forked from Github/acme.sh
neil
6 years ago
committed by
GitHub
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
7 changed files with 304 additions and 28 deletions
-
24acme.sh
-
2deploy/haproxy.sh
-
83dnsapi/dns_acmeproxy.sh
-
4dnsapi/dns_gcloud.sh
-
180dnsapi/dns_internetbs.sh
-
15dnsapi/dns_yandex.sh
-
16notify/mailgun.sh
@ -0,0 +1,83 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
## Acmeproxy DNS provider to be used with acmeproxy (http://github.com/mdbraber/acmeproxy) |
||||
|
## API integration by Maarten den Braber |
||||
|
## |
||||
|
## Report any bugs via https://github.com/mdbraber/acme.sh |
||||
|
|
||||
|
dns_acmeproxy_add() { |
||||
|
fulldomain="${1}" |
||||
|
txtvalue="${2}" |
||||
|
action="present" |
||||
|
|
||||
|
_debug "Calling: _acmeproxy_request() '${fulldomain}' '${txtvalue}' '${action}'" |
||||
|
_acmeproxy_request "$fulldomain" "$txtvalue" "$action" |
||||
|
} |
||||
|
|
||||
|
dns_acmeproxy_rm() { |
||||
|
fulldomain="${1}" |
||||
|
txtvalue="${2}" |
||||
|
action="cleanup" |
||||
|
|
||||
|
_debug "Calling: _acmeproxy_request() '${fulldomain}' '${txtvalue}' '${action}'" |
||||
|
_acmeproxy_request "$fulldomain" "$txtvalue" "$action" |
||||
|
} |
||||
|
|
||||
|
_acmeproxy_request() { |
||||
|
|
||||
|
## Nothing to see here, just some housekeeping |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
action=$3 |
||||
|
|
||||
|
_info "Using acmeproxy" |
||||
|
_debug fulldomain "$fulldomain" |
||||
|
_debug txtvalue "$txtvalue" |
||||
|
|
||||
|
ACMEPROXY_ENDPOINT="${ACMEPROXY_ENDPOINT:-$(_readaccountconf_mutable ACMEPROXY_ENDPOINT)}" |
||||
|
ACMEPROXY_USERNAME="${ACMEPROXY_USERNAME:-$(_readaccountconf_mutable ACMEPROXY_USERNAME)}" |
||||
|
ACMEPROXY_PASSWORD="${ACMEPROXY_PASSWORD:-$(_readaccountconf_mutable ACMEPROXY_PASSWORD)}" |
||||
|
|
||||
|
## Check for the endpoint |
||||
|
if [ -z "$ACMEPROXY_ENDPOINT" ]; then |
||||
|
ACMEPROXY_ENDPOINT="" |
||||
|
_err "You didn't specify the endpoint" |
||||
|
_err "Please set them via 'export ACMEPROXY_ENDPOINT=https://ip:port' and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
## Save the credentials to the account file |
||||
|
_saveaccountconf_mutable ACMEPROXY_ENDPOINT "$ACMEPROXY_ENDPOINT" |
||||
|
_saveaccountconf_mutable ACMEPROXY_USERNAME "$ACMEPROXY_USERNAME" |
||||
|
_saveaccountconf_mutable ACMEPROXY_PASSWORD "$ACMEPROXY_PASSWORD" |
||||
|
|
||||
|
if [ -z "$ACMEPROXY_USERNAME" ] || [ -z "$ACMEPROXY_PASSWORD" ]; then |
||||
|
_info "ACMEPROXY_USERNAME and/or ACMEPROXY_PASSWORD not set - using without client authentication! Make sure you're using server authentication (e.g. IP-based)" |
||||
|
export _H1="Accept: application/json" |
||||
|
export _H2="Content-Type: application/json" |
||||
|
else |
||||
|
## Base64 encode the credentials |
||||
|
credentials=$(printf "%b" "$ACMEPROXY_USERNAME:$ACMEPROXY_PASSWORD" | _base64) |
||||
|
|
||||
|
## Construct the HTTP Authorization header |
||||
|
export _H1="Authorization: Basic $credentials" |
||||
|
export _H2="Accept: application/json" |
||||
|
export _H3="Content-Type: application/json" |
||||
|
fi |
||||
|
|
||||
|
## Add the challenge record to the acmeproxy grid member |
||||
|
response="$(_post "{\"fqdn\": \"$fulldomain.\", \"value\": \"$txtvalue\"}" "$ACMEPROXY_ENDPOINT/$action" "" "POST")" |
||||
|
|
||||
|
## Let's see if we get something intelligible back from the unit |
||||
|
if echo "$response" | grep "\"$txtvalue\"" >/dev/null; then |
||||
|
_info "Successfully updated the txt record" |
||||
|
return 0 |
||||
|
else |
||||
|
_err "Error encountered during record addition" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
@ -0,0 +1,180 @@ |
|||||
|
#!/usr/bin/env sh |
||||
|
|
||||
|
#This is the Internet.BS api wrapper for acme.sh |
||||
|
# |
||||
|
#Author: <alexey@nelexa.ru> Ne-Lexa |
||||
|
#Report Bugs here: https://github.com/Ne-Lexa/acme.sh |
||||
|
|
||||
|
#INTERNETBS_API_KEY="sdfsdfsdfljlbjkljlkjsdfoiwje" |
||||
|
#INTERNETBS_API_PASSWORD="sdfsdfsdfljlbjkljlkjsdfoiwje" |
||||
|
|
||||
|
INTERNETBS_API_URL="https://api.internet.bs" |
||||
|
|
||||
|
######## Public functions ##################### |
||||
|
|
||||
|
#Usage: dns_myapi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
||||
|
dns_internetbs_add() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
INTERNETBS_API_KEY="${INTERNETBS_API_KEY:-$(_readaccountconf_mutable INTERNETBS_API_KEY)}" |
||||
|
INTERNETBS_API_PASSWORD="${INTERNETBS_API_PASSWORD:-$(_readaccountconf_mutable INTERNETBS_API_PASSWORD)}" |
||||
|
|
||||
|
if [ -z "$INTERNETBS_API_KEY" ] || [ -z "$INTERNETBS_API_PASSWORD" ]; then |
||||
|
INTERNETBS_API_KEY="" |
||||
|
INTERNETBS_API_PASSWORD="" |
||||
|
_err "You didn't specify the INTERNET.BS api key and password yet." |
||||
|
_err "Please create you key and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_saveaccountconf_mutable INTERNETBS_API_KEY "$INTERNETBS_API_KEY" |
||||
|
_saveaccountconf_mutable INTERNETBS_API_PASSWORD "$INTERNETBS_API_PASSWORD" |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
|
||||
|
# https://testapi.internet.bs/Domain/DnsRecord/Add?ApiKey=testapi&Password=testpass&FullRecordName=w3.test-api-domain7.net&Type=CNAME&Value=www.internet.bs%&ResponseFormat=json |
||||
|
if _internetbs_rest POST "Domain/DnsRecord/Add" "FullRecordName=${_sub_domain}.${_domain}&Type=TXT&Value=${txtvalue}&ResponseFormat=json"; then |
||||
|
if ! _contains "$response" "\"status\":\"SUCCESS\""; then |
||||
|
_err "ERROR add TXT record" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "txt record add success." |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
#Usage: fulldomain txtvalue |
||||
|
#Remove the txt record after validation. |
||||
|
dns_internetbs_rm() { |
||||
|
fulldomain=$1 |
||||
|
txtvalue=$2 |
||||
|
|
||||
|
INTERNETBS_API_KEY="${INTERNETBS_API_KEY:-$(_readaccountconf_mutable INTERNETBS_API_KEY)}" |
||||
|
INTERNETBS_API_PASSWORD="${INTERNETBS_API_PASSWORD:-$(_readaccountconf_mutable INTERNETBS_API_PASSWORD)}" |
||||
|
|
||||
|
if [ -z "$INTERNETBS_API_KEY" ] || [ -z "$INTERNETBS_API_PASSWORD" ]; then |
||||
|
INTERNETBS_API_KEY="" |
||||
|
INTERNETBS_API_PASSWORD="" |
||||
|
_err "You didn't specify the INTERNET.BS api key and password yet." |
||||
|
_err "Please create you key and try again." |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug "First detect the root zone" |
||||
|
if ! _get_root "$fulldomain"; then |
||||
|
_err "invalid domain" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug _sub_domain "$_sub_domain" |
||||
|
_debug _domain "$_domain" |
||||
|
|
||||
|
_debug "Getting txt records" |
||||
|
# https://testapi.internet.bs/Domain/DnsRecord/List?ApiKey=testapi&Password=testpass&Domain=test-api-domain7.net&FilterType=CNAME&ResponseFormat=json |
||||
|
_internetbs_rest POST "Domain/DnsRecord/List" "Domain=$_domain&FilterType=TXT&ResponseFormat=json" |
||||
|
|
||||
|
if ! _contains "$response" "\"status\":\"SUCCESS\""; then |
||||
|
_err "ERROR list dns records" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$response" "\name\":\"${_sub_domain}.${_domain}\""; then |
||||
|
_info "txt record find." |
||||
|
|
||||
|
# https://testapi.internet.bs/Domain/DnsRecord/Remove?ApiKey=testapi&Password=testpass&FullRecordName=www.test-api-domain7.net&Type=cname&ResponseFormat=json |
||||
|
_internetbs_rest POST "Domain/DnsRecord/Remove" "FullRecordName=${_sub_domain}.${_domain}&Type=TXT&ResponseFormat=json" |
||||
|
|
||||
|
if ! _contains "$response" "\"status\":\"SUCCESS\""; then |
||||
|
_err "ERROR remove dns record" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_info "txt record deleted success." |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
#################### Private functions below ################################## |
||||
|
#_acme-challenge.www.domain.com |
||||
|
#returns |
||||
|
# _sub_domain=_acme-challenge.www |
||||
|
# _domain=domain.com |
||||
|
# _domain_id=12345 |
||||
|
_get_root() { |
||||
|
domain=$1 |
||||
|
i=2 |
||||
|
p=1 |
||||
|
|
||||
|
# https://testapi.internet.bs/Domain/List?ApiKey=testapi&Password=testpass&CompactList=yes&ResponseFormat=json |
||||
|
if _internetbs_rest POST "Domain/List" "CompactList=yes&ResponseFormat=json"; then |
||||
|
|
||||
|
if ! _contains "$response" "\"status\":\"SUCCESS\""; then |
||||
|
_err "ERROR fetch domain list" |
||||
|
_err "$response" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
while true; do |
||||
|
h=$(printf "%s" "$domain" | cut -d . -f ${i}-100) |
||||
|
_debug h "$h" |
||||
|
if [ -z "$h" ]; then |
||||
|
#not valid |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
if _contains "$response" "\"$h\""; then |
||||
|
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-${p}) |
||||
|
_domain=${h} |
||||
|
return 0 |
||||
|
fi |
||||
|
|
||||
|
p=${i} |
||||
|
i=$(_math "$i" + 1) |
||||
|
done |
||||
|
fi |
||||
|
return 1 |
||||
|
} |
||||
|
|
||||
|
#Usage: method URI data |
||||
|
_internetbs_rest() { |
||||
|
m="$1" |
||||
|
ep="$2" |
||||
|
data="$3" |
||||
|
url="${INTERNETBS_API_URL}/${ep}" |
||||
|
|
||||
|
_debug url "$url" |
||||
|
|
||||
|
apiKey="$(printf "%s" "${INTERNETBS_API_KEY}" | _url_encode)" |
||||
|
password="$(printf "%s" "${INTERNETBS_API_PASSWORD}" | _url_encode)" |
||||
|
|
||||
|
if [ "$m" = "GET" ]; then |
||||
|
response="$(_get "${url}?ApiKey=${apiKey}&Password=${password}&${data}" | tr -d '\r')" |
||||
|
else |
||||
|
_debug2 data "$data" |
||||
|
response="$(_post "$data" "${url}?ApiKey=${apiKey}&Password=${password}" | tr -d '\r')" |
||||
|
fi |
||||
|
|
||||
|
if [ "$?" != "0" ]; then |
||||
|
_err "error $ep" |
||||
|
return 1 |
||||
|
fi |
||||
|
|
||||
|
_debug2 response "$response" |
||||
|
return 0 |
||||
|
} |
||||
Write
Preview
Loading…
Cancel
Save
Reference in new issue