forked from Github/acme.sh
neilpang
6 years ago
16 changed files with 1497 additions and 68 deletions
-
6README.md
-
1acme.sh
-
21deploy/README.md
-
12deploy/fritzbox.sh
-
80deploy/gitlab.sh
-
4deploy/ssh.sh
-
117dnsapi/README.md
-
14dnsapi/dns_aws.sh
-
253dnsapi/dns_conoha.sh
-
161dnsapi/dns_dpi.sh
-
167dnsapi/dns_gcloud.sh
-
168dnsapi/dns_gdnsdk.sh
-
55dnsapi/dns_lexicon.sh
-
308dnsapi/dns_namecheap.sh
-
133dnsapi/dns_netcup.sh
-
61dnsapi/dns_unoeuro.sh
@ -0,0 +1,80 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Script to deploy certificate to a Gitlab hosted page |
|||
|
|||
# The following variables exported from environment will be used. |
|||
# If not set then values previously saved in domain.conf file are used. |
|||
|
|||
# All the variables are required |
|||
|
|||
# export GITLAB_TOKEN="xxxxxxx" |
|||
# export GITLAB_PROJECT_ID=012345 |
|||
# export GITLAB_DOMAIN="mydomain.com" |
|||
|
|||
gitlab_deploy() { |
|||
_cdomain="$1" |
|||
_ckey="$2" |
|||
_ccert="$3" |
|||
_cca="$4" |
|||
_cfullchain="$5" |
|||
|
|||
_debug _cdomain "$_cdomain" |
|||
_debug _ckey "$_ckey" |
|||
_debug _ccert "$_ccert" |
|||
_debug _cca "$_cca" |
|||
_debug _cfullchain "$_cfullchain" |
|||
|
|||
if [ -z "$GITLAB_TOKEN" ]; then |
|||
if [ -z "$Le_Deploy_gitlab_token" ]; then |
|||
_err "GITLAB_TOKEN not defined." |
|||
return 1 |
|||
fi |
|||
else |
|||
Le_Deploy_gitlab_token="$GITLAB_TOKEN" |
|||
_savedomainconf Le_Deploy_gitlab_token "$Le_Deploy_gitlab_token" |
|||
fi |
|||
|
|||
if [ -z "$GITLAB_PROJECT_ID" ]; then |
|||
if [ -z "$Le_Deploy_gitlab_project_id" ]; then |
|||
_err "GITLAB_PROJECT_ID not defined." |
|||
return 1 |
|||
fi |
|||
else |
|||
Le_Deploy_gitlab_project_id="$GITLAB_PROJECT_ID" |
|||
_savedomainconf Le_Deploy_gitlab_project_id "$Le_Deploy_gitlab_project_id" |
|||
fi |
|||
|
|||
if [ -z "$GITLAB_DOMAIN" ]; then |
|||
if [ -z "$Le_Deploy_gitlab_domain" ]; then |
|||
_err "GITLAB_DOMAIN not defined." |
|||
return 1 |
|||
fi |
|||
else |
|||
Le_Deploy_gitlab_domain="$GITLAB_DOMAIN" |
|||
_savedomainconf Le_Deploy_gitlab_domain "$Le_Deploy_gitlab_domain" |
|||
fi |
|||
|
|||
string_fullchain=$(_url_encode <"$_cfullchain") |
|||
string_key=$(_url_encode <"$_ckey") |
|||
|
|||
body="certificate=$string_fullchain&key=$string_key" |
|||
|
|||
export _H1="PRIVATE-TOKEN: $Le_Deploy_gitlab_token" |
|||
|
|||
gitlab_url="https://gitlab.com/api/v4/projects/$Le_Deploy_gitlab_project_id/pages/domains/$Le_Deploy_gitlab_domain" |
|||
|
|||
_response=$(_post "$body" "$gitlab_url" 0 PUT | _dbase64 "multiline") |
|||
|
|||
error_response="error" |
|||
|
|||
if test "${_response#*$error_response}" != "$_response"; then |
|||
_err "Error in deploying certificate:" |
|||
_err "$_response" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug response "$_response" |
|||
_info "Certificate successfully deployed" |
|||
|
|||
return 0 |
|||
} |
|||
@ -0,0 +1,253 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
CONOHA_DNS_EP_PREFIX_REGEXP="https://dns-service\." |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#Usage: dns_conoha_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_conoha_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using conoha" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
|
|||
_debug "Check uesrname and password" |
|||
CONOHA_Username="${CONOHA_Username:-$(_readaccountconf_mutable CONOHA_Username)}" |
|||
CONOHA_Password="${CONOHA_Password:-$(_readaccountconf_mutable CONOHA_Password)}" |
|||
CONOHA_TenantId="${CONOHA_TenantId:-$(_readaccountconf_mutable CONOHA_TenantId)}" |
|||
CONOHA_IdentityServiceApi="${CONOHA_IdentityServiceApi:-$(_readaccountconf_mutable CONOHA_IdentityServiceApi)}" |
|||
if [ -z "$CONOHA_Username" ] || [ -z "$CONOHA_Password" ] || [ -z "$CONOHA_TenantId" ] || [ -z "$CONOHA_IdentityServiceApi" ]; then |
|||
CONOHA_Username="" |
|||
CONOHA_Password="" |
|||
CONOHA_TenantId="" |
|||
CONOHA_IdentityServiceApi="" |
|||
_err "You didn't specify a conoha api username and password yet." |
|||
_err "Please create the user and try again." |
|||
return 1 |
|||
fi |
|||
|
|||
_saveaccountconf_mutable CONOHA_Username "$CONOHA_Username" |
|||
_saveaccountconf_mutable CONOHA_Password "$CONOHA_Password" |
|||
_saveaccountconf_mutable CONOHA_TenantId "$CONOHA_TenantId" |
|||
_saveaccountconf_mutable CONOHA_IdentityServiceApi "$CONOHA_IdentityServiceApi" |
|||
|
|||
if token="$(_conoha_get_accesstoken "$CONOHA_IdentityServiceApi/tokens" "$CONOHA_Username" "$CONOHA_Password" "$CONOHA_TenantId")"; then |
|||
accesstoken="$(printf "%s" "$token" | sed -n 1p)" |
|||
CONOHA_Api="$(printf "%s" "$token" | sed -n 2p)" |
|||
else |
|||
return 1 |
|||
fi |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain" "$CONOHA_Api" "$accesstoken"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
_debug _domain_id "$_domain_id" |
|||
_debug _sub_domain "$_sub_domain" |
|||
_debug _domain "$_domain" |
|||
|
|||
_info "Adding record" |
|||
body="{\"type\":\"TXT\",\"name\":\"$fulldomain.\",\"data\":\"$txtvalue\",\"ttl\":60}" |
|||
if _conoha_rest POST "$CONOHA_Api/v1/domains/$_domain_id/records" "$body" "$accesstoken"; then |
|||
if _contains "$response" '"data":"'"$txtvalue"'"'; then |
|||
_info "Added, OK" |
|||
return 0 |
|||
else |
|||
_err "Add txt record error." |
|||
return 1 |
|||
fi |
|||
fi |
|||
|
|||
_err "Add txt record error." |
|||
return 1 |
|||
} |
|||
|
|||
#Usage: fulldomain txtvalue |
|||
#Remove the txt record after validation. |
|||
dns_conoha_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using conoha" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
|
|||
_debug "Check uesrname and password" |
|||
CONOHA_Username="${CONOHA_Username:-$(_readaccountconf_mutable CONOHA_Username)}" |
|||
CONOHA_Password="${CONOHA_Password:-$(_readaccountconf_mutable CONOHA_Password)}" |
|||
CONOHA_TenantId="${CONOHA_TenantId:-$(_readaccountconf_mutable CONOHA_TenantId)}" |
|||
CONOHA_IdentityServiceApi="${CONOHA_IdentityServiceApi:-$(_readaccountconf_mutable CONOHA_IdentityServiceApi)}" |
|||
if [ -z "$CONOHA_Username" ] || [ -z "$CONOHA_Password" ] || [ -z "$CONOHA_TenantId" ] || [ -z "$CONOHA_IdentityServiceApi" ]; then |
|||
CONOHA_Username="" |
|||
CONOHA_Password="" |
|||
CONOHA_TenantId="" |
|||
CONOHA_IdentityServiceApi="" |
|||
_err "You didn't specify a conoha api username and password yet." |
|||
_err "Please create the user and try again." |
|||
return 1 |
|||
fi |
|||
|
|||
_saveaccountconf_mutable CONOHA_Username "$CONOHA_Username" |
|||
_saveaccountconf_mutable CONOHA_Password "$CONOHA_Password" |
|||
_saveaccountconf_mutable CONOHA_TenantId "$CONOHA_TenantId" |
|||
_saveaccountconf_mutable CONOHA_IdentityServiceApi "$CONOHA_IdentityServiceApi" |
|||
|
|||
if token="$(_conoha_get_accesstoken "$CONOHA_IdentityServiceApi/tokens" "$CONOHA_Username" "$CONOHA_Password" "$CONOHA_TenantId")"; then |
|||
accesstoken="$(printf "%s" "$token" | sed -n 1p)" |
|||
CONOHA_Api="$(printf "%s" "$token" | sed -n 2p)" |
|||
else |
|||
return 1 |
|||
fi |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain" "$CONOHA_Api" "$accesstoken"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
_debug _domain_id "$_domain_id" |
|||
_debug _sub_domain "$_sub_domain" |
|||
_debug _domain "$_domain" |
|||
|
|||
_debug "Getting txt records" |
|||
if ! _conoha_rest GET "$CONOHA_Api/v1/domains/$_domain_id/records" "" "$accesstoken"; then |
|||
_err "Error" |
|||
return 1 |
|||
fi |
|||
|
|||
record_id=$(printf "%s" "$response" | _egrep_o '{[^}]*}' \ |
|||
| grep '"type":"TXT"' | grep "\"data\":\"$txtvalue\"" | _egrep_o "\"id\":\"[^\"]*\"" \ |
|||
| _head_n 1 | cut -d : -f 2 | tr -d \") |
|||
if [ -z "$record_id" ]; then |
|||
_err "Can not get record id to remove." |
|||
return 1 |
|||
fi |
|||
_debug record_id "$record_id" |
|||
|
|||
_info "Removing the txt record" |
|||
if ! _conoha_rest DELETE "$CONOHA_Api/v1/domains/$_domain_id/records/$record_id" "" "$accesstoken"; then |
|||
_err "Delete record error." |
|||
return 1 |
|||
fi |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
|
|||
_conoha_rest() { |
|||
m="$1" |
|||
ep="$2" |
|||
data="$3" |
|||
accesstoken="$4" |
|||
|
|||
export _H1="Accept: application/json" |
|||
export _H2="Content-Type: application/json" |
|||
if [ -n "$accesstoken" ]; then |
|||
export _H3="X-Auth-Token: $accesstoken" |
|||
fi |
|||
|
|||
_debug "$ep" |
|||
if [ "$m" != "GET" ]; then |
|||
_secure_debug2 data "$data" |
|||
response="$(_post "$data" "$ep" "" "$m")" |
|||
else |
|||
response="$(_get "$ep")" |
|||
fi |
|||
_ret="$?" |
|||
_secure_debug2 response "$response" |
|||
if [ "$_ret" != "0" ]; then |
|||
_err "error $ep" |
|||
return 1 |
|||
fi |
|||
|
|||
response="$(printf "%s" "$response" | _normalizeJson)" |
|||
return 0 |
|||
} |
|||
|
|||
_conoha_get_accesstoken() { |
|||
ep="$1" |
|||
username="$2" |
|||
password="$3" |
|||
tenantId="$4" |
|||
|
|||
accesstoken="$(_readaccountconf_mutable conoha_accesstoken)" |
|||
expires="$(_readaccountconf_mutable conoha_tokenvalidto)" |
|||
CONOHA_Api="$(_readaccountconf_mutable conoha_dns_ep)" |
|||
|
|||
# can we reuse the access token? |
|||
if [ -n "$accesstoken" ] && [ -n "$expires" ] && [ -n "$CONOHA_Api" ]; then |
|||
utc_date="$(_utc_date | sed "s/ /T/")" |
|||
if expr "$utc_date" "<" "$expires" >/dev/null; then |
|||
# access token is still valid - reuse it |
|||
_debug "reusing access token" |
|||
printf "%s\n%s\n" "$accesstoken" "$CONOHA_Api" |
|||
return 0 |
|||
else |
|||
_debug "access token expired" |
|||
fi |
|||
fi |
|||
_debug "getting new access token" |
|||
|
|||
body="$(printf '{"auth":{"passwordCredentials":{"username":"%s","password":"%s"},"tenantId":"%s"}}' "$username" "$password" "$tenantId")" |
|||
if ! _conoha_rest POST "$ep" "$body" ""; then |
|||
_err error "$response" |
|||
return 1 |
|||
fi |
|||
accesstoken=$(printf "%s" "$response" | _egrep_o "\"id\":\"[^\"]*\"" | _head_n 1 | cut -d : -f 2 | tr -d \") |
|||
expires=$(printf "%s" "$response" | _egrep_o "\"expires\":\"[^\"]*\"" | _head_n 1 | cut -d : -f 2-4 | tr -d \" | tr -d Z) #expect UTC |
|||
if [ -z "$accesstoken" ] || [ -z "$expires" ]; then |
|||
_err "no acccess token received. Check your Conoha settings see $WIKI" |
|||
return 1 |
|||
fi |
|||
_saveaccountconf_mutable conoha_accesstoken "$accesstoken" |
|||
_saveaccountconf_mutable conoha_tokenvalidto "$expires" |
|||
|
|||
CONOHA_Api=$(printf "%s" "$response" | _egrep_o 'publicURL":"'"$CONOHA_DNS_EP_PREFIX_REGEXP"'[^"]*"' | _head_n 1 | cut -d : -f 2-3 | tr -d \") |
|||
if [ -z "$CONOHA_Api" ]; then |
|||
_err "failed to get conoha dns endpoint url" |
|||
return 1 |
|||
fi |
|||
_saveaccountconf_mutable conoha_dns_ep "$CONOHA_Api" |
|||
|
|||
printf "%s\n%s\n" "$accesstoken" "$CONOHA_Api" |
|||
return 0 |
|||
} |
|||
|
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _sub_domain=_acme-challenge.www |
|||
# _domain=domain.com |
|||
# _domain_id=sdjkglgdfewsdfg |
|||
_get_root() { |
|||
domain="$1" |
|||
ep="$2" |
|||
accesstoken="$3" |
|||
i=2 |
|||
p=1 |
|||
while true; do |
|||
h=$(printf "%s" "$domain" | cut -d . -f $i-100). |
|||
_debug h "$h" |
|||
if [ -z "$h" ]; then |
|||
#not valid |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _conoha_rest GET "$ep/v1/domains?name=$h" "" "$accesstoken"; then |
|||
return 1 |
|||
fi |
|||
|
|||
if _contains "$response" "\"name\":\"$h\"" >/dev/null; then |
|||
_domain_id=$(printf "%s\n" "$response" | _egrep_o "\"id\":\"[^\"]*\"" | head -n 1 | cut -d : -f 2 | tr -d \") |
|||
if [ "$_domain_id" ]; then |
|||
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
|||
_domain=$h |
|||
return 0 |
|||
fi |
|||
return 1 |
|||
fi |
|||
p=$i |
|||
i=$(_math "$i" + 1) |
|||
done |
|||
return 1 |
|||
} |
|||
@ -0,0 +1,161 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Dnspod.com Domain api |
|||
# |
|||
#DPI_Id="1234" |
|||
# |
|||
#DPI_Key="sADDsdasdgdsf" |
|||
|
|||
REST_API="https://api.dnspod.com" |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_dpi_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
DPI_Id="${DPI_Id:-$(_readaccountconf_mutable DPI_Id)}" |
|||
DPI_Key="${DPI_Key:-$(_readaccountconf_mutable DPI_Key)}" |
|||
if [ -z "$DPI_Id" ] || [ -z "$DPI_Key" ]; then |
|||
DPI_Id="" |
|||
DPI_Key="" |
|||
_err "You don't specify dnspod api key and key id yet." |
|||
_err "Please create you key and try again." |
|||
return 1 |
|||
fi |
|||
|
|||
#save the api key and email to the account conf file. |
|||
_saveaccountconf_mutable DPI_Id "$DPI_Id" |
|||
_saveaccountconf_mutable DPI_Key "$DPI_Key" |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
add_record "$_domain" "$_sub_domain" "$txtvalue" |
|||
|
|||
} |
|||
|
|||
#fulldomain txtvalue |
|||
dns_dpi_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
DPI_Id="${DPI_Id:-$(_readaccountconf_mutable DPI_Id)}" |
|||
DPI_Key="${DPI_Key:-$(_readaccountconf_mutable DPI_Key)}" |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _rest POST "Record.List" "user_token=$DPI_Id,$DPI_Key&format=json&domain_id=$_domain_id&sub_domain=$_sub_domain"; then |
|||
_err "Record.Lis error." |
|||
return 1 |
|||
fi |
|||
|
|||
if _contains "$response" 'No records'; then |
|||
_info "Don't need to remove." |
|||
return 0 |
|||
fi |
|||
|
|||
record_id=$(echo "$response" | _egrep_o '{[^{]*"value":"'"$txtvalue"'"' | cut -d , -f 1 | cut -d : -f 2 | tr -d \") |
|||
_debug record_id "$record_id" |
|||
if [ -z "$record_id" ]; then |
|||
_err "Can not get record id." |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _rest POST "Record.Remove" "user_token=$DPI_Id,$DPI_Key&format=json&domain_id=$_domain_id&record_id=$record_id"; then |
|||
_err "Record.Remove error." |
|||
return 1 |
|||
fi |
|||
|
|||
_contains "$response" "Action completed successful" |
|||
|
|||
} |
|||
|
|||
#add the txt record. |
|||
#usage: root sub txtvalue |
|||
add_record() { |
|||
root=$1 |
|||
sub=$2 |
|||
txtvalue=$3 |
|||
fulldomain="$sub.$root" |
|||
|
|||
_info "Adding record" |
|||
|
|||
if ! _rest POST "Record.Create" "user_token=$DPI_Id,$DPI_Key&format=json&domain_id=$_domain_id&sub_domain=$_sub_domain&record_type=TXT&value=$txtvalue&record_line=default"; then |
|||
return 1 |
|||
fi |
|||
|
|||
_contains "$response" "Action completed successful" || _contains "$response" "Domain record already exists" |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _sub_domain=_acme-challenge.www |
|||
# _domain=domain.com |
|||
# _domain_id=sdjkglgdfewsdfg |
|||
_get_root() { |
|||
domain=$1 |
|||
i=2 |
|||
p=1 |
|||
while true; do |
|||
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
|||
if [ -z "$h" ]; then |
|||
#not valid |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _rest POST "Domain.Info" "user_token=$DPI_Id,$DPI_Key&format=json&domain=$h"; then |
|||
return 1 |
|||
fi |
|||
|
|||
if _contains "$response" "Action completed successful"; then |
|||
_domain_id=$(printf "%s\n" "$response" | _egrep_o "\"id\":\"[^\"]*\"" | cut -d : -f 2 | tr -d \") |
|||
_debug _domain_id "$_domain_id" |
|||
if [ "$_domain_id" ]; then |
|||
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
|||
_debug _sub_domain "$_sub_domain" |
|||
_domain="$h" |
|||
_debug _domain "$_domain" |
|||
return 0 |
|||
fi |
|||
return 1 |
|||
fi |
|||
p="$i" |
|||
i=$(_math "$i" + 1) |
|||
done |
|||
return 1 |
|||
} |
|||
|
|||
#Usage: method URI data |
|||
_rest() { |
|||
m="$1" |
|||
ep="$2" |
|||
data="$3" |
|||
_debug "$ep" |
|||
url="$REST_API/$ep" |
|||
|
|||
_debug url "$url" |
|||
|
|||
if [ "$m" = "GET" ]; then |
|||
response="$(_get "$url" | tr -d '\r')" |
|||
else |
|||
_debug2 data "$data" |
|||
response="$(_post "$data" "$url" | tr -d '\r')" |
|||
fi |
|||
|
|||
if [ "$?" != "0" ]; then |
|||
_err "error $ep" |
|||
return 1 |
|||
fi |
|||
_debug2 response "$response" |
|||
return 0 |
|||
} |
|||
@ -0,0 +1,167 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Author: Janos Lenart <janos@lenart.io> |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
# Usage: dns_gcloud_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_gcloud_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using gcloud" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
|
|||
_dns_gcloud_find_zone || return $? |
|||
|
|||
# Add an extra RR |
|||
_dns_gcloud_start_tr || return $? |
|||
_dns_gcloud_get_rrdatas || return $? |
|||
echo "$rrdatas" | _dns_gcloud_remove_rrs || return $? |
|||
printf "%s\n%s\n" "$rrdatas" "\"$txtvalue\"" | grep -v '^$' | _dns_gcloud_add_rrs || return $? |
|||
_dns_gcloud_execute_tr || return $? |
|||
|
|||
_info "$fulldomain record added" |
|||
} |
|||
|
|||
# Usage: dns_gcloud_rm _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
# Remove the txt record after validation. |
|||
dns_gcloud_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using gcloud" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
|
|||
_dns_gcloud_find_zone || return $? |
|||
|
|||
# Remove one RR |
|||
_dns_gcloud_start_tr || return $? |
|||
_dns_gcloud_get_rrdatas || return $? |
|||
echo "$rrdatas" | _dns_gcloud_remove_rrs || return $? |
|||
echo "$rrdatas" | grep -F -v "\"$txtvalue\"" | _dns_gcloud_add_rrs || return $? |
|||
_dns_gcloud_execute_tr || return $? |
|||
|
|||
_info "$fulldomain record added" |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
|
|||
_dns_gcloud_start_tr() { |
|||
if ! trd=$(mktemp -d); then |
|||
_err "_dns_gcloud_start_tr: failed to create temporary directory" |
|||
return 1 |
|||
fi |
|||
tr="$trd/tr.yaml" |
|||
_debug tr "$tr" |
|||
|
|||
if ! gcloud dns record-sets transaction start \ |
|||
--transaction-file="$tr" \ |
|||
--zone="$managedZone"; then |
|||
rm -r "$trd" |
|||
_err "_dns_gcloud_start_tr: failed to execute transaction" |
|||
return 1 |
|||
fi |
|||
} |
|||
|
|||
_dns_gcloud_execute_tr() { |
|||
if ! gcloud dns record-sets transaction execute \ |
|||
--transaction-file="$tr" \ |
|||
--zone="$managedZone"; then |
|||
_debug tr "$(cat "$tr")" |
|||
rm -r "$trd" |
|||
_err "_dns_gcloud_execute_tr: failed to execute transaction" |
|||
return 1 |
|||
fi |
|||
rm -r "$trd" |
|||
|
|||
for i in $(seq 1 120); do |
|||
if gcloud dns record-sets changes list \ |
|||
--zone="$managedZone" \ |
|||
--filter='status != done' \ |
|||
| grep -q '^.*'; then |
|||
_info "_dns_gcloud_execute_tr: waiting for transaction to be comitted ($i/120)..." |
|||
sleep 5 |
|||
else |
|||
return 0 |
|||
fi |
|||
done |
|||
|
|||
_err "_dns_gcloud_execute_tr: transaction is still pending after 10 minutes" |
|||
rm -r "$trd" |
|||
return 1 |
|||
} |
|||
|
|||
_dns_gcloud_remove_rrs() { |
|||
if ! xargs --no-run-if-empty gcloud dns record-sets transaction remove \ |
|||
--name="$fulldomain." \ |
|||
--ttl="$ttl" \ |
|||
--type=TXT \ |
|||
--zone="$managedZone" \ |
|||
--transaction-file="$tr"; then |
|||
_debug tr "$(cat "$tr")" |
|||
rm -r "$trd" |
|||
_err "_dns_gcloud_remove_rrs: failed to remove RRs" |
|||
return 1 |
|||
fi |
|||
} |
|||
|
|||
_dns_gcloud_add_rrs() { |
|||
ttl=60 |
|||
if ! xargs --no-run-if-empty gcloud dns record-sets transaction add \ |
|||
--name="$fulldomain." \ |
|||
--ttl="$ttl" \ |
|||
--type=TXT \ |
|||
--zone="$managedZone" \ |
|||
--transaction-file="$tr"; then |
|||
_debug tr "$(cat "$tr")" |
|||
rm -r "$trd" |
|||
_err "_dns_gcloud_add_rrs: failed to add RRs" |
|||
return 1 |
|||
fi |
|||
} |
|||
|
|||
_dns_gcloud_find_zone() { |
|||
# Prepare a filter that matches zones that are suiteable for this entry. |
|||
# For example, _acme-challenge.something.domain.com might need to go into something.domain.com or domain.com; |
|||
# this function finds the longest postfix that has a managed zone. |
|||
part="$fulldomain" |
|||
filter="dnsName=( " |
|||
while [ "$part" != "" ]; do |
|||
filter="$filter$part. " |
|||
part="$(echo "$part" | sed 's/[^.]*\.*//')" |
|||
done |
|||
filter="$filter)" |
|||
_debug filter "$filter" |
|||
|
|||
# List domains and find the longest match (in case of some levels of delegation) |
|||
if ! match=$(gcloud dns managed-zones list \ |
|||
--format="value(name, dnsName)" \ |
|||
--filter="$filter" \ |
|||
| while read -r dnsName name; do |
|||
printf "%s\t%s\t%s\n" "${#dnsName}" "$dnsName" "$name" |
|||
done \ |
|||
| sort -n -r | _head_n 1 | cut -f2,3 | grep '^.*'); then |
|||
_err "_dns_gcloud_find_zone: Can't find a matching managed zone! Perhaps wrong project or gcloud credentials?" |
|||
return 1 |
|||
fi |
|||
|
|||
dnsName=$(echo "$match" | cut -f2) |
|||
_debug dnsName "$dnsName" |
|||
managedZone=$(echo "$match" | cut -f1) |
|||
_debug managedZone "$managedZone" |
|||
} |
|||
|
|||
_dns_gcloud_get_rrdatas() { |
|||
if ! rrdatas=$(gcloud dns record-sets list \ |
|||
--zone="$managedZone" \ |
|||
--name="$fulldomain." \ |
|||
--type=TXT \ |
|||
--format="value(ttl,rrdatas)"); then |
|||
_err "_dns_gcloud_get_rrdatas: Failed to list record-sets" |
|||
rm -r "$trd" |
|||
return 1 |
|||
fi |
|||
ttl=$(echo "$rrdatas" | cut -f1) |
|||
rrdatas=$(echo "$rrdatas" | cut -f2 | sed 's/","/"\n"/g') |
|||
} |
|||
@ -0,0 +1,168 @@ |
|||
#!/usr/bin/env sh |
|||
#Author: Herman Sletteng |
|||
#Report Bugs here: https://github.com/loial/acme.sh |
|||
# |
|||
# |
|||
# Note, gratisdns requires a login first, so the script needs to handle |
|||
# temporary cookies. Since acme.sh _get/_post currently don't directly support |
|||
# cookies, I've defined wrapper functions _myget/_mypost to set the headers |
|||
|
|||
GDNSDK_API="https://admin.gratisdns.com" |
|||
######## Public functions ##################### |
|||
#Usage: dns_gdnsdk_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_gdnsdk_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using gratisdns.dk" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
if ! _gratisdns_login; then |
|||
_err "Login failed!" |
|||
return 1 |
|||
fi |
|||
#finding domain zone |
|||
if ! _get_domain; then |
|||
_err "No matching root domain for $fulldomain found" |
|||
return 1 |
|||
fi |
|||
# adding entry |
|||
_info "Adding the entry" |
|||
_mypost "action=dns_primary_record_added_txt&user_domain=$_domain&name=$fulldomain&txtdata=$txtvalue&ttl=1" |
|||
if _successful_update; then return 0; fi |
|||
_err "Couldn't create entry!" |
|||
return 1 |
|||
} |
|||
|
|||
#Usage: fulldomain txtvalue |
|||
#Remove the txt record after validation. |
|||
dns_gdnsdk_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
_info "Using gratisdns.dk" |
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
if ! _gratisdns_login; then |
|||
_err "Login failed!" |
|||
return 1 |
|||
fi |
|||
if ! _get_domain; then |
|||
_err "No matching root domain for $fulldomain found" |
|||
return 1 |
|||
fi |
|||
_findentry "$fulldomain" "$txtvalue" |
|||
if [ -z "$_id" ]; then |
|||
_info "Entry doesn't exist, nothing to delete" |
|||
return 0 |
|||
fi |
|||
_debug "Deleting record..." |
|||
_mypost "action=dns_primary_delete_txt&user_domain=$_domain&id=$_id" |
|||
# removing entry |
|||
|
|||
if _successful_update; then return 0; fi |
|||
_err "Couldn't delete entry!" |
|||
return 1 |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
|
|||
_checkcredentials() { |
|||
GDNSDK_Username="${GDNSDK_Username:-$(_readaccountconf_mutable GDNSDK_Username)}" |
|||
GDNSDK_Password="${GDNSDK_Password:-$(_readaccountconf_mutable GDNSDK_Password)}" |
|||
|
|||
if [ -z "$GDNSDK_Username" ] || [ -z "$GDNSDK_Password" ]; then |
|||
GDNSDK_Username="" |
|||
GDNSDK_Password="" |
|||
_err "You haven't specified gratisdns.dk username and password yet." |
|||
_err "Please add credentials and try again." |
|||
return 1 |
|||
fi |
|||
#save the credentials to the account conf file. |
|||
_saveaccountconf_mutable GDNSDK_Username "$GDNSDK_Username" |
|||
_saveaccountconf_mutable GDNSDK_Password "$GDNSDK_Password" |
|||
return 0 |
|||
} |
|||
|
|||
_checkcookie() { |
|||
GDNSDK_Cookie="${GDNSDK_Cookie:-$(_readaccountconf_mutable GDNSDK_Cookie)}" |
|||
if [ -z "$GDNSDK_Cookie" ]; then |
|||
_debug "No cached cookie found" |
|||
return 1 |
|||
fi |
|||
_myget "action=" |
|||
if (echo "$_result" | grep -q "logmeout"); then |
|||
_debug "Cached cookie still valid" |
|||
return 0 |
|||
fi |
|||
_debug "Cached cookie no longer valid" |
|||
GDNSDK_Cookie="" |
|||
_saveaccountconf_mutable GDNSDK_Cookie "$GDNSDK_Cookie" |
|||
return 1 |
|||
} |
|||
|
|||
_gratisdns_login() { |
|||
if ! _checkcredentials; then return 1; fi |
|||
|
|||
if _checkcookie; then |
|||
_debug "Already logged in" |
|||
return 0 |
|||
fi |
|||
_debug "Logging into GratisDNS with user $GDNSDK_Username" |
|||
|
|||
if ! _mypost "login=$GDNSDK_Username&password=$GDNSDK_Password&action=logmein"; then |
|||
_err "GratisDNS login failed for user $GDNSDK_Username bad RC from _post" |
|||
return 1 |
|||
fi |
|||
|
|||
GDNSDK_Cookie="$(grep -A 15 '302 Found' "$HTTP_HEADER" | _egrep_o 'Cookie: [^;]*' | _head_n 1 | cut -d ' ' -f2)" |
|||
|
|||
if [ -z "$GDNSDK_Cookie" ]; then |
|||
_err "GratisDNS login failed for user $GDNSDK_Username. Check $HTTP_HEADER file" |
|||
return 1 |
|||
fi |
|||
export GDNSDK_Cookie |
|||
_saveaccountconf_mutable GDNSDK_Cookie "$GDNSDK_Cookie" |
|||
return 0 |
|||
} |
|||
|
|||
_myget() { |
|||
#Adds cookie to request |
|||
export _H1="Cookie: $GDNSDK_Cookie" |
|||
_result=$(_get "$GDNSDK_API?$1") |
|||
} |
|||
_mypost() { |
|||
#Adds cookie to request |
|||
export _H1="Cookie: $GDNSDK_Cookie" |
|||
_result=$(_post "$1" "$GDNSDK_API") |
|||
} |
|||
|
|||
_get_domain() { |
|||
_myget 'action=dns_primarydns' |
|||
_domains=$(echo "$_result" | _egrep_o ' domain="[[:alnum:].-_]+' | sed 's/^.*"//') |
|||
if [ -z "$_domains" ]; then |
|||
_err "Primary domain list not found!" |
|||
return 1 |
|||
fi |
|||
for _domain in $_domains; do |
|||
if (_endswith "$fulldomain" "$_domain"); then |
|||
_debug "Root domain: $_domain" |
|||
return 0 |
|||
fi |
|||
done |
|||
return 1 |
|||
} |
|||
|
|||
_successful_update() { |
|||
if (echo "$_result" | grep -q 'table-success'); then return 0; fi |
|||
return 1 |
|||
} |
|||
|
|||
_findentry() { |
|||
#returns id of dns entry, if it exists |
|||
_myget "action=dns_primary_changeDNSsetup&user_domain=$_domain" |
|||
_id=$(echo "$_result" | _egrep_o "<td>$1</td>\s*<td>$2</td>[^?]*[^&]*&id=[^&]*" | sed 's/^.*=//') |
|||
if [ -n "$_id" ]; then |
|||
_debug "Entry found with _id=$_id" |
|||
return 0 |
|||
fi |
|||
return 1 |
|||
} |
|||
@ -0,0 +1,308 @@ |
|||
#!/usr/bin/env sh |
|||
|
|||
# Namecheap API |
|||
# https://www.namecheap.com/support/api/intro.aspx |
|||
# |
|||
# Requires Namecheap API key set in NAMECHEAP_API_KEY, NAMECHEAP_SOURCEIP and NAMECHEAP_USERNAME set as environment variable |
|||
# Due to Namecheap's API limitation all the records of your domain will be read and re applied, make sure to have a backup of your records you could apply if any issue would arise. |
|||
|
|||
######## Public functions ##################### |
|||
|
|||
if [ "$STAGE" -eq 1 ]; then |
|||
NAMECHEAP_API="https://api.sandbox.namecheap.com/xml.response" |
|||
else |
|||
NAMECHEAP_API="https://api.namecheap.com/xml.response" |
|||
fi |
|||
|
|||
#Usage: dns_namecheap_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|||
dns_namecheap_add() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
if ! _namecheap_check_config; then |
|||
_err "$error" |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _namecheap_set_publicip; then |
|||
return 1 |
|||
fi |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
_debug domain "$_domain" |
|||
_debug sub_domain "$_sub_domain" |
|||
|
|||
_set_namecheap_TXT "$_domain" "$_sub_domain" "$txtvalue" |
|||
} |
|||
|
|||
#Usage: fulldomain txtvalue |
|||
#Remove the txt record after validation. |
|||
dns_namecheap_rm() { |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
if ! _namecheap_set_publicip; then |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _namecheap_check_config; then |
|||
_err "$error" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug "First detect the root zone" |
|||
if ! _get_root "$fulldomain"; then |
|||
_err "invalid domain" |
|||
return 1 |
|||
fi |
|||
|
|||
_debug fulldomain "$fulldomain" |
|||
_debug txtvalue "$txtvalue" |
|||
_debug domain "$_domain" |
|||
_debug sub_domain "$_sub_domain" |
|||
|
|||
_del_namecheap_TXT "$_domain" "$_sub_domain" "$txtvalue" |
|||
} |
|||
|
|||
#################### Private functions below ################################## |
|||
#_acme-challenge.www.domain.com |
|||
#returns |
|||
# _sub_domain=_acme-challenge.www |
|||
# _domain=domain.com |
|||
_get_root() { |
|||
domain=$1 |
|||
|
|||
if ! _namecheap_post "namecheap.domains.getList"; then |
|||
_err "$error" |
|||
return 1 |
|||
fi |
|||
|
|||
i=2 |
|||
p=1 |
|||
|
|||
while true; do |
|||
|
|||
h=$(printf "%s" "$domain" | cut -d . -f $i-100) |
|||
_debug h "$h" |
|||
if [ -z "$h" ]; then |
|||
#not valid |
|||
return 1 |
|||
fi |
|||
|
|||
if ! _contains "$response" "$h"; then |
|||
_debug "$h not found" |
|||
else |
|||
_sub_domain=$(printf "%s" "$domain" | cut -d . -f 1-$p) |
|||
_domain="$h" |
|||
return 0 |
|||
fi |
|||
p="$i" |
|||
i=$(_math "$i" + 1) |
|||
done |
|||
return 1 |
|||
} |
|||
|
|||
_namecheap_set_publicip() { |
|||
|
|||
if [ -z "$NAMECHEAP_SOURCEIP" ]; then |
|||
_err "No Source IP specified for Namecheap API." |
|||
_err "Use your public ip address or an url to retrieve it (e.g. https://ipconfig.co/ip) and export it as NAMECHEAP_SOURCEIP" |
|||
return 1 |
|||
else |
|||
_saveaccountconf NAMECHEAP_SOURCEIP "$NAMECHEAP_SOURCEIP" |
|||
_debug sourceip "$NAMECHEAP_SOURCEIP" |
|||
|
|||
ip=$(echo "$NAMECHEAP_SOURCEIP" | _egrep_o '[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}') |
|||
addr=$(echo "$NAMECHEAP_SOURCEIP" | _egrep_o '(http|https)://.*') |
|||
|
|||
_debug2 ip "$ip" |
|||
_debug2 addr "$addr" |
|||
|
|||
if [ -n "$ip" ]; then |
|||
_publicip="$ip" |
|||
elif [ -n "$addr" ]; then |
|||
_publicip=$(_get "$addr") |
|||
else |
|||
_err "No Source IP specified for Namecheap API." |
|||
_err "Use your public ip address or an url to retrieve it (e.g. https://ipconfig.co/ip) and export it as NAMECHEAP_SOURCEIP" |
|||
return 1 |
|||
fi |
|||
fi |
|||
|
|||
_debug publicip "$_publicip" |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
_namecheap_post() { |
|||
command=$1 |
|||
data="ApiUser=${NAMECHEAP_USERNAME}&ApiKey=${NAMECHEAP_API_KEY}&ClientIp=${_publicip}&UserName=${NAMECHEAP_USERNAME}&Command=${command}" |
|||
|
|||
response="$(_post "$data" "$NAMECHEAP_API" "" "POST")" |
|||
_debug2 response "$response" |
|||
|
|||
if _contains "$response" "Status=\"ERROR\"" >/dev/null; then |
|||
error=$(echo "$response" | _egrep_o ">.*<\\/Error>" | cut -d '<' -f 1 | tr -d '>') |
|||
_err "error $error" |
|||
return 1 |
|||
fi |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
_namecheap_parse_host() { |
|||
_host=$1 |
|||
_debug _host "$_host" |
|||
|
|||
_hostid=$(echo "$_host" | _egrep_o '\sHostId="[^"]*' | cut -d '"' -f 2) |
|||
_hostname=$(echo "$_host" | _egrep_o '\sName="[^"]*' | cut -d '"' -f 2) |
|||
_hosttype=$(echo "$_host" | _egrep_o '\sType="[^"]*' | cut -d '"' -f 2) |
|||
_hostaddress=$(echo "$_host" | _egrep_o '\sAddress="[^"]*' | cut -d '"' -f 2) |
|||
_hostmxpref=$(echo "$_host" | _egrep_o '\sMXPref="[^"]*' | cut -d '"' -f 2) |
|||
_hostttl=$(echo "$_host" | _egrep_o '\sTTL="[^"]*' | cut -d '"' -f 2) |
|||
|
|||
_debug hostid "$_hostid" |
|||
_debug hostname "$_hostname" |
|||
_debug hosttype "$_hosttype" |
|||
_debug hostaddress "$_hostaddress" |
|||
_debug hostmxpref "$_hostmxpref" |
|||
_debug hostttl "$_hostttl" |
|||
} |
|||
|
|||
_namecheap_check_config() { |
|||
|
|||
if [ -z "$NAMECHEAP_API_KEY" ]; then |
|||
_err "No API key specified for Namecheap API." |
|||
_err "Create your key and export it as NAMECHEAP_API_KEY" |
|||
return 1 |
|||
fi |
|||
|
|||
if [ -z "$NAMECHEAP_USERNAME" ]; then |
|||
_err "No username key specified for Namecheap API." |
|||
_err "Create your key and export it as NAMECHEAP_USERNAME" |
|||
return 1 |
|||
fi |
|||
|
|||
_saveaccountconf NAMECHEAP_API_KEY "$NAMECHEAP_API_KEY" |
|||
_saveaccountconf NAMECHEAP_USERNAME "$NAMECHEAP_USERNAME" |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
_set_namecheap_TXT() { |
|||
subdomain=$2 |
|||
txt=$3 |
|||
tld=$(echo "$1" | cut -d '.' -f 2) |
|||
sld=$(echo "$1" | cut -d '.' -f 1) |
|||
request="namecheap.domains.dns.getHosts&SLD=$sld&TLD=$tld" |
|||
|
|||
if ! _namecheap_post "$request"; then |
|||
_err "$error" |
|||
return 1 |
|||
fi |
|||
|
|||
hosts=$(echo "$response" | _egrep_o '<host[^>]*') |
|||
_debug hosts "$hosts" |
|||
|
|||
if [ -z "$hosts" ]; then |
|||
_error "Hosts not found" |
|||
return 1 |
|||
fi |
|||
|
|||
_namecheap_reset_hostList |
|||
|
|||
while read -r host; do |
|||
if _contains "$host" "<host"; then |
|||
_namecheap_parse_host "$host" |
|||
_namecheap_add_host "$_hostname" "$_hosttype" "$_hostaddress" "$_hostmxpref" "$_hostttl" |
|||
fi |
|||
done <<EOT |
|||
echo "$hosts" |
|||
EOT |
|||
|
|||
_namecheap_add_host "$subdomain" "TXT" "$txt" 10 120 |
|||
|
|||
_debug hostrequestfinal "$_hostrequest" |
|||
|
|||
request="namecheap.domains.dns.setHosts&SLD=${sld}&TLD=${tld}${_hostrequest}" |
|||
|
|||
if ! _namecheap_post "$request"; then |
|||
_err "$error" |
|||
return 1 |
|||
fi |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
_del_namecheap_TXT() { |
|||
subdomain=$2 |
|||
txt=$3 |
|||
tld=$(echo "$1" | cut -d '.' -f 2) |
|||
sld=$(echo "$1" | cut -d '.' -f 1) |
|||
request="namecheap.domains.dns.getHosts&SLD=$sld&TLD=$tld" |
|||
|
|||
if ! _namecheap_post "$request"; then |
|||
_err "$error" |
|||
return 1 |
|||
fi |
|||
|
|||
hosts=$(echo "$response" | _egrep_o '<host[^>]*') |
|||
_debug hosts "$hosts" |
|||
|
|||
if [ -z "$hosts" ]; then |
|||
_error "Hosts not found" |
|||
return 1 |
|||
fi |
|||
|
|||
_namecheap_reset_hostList |
|||
|
|||
found=0 |
|||
|
|||
while read -r host; do |
|||
if _contains "$host" "<host"; then |
|||
_namecheap_parse_host "$host" |
|||
if [ "$_hosttype" = "TXT" ] && [ "$_hostname" = "$subdomain" ] && [ "$_hostaddress" = "$txt" ]; then |
|||
_debug "TXT entry found" |
|||
found=1 |
|||
else |
|||
_namecheap_add_host "$_hostname" "$_hosttype" "$_hostaddress" "$_hostmxpref" "$_hostttl" |
|||
fi |
|||
fi |
|||
done <<EOT |
|||
echo "$hosts" |
|||
EOT |
|||
|
|||
if [ $found -eq 0 ]; then |
|||
_debug "TXT entry not found" |
|||
return 0 |
|||
fi |
|||
|
|||
_debug hostrequestfinal "$_hostrequest" |
|||
|
|||
request="namecheap.domains.dns.setHosts&SLD=${sld}&TLD=${tld}${_hostrequest}" |
|||
|
|||
if ! _namecheap_post "$request"; then |
|||
_err "$error" |
|||
return 1 |
|||
fi |
|||
|
|||
return 0 |
|||
} |
|||
|
|||
_namecheap_reset_hostList() { |
|||
_hostindex=0 |
|||
_hostrequest="" |
|||
} |
|||
|
|||
#Usage: _namecheap_add_host HostName RecordType Address MxPref TTL |
|||
_namecheap_add_host() { |
|||
_hostindex=$(_math "$_hostindex" + 1) |
|||
_hostrequest=$(printf '%s&HostName%d=%s&RecordType%d=%s&Address%d=%s&MXPref%d=%d&TTL%d=%d' "$_hostrequest" "$_hostindex" "$1" "$_hostindex" "$2" "$_hostindex" "$3" "$_hostindex" "$4" "$_hostindex" "$5") |
|||
} |
|||
@ -0,0 +1,133 @@ |
|||
#!/usr/bin/env sh |
|||
#developed by linux-insideDE |
|||
|
|||
NC_Apikey="${NC_Apikey:-$(_readaccountconf_mutable NC_Apikey)}" |
|||
NC_Apipw="${NC_Apipw:-$(_readaccountconf_mutable NC_Apipw)}" |
|||
NC_CID="${NC_CID:-$(_readaccountconf_mutable NC_CID)}" |
|||
end="https://ccp.netcup.net/run/webservice/servers/endpoint.php?JSON" |
|||
client="" |
|||
|
|||
dns_netcup_add() { |
|||
login |
|||
if [ "$NC_Apikey" = "" ] || [ "$NC_Apipw" = "" ] || [ "$NC_CID" = "" ]; then |
|||
_err "No Credentials given" |
|||
return 1 |
|||
fi |
|||
_saveaccountconf_mutable NC_Apikey "$NC_Apikey" |
|||
_saveaccountconf_mutable NC_Apipw "$NC_Apipw" |
|||
_saveaccountconf_mutable NC_CID "$NC_CID" |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
domain="" |
|||
exit=$(echo "$fulldomain" | tr -dc '.' | wc -c) |
|||
exit=$(_math "$exit" + 1) |
|||
i=$exit |
|||
|
|||
while |
|||
[ "$exit" -gt 0 ] |
|||
do |
|||
tmp=$(echo "$fulldomain" | cut -d'.' -f"$exit") |
|||
if [ "$(_math "$i" - "$exit")" -eq 0 ]; then |
|||
domain="$tmp" |
|||
else |
|||
domain="$tmp.$domain" |
|||
fi |
|||
if [ "$(_math "$i" - "$exit")" -ge 1 ]; then |
|||
msg=$(_post "{\"action\": \"updateDnsRecords\", \"param\": {\"apikey\": \"$NC_Apikey\", \"apisessionid\": \"$sid\", \"customernumber\": \"$NC_CID\",\"clientrequestid\": \"$client\" , \"domainname\": \"$domain\", \"dnsrecordset\": { \"dnsrecords\": [ {\"id\": \"\", \"hostname\": \"$fulldomain.\", \"type\": \"TXT\", \"priority\": \"\", \"destination\": \"$txtvalue\", \"deleterecord\": \"false\", \"state\": \"yes\"} ]}}}" "$end" "" "POST") |
|||
_debug "$msg" |
|||
if [ "$(_getfield "$msg" "5" | sed 's/"statuscode"://g')" != 5028 ]; then |
|||
if [ "$(_getfield "$msg" "4" | sed s/\"status\":\"//g | sed s/\"//g)" != "success" ]; then |
|||
_err "$msg" |
|||
return 1 |
|||
else |
|||
break |
|||
fi |
|||
fi |
|||
fi |
|||
exit=$(_math "$exit" - 1) |
|||
done |
|||
logout |
|||
} |
|||
|
|||
dns_netcup_rm() { |
|||
login |
|||
fulldomain=$1 |
|||
txtvalue=$2 |
|||
|
|||
domain="" |
|||
exit=$(echo "$fulldomain" | tr -dc '.' | wc -c) |
|||
exit=$(_math "$exit" + 1) |
|||
i=$exit |
|||
rec="" |
|||
|
|||
while |
|||
[ "$exit" -gt 0 ] |
|||
do |
|||
tmp=$(echo "$fulldomain" | cut -d'.' -f"$exit") |
|||
if [ "$(_math "$i" - "$exit")" -eq 0 ]; then |
|||
domain="$tmp" |
|||
else |
|||
domain="$tmp.$domain" |
|||
fi |
|||
if [ "$(_math "$i" - "$exit")" -ge 1 ]; then |
|||
msg=$(_post "{\"action\": \"infoDnsRecords\", \"param\": {\"apikey\": \"$NC_Apikey\", \"apisessionid\": \"$sid\", \"customernumber\": \"$NC_CID\", \"domainname\": \"$domain\"}}" "$end" "" "POST") |
|||
rec=$(echo "$msg" | sed 's/\[//g' | sed 's/\]//g' | sed 's/{\"serverrequestid\".*\"dnsrecords\"://g' | sed 's/},{/};{/g' | sed 's/{//g' | sed 's/}//g') |
|||
_debug "$msg" |
|||
if [ "$(_getfield "$msg" "5" | sed 's/"statuscode"://g')" != 5028 ]; then |
|||
if [ "$(_getfield "$msg" "4" | sed s/\"status\":\"//g | sed s/\"//g)" != "success" ]; then |
|||
_err "$msg" |
|||
return 1 |
|||
else |
|||
break |
|||
fi |
|||
fi |
|||
fi |
|||
exit=$(_math "$exit" - 1) |
|||
done |
|||
|
|||
ida=0000 |
|||
idv=0001 |
|||
ids=0000000000 |
|||
i=1 |
|||
while |
|||
[ "$i" -ne 0 ] |
|||
do |
|||
specrec=$(_getfield "$rec" "$i" ";") |
|||
idv="$ida" |
|||
ida=$(_getfield "$specrec" "1" "," | sed 's/\"id\":\"//g' | sed 's/\"//g') |
|||
txtv=$(_getfield "$specrec" "5" "," | sed 's/\"destination\":\"//g' | sed 's/\"//g') |
|||
i=$(_math "$i" + 1) |
|||
if [ "$txtvalue" = "$txtv" ]; then |
|||
i=0 |
|||
ids="$ida" |
|||
fi |
|||
if [ "$ida" = "$idv" ]; then |
|||
i=0 |
|||
fi |
|||
done |
|||
msg=$(_post "{\"action\": \"updateDnsRecords\", \"param\": {\"apikey\": \"$NC_Apikey\", \"apisessionid\": \"$sid\", \"customernumber\": \"$NC_CID\",\"clientrequestid\": \"$client\" , \"domainname\": \"$domain\", \"dnsrecordset\": { \"dnsrecords\": [ {\"id\": \"$ids\", \"hostname\": \"$fulldomain.\", \"type\": \"TXT\", \"priority\": \"\", \"destination\": \"$txtvalue\", \"deleterecord\": \"TRUE\", \"state\": \"yes\"} ]}}}" "$end" "" "POST") |
|||
_debug "$msg" |
|||
if [ "$(_getfield "$msg" "4" | sed s/\"status\":\"//g | sed s/\"//g)" != "success" ]; then |
|||
_err "$msg" |
|||
return 1 |
|||
fi |
|||
logout |
|||
} |
|||
|
|||
login() { |
|||
tmp=$(_post "{\"action\": \"login\", \"param\": {\"apikey\": \"$NC_Apikey\", \"apipassword\": \"$NC_Apipw\", \"customernumber\": \"$NC_CID\"}}" "$end" "" "POST") |
|||
sid=$(_getfield "$tmp" "8" | sed s/\"responsedata\":\{\"apisessionid\":\"//g | sed 's/\"\}\}//g') |
|||
_debug "$tmp" |
|||
if [ "$(_getfield "$msg" "4" | sed s/\"status\":\"//g | sed s/\"//g)" != "success" ]; then |
|||
_err "$msg" |
|||
return 1 |
|||
fi |
|||
} |
|||
logout() { |
|||
tmp=$(_post "{\"action\": \"logout\", \"param\": {\"apikey\": \"$NC_Apikey\", \"apisessionid\": \"$sid\", \"customernumber\": \"$NC_CID\"}}" "$end" "" "POST") |
|||
_debug "$tmp" |
|||
if [ "$(_getfield "$msg" "4" | sed s/\"status\":\"//g | sed s/\"//g)" != "success" ]; then |
|||
_err "$msg" |
|||
return 1 |
|||
fi |
|||
} |
|||
Write
Preview
Loading…
Cancel
Save
Reference in new issue