Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
27579e07
Unverified
Commit
27579e07
authored
Jan 12, 2019
by
neil
Committed by
GitHub
Jan 12, 2019
Browse files
Merge pull request #2012 from bremensaki/pointhq-api
Native PointHQ API
parents
f91bcfeb
3099c799
Changes
3
Show whitespace changes
Inline
Side-by-side
README.md
View file @
27579e07
...
@@ -348,6 +348,7 @@ You don't have to do anything manually!
...
@@ -348,6 +348,7 @@ You don't have to do anything manually!
1.
hosting.de (https://www.hosting.de)
1.
hosting.de (https://www.hosting.de)
1.
Neodigit.net API (https://www.neodigit.net)
1.
Neodigit.net API (https://www.neodigit.net)
1.
Exoscale.com API (https://www.exoscale.com/)
1.
Exoscale.com API (https://www.exoscale.com/)
1.
PointDNS API (https://pointhq.com/)
And:
And:
...
...
dnsapi/README.md
View file @
27579e07
...
@@ -1127,6 +1127,18 @@ acme.sh --issue --dns dns_exoscale -d example.com -d www.example.com
...
@@ -1127,6 +1127,18 @@ acme.sh --issue --dns dns_exoscale -d example.com -d www.example.com
The
`EXOSCALE_API_KEY`
and
`EXOSCALE_SECRET_KEY`
will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
The
`EXOSCALE_API_KEY`
and
`EXOSCALE_SECRET_KEY`
will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
## 58. Using PointHQ API to issue certs
Log into
[
PointHQ account management
](
https://app.pointhq.com/profile
)
and copy the API key from the page there.
```
export PointHQ_Key="apikeystringgoeshere"
exportPointHQ_Email="accountemail@yourdomain.com"
```
You can then issue certs by using:
```
acme.sh --issue --dns dns_pointhq -d example.com -d www.example.com
```
# Use custom API
# Use custom API
If your API is not supported yet, you can write your own DNS API.
If your API is not supported yet, you can write your own DNS API.
...
...
dnsapi/dns_pointhq.sh
0 → 100644
View file @
27579e07
#!/usr/bin/env sh
#
#PointHQ_Key="sdfsdfsdfljlbjkljlkjsdfoiwje"
#
#PointHQ_Email="xxxx@sss.com"
PointHQ_Api
=
"https://api.pointhq.com"
######## Public functions #####################
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_pointhq_add
()
{
fulldomain
=
$1
txtvalue
=
$2
PointHQ_Key
=
"
${
PointHQ_Key
:-
$(
_readaccountconf_mutable PointHQ_Key
)
}
"
PointHQ_Email
=
"
${
PointHQ_Email
:-
$(
_readaccountconf_mutable PointHQ_Email
)
}
"
if
[
-z
"
$PointHQ_Key
"
]
||
[
-z
"
$PointHQ_Email
"
]
;
then
PointHQ_Key
=
""
PointHQ_Email
=
""
_err
"You didn't specify a PointHQ API key and email yet."
_err
"Please create the key and try again."
return
1
fi
if
!
_contains
"
$PointHQ_Email
"
"@"
;
then
_err
"It seems that the PointHQ_Email=
$PointHQ_Email
is not a valid email address."
_err
"Please check and retry."
return
1
fi
#save the api key and email to the account conf file.
_saveaccountconf_mutable PointHQ_Key
"
$PointHQ_Key
"
_saveaccountconf_mutable PointHQ_Email
"
$PointHQ_Email
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_info
"Adding record"
if
_pointhq_rest POST
"zones/
$_domain
/records"
"{
\"
zone_record
\"
: {
\"
name
\"
:
\"
$_sub_domain
\"
,
\"
record_type
\"
:
\"
TXT
\"
,
\"
data
\"
:
\"
$txtvalue
\"
,
\"
ttl
\"
:3600}}"
;
then
if
printf
--
"%s"
"
$response
"
|
grep
"
$fulldomain
"
>
/dev/null
;
then
_info
"Added, OK"
return
0
else
_err
"Add txt record error."
return
1
fi
fi
_err
"Add txt record error."
return
1
}
#fulldomain txtvalue
dns_pointhq_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
PointHQ_Key
=
"
${
PointHQ_Key
:-
$(
_readaccountconf_mutable PointHQ_Key
)
}
"
PointHQ_Email
=
"
${
PointHQ_Email
:-
$(
_readaccountconf_mutable PointHQ_Email
)
}
"
if
[
-z
"
$PointHQ_Key
"
]
||
[
-z
"
$PointHQ_Email
"
]
;
then
PointHQ_Key
=
""
PointHQ_Email
=
""
_err
"You didn't specify a PointHQ API key and email yet."
_err
"Please create the key and try again."
return
1
fi
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_debug
"Getting txt records"
_pointhq_rest GET
"zones/
${
_domain
}
/records?record_type=TXT&name=
$_sub_domain
"
if
!
printf
"%s"
"
$response
"
|
grep
"^
\[
"
>
/dev/null
;
then
_err
"Error"
return
1
fi
if
[
"
$response
"
=
"[]"
]
;
then
_info
"No records to remove."
else
record_id
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
id
\"
:[^,]*"
|
cut
-d
:
-f
2 |
tr
-d
\"
|
head
-n
1
)
_debug
"record_id"
"
$record_id
"
if
[
-z
"
$record_id
"
]
;
then
_err
"Can not get record id to remove."
return
1
fi
if
!
_pointhq_rest DELETE
"zones/
$_domain
/records/
$record_id
"
;
then
_err
"Delete record error."
return
1
fi
_contains
"
$response
"
'"status":"OK"'
fi
}
#################### Private functions below ##################################
#_acme-challenge.www.domain.com
#returns
# _sub_domain=_acme-challenge.www
# _domain=domain.com
_get_root
()
{
domain
=
$1
i
=
2
p
=
1
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
_debug h
"
$h
"
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
if
!
_pointhq_rest GET
"zones"
;
then
return
1
fi
if
_contains
"
$response
"
"
\"
name
\"
:
\"
$h
\"
"
>
/dev/null
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_domain
=
$h
return
0
fi
p
=
$i
i
=
$(
_math
"
$i
"
+ 1
)
done
return
1
}
_pointhq_rest
()
{
m
=
$1
ep
=
"
$2
"
data
=
"
$3
"
_debug
"
$ep
"
_pointhq_auth
=
$(
printf
"%s:%s"
"
$PointHQ_Email
"
"
$PointHQ_Key
"
| _base64
)
export
_H1
=
"Authorization: Basic
$_pointhq_auth
"
export
_H2
=
"Content-Type: application/json"
export
_H3
=
"Accept: application/json"
if
[
"
$m
"
!=
"GET"
]
;
then
_debug data
"
$data
"
response
=
"
$(
_post
"
$data
"
"
$PointHQ_Api
/
$ep
"
""
"
$m
"
)
"
else
response
=
"
$(
_get
"
$PointHQ_Api
/
$ep
"
)
"
fi
if
[
"
$?
"
!=
"0"
]
;
then
_err
"error
$ep
"
return
1
fi
_debug2 response
"
$response
"
return
0
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment