date "+%d.%m.%Y %H:%M:%S")
|
||||||
|
_request="{\"name\":\"$_cdomain ($_date)\",\"sslCertificate\":\"$_fullchain\",\"sslPrivateKey\":\"$_key\"}"
|
||||||
|
_debug _request "$_request"
|
||||||
|
_response=$(_post "$_request" "https://api.gcdn.co/sslData")
|
||||||
|
_debug _response "$_response"
|
||||||
|
_regex=".*\"id\":\([0-9]*\),.*$"
|
||||||
|
_debug _regex "$_regex"
|
||||||
|
_sslDataAdd=$(echo "$_response" | sed -n "s/$_regex/\1/p")
|
||||||
|
_debug _sslDataAdd "$_sslDataAdd"
|
||||||
|
|
||||||
|
if [ -z "$_sslDataAdd" ]; then
|
||||||
|
_err "Error new SSL certificate add"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Update CDN resource"
|
||||||
|
_request="{\"originGroup\":$_originGroup,\"sslData\":$_sslDataAdd}"
|
||||||
|
_debug _request "$_request"
|
||||||
|
_response=$(_post "$_request" "https://api.gcdn.co/resources/$_resourceId" '' "PUT")
|
||||||
|
_debug _response "$_response"
|
||||||
|
_regex=".*\"sslData\":\([0-9]*\)}.*$"
|
||||||
|
_debug _regex "$_regex"
|
||||||
|
_sslDataNew=$(echo "$_response" | sed -n "s/$_regex/\1/p")
|
||||||
|
_debug _sslDataNew "$_sslDataNew"
|
||||||
|
|
||||||
|
if [ "$_sslDataNew" != "$_sslDataAdd" ]; then
|
||||||
|
_err "Error CDN resource update"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$_sslDataOld" ] || [ "$_sslDataOld" = "null" ]; then
|
||||||
|
_info "Not found old SSL certificate"
|
||||||
|
else
|
||||||
|
_info "Delete old SSL certificate"
|
||||||
|
_response=$(_post '' "https://api.gcdn.co/sslData/$_sslDataOld" '' "DELETE")
|
||||||
|
_debug _response "$_response"
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Certificate successfully deployed"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
@ -1,8 +1,41 @@
|
|||||||
#!/usr/bin/env sh
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
#Here is a script to deploy cert to haproxy server.
|
# Script for acme.sh to deploy certificates to haproxy
|
||||||
|
#
|
||||||
#returns 0 means success, otherwise error.
|
# The following variables can be exported:
|
||||||
|
#
|
||||||
|
# export DEPLOY_HAPROXY_PEM_NAME="${domain}.pem"
|
||||||
|
#
|
||||||
|
# Defines the name of the PEM file.
|
||||||
|
# Defaults to "<domain>.pem"
|
||||||
|
#
|
||||||
|
# export DEPLOY_HAPROXY_PEM_PATH="/etc/haproxy"
|
||||||
|
#
|
||||||
|
# Defines location of PEM file for HAProxy.
|
||||||
|
# Defaults to /etc/haproxy
|
||||||
|
#
|
||||||
|
# export DEPLOY_HAPROXY_RELOAD="systemctl reload haproxy"
|
||||||
|
#
|
||||||
|
# OPTIONAL: Reload command used post deploy
|
||||||
|
# This defaults to be a no-op (ie "true").
|
||||||
|
# It is strongly recommended to set this something that makes sense
|
||||||
|
# for your distro.
|
||||||
|
#
|
||||||
|
# export DEPLOY_HAPROXY_ISSUER="no"
|
||||||
|
#
|
||||||
|
# OPTIONAL: Places CA file as "${DEPLOY_HAPROXY_PEM}.issuer"
|
||||||
|
# Note: Required for OCSP stapling to work
|
||||||
|
#
|
||||||
|
# export DEPLOY_HAPROXY_BUNDLE="no"
|
||||||
|
#
|
||||||
|
# OPTIONAL: Deploy this certificate as part of a multi-cert bundle
|
||||||
|
# This adds a suffix to the certificate based on the certificate type
|
||||||
|
# eg RSA certificates will have .rsa as a suffix to the file name
|
||||||
|
# HAProxy will load all certificates and provide one or the other
|
||||||
|
# depending on client capabilities
|
||||||
|
# Note: This functionality requires HAProxy was compiled against
|
||||||
|
# a version of OpenSSL that supports this.
|
||||||
|
#
|
||||||
|
|
||||||
######## Public functions #####################
|
######## Public functions #####################
|
||||||
|
|
||||||
@ -14,45 +47,226 @@ haproxy_deploy() {
|
|||||||
_cca="$4"
|
_cca="$4"
|
||||||
_cfullchain="$5"
|
_cfullchain="$5"
|
||||||
|
|
||||||
_debug _cdomain "$_cdomain"
|
# Some defaults
|
||||||
_debug _ckey "$_ckey"
|
DEPLOY_HAPROXY_PEM_PATH_DEFAULT="/etc/haproxy"
|
||||||
_debug _ccert "$_ccert"
|
DEPLOY_HAPROXY_PEM_NAME_DEFAULT="${_cdomain}.pem"
|
||||||
_debug _cca "$_cca"
|
DEPLOY_HAPROXY_BUNDLE_DEFAULT="no"
|
||||||
_debug _cfullchain "$_cfullchain"
|
DEPLOY_HAPROXY_ISSUER_DEFAULT="no"
|
||||||
|
DEPLOY_HAPROXY_RELOAD_DEFAULT="true"
|
||||||
|
|
||||||
# handle reload preference
|
if [ -f "${DOMAIN_CONF}" ]; then
|
||||||
DEFAULT_HAPROXY_RELOAD="/usr/sbin/service haproxy restart"
|
# shellcheck disable=SC1090
|
||||||
if [ -z "${DEPLOY_HAPROXY_RELOAD}" ]; then
|
. "${DOMAIN_CONF}"
|
||||||
_reload="${DEFAULT_HAPROXY_RELOAD}"
|
|
||||||
_cleardomainconf DEPLOY_HAPROXY_RELOAD
|
|
||||||
else
|
|
||||||
_reload="${DEPLOY_HAPROXY_RELOAD}"
|
|
||||||
_savedomainconf DEPLOY_HAPROXY_RELOAD "$DEPLOY_HAPROXY_RELOAD"
|
|
||||||
fi
|
fi
|
||||||
_savedomainconf DEPLOY_HAPROXY_PEM_PATH "$DEPLOY_HAPROXY_PEM_PATH"
|
|
||||||
|
|
||||||
# work out the path where the PEM file should go
|
_debug _cdomain "${_cdomain}"
|
||||||
_pem_path="${DEPLOY_HAPROXY_PEM_PATH}"
|
_debug _ckey "${_ckey}"
|
||||||
if [ -z "$_pem_path" ]; then
|
_debug _ccert "${_ccert}"
|
||||||
_err "Path to save PEM file not found. Please define DEPLOY_HAPROXY_PEM_PATH."
|
_debug _cca "${_cca}"
|
||||||
return 1
|
_debug _cfullchain "${_cfullchain}"
|
||||||
|
|
||||||
|
# PEM_PATH is optional. If not provided then assume "${DEPLOY_HAPROXY_PEM_PATH_DEFAULT}"
|
||||||
|
if [ -n "${DEPLOY_HAPROXY_PEM_PATH}" ]; then
|
||||||
|
Le_Deploy_haproxy_pem_path="${DEPLOY_HAPROXY_PEM_PATH}"
|
||||||
|
_savedomainconf Le_Deploy_haproxy_pem_path "${Le_Deploy_haproxy_pem_path}"
|
||||||
|
elif [ -z "${Le_Deploy_haproxy_pem_path}" ]; then
|
||||||
|
Le_Deploy_haproxy_pem_path="${DEPLOY_HAPROXY_PEM_PATH_DEFAULT}"
|
||||||
fi
|
fi
|
||||||
_pem_full_path="$_pem_path/$_cdomain.pem"
|
|
||||||
_info "Full path to PEM $_pem_full_path"
|
|
||||||
|
|
||||||
# combine the key and fullchain into a single pem and install
|
# Ensure PEM_PATH exists
|
||||||
cat "$_cfullchain" "$_ckey" >"$_pem_full_path"
|
if [ -d "${Le_Deploy_haproxy_pem_path}" ]; then
|
||||||
chmod 600 "$_pem_full_path"
|
_debug "PEM_PATH ${Le_Deploy_haproxy_pem_path} exists"
|
||||||
_info "Certificate successfully deployed"
|
|
||||||
|
|
||||||
# restart HAProxy
|
|
||||||
_info "Run reload: $_reload"
|
|
||||||
if eval "$_reload"; then
|
|
||||||
_info "Reload success!"
|
|
||||||
return 0
|
|
||||||
else
|
else
|
||||||
_err "Reload error"
|
_err "PEM_PATH ${Le_Deploy_haproxy_pem_path} does not exist"
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
|
# PEM_NAME is optional. If not provided then assume "${DEPLOY_HAPROXY_PEM_NAME_DEFAULT}"
|
||||||
|
if [ -n "${DEPLOY_HAPROXY_PEM_NAME}" ]; then
|
||||||
|
Le_Deploy_haproxy_pem_name="${DEPLOY_HAPROXY_PEM_NAME}"
|
||||||
|
_savedomainconf Le_Deploy_haproxy_pem_name "${Le_Deploy_haproxy_pem_name}"
|
||||||
|
elif [ -z "${Le_Deploy_haproxy_pem_name}" ]; then
|
||||||
|
Le_Deploy_haproxy_pem_name="${DEPLOY_HAPROXY_PEM_NAME_DEFAULT}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# BUNDLE is optional. If not provided then assume "${DEPLOY_HAPROXY_BUNDLE_DEFAULT}"
|
||||||
|
if [ -n "${DEPLOY_HAPROXY_BUNDLE}" ]; then
|
||||||
|
Le_Deploy_haproxy_bundle="${DEPLOY_HAPROXY_BUNDLE}"
|
||||||
|
_savedomainconf Le_Deploy_haproxy_bundle "${Le_Deploy_haproxy_bundle}"
|
||||||
|
elif [ -z "${Le_Deploy_haproxy_bundle}" ]; then
|
||||||
|
Le_Deploy_haproxy_bundle="${DEPLOY_HAPROXY_BUNDLE_DEFAULT}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# ISSUER is optional. If not provided then assume "${DEPLOY_HAPROXY_ISSUER_DEFAULT}"
|
||||||
|
if [ -n "${DEPLOY_HAPROXY_ISSUER}" ]; then
|
||||||
|
Le_Deploy_haproxy_issuer="${DEPLOY_HAPROXY_ISSUER}"
|
||||||
|
_savedomainconf Le_Deploy_haproxy_issuer "${Le_Deploy_haproxy_issuer}"
|
||||||
|
elif [ -z "${Le_Deploy_haproxy_issuer}" ]; then
|
||||||
|
Le_Deploy_haproxy_issuer="${DEPLOY_HAPROXY_ISSUER_DEFAULT}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# RELOAD is optional. If not provided then assume "${DEPLOY_HAPROXY_RELOAD_DEFAULT}"
|
||||||
|
if [ -n "${DEPLOY_HAPROXY_RELOAD}" ]; then
|
||||||
|
Le_Deploy_haproxy_reload="${DEPLOY_HAPROXY_RELOAD}"
|
||||||
|
_savedomainconf Le_Deploy_haproxy_reload "${Le_Deploy_haproxy_reload}"
|
||||||
|
elif [ -z "${Le_Deploy_haproxy_reload}" ]; then
|
||||||
|
Le_Deploy_haproxy_reload="${DEPLOY_HAPROXY_RELOAD_DEFAULT}"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Set the suffix depending if we are creating a bundle or not
|
||||||
|
if [ "${Le_Deploy_haproxy_bundle}" = "yes" ]; then
|
||||||
|
_info "Bundle creation requested"
|
||||||
|
# Initialise $Le_Keylength if its not already set
|
||||||
|
if [ -z "${Le_Keylength}" ]; then
|
||||||
|
Le_Keylength=""
|
||||||
|
fi
|
||||||
|
if _isEccKey "${Le_Keylength}"; then
|
||||||
|
_info "ECC key type detected"
|
||||||
|
_suffix=".ecdsa"
|
||||||
|
else
|
||||||
|
_info "RSA key type detected"
|
||||||
|
_suffix=".rsa"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
_suffix=""
|
||||||
|
fi
|
||||||
|
_debug _suffix "${_suffix}"
|
||||||
|
|
||||||
|
# Set variables for later
|
||||||
|
_pem="${Le_Deploy_haproxy_pem_path}/${Le_Deploy_haproxy_pem_name}${_suffix}"
|
||||||
|
_issuer="${_pem}.issuer"
|
||||||
|
_ocsp="${_pem}.ocsp"
|
||||||
|
_reload="${Le_Deploy_haproxy_reload}"
|
||||||
|
|
||||||
|
_info "Deploying PEM file"
|
||||||
|
# Create a temporary PEM file
|
||||||
|
_temppem="$(_mktemp)"
|
||||||
|
_debug _temppem "${_temppem}"
|
||||||
|
cat "${_ckey}" "${_ccert}" "${_cca}" >"${_temppem}"
|
||||||
|
_ret="$?"
|
||||||
|
|
||||||
|
# Check that we could create the temporary file
|
||||||
|
if [ "${_ret}" != "0" ]; then
|
||||||
|
_err "Error code ${_ret} returned during PEM file creation"
|
||||||
|
[ -f "${_temppem}" ] && rm -f "${_temppem}"
|
||||||
|
return ${_ret}
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Move PEM file into place
|
||||||
|
_info "Moving new certificate into place"
|
||||||
|
_debug _pem "${_pem}"
|
||||||
|
cat "${_temppem}" >"${_pem}"
|
||||||
|
_ret=$?
|
||||||
|
|
||||||
|
# Clean up temp file
|
||||||
|
[ -f "${_temppem}" ] && rm -f "${_temppem}"
|
||||||
|
|
||||||
|
# Deal with any failure of moving PEM file into place
|
||||||
|
if [ "${_ret}" != "0" ]; then
|
||||||
|
_err "Error code ${_ret} returned while moving new certificate into place"
|
||||||
|
return ${_ret}
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Update .issuer file if requested
|
||||||
|
if [ "${Le_Deploy_haproxy_issuer}" = "yes" ]; then
|
||||||
|
_info "Updating .issuer file"
|
||||||
|
_debug _issuer "${_issuer}"
|
||||||
|
cat "${_cca}" >"${_issuer}"
|
||||||
|
_ret="$?"
|
||||||
|
|
||||||
|
if [ "${_ret}" != "0" ]; then
|
||||||
|
_err "Error code ${_ret} returned while copying issuer/CA certificate into place"
|
||||||
|
return ${_ret}
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
[ -f "${_issuer}" ] _err "Issuer file update not requested but .issuer file exists"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Update .ocsp file if certificate was requested with --ocsp/--ocsp-must-staple option
|
||||||
|
if [ -z "${Le_OCSP_Staple}" ]; then
|
||||||
|
Le_OCSP_Staple="0"
|
||||||
|
fi
|
||||||
|
if [ "${Le_OCSP_Staple}" = "1" ]; then
|
||||||
|
_info "Updating OCSP stapling info"
|
||||||
|
_debug _ocsp "${_ocsp}"
|
||||||
|
_info "Extracting OCSP URL"
|
||||||
|
_ocsp_url=$(openssl x509 -noout -ocsp_uri -in "${_pem}")
|
||||||
|
_debug _ocsp_url "${_ocsp_url}"
|
||||||
|
|
||||||
|
# Only process OCSP if URL was present
|
||||||
|
if [ "${_ocsp_url}" != "" ]; then
|
||||||
|
# Extract the hostname from the OCSP URL
|
||||||
|
_info "Extracting OCSP URL"
|
||||||
|
_ocsp_host=$(echo "${_ocsp_url}" | cut -d/ -f3)
|
||||||
|
_debug _ocsp_host "${_ocsp_host}"
|
||||||
|
|
||||||
|
# Only process the certificate if we have a .issuer file
|
||||||
|
if [ -r "${_issuer}" ]; then
|
||||||
|
# Check if issuer cert is also a root CA cert
|
||||||
|
_subjectdn=$(openssl x509 -in "${_issuer}" -subject -noout | cut -d'/' -f2,3,4,5,6,7,8,9,10)
|
||||||
|
_debug _subjectdn "${_subjectdn}"
|
||||||
|
_issuerdn=$(openssl x509 -in "${_issuer}" -issuer -noout | cut -d'/' -f2,3,4,5,6,7,8,9,10)
|
||||||
|
_debug _issuerdn "${_issuerdn}"
|
||||||
|
_info "Requesting OCSP response"
|
||||||
|
# Request the OCSP response from the issuer and store it
|
||||||
|
if [ "${_subjectdn}" = "${_issuerdn}" ]; then
|
||||||
|
# If the issuer is a CA cert then our command line has "-CAfile" added
|
||||||
|
openssl ocsp \
|
||||||
|
-issuer "${_issuer}" \
|
||||||
|
-cert "${_pem}" \
|
||||||
|
-url "${_ocsp_url}" \
|
||||||
|
-header Host "${_ocsp_host}" \
|
||||||
|
-respout "${_ocsp}" \
|
||||||
|
-verify_other "${_issuer}" \
|
||||||
|
-no_nonce \
|
||||||
|
-CAfile "${_issuer}" \
|
||||||
|
| grep -q "${_pem}: good"
|
||||||
|
_ret=$?
|
||||||
|
else
|
||||||
|
# Issuer is not a root CA so no "-CAfile" option
|
||||||
|
openssl ocsp \
|
||||||
|
-issuer "${_issuer}" \
|
||||||
|
-cert "${_pem}" \
|
||||||
|
-url "${_ocsp_url}" \
|
||||||
|
-header Host "${_ocsp_host}" \
|
||||||
|
-respout "${_ocsp}" \
|
||||||
|
-verify_other "${_issuer}" \
|
||||||
|
-no_nonce \
|
||||||
|
| grep -q "${_pem}: good"
|
||||||
|
_ret=$?
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
# Non fatal: No issuer file was present so no OCSP stapling file created
|
||||||
|
_err "OCSP stapling in use but no .issuer file was present"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
# Non fatal: No OCSP url was found int the certificate
|
||||||
|
_err "OCSP update requested but no OCSP URL was found in certificate"
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Non fatal: Check return code of openssl command
|
||||||
|
if [ "${_ret}" != "0" ]; then
|
||||||
|
_err "Updating OCSP stapling failed with return code ${_ret}"
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
# An OCSP file was already present but certificate did not have OCSP extension
|
||||||
|
if [ -f "${_ocsp}" ]; then
|
||||||
|
_err "OCSP was not requested but .ocsp file exists."
|
||||||
|
# Could remove the file at this step, although HAProxy just ignores it in this case
|
||||||
|
# rm -f "${_ocsp}" || _err "Problem removing stale .ocsp file"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Reload HAProxy
|
||||||
|
_debug _reload "${_reload}"
|
||||||
|
eval "${_reload}"
|
||||||
|
_ret=$?
|
||||||
|
if [ "${_ret}" != "0" ]; then
|
||||||
|
_err "Error code ${_ret} during reload"
|
||||||
|
return ${_ret}
|
||||||
|
else
|
||||||
|
_info "Reload successful"
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 0
|
||||||
}
|
}
|
||||||
|
|||||||
58
deploy/mailcow.sh
Normal file
58
deploy/mailcow.sh
Normal file
@ -0,0 +1,58 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#Here is a script to deploy cert to mailcow.
|
||||||
|
|
||||||
|
#returns 0 means success, otherwise error.
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#domain keyfile certfile cafile fullchain
|
||||||
|
mailcow_deploy() {
|
||||||
|
_cdomain="$1"
|
||||||
|
_ckey="$2"
|
||||||
|
_ccert="$3"
|
||||||
|
_cca="$4"
|
||||||
|
_cfullchain="$5"
|
||||||
|
|
||||||
|
_debug _cdomain "$_cdomain"
|
||||||
|
_debug _ckey "$_ckey"
|
||||||
|
_debug _ccert "$_ccert"
|
||||||
|
_debug _cca "$_cca"
|
||||||
|
_debug _cfullchain "$_cfullchain"
|
||||||
|
|
||||||
|
_mailcow_path="${DEPLOY_MAILCOW_PATH}"
|
||||||
|
|
||||||
|
if [ -z "$_mailcow_path" ]; then
|
||||||
|
_err "Mailcow path is not found, please define DEPLOY_MAILCOW_PATH."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_ssl_path="${_mailcow_path}/data/assets/ssl/"
|
||||||
|
if [ ! -d "$_ssl_path" ]; then
|
||||||
|
_err "Cannot find mailcow ssl path: $_ssl_path"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Copying key and cert"
|
||||||
|
_real_key="$_ssl_path/key.pem"
|
||||||
|
if ! cat "$_ckey" >"$_real_key"; then
|
||||||
|
_err "Error: write key file to: $_real_key"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_real_fullchain="$_ssl_path/cert.pem"
|
||||||
|
if ! cat "$_cfullchain" >"$_real_fullchain"; then
|
||||||
|
_err "Error: write cert file to: $_real_fullchain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
DEFAULT_MAILCOW_RELOAD="cd ${_mailcow_path} && docker-compose restart postfix-mailcow dovecot-mailcow nginx-mailcow"
|
||||||
|
_reload="${DEPLOY_MAILCOW_RELOAD:-$DEFAULT_MAILCOW_RELOAD}"
|
||||||
|
|
||||||
|
_info "Run reload: $_reload"
|
||||||
|
if eval "$_reload"; then
|
||||||
|
_info "Reload success!"
|
||||||
|
fi
|
||||||
|
return 0
|
||||||
|
|
||||||
|
}
|
||||||
59
deploy/mydevil.sh
Executable file
59
deploy/mydevil.sh
Executable file
@ -0,0 +1,59 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# MyDevil.net API (2019-02-03)
|
||||||
|
#
|
||||||
|
# MyDevil.net already supports automatic Let's Encrypt certificates,
|
||||||
|
# except for wildcard domains.
|
||||||
|
#
|
||||||
|
# This script depends on `devil` command that MyDevil.net provides,
|
||||||
|
# which means that it works only on server side.
|
||||||
|
#
|
||||||
|
# Author: Marcin Konicki <https://ahwayakchih.neoni.net>
|
||||||
|
#
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
# Usage: mydevil_deploy domain keyfile certfile cafile fullchain
|
||||||
|
mydevil_deploy() {
|
||||||
|
_cdomain="$1"
|
||||||
|
_ckey="$2"
|
||||||
|
_ccert="$3"
|
||||||
|
_cca="$4"
|
||||||
|
_cfullchain="$5"
|
||||||
|
ip=""
|
||||||
|
|
||||||
|
_debug _cdomain "$_cdomain"
|
||||||
|
_debug _ckey "$_ckey"
|
||||||
|
_debug _ccert "$_ccert"
|
||||||
|
_debug _cca "$_cca"
|
||||||
|
_debug _cfullchain "$_cfullchain"
|
||||||
|
|
||||||
|
if ! _exists "devil"; then
|
||||||
|
_err "Could not find 'devil' command."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
ip=$(mydevil_get_ip "$_cdomain")
|
||||||
|
if [ -z "$ip" ]; then
|
||||||
|
_err "Could not find IP for domain $_cdomain."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Delete old certificate first
|
||||||
|
_info "Removing old certificate for $_cdomain at $ip"
|
||||||
|
devil ssl www del "$ip" "$_cdomain"
|
||||||
|
|
||||||
|
# Add new certificate
|
||||||
|
_info "Adding new certificate for $_cdomain at $ip"
|
||||||
|
devil ssl www add "$ip" "$_cfullchain" "$_ckey" "$_cdomain" || return 1
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
# Usage: ip=$(mydevil_get_ip domain.com)
|
||||||
|
# echo $ip
|
||||||
|
mydevil_get_ip() {
|
||||||
|
devil dns list "$1" | cut -w -s -f 3,7 | grep "^A$(printf '\t')" | cut -w -s -f 2 || return 1
|
||||||
|
return 0
|
||||||
|
}
|
||||||
@ -87,6 +87,6 @@ qiniu_deploy() {
|
|||||||
}
|
}
|
||||||
|
|
||||||
_make_access_token() {
|
_make_access_token() {
|
||||||
_token="$(printf "%s\n" "$1" | _hmac "sha1" "$(printf "%s" "$QINIU_SK" | _hex_dump | tr -d " ")" | _base64)"
|
_token="$(printf "%s\n" "$1" | _hmac "sha1" "$(printf "%s" "$QINIU_SK" | _hex_dump | tr -d " ")" | _base64 | tr -- '+/' '-_')"
|
||||||
echo "$QINIU_AK:$_token"
|
echo "$QINIU_AK:$_token"
|
||||||
}
|
}
|
||||||
|
|||||||
114
deploy/routeros.sh
Normal file
114
deploy/routeros.sh
Normal file
@ -0,0 +1,114 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# Here is a script to deploy cert to routeros router.
|
||||||
|
# Deploy the cert to remote routeros
|
||||||
|
#
|
||||||
|
# ```sh
|
||||||
|
# acme.sh --deploy -d ftp.example.com --deploy-hook routeros
|
||||||
|
# ```
|
||||||
|
#
|
||||||
|
# Before you can deploy the certificate to router os, you need
|
||||||
|
# to add the id_rsa.pub key to the routeros and assign a user
|
||||||
|
# to that key.
|
||||||
|
#
|
||||||
|
# The user need to have access to ssh, ftp, read and write.
|
||||||
|
#
|
||||||
|
# There are no need to enable ftp service for the script to work,
|
||||||
|
# as they are transmitted over SCP, however ftp is needed to store
|
||||||
|
# the files on the router.
|
||||||
|
#
|
||||||
|
# Then you need to set the environment variables for the
|
||||||
|
# deploy script to work.
|
||||||
|
#
|
||||||
|
# ```sh
|
||||||
|
# export ROUTER_OS_USERNAME=certuser
|
||||||
|
# export ROUTER_OS_HOST=router.example.com
|
||||||
|
#
|
||||||
|
# acme.sh --deploy -d ftp.example.com --deploy-hook routeros
|
||||||
|
# ```
|
||||||
|
#
|
||||||
|
# The deploy script will remove previously deployed certificates,
|
||||||
|
# and it does this with an assumption on how RouterOS names imported
|
||||||
|
# certificates, adding a "cer_0" suffix at the end. This is true for
|
||||||
|
# versions 6.32 -> 6.41.3, but it is not guaranteed that it will be
|
||||||
|
# true for future versions when upgrading.
|
||||||
|
#
|
||||||
|
# If the router have other certificates with the same name as the one
|
||||||
|
# beeing deployed, then this script will remove those certificates.
|
||||||
|
#
|
||||||
|
# At the end of the script, the services that use those certificates
|
||||||
|
# could be updated. Currently only the www-ssl service is beeing
|
||||||
|
# updated, but more services could be added.
|
||||||
|
#
|
||||||
|
# For instance:
|
||||||
|
# ```sh
|
||||||
|
# export ROUTER_OS_ADDITIONAL_SERVICES="/ip service set api-ssl certificate=$_cdomain.cer_0"
|
||||||
|
# ```
|
||||||
|
#
|
||||||
|
# One optional thing to do as well is to create a script that updates
|
||||||
|
# all the required services and run that script in a single command.
|
||||||
|
#
|
||||||
|
# returns 0 means success, otherwise error.
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#domain keyfile certfile cafile fullchain
|
||||||
|
routeros_deploy() {
|
||||||
|
_cdomain="$1"
|
||||||
|
_ckey="$2"
|
||||||
|
_ccert="$3"
|
||||||
|
_cca="$4"
|
||||||
|
_cfullchain="$5"
|
||||||
|
|
||||||
|
_debug _cdomain "$_cdomain"
|
||||||
|
_debug _ckey "$_ckey"
|
||||||
|
_debug _ccert "$_ccert"
|
||||||
|
_debug _cca "$_cca"
|
||||||
|
_debug _cfullchain "$_cfullchain"
|
||||||
|
|
||||||
|
if [ -z "$ROUTER_OS_HOST" ]; then
|
||||||
|
_debug "Using _cdomain as ROUTER_OS_HOST, please set if not correct."
|
||||||
|
ROUTER_OS_HOST="$_cdomain"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$ROUTER_OS_USERNAME" ]; then
|
||||||
|
_err "Need to set the env variable ROUTER_OS_USERNAME"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$ROUTER_OS_ADDITIONAL_SERVICES" ]; then
|
||||||
|
_debug "Not enabling additional services"
|
||||||
|
ROUTER_OS_ADDITIONAL_SERVICES=""
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Trying to push key '$_ckey' to router"
|
||||||
|
scp "$_ckey" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.key"
|
||||||
|
_info "Trying to push cert '$_cfullchain' to router"
|
||||||
|
scp "$_cfullchain" "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST:$_cdomain.cer"
|
||||||
|
# shellcheck disable=SC2029
|
||||||
|
ssh "$ROUTER_OS_USERNAME@$ROUTER_OS_HOST" bash -c "'
|
||||||
|
|
||||||
|
/certificate remove $_cdomain.cer_0
|
||||||
|
|
||||||
|
/certificate remove $_cdomain.cer_1
|
||||||
|
|
||||||
|
delay 1
|
||||||
|
|
||||||
|
/certificate import file-name=$_cdomain.cer passphrase=\"\"
|
||||||
|
|
||||||
|
/certificate import file-name=$_cdomain.key passphrase=\"\"
|
||||||
|
|
||||||
|
delay 1
|
||||||
|
|
||||||
|
/file remove $_cdomain.cer
|
||||||
|
|
||||||
|
/file remove $_cdomain.key
|
||||||
|
|
||||||
|
delay 2
|
||||||
|
|
||||||
|
/ip service set www-ssl certificate=$_cdomain.cer_0
|
||||||
|
$ROUTER_OS_ADDITIONAL_SERVICES
|
||||||
|
|
||||||
|
'"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
1296
dnsapi/README.md
1296
dnsapi/README.md
File diff suppressed because it is too large
Load Diff
@ -58,7 +58,7 @@ dns_cf_add() {
|
|||||||
# if [ "$count" = "0" ]; then
|
# if [ "$count" = "0" ]; then
|
||||||
_info "Adding record"
|
_info "Adding record"
|
||||||
if _cf_rest POST "zones/$_domain_id/dns_records" "{\"type\":\"TXT\",\"name\":\"$fulldomain\",\"content\":\"$txtvalue\",\"ttl\":120}"; then
|
if _cf_rest POST "zones/$_domain_id/dns_records" "{\"type\":\"TXT\",\"name\":\"$fulldomain\",\"content\":\"$txtvalue\",\"ttl\":120}"; then
|
||||||
if _contains "$response" "$fulldomain"; then
|
if _contains "$response" "$txtvalue"; then
|
||||||
_info "Added, OK"
|
_info "Added, OK"
|
||||||
return 0
|
return 0
|
||||||
elif _contains "$response" "The record already exists"; then
|
elif _contains "$response" "The record already exists"; then
|
||||||
@ -147,7 +147,7 @@ dns_cf_rm() {
|
|||||||
# _domain_id=sdjkglgdfewsdfg
|
# _domain_id=sdjkglgdfewsdfg
|
||||||
_get_root() {
|
_get_root() {
|
||||||
domain=$1
|
domain=$1
|
||||||
i=2
|
i=1
|
||||||
p=1
|
p=1
|
||||||
while true; do
|
while true; do
|
||||||
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
@ -182,8 +182,11 @@ _cf_rest() {
|
|||||||
data="$3"
|
data="$3"
|
||||||
_debug "$ep"
|
_debug "$ep"
|
||||||
|
|
||||||
export _H1="X-Auth-Email: $CF_Email"
|
email_trimmed=$(echo $CF_Email | tr -d '"')
|
||||||
export _H2="X-Auth-Key: $CF_Key"
|
key_trimmed=$(echo $CF_Key | tr -d '"')
|
||||||
|
|
||||||
|
export _H1="X-Auth-Email: $email_trimmed"
|
||||||
|
export _H2="X-Auth-Key: $key_trimmed"
|
||||||
export _H3="Content-Type: application/json"
|
export _H3="Content-Type: application/json"
|
||||||
|
|
||||||
if [ "$m" != "GET" ]; then
|
if [ "$m" != "GET" ]; then
|
||||||
|
|||||||
157
dnsapi/dns_cn.sh
Normal file
157
dnsapi/dns_cn.sh
Normal file
@ -0,0 +1,157 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# DNS API for acme.sh for Core-Networks (https://beta.api.core-networks.de/doc/).
|
||||||
|
# created by 5ll and francis
|
||||||
|
|
||||||
|
CN_API="https://beta.api.core-networks.de"
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
dns_cn_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
if ! _cn_login; then
|
||||||
|
_err "login failed"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _cn_get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "_sub_domain $_sub_domain"
|
||||||
|
_debug "_domain $_domain"
|
||||||
|
|
||||||
|
_info "Adding record"
|
||||||
|
curData="{\"name\":\"$_sub_domain\",\"ttl\":120,\"type\":\"TXT\",\"data\":\"$txtvalue\"}"
|
||||||
|
curResult="$(_post "${curData}" "${CN_API}/dnszones/${_domain}/records/")"
|
||||||
|
|
||||||
|
_debug "curData $curData"
|
||||||
|
_debug "curResult $curResult"
|
||||||
|
|
||||||
|
if _contains "$curResult" ""; then
|
||||||
|
_info "Added, OK"
|
||||||
|
|
||||||
|
if ! _cn_commit; then
|
||||||
|
_err "commiting changes failed"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
return 0
|
||||||
|
|
||||||
|
else
|
||||||
|
_err "Add txt record error."
|
||||||
|
_debug "curData is $curData"
|
||||||
|
_debug "curResult is $curResult"
|
||||||
|
_err "error adding text record, response was $curResult"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
dns_cn_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
if ! _cn_login; then
|
||||||
|
_err "login failed"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _cn_get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Deleting record"
|
||||||
|
curData="{\"name\":\"$_sub_domain\",\"data\":\"$txtvalue\"}"
|
||||||
|
curResult="$(_post "${curData}" "${CN_API}/dnszones/${_domain}/records/delete")"
|
||||||
|
_debug curData is "$curData"
|
||||||
|
|
||||||
|
_info "commiting changes"
|
||||||
|
if ! _cn_commit; then
|
||||||
|
_err "commiting changes failed"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Deletet txt record"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
################### Private functions below ##################################
|
||||||
|
_cn_login() {
|
||||||
|
CN_User="${CN_User:-$(_readaccountconf_mutable CN_User)}"
|
||||||
|
CN_Password="${CN_Password:-$(_readaccountconf_mutable CN_Password)}"
|
||||||
|
if [ -z "$CN_User" ] || [ -z "$CN_Password" ]; then
|
||||||
|
CN_User=""
|
||||||
|
CN_Password=""
|
||||||
|
_err "You must export variables: CN_User and CN_Password"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
#save the config variables to the account conf file.
|
||||||
|
_saveaccountconf_mutable CN_User "$CN_User"
|
||||||
|
_saveaccountconf_mutable CN_Password "$CN_Password"
|
||||||
|
|
||||||
|
_info "Getting an AUTH-Token"
|
||||||
|
curData="{\"login\":\"${CN_User}\",\"password\":\"${CN_Password}\"}"
|
||||||
|
curResult="$(_post "${curData}" "${CN_API}/auth/token")"
|
||||||
|
_debug "Calling _CN_login: '${curData}' '${CN_API}/auth/token'"
|
||||||
|
|
||||||
|
if _contains "${curResult}" '"token":"'; then
|
||||||
|
authToken=$(echo "${curResult}" | cut -d ":" -f2 | cut -d "," -f1 | sed 's/^.\(.*\).$/\1/')
|
||||||
|
export _H1="Authorization: Bearer $authToken"
|
||||||
|
_info "Successfully acquired AUTH-Token"
|
||||||
|
_debug "AUTH-Token: '${authToken}'"
|
||||||
|
_debug "_H1 '${_H1}'"
|
||||||
|
else
|
||||||
|
_err "Couldn't acquire an AUTH-Token"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# Commit changes
|
||||||
|
_cn_commit() {
|
||||||
|
_info "Commiting changes"
|
||||||
|
_post "" "${CN_API}/dnszones/$h/records/commit"
|
||||||
|
}
|
||||||
|
|
||||||
|
_cn_get_root() {
|
||||||
|
domain=$1
|
||||||
|
i=2
|
||||||
|
p=1
|
||||||
|
while true; do
|
||||||
|
|
||||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug h "$h"
|
||||||
|
_debug _H1 "${_H1}"
|
||||||
|
|
||||||
|
if [ -z "$h" ]; then
|
||||||
|
#not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_cn_zonelist="$(_get ${CN_API}/dnszones/)"
|
||||||
|
_debug _cn_zonelist "${_cn_zonelist}"
|
||||||
|
|
||||||
|
if [ "$?" != "0" ]; then
|
||||||
|
_err "something went wrong while getting the zone list"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _contains "$_cn_zonelist" "\"name\":\"$h\"" >/dev/null; then
|
||||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
|
||||||
|
_domain=$h
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_debug "Zonelist does not contain domain - iterating "
|
||||||
|
fi
|
||||||
|
p=$i
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
|
||||||
|
done
|
||||||
|
_err "Zonelist does not contain domain - exiting"
|
||||||
|
return 1
|
||||||
|
}
|
||||||
@ -16,6 +16,8 @@ dns_cx_add() {
|
|||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
txtvalue=$2
|
txtvalue=$2
|
||||||
|
|
||||||
|
CX_Key="${CX_Key:-$(_readaccountconf_mutable CX_Key)}"
|
||||||
|
CX_Secret="${CX_Secret:-$(_readaccountconf_mutable CX_Secret)}"
|
||||||
if [ -z "$CX_Key" ] || [ -z "$CX_Secret" ]; then
|
if [ -z "$CX_Key" ] || [ -z "$CX_Secret" ]; then
|
||||||
CX_Key=""
|
CX_Key=""
|
||||||
CX_Secret=""
|
CX_Secret=""
|
||||||
@ -27,8 +29,8 @@ dns_cx_add() {
|
|||||||
REST_API="$CX_Api"
|
REST_API="$CX_Api"
|
||||||
|
|
||||||
#save the api key and email to the account conf file.
|
#save the api key and email to the account conf file.
|
||||||
_saveaccountconf CX_Key "$CX_Key"
|
_saveaccountconf_mutable CX_Key "$CX_Key"
|
||||||
_saveaccountconf CX_Secret "$CX_Secret"
|
_saveaccountconf_mutable CX_Secret "$CX_Secret"
|
||||||
|
|
||||||
_debug "First detect the root zone"
|
_debug "First detect the root zone"
|
||||||
if ! _get_root "$fulldomain"; then
|
if ! _get_root "$fulldomain"; then
|
||||||
@ -43,6 +45,8 @@ dns_cx_add() {
|
|||||||
dns_cx_rm() {
|
dns_cx_rm() {
|
||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
txtvalue=$2
|
txtvalue=$2
|
||||||
|
CX_Key="${CX_Key:-$(_readaccountconf_mutable CX_Key)}"
|
||||||
|
CX_Secret="${CX_Secret:-$(_readaccountconf_mutable CX_Secret)}"
|
||||||
REST_API="$CX_Api"
|
REST_API="$CX_Api"
|
||||||
if _get_root "$fulldomain"; then
|
if _get_root "$fulldomain"; then
|
||||||
record_id=""
|
record_id=""
|
||||||
|
|||||||
130
dnsapi/dns_ddnss.sh
Normal file
130
dnsapi/dns_ddnss.sh
Normal file
@ -0,0 +1,130 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#Created by RaidenII, to use DuckDNS's API to add/remove text records
|
||||||
|
#modified by helbgd @ 03/13/2018 to support ddnss.de
|
||||||
|
#modified by mod242 @ 04/24/2018 to support different ddnss domains
|
||||||
|
#Please note: the Wildcard Feature must be turned on for the Host record
|
||||||
|
#and the checkbox for TXT needs to be enabled
|
||||||
|
|
||||||
|
# Pass credentials before "acme.sh --issue --dns dns_ddnss ..."
|
||||||
|
# --
|
||||||
|
# export DDNSS_Token="aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee"
|
||||||
|
# --
|
||||||
|
#
|
||||||
|
|
||||||
|
DDNSS_DNS_API="https://ddnss.de/upd.php"
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#Usage: dns_ddnss_add _acme-challenge.domain.ddnss.de "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
||||||
|
dns_ddnss_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
DDNSS_Token="${DDNSS_Token:-$(_readaccountconf_mutable DDNSS_Token)}"
|
||||||
|
if [ -z "$DDNSS_Token" ]; then
|
||||||
|
_err "You must export variable: DDNSS_Token"
|
||||||
|
_err "The token for your DDNSS account is necessary."
|
||||||
|
_err "You can look it up in your DDNSS account."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Now save the credentials.
|
||||||
|
_saveaccountconf_mutable DDNSS_Token "$DDNSS_Token"
|
||||||
|
|
||||||
|
# Unfortunately, DDNSS does not seems to support lookup domain through API
|
||||||
|
# So I assume your credentials (which are your domain and token) are correct
|
||||||
|
# If something goes wrong, we will get a KO response from DDNSS
|
||||||
|
|
||||||
|
if ! _ddnss_get_domain; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Now add the TXT record to DDNSS DNS
|
||||||
|
_info "Trying to add TXT record"
|
||||||
|
if _ddnss_rest GET "key=$DDNSS_Token&host=$_ddnss_domain&txtm=1&txt=$txtvalue"; then
|
||||||
|
if [ "$response" = "Updated 1 hostname." ]; then
|
||||||
|
_info "TXT record has been successfully added to your DDNSS domain."
|
||||||
|
_info "Note that all subdomains under this domain uses the same TXT record."
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Errors happened during adding the TXT record, response=$response"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
_err "Errors happened during adding the TXT record."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
#Usage: fulldomain txtvalue
|
||||||
|
#Remove the txt record after validation.
|
||||||
|
dns_ddnss_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
DDNSS_Token="${DDNSS_Token:-$(_readaccountconf_mutable DDNSS_Token)}"
|
||||||
|
if [ -z "$DDNSS_Token" ]; then
|
||||||
|
_err "You must export variable: DDNSS_Token"
|
||||||
|
_err "The token for your DDNSS account is necessary."
|
||||||
|
_err "You can look it up in your DDNSS account."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! _ddnss_get_domain; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# Now remove the TXT record from DDNS DNS
|
||||||
|
_info "Trying to remove TXT record"
|
||||||
|
if _ddnss_rest GET "key=$DDNSS_Token&host=$_ddnss_domain&txtm=1&txt=."; then
|
||||||
|
if [ "$response" = "Updated 1 hostname." ]; then
|
||||||
|
_info "TXT record has been successfully removed from your DDNSS domain."
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Errors happened during removing the TXT record, response=$response"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
_err "Errors happened during removing the TXT record."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
#fulldomain=_acme-challenge.domain.ddnss.de
|
||||||
|
#returns
|
||||||
|
# _ddnss_domain=domain
|
||||||
|
_ddnss_get_domain() {
|
||||||
|
|
||||||
|
# We'll extract the domain/username from full domain
|
||||||
|
_ddnss_domain="$(echo "$fulldomain" | _lower_case | _egrep_o '[.][^.][^.]*[.](ddnss|dyn-ip24|dyndns|dyn|dyndns1|home-webserver|myhome-server|dynip)\..*' | cut -d . -f 2-)"
|
||||||
|
|
||||||
|
if [ -z "$_ddnss_domain" ]; then
|
||||||
|
_err "Error extracting the domain."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
#Usage: method URI
|
||||||
|
_ddnss_rest() {
|
||||||
|
method=$1
|
||||||
|
param="$2"
|
||||||
|
_debug param "$param"
|
||||||
|
url="$DDNSS_DNS_API?$param"
|
||||||
|
_debug url "$url"
|
||||||
|
|
||||||
|
# DDNSS uses GET to update domain info
|
||||||
|
if [ "$method" = "GET" ]; then
|
||||||
|
response="$(_get "$url" | sed 's/<[a-zA-Z\/][^>]*>//g' | _tail_n 1)"
|
||||||
|
else
|
||||||
|
_err "Unsupported method"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug2 response "$response"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
204
dnsapi/dns_desec.sh
Normal file
204
dnsapi/dns_desec.sh
Normal file
@ -0,0 +1,204 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
#
|
||||||
|
# deSEC.io Domain API
|
||||||
|
#
|
||||||
|
# Author: Zheng Qian
|
||||||
|
#
|
||||||
|
# deSEC API doc
|
||||||
|
# https://desec.readthedocs.io/en/latest/
|
||||||
|
|
||||||
|
REST_API="https://desec.io/api/v1/domains"
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#Usage: dns_desec_add _acme-challenge.foobar.dedyn.io "d41d8cd98f00b204e9800998ecf8427e"
|
||||||
|
dns_desec_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
_info "Using desec.io api"
|
||||||
|
_debug fulldomain "$fulldomain"
|
||||||
|
_debug txtvalue "$txtvalue"
|
||||||
|
|
||||||
|
DEDYN_TOKEN="${DEDYN_TOKEN:-$(_readaccountconf_mutable DEDYN_TOKEN)}"
|
||||||
|
DEDYN_NAME="${DEDYN_NAME:-$(_readaccountconf_mutable DEDYN_NAME)}"
|
||||||
|
|
||||||
|
if [ -z "$DEDYN_TOKEN" ] || [ -z "$DEDYN_NAME" ]; then
|
||||||
|
DEDYN_TOKEN=""
|
||||||
|
DEDYN_NAME=""
|
||||||
|
_err "You don't specify DEDYN_TOKEN and DEDYN_NAME yet."
|
||||||
|
_err "Please create you key and try again."
|
||||||
|
_err "e.g."
|
||||||
|
_err "export DEDYN_TOKEN=d41d8cd98f00b204e9800998ecf8427e"
|
||||||
|
_err "export DEDYN_NAME=foobar.dedyn.io"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
#save the api token and name to the account conf file.
|
||||||
|
_saveaccountconf_mutable DEDYN_TOKEN "$DEDYN_TOKEN"
|
||||||
|
_saveaccountconf_mutable DEDYN_NAME "$DEDYN_NAME"
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain" "$REST_API/"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _domain "$_domain"
|
||||||
|
|
||||||
|
# Get existing TXT record
|
||||||
|
_debug "Getting txt records"
|
||||||
|
txtvalues="\"\\\"$txtvalue\\\"\""
|
||||||
|
_desec_rest GET "$REST_API/$DEDYN_NAME/rrsets/$_sub_domain/TXT/"
|
||||||
|
|
||||||
|
if [ "$_code" = "200" ]; then
|
||||||
|
oldtxtvalues="$(echo "$response" | _egrep_o "\"records\":\\[\"\\S*\"\\]" | cut -d : -f 2 | tr -d "[]\\\\\"" | sed "s/,/ /g")"
|
||||||
|
_debug "existing TXT found"
|
||||||
|
_debug oldtxtvalues "$oldtxtvalues"
|
||||||
|
if [ -n "$oldtxtvalues" ]; then
|
||||||
|
for oldtxtvalue in $oldtxtvalues; do
|
||||||
|
txtvalues="$txtvalues, \"\\\"$oldtxtvalue\\\"\""
|
||||||
|
done
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
_debug txtvalues "$txtvalues"
|
||||||
|
_info "Adding record"
|
||||||
|
body="[{\"subname\":\"$_sub_domain\", \"type\":\"TXT\", \"records\":[$txtvalues], \"ttl\":60}]"
|
||||||
|
|
||||||
|
if _desec_rest PUT "$REST_API/$DEDYN_NAME/rrsets/" "$body"; then
|
||||||
|
if _contains "$response" "$txtvalue"; then
|
||||||
|
_info "Added, OK"
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Add txt record error."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
_err "Add txt record error."
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
#Usage: fulldomain txtvalue
|
||||||
|
#Remove the txt record after validation.
|
||||||
|
dns_desec_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
_info "Using desec.io api"
|
||||||
|
_debug fulldomain "$fulldomain"
|
||||||
|
_debug txtvalue "$txtvalue"
|
||||||
|
|
||||||
|
DEDYN_TOKEN="${DEDYN_TOKEN:-$(_readaccountconf_mutable DEDYN_TOKEN)}"
|
||||||
|
DEDYN_NAME="${DEDYN_NAME:-$(_readaccountconf_mutable DEDYN_NAME)}"
|
||||||
|
|
||||||
|
if [ -z "$DEDYN_TOKEN" ] || [ -z "$DEDYN_NAME" ]; then
|
||||||
|
DEDYN_TOKEN=""
|
||||||
|
DEDYN_NAME=""
|
||||||
|
_err "You don't specify DEDYN_TOKEN and DEDYN_NAME yet."
|
||||||
|
_err "Please create you key and try again."
|
||||||
|
_err "e.g."
|
||||||
|
_err "export DEDYN_TOKEN=d41d8cd98f00b204e9800998ecf8427e"
|
||||||
|
_err "export DEDYN_NAME=foobar.dedyn.io"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain" "$REST_API/"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _domain "$_domain"
|
||||||
|
|
||||||
|
# Get existing TXT record
|
||||||
|
_debug "Getting txt records"
|
||||||
|
txtvalues=""
|
||||||
|
_desec_rest GET "$REST_API/$DEDYN_NAME/rrsets/$_sub_domain/TXT/"
|
||||||
|
|
||||||
|
if [ "$_code" = "200" ]; then
|
||||||
|
oldtxtvalues="$(echo "$response" | _egrep_o "\"records\":\\[\"\\S*\"\\]" | cut -d : -f 2 | tr -d "[]\\\\\"" | sed "s/,/ /g")"
|
||||||
|
_debug "existing TXT found"
|
||||||
|
_debug oldtxtvalues "$oldtxtvalues"
|
||||||
|
if [ -n "$oldtxtvalues" ]; then
|
||||||
|
for oldtxtvalue in $oldtxtvalues; do
|
||||||
|
if [ "$txtvalue" != "$oldtxtvalue" ]; then
|
||||||
|
txtvalues="$txtvalues, \"\\\"$oldtxtvalue\\\"\""
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
txtvalues="$(echo "$txtvalues" | cut -c3-)"
|
||||||
|
_debug txtvalues "$txtvalues"
|
||||||
|
|
||||||
|
_info "Deleting record"
|
||||||
|
body="[{\"subname\":\"$_sub_domain\", \"type\":\"TXT\", \"records\":[$txtvalues], \"ttl\":60}]"
|
||||||
|
_desec_rest PUT "$REST_API/$DEDYN_NAME/rrsets/" "$body"
|
||||||
|
if [ "$_code" = "200" ]; then
|
||||||
|
_info "Deleted, OK"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
_err "Delete txt record error."
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
_desec_rest() {
|
||||||
|
m="$1"
|
||||||
|
ep="$2"
|
||||||
|
data="$3"
|
||||||
|
|
||||||
|
export _H1="Authorization: Token $DEDYN_TOKEN"
|
||||||
|
export _H2="Accept: application/json"
|
||||||
|
export _H3="Content-Type: application/json"
|
||||||
|
|
||||||
|
if [ "$m" != "GET" ]; then
|
||||||
|
_secure_debug2 data "$data"
|
||||||
|
response="$(_post "$data" "$ep" "" "$m")"
|
||||||
|
else
|
||||||
|
response="$(_get "$ep")"
|
||||||
|
fi
|
||||||
|
_ret="$?"
|
||||||
|
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\\r\\n")"
|
||||||
|
_debug "http response code $_code"
|
||||||
|
_secure_debug2 response "$response"
|
||||||
|
if [ "$_ret" != "0" ]; then
|
||||||
|
_err "error $ep"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
response="$(printf "%s" "$response" | _normalizeJson)"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
#_acme-challenge.www.domain.com
|
||||||
|
#returns
|
||||||
|
# _sub_domain=_acme-challenge.www
|
||||||
|
# _domain=domain.com
|
||||||
|
_get_root() {
|
||||||
|
domain="$1"
|
||||||
|
ep="$2"
|
||||||
|
i=2
|
||||||
|
p=1
|
||||||
|
while true; do
|
||||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug h "$h"
|
||||||
|
if [ -z "$h" ]; then
|
||||||
|
#not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if ! _desec_rest GET "$ep"; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _contains "$response" "\"name\":\"$h\"" >/dev/null; then
|
||||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
|
||||||
|
_domain=$h
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
p=$i
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
done
|
||||||
|
return 1
|
||||||
|
}
|
||||||
@ -178,7 +178,7 @@ dns_dgon_rm() {
|
|||||||
## _domain="domain.com"
|
## _domain="domain.com"
|
||||||
_get_base_domain() {
|
_get_base_domain() {
|
||||||
# args
|
# args
|
||||||
fulldomain="$(echo "$1" | tr '[:upper:]' '[:lower:]')"
|
fulldomain="$(echo "$1" | _lower_case)"
|
||||||
_debug fulldomain "$fulldomain"
|
_debug fulldomain "$fulldomain"
|
||||||
|
|
||||||
# domain max legal length = 253
|
# domain max legal length = 253
|
||||||
|
|||||||
@ -137,7 +137,7 @@ _mypost() {
|
|||||||
|
|
||||||
_get_domain() {
|
_get_domain() {
|
||||||
_myget 'action=dns_primarydns'
|
_myget 'action=dns_primarydns'
|
||||||
_domains=$(echo "$_result" | _egrep_o ' domain="[[:alnum:].-_]+' | sed 's/^.*"//')
|
_domains=$(echo "$_result" | _egrep_o ' domain="[[:alnum:]._-]+' | sed 's/^.*"//')
|
||||||
if [ -z "$_domains" ]; then
|
if [ -z "$_domains" ]; then
|
||||||
_err "Primary domain list not found!"
|
_err "Primary domain list not found!"
|
||||||
return 1
|
return 1
|
||||||
|
|||||||
@ -28,6 +28,7 @@ dns_hostingde_rm() {
|
|||||||
|
|
||||||
_hostingde_apiKey() {
|
_hostingde_apiKey() {
|
||||||
HOSTINGDE_APIKEY="${HOSTINGDE_APIKEY:-$(_readaccountconf_mutable HOSTINGDE_APIKEY)}"
|
HOSTINGDE_APIKEY="${HOSTINGDE_APIKEY:-$(_readaccountconf_mutable HOSTINGDE_APIKEY)}"
|
||||||
|
HOSTINGDE_ENDPOINT="${HOSTINGDE_ENDPOINT:-$(_readaccountconf_mutable HOSTINGDE_ENDPOINT)}"
|
||||||
if [ -z "$HOSTINGDE_APIKEY" ] || [ -z "$HOSTINGDE_ENDPOINT" ]; then
|
if [ -z "$HOSTINGDE_APIKEY" ] || [ -z "$HOSTINGDE_ENDPOINT" ]; then
|
||||||
HOSTINGDE_APIKEY=""
|
HOSTINGDE_APIKEY=""
|
||||||
HOSTINGDE_ENDPOINT=""
|
HOSTINGDE_ENDPOINT=""
|
||||||
@ -52,6 +53,18 @@ _hostingde_parse() {
|
|||||||
fi
|
fi
|
||||||
}
|
}
|
||||||
|
|
||||||
|
_hostingde_parse_no_strip_whitespace() {
|
||||||
|
find="${1}"
|
||||||
|
if [ "${2}" ]; then
|
||||||
|
notfind="${2}"
|
||||||
|
fi
|
||||||
|
if [ "${notfind}" ]; then
|
||||||
|
_egrep_o \""${find}\":.*" | grep -v "${notfind}" | cut -d ':' -f 2 | cut -d ',' -f 1
|
||||||
|
else
|
||||||
|
_egrep_o \""${find}\":.*" | cut -d ':' -f 2 | cut -d ',' -f 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
_hostingde_getZoneConfig() {
|
_hostingde_getZoneConfig() {
|
||||||
_info "Getting ZoneConfig"
|
_info "Getting ZoneConfig"
|
||||||
curZone="${fulldomain#*.}"
|
curZone="${fulldomain#*.}"
|
||||||
@ -84,6 +97,22 @@ _hostingde_getZoneConfig() {
|
|||||||
zoneConfigDnsServerGroupId=$(echo "${curResult}" | _hostingde_parse "dnsServerGroupId")
|
zoneConfigDnsServerGroupId=$(echo "${curResult}" | _hostingde_parse "dnsServerGroupId")
|
||||||
zoneConfigEmailAddress=$(echo "${curResult}" | _hostingde_parse "emailAddress")
|
zoneConfigEmailAddress=$(echo "${curResult}" | _hostingde_parse "emailAddress")
|
||||||
zoneConfigDnsSecMode=$(echo "${curResult}" | _hostingde_parse "dnsSecMode")
|
zoneConfigDnsSecMode=$(echo "${curResult}" | _hostingde_parse "dnsSecMode")
|
||||||
|
zoneConfigTemplateValues=$(echo "${curResult}" | _hostingde_parse_no_strip_whitespace "templateValues")
|
||||||
|
|
||||||
|
if [ "$zoneConfigTemplateValues" != "null" ]; then
|
||||||
|
_debug "Zone is tied to a template."
|
||||||
|
zoneConfigTemplateValuesTemplateId=$(echo "${curResult}" | _hostingde_parse "templateId")
|
||||||
|
zoneConfigTemplateValuesTemplateName=$(echo "${curResult}" | _hostingde_parse_no_strip_whitespace "templateName")
|
||||||
|
zoneConfigTemplateValuesTemplateReplacementsIPv4=$(echo "${curResult}" | _hostingde_parse "ipv4Replacement")
|
||||||
|
zoneConfigTemplateValuesTemplateReplacementsIPv6=$(echo "${curResult}" | _hostingde_parse "ipv6Replacement")
|
||||||
|
zoneConfigTemplateValuesTemplateReplacementsMailIPv4=$(echo "${curResult}" | _hostingde_parse "mailIpv4Replacement")
|
||||||
|
zoneConfigTemplateValuesTemplateReplacementsMailIPv6=$(echo "${curResult}" | _hostingde_parse "mailIpv6Replacement")
|
||||||
|
zoneConfigTemplateValuesTemplateTieToTemplate=$(echo "${curResult}" | _hostingde_parse "tieToTemplate")
|
||||||
|
|
||||||
|
zoneConfigTemplateValues="{\"templateId\":${zoneConfigTemplateValuesTemplateId},\"templateName\":${zoneConfigTemplateValuesTemplateName},\"templateReplacements\":{\"ipv4Replacement\":${zoneConfigTemplateValuesTemplateReplacementsIPv4},\"ipv6Replacement\":${zoneConfigTemplateValuesTemplateReplacementsIPv6},\"mailIpv4Replacement\":${zoneConfigTemplateValuesTemplateReplacementsMailIPv4},\"mailIpv6Replacement\":${zoneConfigTemplateValuesTemplateReplacementsMailIPv6}},\"tieToTemplate\":${zoneConfigTemplateValuesTemplateTieToTemplate}}"
|
||||||
|
_debug "Template values: '{$zoneConfigTemplateValues}'"
|
||||||
|
fi
|
||||||
|
|
||||||
if [ "${zoneConfigType}" != "\"NATIVE\"" ]; then
|
if [ "${zoneConfigType}" != "\"NATIVE\"" ]; then
|
||||||
_err "Zone is not native"
|
_err "Zone is not native"
|
||||||
returnCode=1
|
returnCode=1
|
||||||
@ -121,7 +150,7 @@ _hostingde_addRecord() {
|
|||||||
_hostingde_getZoneStatus
|
_hostingde_getZoneStatus
|
||||||
_debug "Result of zoneStatus: '${zoneStatus}'"
|
_debug "Result of zoneStatus: '${zoneStatus}'"
|
||||||
done
|
done
|
||||||
curData="{\"authToken\":\"${HOSTINGDE_APIKEY}\",\"zoneConfig\":{\"id\":${zoneConfigId},\"name\":${zoneConfigName},\"type\":${zoneConfigType},\"dnsServerGroupId\":${zoneConfigDnsServerGroupId},\"dnsSecMode\":${zoneConfigDnsSecMode},\"emailAddress\":${zoneConfigEmailAddress},\"soaValues\":{\"expire\":${zoneConfigExpire},\"negativeTtl\":${zoneConfigNegativeTtl},\"refresh\":${zoneConfigRefresh},\"retry\":${zoneConfigRetry},\"ttl\":${zoneConfigTtl}}},\"recordsToAdd\":[{\"name\":\"${fulldomain}\",\"type\":\"TXT\",\"content\":\"\\\"${txtvalue}\\\"\",\"ttl\":3600}]}"
|
curData="{\"authToken\":\"${HOSTINGDE_APIKEY}\",\"zoneConfig\":{\"id\":${zoneConfigId},\"name\":${zoneConfigName},\"type\":${zoneConfigType},\"dnsServerGroupId\":${zoneConfigDnsServerGroupId},\"dnsSecMode\":${zoneConfigDnsSecMode},\"emailAddress\":${zoneConfigEmailAddress},\"soaValues\":{\"expire\":${zoneConfigExpire},\"negativeTtl\":${zoneConfigNegativeTtl},\"refresh\":${zoneConfigRefresh},\"retry\":${zoneConfigRetry},\"ttl\":${zoneConfigTtl}},\"templateValues\":${zoneConfigTemplateValues}},\"recordsToAdd\":[{\"name\":\"${fulldomain}\",\"type\":\"TXT\",\"content\":\"\\\"${txtvalue}\\\"\",\"ttl\":3600}]}"
|
||||||
curResult="$(_post "${curData}" "${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate")"
|
curResult="$(_post "${curData}" "${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate")"
|
||||||
_debug "Calling zoneUpdate: '${curData}' '${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate'"
|
_debug "Calling zoneUpdate: '${curData}' '${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate'"
|
||||||
_debug "Result of zoneUpdate: '$curResult'"
|
_debug "Result of zoneUpdate: '$curResult'"
|
||||||
@ -145,7 +174,7 @@ _hostingde_removeRecord() {
|
|||||||
_hostingde_getZoneStatus
|
_hostingde_getZoneStatus
|
||||||
_debug "Result of zoneStatus: '$zoneStatus'"
|
_debug "Result of zoneStatus: '$zoneStatus'"
|
||||||
done
|
done
|
||||||
curData="{\"authToken\":\"${HOSTINGDE_APIKEY}\",\"zoneConfig\":{\"id\":${zoneConfigId},\"name\":${zoneConfigName},\"type\":${zoneConfigType},\"dnsServerGroupId\":${zoneConfigDnsServerGroupId},\"dnsSecMode\":${zoneConfigDnsSecMode},\"emailAddress\":${zoneConfigEmailAddress},\"soaValues\":{\"expire\":${zoneConfigExpire},\"negativeTtl\":${zoneConfigNegativeTtl},\"refresh\":${zoneConfigRefresh},\"retry\":${zoneConfigRetry},\"ttl\":${zoneConfigTtl}}},\"recordsToDelete\":[{\"name\":\"${fulldomain}\",\"type\":\"TXT\",\"content\":\"\\\"${txtvalue}\\\"\"}]}"
|
curData="{\"authToken\":\"${HOSTINGDE_APIKEY}\",\"zoneConfig\":{\"id\":${zoneConfigId},\"name\":${zoneConfigName},\"type\":${zoneConfigType},\"dnsServerGroupId\":${zoneConfigDnsServerGroupId},\"dnsSecMode\":${zoneConfigDnsSecMode},\"emailAddress\":${zoneConfigEmailAddress},\"soaValues\":{\"expire\":${zoneConfigExpire},\"negativeTtl\":${zoneConfigNegativeTtl},\"refresh\":${zoneConfigRefresh},\"retry\":${zoneConfigRetry},\"ttl\":${zoneConfigTtl}},\"templateValues\":${zoneConfigTemplateValues}},\"recordsToDelete\":[{\"name\":\"${fulldomain}\",\"type\":\"TXT\",\"content\":\"\\\"${txtvalue}\\\"\"}]}"
|
||||||
curResult="$(_post "${curData}" "${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate")"
|
curResult="$(_post "${curData}" "${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate")"
|
||||||
_debug "Calling zoneUpdate: '${curData}' '${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate'"
|
_debug "Calling zoneUpdate: '${curData}' '${HOSTINGDE_ENDPOINT}/api/dns/v1/json/zoneUpdate'"
|
||||||
_debug "Result of zoneUpdate: '$curResult'"
|
_debug "Result of zoneUpdate: '$curResult'"
|
||||||
|
|||||||
@ -4,8 +4,10 @@
|
|||||||
#LOOPIA_User="username"
|
#LOOPIA_User="username"
|
||||||
#
|
#
|
||||||
#LOOPIA_Password="password"
|
#LOOPIA_Password="password"
|
||||||
|
#
|
||||||
|
#LOOPIA_Api="https://api.loopia.<TLD>/RPCSERV"
|
||||||
|
|
||||||
LOOPIA_Api="https://api.loopia.se/RPCSERV"
|
LOOPIA_Api_Default="https://api.loopia.se/RPCSERV"
|
||||||
|
|
||||||
######## Public functions #####################
|
######## Public functions #####################
|
||||||
|
|
||||||
@ -14,19 +16,11 @@ dns_loopia_add() {
|
|||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
txtvalue=$2
|
txtvalue=$2
|
||||||
|
|
||||||
LOOPIA_User="${LOOPIA_User:-$(_readaccountconf_mutable LOOPIA_User)}"
|
if ! _loopia_load_config; then
|
||||||
LOOPIA_Password="${LOOPIA_Password:-$(_readaccountconf_mutable LOOPIA_Password)}"
|
|
||||||
if [ -z "$LOOPIA_User" ] || [ -z "$LOOPIA_Password" ]; then
|
|
||||||
LOOPIA_User=""
|
|
||||||
LOOPIA_Password=""
|
|
||||||
_err "You don't specify loopia user and password yet."
|
|
||||||
_err "Please create you key and try again."
|
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
#save the api key and email to the account conf file.
|
_loopia_save_config
|
||||||
_saveaccountconf_mutable LOOPIA_User "$LOOPIA_User"
|
|
||||||
_saveaccountconf_mutable LOOPIA_Password "$LOOPIA_Password"
|
|
||||||
|
|
||||||
_debug "First detect the root zone"
|
_debug "First detect the root zone"
|
||||||
if ! _get_root "$fulldomain"; then
|
if ! _get_root "$fulldomain"; then
|
||||||
@ -47,19 +41,11 @@ dns_loopia_rm() {
|
|||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
txtvalue=$2
|
txtvalue=$2
|
||||||
|
|
||||||
LOOPIA_User="${LOOPIA_User:-$(_readaccountconf_mutable LOOPIA_User)}"
|
if ! _loopia_load_config; then
|
||||||
LOOPIA_Password="${LOOPIA_Password:-$(_readaccountconf_mutable LOOPIA_Password)}"
|
|
||||||
if [ -z "$LOOPIA_User" ] || [ -z "$LOOPIA_Password" ]; then
|
|
||||||
LOOPIA_User=""
|
|
||||||
LOOPIA_Password=""
|
|
||||||
_err "You don't specify LOOPIA user and password yet."
|
|
||||||
_err "Please create you key and try again."
|
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
|
||||||
#save the api key and email to the account conf file.
|
_loopia_save_config
|
||||||
_saveaccountconf_mutable LOOPIA_User "$LOOPIA_User"
|
|
||||||
_saveaccountconf_mutable LOOPIA_Password "$LOOPIA_Password"
|
|
||||||
|
|
||||||
_debug "First detect the root zone"
|
_debug "First detect the root zone"
|
||||||
if ! _get_root "$fulldomain"; then
|
if ! _get_root "$fulldomain"; then
|
||||||
@ -84,7 +70,7 @@ dns_loopia_rm() {
|
|||||||
<value><string>%s</string></value>
|
<value><string>%s</string></value>
|
||||||
</param>
|
</param>
|
||||||
</params>
|
</params>
|
||||||
</methodCall>' $LOOPIA_User $LOOPIA_Password "$_domain" "$_sub_domain")
|
</methodCall>' "$LOOPIA_User" "$LOOPIA_Password" "$_domain" "$_sub_domain")
|
||||||
|
|
||||||
response="$(_post "$xml_content" "$LOOPIA_Api" "" "POST")"
|
response="$(_post "$xml_content" "$LOOPIA_Api" "" "POST")"
|
||||||
|
|
||||||
@ -96,6 +82,36 @@ dns_loopia_rm() {
|
|||||||
|
|
||||||
#################### Private functions below ##################################
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
_loopia_load_config() {
|
||||||
|
LOOPIA_Api="${LOOPIA_Api:-$(_readaccountconf_mutable LOOPIA_Api)}"
|
||||||
|
LOOPIA_User="${LOOPIA_User:-$(_readaccountconf_mutable LOOPIA_User)}"
|
||||||
|
LOOPIA_Password="${LOOPIA_Password:-$(_readaccountconf_mutable LOOPIA_Password)}"
|
||||||
|
|
||||||
|
if [ -z "$LOOPIA_Api" ]; then
|
||||||
|
LOOPIA_Api="$LOOPIA_Api_Default"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$LOOPIA_User" ] || [ -z "$LOOPIA_Password" ]; then
|
||||||
|
LOOPIA_User=""
|
||||||
|
LOOPIA_Password=""
|
||||||
|
|
||||||
|
_err "A valid Loopia API user and password not provided."
|
||||||
|
_err "Please provide a valid API user and try again."
|
||||||
|
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
_loopia_save_config() {
|
||||||
|
if [ "$LOOPIA_Api" != "$LOOPIA_Api_Default" ]; then
|
||||||
|
_saveaccountconf_mutable LOOPIA_Api "$LOOPIA_Api"
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable LOOPIA_User "$LOOPIA_User"
|
||||||
|
_saveaccountconf_mutable LOOPIA_Password "$LOOPIA_Password"
|
||||||
|
}
|
||||||
|
|
||||||
_loopia_get_records() {
|
_loopia_get_records() {
|
||||||
domain=$1
|
domain=$1
|
||||||
sub_domain=$2
|
sub_domain=$2
|
||||||
|
|||||||
97
dnsapi/dns_mydevil.sh
Executable file
97
dnsapi/dns_mydevil.sh
Executable file
@ -0,0 +1,97 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# MyDevil.net API (2019-02-03)
|
||||||
|
#
|
||||||
|
# MyDevil.net already supports automatic Let's Encrypt certificates,
|
||||||
|
# except for wildcard domains.
|
||||||
|
#
|
||||||
|
# This script depends on `devil` command that MyDevil.net provides,
|
||||||
|
# which means that it works only on server side.
|
||||||
|
#
|
||||||
|
# Author: Marcin Konicki <https://ahwayakchih.neoni.net>
|
||||||
|
#
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#Usage: dns_mydevil_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
||||||
|
dns_mydevil_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
domain=""
|
||||||
|
|
||||||
|
if ! _exists "devil"; then
|
||||||
|
_err "Could not find 'devil' command."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Using mydevil"
|
||||||
|
|
||||||
|
domain=$(mydevil_get_domain "$fulldomain")
|
||||||
|
if [ -z "$domain" ]; then
|
||||||
|
_err "Invalid domain name: could not find root domain of $fulldomain."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# No need to check if record name exists, `devil` always adds new record.
|
||||||
|
# In worst case scenario, we end up with multiple identical records.
|
||||||
|
|
||||||
|
_info "Adding $fulldomain record for domain $domain"
|
||||||
|
if devil dns add "$domain" "$fulldomain" TXT "$txtvalue"; then
|
||||||
|
_info "Successfully added TXT record, ready for validation."
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Unable to add DNS record."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
#Usage: fulldomain txtvalue
|
||||||
|
#Remove the txt record after validation.
|
||||||
|
dns_mydevil_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
domain=""
|
||||||
|
|
||||||
|
if ! _exists "devil"; then
|
||||||
|
_err "Could not find 'devil' command."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Using mydevil"
|
||||||
|
|
||||||
|
domain=$(mydevil_get_domain "$fulldomain")
|
||||||
|
if [ -z "$domain" ]; then
|
||||||
|
_err "Invalid domain name: could not find root domain of $fulldomain."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# catch one or more numbers
|
||||||
|
num='[0-9][0-9]*'
|
||||||
|
# catch one or more whitespace
|
||||||
|
w=$(printf '[\t ][\t ]*')
|
||||||
|
# catch anything, except newline
|
||||||
|
any='.*'
|
||||||
|
# filter to make sure we do not delete other records
|
||||||
|
validRecords="^${num}${w}${fulldomain}${w}TXT${w}${any}${txtvalue}$"
|
||||||
|
for id in $(devil dns list "$domain" | tail -n+2 | grep "${validRecords}" | cut -w -s -f 1); do
|
||||||
|
_info "Removing record $id from domain $domain"
|
||||||
|
devil dns del "$domain" "$id" || _err "Could not remove DNS record."
|
||||||
|
done
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
# Usage: domain=$(mydevil_get_domain "_acme-challenge.www.domain.com" || _err "Invalid domain name")
|
||||||
|
# echo $domain
|
||||||
|
mydevil_get_domain() {
|
||||||
|
fulldomain=$1
|
||||||
|
domain=""
|
||||||
|
|
||||||
|
for domain in $(devil dns list | cut -w -s -f 1 | tail -n+2); do
|
||||||
|
if _endswith "$fulldomain" "$domain"; then
|
||||||
|
printf -- "%s" "$domain"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
@ -76,6 +76,22 @@ dns_namecheap_rm() {
|
|||||||
# _sub_domain=_acme-challenge.www
|
# _sub_domain=_acme-challenge.www
|
||||||
# _domain=domain.com
|
# _domain=domain.com
|
||||||
_get_root() {
|
_get_root() {
|
||||||
|
fulldomain=$1
|
||||||
|
|
||||||
|
if ! _get_root_by_getList "$fulldomain"; then
|
||||||
|
_debug "Failed domain lookup via domains.getList api call. Trying domain lookup via domains.dns.getHosts api."
|
||||||
|
# The above "getList" api will only return hosts *owned* by the calling user. However, if the calling
|
||||||
|
# user is not the owner, but still has administrative rights, we must query the getHosts api directly.
|
||||||
|
# See this comment and the official namecheap response: http://disq.us/p/1q6v9x9
|
||||||
|
if ! _get_root_by_getHosts "$fulldomain"; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
_get_root_by_getList() {
|
||||||
domain=$1
|
domain=$1
|
||||||
|
|
||||||
if ! _namecheap_post "namecheap.domains.getList"; then
|
if ! _namecheap_post "namecheap.domains.getList"; then
|
||||||
@ -94,6 +110,10 @@ _get_root() {
|
|||||||
#not valid
|
#not valid
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
if ! _contains "$h" "\\."; then
|
||||||
|
#not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
if ! _contains "$response" "$h"; then
|
if ! _contains "$response" "$h"; then
|
||||||
_debug "$h not found"
|
_debug "$h not found"
|
||||||
@ -108,6 +128,31 @@ _get_root() {
|
|||||||
return 1
|
return 1
|
||||||
}
|
}
|
||||||
|
|
||||||
|
_get_root_by_getHosts() {
|
||||||
|
i=100
|
||||||
|
p=99
|
||||||
|
|
||||||
|
while [ $p -ne 0 ]; do
|
||||||
|
|
||||||
|
h=$(printf "%s" "$1" | cut -d . -f $i-100)
|
||||||
|
if [ -n "$h" ]; then
|
||||||
|
if _contains "$h" "\\."; then
|
||||||
|
_debug h "$h"
|
||||||
|
if _namecheap_set_tld_sld "$h"; then
|
||||||
|
_sub_domain=$(printf "%s" "$1" | cut -d . -f 1-$p)
|
||||||
|
_domain="$h"
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_debug "$h not found"
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
i="$p"
|
||||||
|
p=$(_math "$p" - 1)
|
||||||
|
done
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
_namecheap_set_publicip() {
|
_namecheap_set_publicip() {
|
||||||
|
|
||||||
if [ -z "$NAMECHEAP_SOURCEIP" ]; then
|
if [ -z "$NAMECHEAP_SOURCEIP" ]; then
|
||||||
|
|||||||
@ -13,6 +13,8 @@ dns_namecom_add() {
|
|||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
txtvalue=$2
|
txtvalue=$2
|
||||||
|
|
||||||
|
Namecom_Username="${Namecom_Username:-$(_readaccountconf_mutable Namecom_Username)}"
|
||||||
|
Namecom_Token="${Namecom_Token:-$(_readaccountconf_mutable Namecom_Token)}"
|
||||||
# First we need name.com credentials.
|
# First we need name.com credentials.
|
||||||
if [ -z "$Namecom_Username" ]; then
|
if [ -z "$Namecom_Username" ]; then
|
||||||
Namecom_Username=""
|
Namecom_Username=""
|
||||||
@ -27,10 +29,11 @@ dns_namecom_add() {
|
|||||||
_err "Please specify that in your environment variable."
|
_err "Please specify that in your environment variable."
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
_debug Namecom_Username "$Namecom_Username"
|
||||||
|
_secure_debug Namecom_Token "$Namecom_Token"
|
||||||
# Save them in configuration.
|
# Save them in configuration.
|
||||||
_saveaccountconf Namecom_Username "$Namecom_Username"
|
_saveaccountconf_mutable Namecom_Username "$Namecom_Username"
|
||||||
_saveaccountconf Namecom_Token "$Namecom_Token"
|
_saveaccountconf_mutable Namecom_Token "$Namecom_Token"
|
||||||
|
|
||||||
# Login in using API
|
# Login in using API
|
||||||
if ! _namecom_login; then
|
if ! _namecom_login; then
|
||||||
@ -46,7 +49,7 @@ dns_namecom_add() {
|
|||||||
# Add TXT record.
|
# Add TXT record.
|
||||||
_namecom_addtxt_json="{\"host\":\"$_sub_domain\",\"type\":\"TXT\",\"answer\":\"$txtvalue\",\"ttl\":\"300\"}"
|
_namecom_addtxt_json="{\"host\":\"$_sub_domain\",\"type\":\"TXT\",\"answer\":\"$txtvalue\",\"ttl\":\"300\"}"
|
||||||
if _namecom_rest POST "domains/$_domain/records" "$_namecom_addtxt_json"; then
|
if _namecom_rest POST "domains/$_domain/records" "$_namecom_addtxt_json"; then
|
||||||
_retvalue=$(printf "%s\n" "$response" | _egrep_o "\"$_sub_domain\"")
|
_retvalue=$(echo "$response" | _egrep_o "\"$_sub_domain\"")
|
||||||
if [ "$_retvalue" ]; then
|
if [ "$_retvalue" ]; then
|
||||||
_info "Successfully added TXT record, ready for validation."
|
_info "Successfully added TXT record, ready for validation."
|
||||||
return 0
|
return 0
|
||||||
@ -63,6 +66,8 @@ dns_namecom_rm() {
|
|||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
txtvalue=$2
|
txtvalue=$2
|
||||||
|
|
||||||
|
Namecom_Username="${Namecom_Username:-$(_readaccountconf_mutable Namecom_Username)}"
|
||||||
|
Namecom_Token="${Namecom_Token:-$(_readaccountconf_mutable Namecom_Token)}"
|
||||||
if ! _namecom_login; then
|
if ! _namecom_login; then
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
@ -75,7 +80,7 @@ dns_namecom_rm() {
|
|||||||
|
|
||||||
# Get the record id.
|
# Get the record id.
|
||||||
if _namecom_rest GET "domains/$_domain/records"; then
|
if _namecom_rest GET "domains/$_domain/records"; then
|
||||||
_record_id=$(printf "%s\n" "$response" | _egrep_o "\"id\":[0-9]+,\"domainName\":\"$_domain\",\"host\":\"$_sub_domain\",\"fqdn\":\"$fulldomain.\",\"type\":\"TXT\",\"answer\":\"$txtvalue\"" | cut -d \" -f 3 | _egrep_o [0-9]+)
|
_record_id=$(echo "$response" | _egrep_o "\"id\":[0-9]+,\"domainName\":\"$_domain\",\"host\":\"$_sub_domain\",\"fqdn\":\"$fulldomain.\",\"type\":\"TXT\",\"answer\":\"$txtvalue\"" | cut -d \" -f 3 | _egrep_o [0-9]+)
|
||||||
_debug record_id "$_record_id"
|
_debug record_id "$_record_id"
|
||||||
if [ "$_record_id" ]; then
|
if [ "$_record_id" ]; then
|
||||||
_info "Successfully retrieved the record id for ACME challenge."
|
_info "Successfully retrieved the record id for ACME challenge."
|
||||||
@ -126,10 +131,12 @@ _namecom_login() {
|
|||||||
_namecom_auth=$(printf "%s:%s" "$Namecom_Username" "$Namecom_Token" | _base64)
|
_namecom_auth=$(printf "%s:%s" "$Namecom_Username" "$Namecom_Token" | _base64)
|
||||||
|
|
||||||
if _namecom_rest GET "hello"; then
|
if _namecom_rest GET "hello"; then
|
||||||
retcode=$(printf "%s\n" "$response" | _egrep_o "\"username\"\:\"$Namecom_Username\"")
|
retcode=$(echo "$response" | _egrep_o "\"username\"\:\"$Namecom_Username\"")
|
||||||
if [ "$retcode" ]; then
|
if [ "$retcode" ]; then
|
||||||
_info "Successfully logged in."
|
_info "Successfully logged in."
|
||||||
else
|
else
|
||||||
|
_err "$response"
|
||||||
|
_err "Please add your ip to api whitelist"
|
||||||
_err "Logging in failed."
|
_err "Logging in failed."
|
||||||
return 1
|
return 1
|
||||||
fi
|
fi
|
||||||
|
|||||||
131
dnsapi/dns_nederhost.sh
Executable file
131
dnsapi/dns_nederhost.sh
Executable file
@ -0,0 +1,131 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#NederHost_Key="sdfgikogfdfghjklkjhgfcdcfghjk"
|
||||||
|
|
||||||
|
NederHost_Api="https://api.nederhost.nl/dns/v1"
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
||||||
|
dns_nederhost_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
NederHost_Key="${NederHost_Key:-$(_readaccountconf_mutable NederHost_Key)}"
|
||||||
|
if [ -z "$NederHost_Key" ]; then
|
||||||
|
NederHost_Key=""
|
||||||
|
_err "You didn't specify a NederHost api key."
|
||||||
|
_err "You can get yours from https://www.nederhost.nl/mijn_nederhost"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
#save the api key and email to the account conf file.
|
||||||
|
_saveaccountconf_mutable NederHost_Key "$NederHost_Key"
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _domain "$_domain"
|
||||||
|
|
||||||
|
_info "Adding record"
|
||||||
|
if _nederhost_rest PATCH "zones/$_domain/records/$fulldomain/TXT" "[{\"content\":\"$txtvalue\",\"ttl\":60}]"; then
|
||||||
|
if _contains "$response" "$fulldomain"; then
|
||||||
|
_info "Added, OK"
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Add txt record error."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
_err "Add txt record error."
|
||||||
|
return 1
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
#fulldomain txtvalue
|
||||||
|
dns_nederhost_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
|
||||||
|
NederHost_Key="${NederHost_Key:-$(_readaccountconf_mutable NederHost_Key)}"
|
||||||
|
if [ -z "$NederHost_Key" ]; then
|
||||||
|
NederHost_Key=""
|
||||||
|
_err "You didn't specify a NederHost api key."
|
||||||
|
_err "You can get yours from https://www.nederhost.nl/mijn_nederhost"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _domain "$_domain"
|
||||||
|
|
||||||
|
_debug "Removing txt record"
|
||||||
|
_nederhost_rest DELETE "zones/${_domain}/records/$fulldomain/TXT?content=$txtvalue"
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
#_acme-challenge.www.domain.com
|
||||||
|
#returns
|
||||||
|
# _sub_domain=_acme-challenge.www
|
||||||
|
# _domain=domain.com
|
||||||
|
_get_root() {
|
||||||
|
domain=$1
|
||||||
|
i=2
|
||||||
|
p=1
|
||||||
|
while true; do
|
||||||
|
_domain=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
|
||||||
|
_debug _domain "$_domain"
|
||||||
|
if [ -z "$_domain" ]; then
|
||||||
|
#not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _nederhost_rest GET "zones/${_domain}"; then
|
||||||
|
if [ "${_code}" = "204" ]; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
p=$i
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
done
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
_nederhost_rest() {
|
||||||
|
m=$1
|
||||||
|
ep="$2"
|
||||||
|
data="$3"
|
||||||
|
_debug "$ep"
|
||||||
|
|
||||||
|
export _H1="Authorization: Bearer $NederHost_Key"
|
||||||
|
export _H2="Content-Type: application/json"
|
||||||
|
|
||||||
|
if [ "$m" != "GET" ]; then
|
||||||
|
_debug data "$data"
|
||||||
|
response="$(_post "$data" "$NederHost_Api/$ep" "" "$m")"
|
||||||
|
else
|
||||||
|
response="$(_get "$NederHost_Api/$ep")"
|
||||||
|
fi
|
||||||
|
|
||||||
|
_code="$(grep "^HTTP" "$HTTP_HEADER" | _tail_n 1 | cut -d " " -f 2 | tr -d "\\r\\n")"
|
||||||
|
_debug "http response code $_code"
|
||||||
|
|
||||||
|
if [ "$?" != "0" ]; then
|
||||||
|
_err "error $ep"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_debug2 response "$response"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
@ -8,6 +8,7 @@ end="https://ccp.netcup.net/run/webservice/servers/endpoint.php?JSON"
|
|||||||
client=""
|
client=""
|
||||||
|
|
||||||
dns_netcup_add() {
|
dns_netcup_add() {
|
||||||
|
_debug NC_Apikey "$NC_Apikey"
|
||||||
login
|
login
|
||||||
if [ "$NC_Apikey" = "" ] || [ "$NC_Apipw" = "" ] || [ "$NC_CID" = "" ]; then
|
if [ "$NC_Apikey" = "" ] || [ "$NC_Apipw" = "" ] || [ "$NC_CID" = "" ]; then
|
||||||
_err "No Credentials given"
|
_err "No Credentials given"
|
||||||
|
|||||||
64
dnsapi/dns_nsd.sh
Normal file
64
dnsapi/dns_nsd.sh
Normal file
@ -0,0 +1,64 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#Nsd_ZoneFile="/etc/nsd/zones/example.com.zone"
|
||||||
|
#Nsd_Command="sudo nsd-control reload"
|
||||||
|
|
||||||
|
# args: fulldomain txtvalue
|
||||||
|
dns_nsd_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
ttlvalue=300
|
||||||
|
|
||||||
|
Nsd_ZoneFile="${Nsd_ZoneFile:-$(_readdomainconf Nsd_ZoneFile)}"
|
||||||
|
Nsd_Command="${Nsd_Command:-$(_readdomainconf Nsd_Command)}"
|
||||||
|
|
||||||
|
# Arg checks
|
||||||
|
if [ -z "$Nsd_ZoneFile" ] || [ -z "$Nsd_Command" ]; then
|
||||||
|
Nsd_ZoneFile=""
|
||||||
|
Nsd_Command=""
|
||||||
|
_err "Specify ENV vars Nsd_ZoneFile and Nsd_Command"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ ! -f "$Nsd_ZoneFile" ]; then
|
||||||
|
Nsd_ZoneFile=""
|
||||||
|
Nsd_Command=""
|
||||||
|
_err "No such file: $Nsd_ZoneFile"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_savedomainconf Nsd_ZoneFile "$Nsd_ZoneFile"
|
||||||
|
_savedomainconf Nsd_Command "$Nsd_Command"
|
||||||
|
|
||||||
|
echo "$fulldomain. $ttlvalue IN TXT \"$txtvalue\"" >>"$Nsd_ZoneFile"
|
||||||
|
_info "Added TXT record for $fulldomain"
|
||||||
|
_debug "Running $Nsd_Command"
|
||||||
|
if eval "$Nsd_Command"; then
|
||||||
|
_info "Successfully updated the zone"
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Problem updating the zone"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
# args: fulldomain txtvalue
|
||||||
|
dns_nsd_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
ttlvalue=300
|
||||||
|
|
||||||
|
Nsd_ZoneFile="${Nsd_ZoneFile:-$(_readdomainconf Nsd_ZoneFile)}"
|
||||||
|
Nsd_Command="${Nsd_Command:-$(_readdomainconf Nsd_Command)}"
|
||||||
|
|
||||||
|
sed -i "/$fulldomain. $ttlvalue IN TXT \"$txtvalue\"/d" "$Nsd_ZoneFile"
|
||||||
|
_info "Removed TXT record for $fulldomain"
|
||||||
|
_debug "Running $Nsd_Command"
|
||||||
|
if eval "$Nsd_Command"; then
|
||||||
|
_info "Successfully reloaded NSD "
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Problem reloading NSD"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
@ -6,14 +6,22 @@
|
|||||||
dns_nsupdate_add() {
|
dns_nsupdate_add() {
|
||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
txtvalue=$2
|
txtvalue=$2
|
||||||
|
NSUPDATE_SERVER="${NSUPDATE_SERVER:-$(_readaccountconf_mutable NSUPDATE_SERVER)}"
|
||||||
|
NSUPDATE_SERVER_PORT="${NSUPDATE_SERVER_PORT:-$(_readaccountconf_mutable NSUPDATE_SERVER_PORT)}"
|
||||||
|
NSUPDATE_KEY="${NSUPDATE_KEY:-$(_readaccountconf_mutable NSUPDATE_KEY)}"
|
||||||
|
NSUPDATE_ZONE="${NSUPDATE_ZONE:-$(_readaccountconf_mutable NSUPDATE_ZONE)}"
|
||||||
|
|
||||||
_checkKeyFile || return 1
|
_checkKeyFile || return 1
|
||||||
|
|
||||||
|
# save the dns server and key to the account conf file.
|
||||||
|
_saveaccountconf_mutable NSUPDATE_SERVER "${NSUPDATE_SERVER}"
|
||||||
|
_saveaccountconf_mutable NSUPDATE_SERVER_PORT "${NSUPDATE_SERVER_PORT}"
|
||||||
|
_saveaccountconf_mutable NSUPDATE_KEY "${NSUPDATE_KEY}"
|
||||||
|
_saveaccountconf_mutable NSUPDATE_ZONE "${NSUPDATE_ZONE}"
|
||||||
|
|
||||||
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
||||||
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
||||||
# save the dns server and key to the account conf file.
|
|
||||||
_saveaccountconf NSUPDATE_SERVER "${NSUPDATE_SERVER}"
|
|
||||||
_saveaccountconf NSUPDATE_SERVER_PORT "${NSUPDATE_SERVER_PORT}"
|
|
||||||
_saveaccountconf NSUPDATE_KEY "${NSUPDATE_KEY}"
|
|
||||||
_saveaccountconf NSUPDATE_ZONE "${NSUPDATE_ZONE}"
|
|
||||||
_info "adding ${fulldomain}. 60 in txt \"${txtvalue}\""
|
_info "adding ${fulldomain}. 60 in txt \"${txtvalue}\""
|
||||||
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d"
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d"
|
||||||
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D"
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D"
|
||||||
@ -42,6 +50,12 @@ EOF
|
|||||||
#Usage: dns_nsupdate_rm _acme-challenge.www.domain.com
|
#Usage: dns_nsupdate_rm _acme-challenge.www.domain.com
|
||||||
dns_nsupdate_rm() {
|
dns_nsupdate_rm() {
|
||||||
fulldomain=$1
|
fulldomain=$1
|
||||||
|
|
||||||
|
NSUPDATE_SERVER="${NSUPDATE_SERVER:-$(_readaccountconf_mutable NSUPDATE_SERVER)}"
|
||||||
|
NSUPDATE_SERVER_PORT="${NSUPDATE_SERVER_PORT:-$(_readaccountconf_mutable NSUPDATE_SERVER_PORT)}"
|
||||||
|
NSUPDATE_KEY="${NSUPDATE_KEY:-$(_readaccountconf_mutable NSUPDATE_KEY)}"
|
||||||
|
NSUPDATE_ZONE="${NSUPDATE_ZONE:-$(_readaccountconf_mutable NSUPDATE_ZONE)}"
|
||||||
|
|
||||||
_checkKeyFile || return 1
|
_checkKeyFile || return 1
|
||||||
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
|
||||||
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
|
||||||
|
|||||||
244
dnsapi/dns_openprovider.sh
Executable file
244
dnsapi/dns_openprovider.sh
Executable file
@ -0,0 +1,244 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# This is the OpenProvider API wrapper for acme.sh
|
||||||
|
#
|
||||||
|
# Author: Sylvia van Os
|
||||||
|
# Report Bugs here: https://github.com/Neilpang/acme.sh/issues/2104
|
||||||
|
#
|
||||||
|
# export OPENPROVIDER_USER="username"
|
||||||
|
# export OPENPROVIDER_PASSWORDHASH="hashed_password"
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# acme.sh --issue --dns dns_openprovider -d example.com
|
||||||
|
|
||||||
|
OPENPROVIDER_API="https://api.openprovider.eu/"
|
||||||
|
#OPENPROVIDER_API="https://api.cte.openprovider.eu/" # Test API
|
||||||
|
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#Usage: dns_openprovider_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
||||||
|
dns_openprovider_add() {
|
||||||
|
fulldomain="$1"
|
||||||
|
txtvalue="$2"
|
||||||
|
|
||||||
|
OPENPROVIDER_USER="${OPENPROVIDER_USER:-$(_readaccountconf_mutable OPENPROVIDER_USER)}"
|
||||||
|
OPENPROVIDER_PASSWORDHASH="${OPENPROVIDER_PASSWORDHASH:-$(_readaccountconf_mutable OPENPROVIDER_PASSWORDHASH)}"
|
||||||
|
|
||||||
|
if [ -z "$OPENPROVIDER_USER" ] || [ -z "$OPENPROVIDER_PASSWORDHASH" ]; then
|
||||||
|
_err "You didn't specify the openprovider user and/or password hash."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# save the username and password to the account conf file.
|
||||||
|
_saveaccountconf_mutable OPENPROVIDER_USER "$OPENPROVIDER_USER"
|
||||||
|
_saveaccountconf_mutable OPENPROVIDER_PASSWORDHASH "$OPENPROVIDER_PASSWORDHASH"
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _domain_name "$_domain_name"
|
||||||
|
_debug _domain_extension "$_domain_extension"
|
||||||
|
|
||||||
|
_debug "Getting current records"
|
||||||
|
existing_items=""
|
||||||
|
results_retrieved=0
|
||||||
|
while true; do
|
||||||
|
_openprovider_request "$(printf '<searchZoneRecordDnsRequest><name>%s.%s</name><offset>%s</offset></searchZoneRecordDnsRequest>' "$_domain_name" "$_domain_extension" "$results_retrieved")"
|
||||||
|
|
||||||
|
items="$response"
|
||||||
|
while true; do
|
||||||
|
item="$(echo "$items" | _egrep_o '<openXML>.*<\/openXML>' | sed -n 's/.*\(<item>.*<\/item>\).*/\1/p')"
|
||||||
|
_debug existing_items "$existing_items"
|
||||||
|
_debug results_retrieved "$results_retrieved"
|
||||||
|
_debug item "$item"
|
||||||
|
|
||||||
|
if [ -z "$item" ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
|
||||||
|
items="$(echo "$items" | sed "s|${item}||")"
|
||||||
|
|
||||||
|
results_retrieved="$(_math "$results_retrieved" + 1)"
|
||||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)\.'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')"
|
||||||
|
if [ -z "$new_item" ]; then
|
||||||
|
# Base record
|
||||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$(echo "$new_item" | _egrep_o ".*<type>(A|AAAA|CNAME|MX|SPF|SRV|TXT|TLSA|SSHFP|CAA)<\/type>.*")" ]; then
|
||||||
|
_debug "not an allowed record type, skipping" "$new_item"
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
|
||||||
|
existing_items="$existing_items$new_item"
|
||||||
|
done
|
||||||
|
|
||||||
|
total="$(echo "$response" | _egrep_o '<total>.*?<\/total>' | sed -n 's/.*<total>\(.*\)<\/total>.*/\1/p')"
|
||||||
|
|
||||||
|
_debug total "$total"
|
||||||
|
if [ "$results_retrieved" -eq "$total" ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
_debug "Creating acme record"
|
||||||
|
acme_record="$(echo "$fulldomain" | sed -e "s/.$_domain_name.$_domain_extension$//")"
|
||||||
|
_openprovider_request "$(printf '<modifyZoneDnsRequest><domain><name>%s</name><extension>%s</extension></domain><type>master</type><records><array>%s<item><name>%s</name><type>TXT</type><value>%s</value><ttl>86400</ttl></item></array></records></modifyZoneDnsRequest>' "$_domain_name" "$_domain_extension" "$existing_items" "$acme_record" "$txtvalue")"
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
#Usage: fulldomain txtvalue
|
||||||
|
#Remove the txt record after validation.
|
||||||
|
dns_openprovider_rm() {
|
||||||
|
fulldomain="$1"
|
||||||
|
txtvalue="$2"
|
||||||
|
|
||||||
|
OPENPROVIDER_USER="${OPENPROVIDER_USER:-$(_readaccountconf_mutable OPENPROVIDER_USER)}"
|
||||||
|
OPENPROVIDER_PASSWORDHASH="${OPENPROVIDER_PASSWORDHASH:-$(_readaccountconf_mutable OPENPROVIDER_PASSWORDHASH)}"
|
||||||
|
|
||||||
|
if [ -z "$OPENPROVIDER_USER" ] || [ -z "$OPENPROVIDER_PASSWORDHASH" ]; then
|
||||||
|
_err "You didn't specify the openprovider user and/or password hash."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
# save the username and password to the account conf file.
|
||||||
|
_saveaccountconf_mutable OPENPROVIDER_USER "$OPENPROVIDER_USER"
|
||||||
|
_saveaccountconf_mutable OPENPROVIDER_PASSWORDHASH "$OPENPROVIDER_PASSWORDHASH"
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _domain_name "$_domain_name"
|
||||||
|
_debug _domain_extension "$_domain_extension"
|
||||||
|
|
||||||
|
_debug "Getting current records"
|
||||||
|
existing_items=""
|
||||||
|
results_retrieved=0
|
||||||
|
while true; do
|
||||||
|
_openprovider_request "$(printf '<searchZoneRecordDnsRequest><name>%s.%s</name><offset>%s</offset></searchZoneRecordDnsRequest>' "$_domain_name" "$_domain_extension" "$results_retrieved")"
|
||||||
|
|
||||||
|
# Remove acme records from items
|
||||||
|
items="$response"
|
||||||
|
while true; do
|
||||||
|
item="$(echo "$items" | _egrep_o '<openXML>.*<\/openXML>' | sed -n 's/.*\(<item>.*<\/item>\).*/\1/p')"
|
||||||
|
_debug existing_items "$existing_items"
|
||||||
|
_debug results_retrieved "$results_retrieved"
|
||||||
|
_debug item "$item"
|
||||||
|
|
||||||
|
if [ -z "$item" ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
|
||||||
|
items="$(echo "$items" | sed "s|${item}||")"
|
||||||
|
|
||||||
|
results_retrieved="$(_math "$results_retrieved" + 1)"
|
||||||
|
if ! echo "$item" | grep -v "$fulldomain"; then
|
||||||
|
_debug "acme record, skipping" "$item"
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
|
||||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)\.'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')"
|
||||||
|
|
||||||
|
if [ -z "$new_item" ]; then
|
||||||
|
# Base record
|
||||||
|
new_item="$(echo "$item" | sed -n 's/.*<item>.*\(<name>\(.*\)'"$_domain_name"'\.'"$_domain_extension"'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p')"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -z "$(echo "$new_item" | _egrep_o ".*<type>(A|AAAA|CNAME|MX|SPF|SRV|TXT|TLSA|SSHFP|CAA)<\/type>.*")" ]; then
|
||||||
|
_debug "not an allowed record type, skipping" "$new_item"
|
||||||
|
continue
|
||||||
|
fi
|
||||||
|
|
||||||
|
existing_items="$existing_items$new_item"
|
||||||
|
done
|
||||||
|
|
||||||
|
total="$(echo "$response" | _egrep_o '<total>.*?<\/total>' | sed -n 's/.*<total>\(.*\)<\/total>.*/\1/p')"
|
||||||
|
|
||||||
|
_debug total "$total"
|
||||||
|
|
||||||
|
if [ "$results_retrieved" -eq "$total" ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
_debug "Removing acme record"
|
||||||
|
_openprovider_request "$(printf '<modifyZoneDnsRequest><domain><name>%s</name><extension>%s</extension></domain><type>master</type><records><array>%s</array></records></modifyZoneDnsRequest>' "$_domain_name" "$_domain_extension" "$existing_items")"
|
||||||
|
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
#_acme-challenge.www.domain.com
|
||||||
|
#returns
|
||||||
|
# _domain_name=domain
|
||||||
|
# _domain_extension=com
|
||||||
|
_get_root() {
|
||||||
|
domain=$1
|
||||||
|
i=2
|
||||||
|
|
||||||
|
results_retrieved=0
|
||||||
|
while true; do
|
||||||
|
h=$(echo "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug h "$h"
|
||||||
|
if [ -z "$h" ]; then
|
||||||
|
#not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_openprovider_request "$(printf '<searchDomainRequest><domainNamePattern>%s</domainNamePattern><offset>%s</offset></searchDomainRequest>' "$(echo "$h" | cut -d . -f 1)" "$results_retrieved")"
|
||||||
|
|
||||||
|
items="$response"
|
||||||
|
while true; do
|
||||||
|
item="$(echo "$items" | _egrep_o '<openXML>.*<\/openXML>' | sed -n 's/.*\(<domain>.*<\/domain>\).*/\1/p')"
|
||||||
|
_debug existing_items "$existing_items"
|
||||||
|
_debug results_retrieved "$results_retrieved"
|
||||||
|
_debug item "$item"
|
||||||
|
|
||||||
|
if [ -z "$item" ]; then
|
||||||
|
break
|
||||||
|
fi
|
||||||
|
|
||||||
|
items="$(echo "$items" | sed "s|${item}||")"
|
||||||
|
|
||||||
|
results_retrieved="$(_math "$results_retrieved" + 1)"
|
||||||
|
|
||||||
|
_domain_name="$(echo "$item" | sed -n 's/.*<domain>.*<name>\(.*\)<\/name>.*<\/domain>.*/\1/p')"
|
||||||
|
_domain_extension="$(echo "$item" | sed -n 's/.*<domain>.*<extension>\(.*\)<\/extension>.*<\/domain>.*/\1/p')"
|
||||||
|
_debug _domain_name "$_domain_name"
|
||||||
|
_debug _domain_extension "$_domain_extension"
|
||||||
|
if [ "$_domain_name.$_domain_extension" = "$h" ]; then
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
|
||||||
|
total="$(echo "$response" | _egrep_o '<total>.*?<\/total>' | sed -n 's/.*<total>\(.*\)<\/total>.*/\1/p')"
|
||||||
|
|
||||||
|
_debug total "$total"
|
||||||
|
|
||||||
|
if [ "$results_retrieved" -eq "$total" ]; then
|
||||||
|
results_retrieved=0
|
||||||
|
i="$(_math "$i" + 1)"
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
_openprovider_request() {
|
||||||
|
request_xml=$1
|
||||||
|
|
||||||
|
xml_prefix='<?xml version="1.0" encoding="UTF-8"?>'
|
||||||
|
xml_content=$(printf '<openXML><credentials><username>%s</username><hash>%s</hash></credentials>%s</openXML>' "$OPENPROVIDER_USER" "$OPENPROVIDER_PASSWORDHASH" "$request_xml")
|
||||||
|
response="$(_post "$(echo "$xml_prefix$xml_content" | tr -d '\n')" "$OPENPROVIDER_API" "" "POST" "application/xml")"
|
||||||
|
_debug response "$response"
|
||||||
|
if ! _contains "$response" "<openXML><reply><code>0</code>.*</reply></openXML>"; then
|
||||||
|
_err "API request failed."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
}
|
||||||
261
dnsapi/dns_schlundtech.sh
Normal file
261
dnsapi/dns_schlundtech.sh
Normal file
@ -0,0 +1,261 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
# -*- mode: sh; tab-width: 2; indent-tabs-mode: s; coding: utf-8 -*-
|
||||||
|
|
||||||
|
# Schlundtech DNS API
|
||||||
|
# Author: mod242
|
||||||
|
# Created: 2019-40-29
|
||||||
|
# Completly based on the autoDNS xml api wrapper by auerswald@gmail.com
|
||||||
|
#
|
||||||
|
# export SCHLUNDTECH_USER="username"
|
||||||
|
# export SCHLUNDTECH_PASSWORD="password"
|
||||||
|
#
|
||||||
|
# Usage:
|
||||||
|
# acme.sh --issue --dns dns_schlundtech -d example.com
|
||||||
|
|
||||||
|
SCHLUNDTECH_API="https://gateway.schlundtech.de"
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# txtdomain
|
||||||
|
# txt
|
||||||
|
dns_schlundtech_add() {
|
||||||
|
fulldomain="$1"
|
||||||
|
txtvalue="$2"
|
||||||
|
|
||||||
|
SCHLUNDTECH_USER="${SCHLUNDTECH_USER:-$(_readaccountconf_mutable SCHLUNDTECH_USER)}"
|
||||||
|
SCHLUNDTECH_PASSWORD="${SCHLUNDTECH_PASSWORD:-$(_readaccountconf_mutable SCHLUNDTECH_PASSWORD)}"
|
||||||
|
|
||||||
|
if [ -z "$SCHLUNDTECH_USER" ] || [ -z "$SCHLUNDTECH_PASSWORD" ]; then
|
||||||
|
_err "You didn't specify schlundtech user and password."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_saveaccountconf_mutable SCHLUNDTECH_USER "$SCHLUNDTECH_USER"
|
||||||
|
_saveaccountconf_mutable SCHLUNDTECH_PASSWORD "$SCHLUNDTECH_PASSWORD"
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
|
||||||
|
if ! _get_autodns_zone "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _zone "$_zone"
|
||||||
|
_debug _system_ns "$_system_ns"
|
||||||
|
|
||||||
|
_info "Adding TXT record"
|
||||||
|
|
||||||
|
autodns_response="$(_autodns_zone_update "$_zone" "$_sub_domain" "$txtvalue" "$_system_ns")"
|
||||||
|
|
||||||
|
if [ "$?" -eq "0" ]; then
|
||||||
|
_info "Added, OK"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# txtdomain
|
||||||
|
# txt
|
||||||
|
dns_schlundtech_rm() {
|
||||||
|
fulldomain="$1"
|
||||||
|
txtvalue="$2"
|
||||||
|
|
||||||
|
SCHLUNDTECH_USER="${SCHLUNDTECH_USER:-$(_readaccountconf_mutable SCHLUNDTECH_USER)}"
|
||||||
|
SCHLUNDTECH_PASSWORD="${SCHLUNDTECH_PASSWORD:-$(_readaccountconf_mutable SCHLUNDTECH_PASSWORD)}"
|
||||||
|
|
||||||
|
if [ -z "$SCHLUNDTECH_USER" ] || [ -z "$SCHLUNDTECH_PASSWORD" ]; then
|
||||||
|
_err "You didn't specify schlundtech user and password."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
|
||||||
|
if ! _get_autodns_zone "$fulldomain"; then
|
||||||
|
_err "zone not found"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug _sub_domain "$_sub_domain"
|
||||||
|
_debug _zone "$_zone"
|
||||||
|
_debug _system_ns "$_system_ns"
|
||||||
|
|
||||||
|
_info "Delete TXT record"
|
||||||
|
|
||||||
|
autodns_response="$(_autodns_zone_cleanup "$_zone" "$_sub_domain" "$txtvalue" "$_system_ns")"
|
||||||
|
|
||||||
|
if [ "$?" -eq "0" ]; then
|
||||||
|
_info "Deleted, OK"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# fulldomain
|
||||||
|
# Returns:
|
||||||
|
# _sub_domain=_acme-challenge.www
|
||||||
|
# _zone=domain.com
|
||||||
|
# _system_ns
|
||||||
|
_get_autodns_zone() {
|
||||||
|
domain="$1"
|
||||||
|
|
||||||
|
i=2
|
||||||
|
p=1
|
||||||
|
|
||||||
|
while true; do
|
||||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug h "$h"
|
||||||
|
|
||||||
|
if [ -z "$h" ]; then
|
||||||
|
# not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
autodns_response="$(_autodns_zone_inquire "$h")"
|
||||||
|
|
||||||
|
if [ "$?" -ne "0" ]; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _contains "$autodns_response" "<summary>1</summary>" >/dev/null; then
|
||||||
|
_zone="$(echo "$autodns_response" | _egrep_o '<name>[^<]*</name>' | cut -d '>' -f 2 | cut -d '<' -f 1)"
|
||||||
|
_system_ns="$(echo "$autodns_response" | _egrep_o '<system_ns>[^<]*</system_ns>' | cut -d '>' -f 2 | cut -d '<' -f 1)"
|
||||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
p=$i
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
done
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
_build_request_auth_xml() {
|
||||||
|
printf "<auth>
|
||||||
|
<user>%s</user>
|
||||||
|
<password>%s</password>
|
||||||
|
<context>10</context>
|
||||||
|
</auth>" "$SCHLUNDTECH_USER" "$SCHLUNDTECH_PASSWORD"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
_build_zone_inquire_xml() {
|
||||||
|
printf "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
|
||||||
|
<request>
|
||||||
|
%s
|
||||||
|
<task>
|
||||||
|
<code>0205</code>
|
||||||
|
<view>
|
||||||
|
<children>1</children>
|
||||||
|
<limit>1</limit>
|
||||||
|
</view>
|
||||||
|
<where>
|
||||||
|
<key>name</key>
|
||||||
|
<operator>eq</operator>
|
||||||
|
<value>%s</value>
|
||||||
|
</where>
|
||||||
|
</task>
|
||||||
|
</request>" "$(_build_request_auth_xml)" "$1"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
# subdomain
|
||||||
|
# txtvalue
|
||||||
|
# system_ns
|
||||||
|
_build_zone_update_xml() {
|
||||||
|
printf "<?xml version=\"1.0\" encoding=\"UTF-8\"?>
|
||||||
|
<request>
|
||||||
|
%s
|
||||||
|
<task>
|
||||||
|
<code>0202001</code>
|
||||||
|
<default>
|
||||||
|
<rr_add>
|
||||||
|
<name>%s</name>
|
||||||
|
<ttl>600</ttl>
|
||||||
|
<type>TXT</type>
|
||||||
|
<value>%s</value>
|
||||||
|
</rr_add>
|
||||||
|
</default>
|
||||||
|
<zone>
|
||||||
|
<name>%s</name>
|
||||||
|
<system_ns>%s</system_ns>
|
||||||
|
</zone>
|
||||||
|
</task>
|
||||||
|
</request>" "$(_build_request_auth_xml)" "$2" "$3" "$1" "$4"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
_autodns_zone_inquire() {
|
||||||
|
request_data="$(_build_zone_inquire_xml "$1")"
|
||||||
|
autodns_response="$(_autodns_api_call "$request_data")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return "$ret"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
# subdomain
|
||||||
|
# txtvalue
|
||||||
|
# system_ns
|
||||||
|
_autodns_zone_update() {
|
||||||
|
request_data="$(_build_zone_update_xml "$1" "$2" "$3" "$4")"
|
||||||
|
autodns_response="$(_autodns_api_call "$request_data")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return "$ret"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# zone
|
||||||
|
# subdomain
|
||||||
|
# txtvalue
|
||||||
|
# system_ns
|
||||||
|
_autodns_zone_cleanup() {
|
||||||
|
request_data="$(_build_zone_update_xml "$1" "$2" "$3" "$4")"
|
||||||
|
# replace 'rr_add>' with 'rr_rem>' in request_data
|
||||||
|
request_data="$(printf -- "%s" "$request_data" | sed 's/rr_add>/rr_rem>/g')"
|
||||||
|
autodns_response="$(_autodns_api_call "$request_data")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return "$ret"
|
||||||
|
}
|
||||||
|
|
||||||
|
# Arguments:
|
||||||
|
# request_data
|
||||||
|
_autodns_api_call() {
|
||||||
|
request_data="$1"
|
||||||
|
|
||||||
|
_debug request_data "$request_data"
|
||||||
|
|
||||||
|
autodns_response="$(_post "$request_data" "$SCHLUNDTECH_API")"
|
||||||
|
ret="$?"
|
||||||
|
|
||||||
|
_debug autodns_response "$autodns_response"
|
||||||
|
|
||||||
|
if [ "$ret" -ne "0" ]; then
|
||||||
|
_err "error"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
if _contains "$autodns_response" "<type>success</type>" >/dev/null; then
|
||||||
|
_info "success"
|
||||||
|
printf "%s" "$autodns_response"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
return 1
|
||||||
|
}
|
||||||
164
dnsapi/dns_ultra.sh
Normal file
164
dnsapi/dns_ultra.sh
Normal file
@ -0,0 +1,164 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#
|
||||||
|
# ULTRA_USR="your_user_goes_here"
|
||||||
|
#
|
||||||
|
# ULTRA_PWD="some_password_goes_here"
|
||||||
|
|
||||||
|
ULTRA_API="https://restapi.ultradns.com/v2/"
|
||||||
|
|
||||||
|
#Usage: add _acme-challenge.www.domain.com "some_long_string_of_characters_go_here_from_lets_encrypt"
|
||||||
|
dns_ultra_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
export txtvalue
|
||||||
|
ULTRA_USR="${ULTRA_USR:-$(_readaccountconf_mutable ULTRA_USR)}"
|
||||||
|
ULTRA_PWD="${ULTRA_PWD:-$(_readaccountconf_mutable ULTRA_PWD)}"
|
||||||
|
if [ -z "$ULTRA_USR" ] || [ -z "$ULTRA_PWD" ]; then
|
||||||
|
ULTRA_USR=""
|
||||||
|
ULTRA_PWD=""
|
||||||
|
_err "You didn't specify an UltraDNS username and password yet"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
# save the username and password to the account conf file.
|
||||||
|
_saveaccountconf_mutable ULTRA_USR "$ULTRA_USR"
|
||||||
|
_saveaccountconf_mutable ULTRA_PWD "$ULTRA_PWD"
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_debug _domain_id "${_domain_id}"
|
||||||
|
_debug _sub_domain "${_sub_domain}"
|
||||||
|
_debug _domain "${_domain}"
|
||||||
|
_debug "Getting txt records"
|
||||||
|
_ultra_rest GET "zones/${_domain_id}/rrsets/TXT?q=value:${fulldomain}"
|
||||||
|
if printf "%s" "$response" | grep \"totalCount\" >/dev/null; then
|
||||||
|
_err "Error, it would appear that this record already exists. Please review existing TXT records for this domain."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "Adding record"
|
||||||
|
if _ultra_rest POST "zones/$_domain_id/rrsets/TXT/${_sub_domain}" '{"ttl":300,"rdata":["'"${txtvalue}"'"]}'; then
|
||||||
|
if _contains "$response" "Successful"; then
|
||||||
|
_info "Added, OK"
|
||||||
|
return 0
|
||||||
|
elif _contains "$response" "Resource Record of type 16 with these attributes already exists"; then
|
||||||
|
_info "Already exists, OK"
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Add txt record error."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
_err "Add txt record error."
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
dns_ultra_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
export txtvalue
|
||||||
|
ULTRA_USR="${ULTRA_USR:-$(_readaccountconf_mutable ULTRA_USR)}"
|
||||||
|
ULTRA_PWD="${ULTRA_PWD:-$(_readaccountconf_mutable ULTRA_PWD)}"
|
||||||
|
if [ -z "$ULTRA_USR" ] || [ -z "$ULTRA_PWD" ]; then
|
||||||
|
ULTRA_USR=""
|
||||||
|
ULTRA_PWD=""
|
||||||
|
_err "You didn't specify an UltraDNS username and password yet"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_debug _domain_id "${_domain_id}"
|
||||||
|
_debug _sub_domain "${_sub_domain}"
|
||||||
|
_debug _domain "${domain}"
|
||||||
|
|
||||||
|
_debug "Getting TXT records"
|
||||||
|
_ultra_rest GET "zones/${_domain_id}/rrsets?q=kind:RECORDS+owner:${_sub_domain}"
|
||||||
|
|
||||||
|
if ! printf "%s" "$response" | grep \"resultInfo\" >/dev/null; then
|
||||||
|
_err "There was an error in obtaining the resource records for ${_domain_id}"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
count=$(echo "$response" | _egrep_o "\"returnedCount\":[^,]*" | cut -d: -f2 | cut -d'}' -f1)
|
||||||
|
_debug count "${count}"
|
||||||
|
if [ "${count}" = "" ]; then
|
||||||
|
_info "Text record is not present, will not delete anything."
|
||||||
|
else
|
||||||
|
if ! _ultra_rest DELETE "zones/$_domain_id/rrsets/TXT/${_sub_domain}" '{"ttl":300,"rdata":["'"${txtvalue}"'"]}'; then
|
||||||
|
_err "Deleting the record did not succeed, please verify/check."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_contains "$response" ""
|
||||||
|
fi
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
#_acme-challenge.www.domain.com
|
||||||
|
#returns
|
||||||
|
# _sub_domain=_acme-challenge.www
|
||||||
|
# _domain=domain.com
|
||||||
|
# _domain_id=sdjkglgdfewsdfg
|
||||||
|
_get_root() {
|
||||||
|
domain=$1
|
||||||
|
i=2
|
||||||
|
p=1
|
||||||
|
while true; do
|
||||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug h "$h"
|
||||||
|
_debug response "$response"
|
||||||
|
if [ -z "$h" ]; then
|
||||||
|
#not valid
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
if ! _ultra_rest GET "zones"; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
if _contains "${response}" "${h}." >/dev/null; then
|
||||||
|
_domain_id=$(echo "$response" | _egrep_o "${h}")
|
||||||
|
if [ "$_domain_id" ]; then
|
||||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p)
|
||||||
|
_domain="${h}"
|
||||||
|
_debug sub_domain "${_sub_domain}"
|
||||||
|
_debug domain "${_domain}"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
p=$i
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
done
|
||||||
|
return 1
|
||||||
|
}
|
||||||
|
|
||||||
|
_ultra_rest() {
|
||||||
|
m=$1
|
||||||
|
ep="$2"
|
||||||
|
data="$3"
|
||||||
|
_debug "$ep"
|
||||||
|
_debug TOKEN "${AUTH_TOKEN}"
|
||||||
|
|
||||||
|
_ultra_login
|
||||||
|
export _H1="Content-Type: application/json"
|
||||||
|
export _H2="Authorization: Bearer ${AUTH_TOKEN}"
|
||||||
|
|
||||||
|
if [ "$m" != "GET" ]; then
|
||||||
|
_debug data "${data}"
|
||||||
|
response="$(_post "${data}" "${ULTRA_API}"/"${ep}" "" "${m}")"
|
||||||
|
else
|
||||||
|
response="$(_get "$ULTRA_API/$ep")"
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
_ultra_login() {
|
||||||
|
export _H1=""
|
||||||
|
export _H2=""
|
||||||
|
AUTH_TOKEN=$(_post "grant_type=password&username=${ULTRA_USR}&password=${ULTRA_PWD}" "${ULTRA_API}authorization/token" | cut -d, -f3 | cut -d\" -f4)
|
||||||
|
export AUTH_TOKEN
|
||||||
|
}
|
||||||
149
dnsapi/dns_zone.sh
Executable file
149
dnsapi/dns_zone.sh
Executable file
@ -0,0 +1,149 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# Zone.ee dns API
|
||||||
|
# https://help.zone.eu/kb/zoneid-api-v2/
|
||||||
|
# required ZONE_Username and ZONE_Key
|
||||||
|
|
||||||
|
ZONE_Api="https://api.zone.eu/v2"
|
||||||
|
######## Public functions #####################
|
||||||
|
|
||||||
|
#Usage: dns_zone_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
||||||
|
dns_zone_add() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
_info "Using zone.ee dns api"
|
||||||
|
_debug fulldomain "$fulldomain"
|
||||||
|
_debug txtvalue "$txtvalue"
|
||||||
|
ZONE_Username="${ZONE_Username:-$(_readaccountconf_mutable ZONE_Username)}"
|
||||||
|
ZONE_Key="${ZONE_Key:-$(_readaccountconf_mutable ZONE_Key)}"
|
||||||
|
if [ -z "$ZONE_Username" ] || [ -z "$ZONE_Key" ]; then
|
||||||
|
ZONE_Username=""
|
||||||
|
ZONE_Key=""
|
||||||
|
_err "Zone api key and username must be present."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable ZONE_Username "$ZONE_Username"
|
||||||
|
_saveaccountconf_mutable ZONE_Key "$ZONE_Key"
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "Adding txt record"
|
||||||
|
|
||||||
|
if _zone_rest POST "dns/${_domain}/txt" "{\"name\": \"$fulldomain\", \"destination\": \"$txtvalue\"}"; then
|
||||||
|
if printf -- "%s" "$response" | grep "$fulldomain" >/dev/null; then
|
||||||
|
_info "Added, OK"
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "Adding txt record error."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
else
|
||||||
|
_err "Adding txt record error."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
#Usage: fulldomain txtvalue
|
||||||
|
#Remove the txt record after validation.
|
||||||
|
dns_zone_rm() {
|
||||||
|
fulldomain=$1
|
||||||
|
txtvalue=$2
|
||||||
|
_info "Using zone.ee dns api"
|
||||||
|
_debug fulldomain "$fulldomain"
|
||||||
|
_debug txtvalue "$txtvalue"
|
||||||
|
ZONE_Username="${ZONE_Username:-$(_readaccountconf_mutable ZONE_Username)}"
|
||||||
|
ZONE_Key="${ZONE_Key:-$(_readaccountconf_mutable ZONE_Key)}"
|
||||||
|
if [ -z "$ZONE_Username" ] || [ -z "$ZONE_Key" ]; then
|
||||||
|
ZONE_Username=""
|
||||||
|
ZONE_Key=""
|
||||||
|
_err "Zone api key and username must be present."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable ZONE_Username "$ZONE_Username"
|
||||||
|
_saveaccountconf_mutable ZONE_Key "$ZONE_Key"
|
||||||
|
_debug "First detect the root zone"
|
||||||
|
if ! _get_root "$fulldomain"; then
|
||||||
|
_err "invalid domain"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_debug "Getting txt records"
|
||||||
|
_debug _domain "$_domain"
|
||||||
|
|
||||||
|
_zone_rest GET "dns/${_domain}/txt"
|
||||||
|
|
||||||
|
if printf "%s" "$response" | grep \"error\" >/dev/null; then
|
||||||
|
_err "Error"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
count=$(printf "%s\n" "$response" | _egrep_o "\"name\":\"$fulldomain\"" | wc -l)
|
||||||
|
_debug count "$count"
|
||||||
|
if [ "$count" = "0" ]; then
|
||||||
|
_info "Nothing to remove."
|
||||||
|
else
|
||||||
|
record_id=$(printf "%s\n" "$response" | _egrep_o "\"id\":\"[^\"]*\",\"resource_url\":\"[^\"]*\",\"name\":\"$fulldomain\"," | cut -d : -f2 | cut -d , -f1 | tr -d \" | _head_n 1)
|
||||||
|
if [ -z "$record_id" ]; then
|
||||||
|
_err "No id found to remove."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
if ! _zone_rest DELETE "dns/${_domain}/txt/$record_id"; then
|
||||||
|
_err "Record deleting error."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_info "Record deleted"
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
#################### Private functions below ##################################
|
||||||
|
|
||||||
|
_zone_rest() {
|
||||||
|
m=$1
|
||||||
|
ep="$2"
|
||||||
|
data="$3"
|
||||||
|
_debug "$ep"
|
||||||
|
|
||||||
|
realm="$(printf "%s" "$ZONE_Username:$ZONE_Key" | _base64)"
|
||||||
|
|
||||||
|
export _H1="Authorization: Basic $realm"
|
||||||
|
export _H2="Content-Type: application/json"
|
||||||
|
|
||||||
|
if [ "$m" != "GET" ]; then
|
||||||
|
_debug data "$data"
|
||||||
|
response="$(_post "$data" "$ZONE_Api/$ep" "" "$m")"
|
||||||
|
else
|
||||||
|
response="$(_get "$ZONE_Api/$ep")"
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ "$?" != "0" ]; then
|
||||||
|
_err "error $ep"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_debug2 response "$response"
|
||||||
|
return 0
|
||||||
|
}
|
||||||
|
|
||||||
|
_get_root() {
|
||||||
|
domain=$1
|
||||||
|
i=2
|
||||||
|
while true; do
|
||||||
|
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
|
||||||
|
_debug h "$h"
|
||||||
|
if [ -z "$h" ]; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
if ! _zone_rest GET "dns/$h/a"; then
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
if _contains "$response" "\"name\":\"$h\"" >/dev/null; then
|
||||||
|
_domain=$h
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
i=$(_math "$i" + 1)
|
||||||
|
done
|
||||||
|
return 0
|
||||||
|
}
|
||||||
15
notify/mail.sh
Normal file
15
notify/mail.sh
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# support local mail app
|
||||||
|
|
||||||
|
mail_send() {
|
||||||
|
_subject="$1"
|
||||||
|
_content="$2"
|
||||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped
|
||||||
|
_debug "_subject" "$_subject"
|
||||||
|
_debug "_content" "$_content"
|
||||||
|
_debug "_statusCode" "$_statusCode"
|
||||||
|
|
||||||
|
_err "Not implemented yet."
|
||||||
|
return 1
|
||||||
|
}
|
||||||
123
notify/mailgun.sh
Normal file
123
notify/mailgun.sh
Normal file
@ -0,0 +1,123 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#Support mailgun.com api
|
||||||
|
|
||||||
|
#MAILGUN_API_KEY="xxxx"
|
||||||
|
#MAILGUN_TO="yyyy@gmail.com"
|
||||||
|
|
||||||
|
#MAILGUN_REGION="us|eu" #optional, use "us" as default
|
||||||
|
#MAILGUN_API_DOMAIN="xxxxxx.com" #optional, use the default sandbox domain
|
||||||
|
#MAILGUN_FROM="xxx@xxxxx.com" #optional, use the default sendbox account
|
||||||
|
|
||||||
|
_MAILGUN_BASE="https://api.mailgun.net/v3"
|
||||||
|
|
||||||
|
# subject content statusCode
|
||||||
|
mailgun_send() {
|
||||||
|
_subject="$1"
|
||||||
|
_content="$2"
|
||||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped
|
||||||
|
_debug "_statusCode" "$_statusCode"
|
||||||
|
|
||||||
|
MAILGUN_API_KEY="${MAILGUN_API_KEY:-$(_readaccountconf_mutable MAILGUN_API_KEY)}"
|
||||||
|
if [ -z "$MAILGUN_API_KEY" ]; then
|
||||||
|
MAILGUN_API_KEY=""
|
||||||
|
_err "You didn't specify a mailgun api key MAILGUN_API_KEY yet ."
|
||||||
|
_err "You can get yours from here https://mailgun.com"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable MAILGUN_API_KEY "$MAILGUN_API_KEY"
|
||||||
|
|
||||||
|
MAILGUN_REGION="${MAILGUN_REGION:-$(_readaccountconf_mutable MAILGUN_REGION)}"
|
||||||
|
if [ -z "$MAILGUN_REGION" ]; then
|
||||||
|
MAILGUN_REGION=""
|
||||||
|
_info "The MAILGUN_REGION is not set, so use the default us region."
|
||||||
|
_MAILGUN_BASE="https://api.mailgun.net/v3"
|
||||||
|
else
|
||||||
|
_saveaccountconf_mutable MAILGUN_REGION "$MAILGUN_REGION"
|
||||||
|
_MAILGUN_BASE="https://api.eu.mailgun.net/v3"
|
||||||
|
fi
|
||||||
|
|
||||||
|
MAILGUN_TO="${MAILGUN_TO:-$(_readaccountconf_mutable MAILGUN_TO)}"
|
||||||
|
if [ -z "$MAILGUN_TO" ]; then
|
||||||
|
MAILGUN_TO=""
|
||||||
|
_err "You didn't specify an email to MAILGUN_TO receive messages."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable MAILGUN_TO "$MAILGUN_TO"
|
||||||
|
|
||||||
|
MAILGUN_API_DOMAIN="${MAILGUN_API_DOMAIN:-$(_readaccountconf_mutable MAILGUN_API_DOMAIN)}"
|
||||||
|
if [ -z "$MAILGUN_API_DOMAIN" ]; then
|
||||||
|
_info "The MAILGUN_API_DOMAIN is not set, try to get the default sending sandbox domain for you."
|
||||||
|
if ! _mailgun_rest GET "/domains"; then
|
||||||
|
_err "Can not get sandbox domain."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_sendboxDomain="$(echo "$response" | _egrep_o '"name": *"sandbox.*.mailgun.org"' | cut -d : -f 2 | tr -d '" ')"
|
||||||
|
_debug _sendboxDomain "$_sendboxDomain"
|
||||||
|
MAILGUN_API_DOMAIN="$_sendboxDomain"
|
||||||
|
if [ -z "$MAILGUN_API_DOMAIN" ]; then
|
||||||
|
_err "Can not get sandbox domain for MAILGUN_API_DOMAIN"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
_info "$(__green "When using sandbox domain, you must verify your email first.")"
|
||||||
|
#todo: add recepient
|
||||||
|
fi
|
||||||
|
if [ -z "$MAILGUN_API_DOMAIN" ]; then
|
||||||
|
_err "Can not get MAILGUN_API_DOMAIN"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable MAILGUN_API_DOMAIN "$MAILGUN_API_DOMAIN"
|
||||||
|
|
||||||
|
MAILGUN_FROM="${MAILGUN_FROM:-$(_readaccountconf_mutable MAILGUN_FROM)}"
|
||||||
|
if [ -z "$MAILGUN_FROM" ]; then
|
||||||
|
MAILGUN_FROM="$PROJECT_NAME@$MAILGUN_API_DOMAIN"
|
||||||
|
_info "The MAILGUN_FROM is not set, so use the default value: $MAILGUN_FROM"
|
||||||
|
else
|
||||||
|
_debug MAILGUN_FROM "$MAILGUN_FROM"
|
||||||
|
_saveaccountconf_mutable MAILGUN_FROM "$MAILGUN_FROM"
|
||||||
|
fi
|
||||||
|
|
||||||
|
#send from url
|
||||||
|
_msg="/$MAILGUN_API_DOMAIN/messages?from=$(printf "%s" "$MAILGUN_FROM" | _url_encode)&to=$(printf "%s" "$MAILGUN_TO" | _url_encode)&subject=$(printf "%s" "$_subject" | _url_encode)&text=$(printf "%s" "$_content" | _url_encode)"
|
||||||
|
_debug "_msg" "$_msg"
|
||||||
|
_mailgun_rest POST "$_msg"
|
||||||
|
if _contains "$response" "Queued. Thank you."; then
|
||||||
|
_info "mailgun send success."
|
||||||
|
return 0
|
||||||
|
else
|
||||||
|
_err "mailgun send error"
|
||||||
|
_err "$response"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
# method uri data
|
||||||
|
_mailgun_rest() {
|
||||||
|
_method="$1"
|
||||||
|
_mguri="$2"
|
||||||
|
_mgdata="$3"
|
||||||
|
_debug _mguri "$_mguri"
|
||||||
|
_mgurl="$_MAILGUN_BASE$_mguri"
|
||||||
|
_debug _mgurl "$_mgurl"
|
||||||
|
|
||||||
|
_auth="$(printf "%s" "api:$MAILGUN_API_KEY" | _base64)"
|
||||||
|
export _H1="Authorization: Basic $_auth"
|
||||||
|
export _H2="Content-Type: application/json"
|
||||||
|
|
||||||
|
if [ "$_method" = "GET" ]; then
|
||||||
|
response="$(_get "$_mgurl")"
|
||||||
|
else
|
||||||
|
_debug _mgdata "$_mgdata"
|
||||||
|
response="$(_post "$_mgdata" "$_mgurl" "" "$_method")"
|
||||||
|
fi
|
||||||
|
if [ "$?" != "0" ]; then
|
||||||
|
_err "Error: $_mguri"
|
||||||
|
_err "$response"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_debug2 response "$response"
|
||||||
|
return 0
|
||||||
|
|
||||||
|
}
|
||||||
15
notify/pop.sh
Normal file
15
notify/pop.sh
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# support pop
|
||||||
|
|
||||||
|
pop_send() {
|
||||||
|
_subject="$1"
|
||||||
|
_content="$2"
|
||||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped
|
||||||
|
_debug "_subject" "$_subject"
|
||||||
|
_debug "_content" "$_content"
|
||||||
|
_debug "_statusCode" "$_statusCode"
|
||||||
|
|
||||||
|
_err "Not implemented yet."
|
||||||
|
return 1
|
||||||
|
}
|
||||||
56
notify/sendgrid.sh
Normal file
56
notify/sendgrid.sh
Normal file
@ -0,0 +1,56 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
#Support SENDGRID.com api
|
||||||
|
|
||||||
|
#SENDGRID_API_KEY=""
|
||||||
|
#SENDGRID_TO="xxxx@xxx.com"
|
||||||
|
#SENDGRID_FROM="xxxx@cccc.com"
|
||||||
|
|
||||||
|
sendgrid_send() {
|
||||||
|
_subject="$1"
|
||||||
|
_content="$2"
|
||||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped
|
||||||
|
_debug "_statusCode" "$_statusCode"
|
||||||
|
|
||||||
|
SENDGRID_API_KEY="${SENDGRID_API_KEY:-$(_readaccountconf_mutable SENDGRID_API_KEY)}"
|
||||||
|
if [ -z "$SENDGRID_API_KEY" ]; then
|
||||||
|
SENDGRID_API_KEY=""
|
||||||
|
_err "You didn't specify a sendgrid api key SENDGRID_API_KEY yet ."
|
||||||
|
_err "You can get yours from here https://sendgrid.com"
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable SENDGRID_API_KEY "$SENDGRID_API_KEY"
|
||||||
|
|
||||||
|
SENDGRID_TO="${SENDGRID_TO:-$(_readaccountconf_mutable SENDGRID_TO)}"
|
||||||
|
if [ -z "$SENDGRID_TO" ]; then
|
||||||
|
SENDGRID_TO=""
|
||||||
|
_err "You didn't specify an email to SENDGRID_TO receive messages."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable SENDGRID_TO "$SENDGRID_TO"
|
||||||
|
|
||||||
|
SENDGRID_FROM="${SENDGRID_FROM:-$(_readaccountconf_mutable SENDGRID_FROM)}"
|
||||||
|
if [ -z "$SENDGRID_FROM" ]; then
|
||||||
|
SENDGRID_FROM=""
|
||||||
|
_err "You didn't specify an email to SENDGRID_FROM receive messages."
|
||||||
|
return 1
|
||||||
|
fi
|
||||||
|
_saveaccountconf_mutable SENDGRID_FROM "$SENDGRID_FROM"
|
||||||
|
|
||||||
|
export _H1="Authorization: Bearer $SENDGRID_API_KEY"
|
||||||
|
export _H2="Content-Type: application/json"
|
||||||
|
|
||||||
|
_content="$(echo "$_content" | _json_encode)"
|
||||||
|
_data="{\"personalizations\": [{\"to\": [{\"email\": \"$SENDGRID_TO\"}]}],\"from\": {\"email\": \"$SENDGRID_FROM\"},\"subject\": \"$_subject\",\"content\": [{\"type\": \"text/plain\", \"value\": \"$_content\"}]}"
|
||||||
|
response="" #just make shellcheck happy
|
||||||
|
if _post "$_data" "https://api.sendgrid.com/v3/mail/send"; then
|
||||||
|
if [ -z "$response" ]; then
|
||||||
|
_info "sendgrid send sccess."
|
||||||
|
return 0
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
_err "sendgrid send error."
|
||||||
|
_err "$response"
|
||||||
|
return 1
|
||||||
|
|
||||||
|
}
|
||||||
15
notify/smtp.sh
Normal file
15
notify/smtp.sh
Normal file
@ -0,0 +1,15 @@
|
|||||||
|
#!/usr/bin/env sh
|
||||||
|
|
||||||
|
# support smtp
|
||||||
|
|
||||||
|
smtp_send() {
|
||||||
|
_subject="$1"
|
||||||
|
_content="$2"
|
||||||
|
_statusCode="$3" #0: success, 1: error 2($RENEW_SKIP): skipped
|
||||||
|
_debug "_subject" "$_subject"
|
||||||
|
_debug "_content" "$_content"
|
||||||
|
_debug "_statusCode" "$_statusCode"
|
||||||
|
|
||||||
|
_err "Not implemented yet."
|
||||||
|
return 1
|
||||||
|
}
|
||||||
Loading…
Reference in New Issue
Block a user