Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
29a2920a
Unverified
Commit
29a2920a
authored
Sep 02, 2023
by
KincaidYang
Committed by
GitHub
Sep 02, 2023
Browse files
Add dns_tencent.sh
Adapt to Tencent Cloud (DNSPod) API 3.0
parent
089d3570
Changes
1
Hide whitespace changes
Inline
Side-by-side
dnsapi/dns_tencent.sh
0 → 100644
View file @
29a2920a
#!/usr/bin/env sh
set
-x
Tencent_API
=
"https://dnspod.tencentcloudapi.com"
#Tencent_SecretId="AKIDz8krbsJ5yKBZQpn74WFkmLPx3gnPhESA"
#Tencent_SecretKey="Gu5t9xGARNpq86cd98joQYCN3Cozk1qA"
#Usage: dns_tencent_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_tencent_add
()
{
fulldomain
=
$1
txtvalue
=
$2
Tencent_SecretId
=
"
${
Tencent_SecretId
:-
$(
_readaccountconf_mutable Tencent_SecretId
)
}
"
Tencent_SecretKey
=
"
${
Tencent_SecretKey
:-
$(
_readaccountconf_mutable Tencent_SecretKey
)
}
"
if
[
-z
"
$Tencent_SecretId
"
]
||
[
-z
"
$Tencent_SecretKey
"
]
;
then
Tencent_SecretId
=
""
Tencent_SecretKey
=
""
_err
"You don't specify tencent api SecretId and SecretKey yet."
return
1
fi
#save the api SecretId and SecretKey to the account conf file.
_saveaccountconf_mutable Tencent_SecretId
"
$Tencent_SecretId
"
_saveaccountconf_mutable Tencent_SecretKey
"
$Tencent_SecretKey
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
return
1
fi
_debug
"Add record"
_add_record_query
"
$_domain
"
"
$_sub_domain
"
"
$txtvalue
"
&&
_tencent_rest
"CreateRecord"
}
dns_tencent_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
Tencent_SecretId
=
"
${
Tencent_SecretId
:-
$(
_readaccountconf_mutable Tencent_SecretId
)
}
"
Tencent_SecretKey
=
"
${
Tencent_SecretKey
:-
$(
_readaccountconf_mutable Tencent_SecretKey
)
}
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
return
1
fi
_debug
"Get record list"
sleep
30
_check_exist_query
"
$_domain
"
"
$_sub_domain
"
"
$txtvalue
"
&&
_tencent_rest
"DescribeRecordFilterList"
record_id
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
RecordId
\"
:
\s
*[0-9]+"
| _egrep_o
"[0-9]+"
)
"
_debug2 record_id
"
$record_id
"
if
[
-z
"
$record_id
"
]
;
then
_debug
"record not found, skip"
else
_debug
"Delete record"
_delete_record_query
"
$record_id
"
&&
_tencent_rest
"DeleteRecord"
fi
}
#################### Private functions below ##################################
_get_root
()
{
domain
=
$1
i
=
2
p
=
1
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
"
$i
"
-100
)
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
_describe_records_query
"
$h
"
"@"
if
!
_tencent_rest
"DescribeRecordList"
"ignore"
;
then
return
1
fi
if
_contains
"
$response
"
"
\"
TotalCount
\"
:"
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
"
$p
"
)
_debug _sub_domain
"
$_sub_domain
"
_domain
=
"
$h
"
_debug _domain
"
$_domain
"
return
0
fi
p
=
"
$i
"
i
=
$(
_math
"
$i
"
+ 1
)
done
return
1
}
_tencent_rest
()
{
action
=
$1
service
=
"dnspod"
payload
=
"
${
query
}
"
timestamp
=
$(
date
-u
+%s
)
token
=
$(
tencent_signature_v3
$service
"
$action
"
"
$payload
"
"
$timestamp
"
)
version
=
"2021-03-23"
if
!
response
=
"
$(
tencent_api_request
$service
$version
"
$action
"
"
$payload
"
"
$timestamp
"
)
"
;
then
_err
"Error <
$1
>"
return
1
fi
_debug2 response
"
$response
"
if
[
-z
"
$2
"
]
;
then
message
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
Message
\"
:
\"
[^
\"
]*
\"
"
|
cut
-d
:
-f
2 |
tr
-d
\"
)
"
if
[
"
$message
"
]
;
then
_err
"
$message
"
return
1
fi
fi
}
_add_record_query
()
{
query
=
"{
\"
Domain
\"
:
\"
$1
\"
,
\"
SubDomain
\"
:
\"
$2
\"
,
\"
RecordType
\"
:
\"
TXT
\"
,
\"
RecordLineId
\"
:
\"
0
\"
,
\"
RecordLine
\"
:
\"
0
\"
,
\"
Value
\"
:
\"
$3
\"
,
\"
TTL
\"
:600}"
}
_describe_records_query
()
{
query
=
"{
\"
Domain
\"
:
\"
$1
\"
,
\"
Limit
\"
:3000}"
}
_delete_record_query
()
{
query
=
"{
\"
Domain
\"
:
\"
$_domain
\"
,
\"
RecordId
\"
:
$1
}"
}
_check_exist_query
()
{
_domain
=
"
$1
"
_subdomain
=
"
$2
"
_value
=
"
$3
"
query
=
"{
\"
Domain
\"
:
\"
$_domain
\"
,
\"
SubDomain
\"
:
\"
$_subdomain
\"
,
\"
RecordValue
\"
:
\"
$_value
\"
}"
}
# shell client for tencent cloud api v3 | @author: rehiy
tencent_sha256
()
{
printf
%b
"
$@
"
| openssl dgst
-sha256
-hex
|
sed
's/^.* //'
}
tencent_hmac_sha256
()
{
k
=
$1
shift
printf
%b
"
$@
"
| openssl dgst
-sha256
-hmac
"
$k
"
|
sed
's/^.* //'
}
tencent_hmac_sha256_hexkey
()
{
k
=
$1
shift
printf
%b
"
$@
"
| openssl dgst
-sha256
-mac
HMAC
-macopt
"hexkey:
$k
"
|
sed
's/^.* //'
}
tencent_signature_v3
()
{
service
=
$1
action
=
$(
echo
"
$2
"
|
tr
'[:upper:]'
'[:lower:]'
)
payload
=
${
3
:-
'{}'
}
timestamp
=
${
4
:-
$(
date
+%s
)
}
domain
=
"
$service
.tencentcloudapi.com"
secretId
=
${
Tencent_SecretId
:-
'tencent-cloud-secret-id'
}
secretKey
=
${
Tencent_SecretKey
:-
'tencent-cloud-secret-key'
}
algorithm
=
'TC3-HMAC-SHA256'
date
=
$(
date
-u
-d
"@
$timestamp
"
+%Y-%m-%d 2>/dev/null
)
[
-z
"
$date
"
]
&&
date
=
$(
date
-u
-r
"
$timestamp
"
+%Y-%m-%d
)
canonicalUri
=
'/'
canonicalQuery
=
''
canonicalHeaders
=
"content-type:application/json
\n
host:
$domain
\n
x-tc-action:
$action
\n
"
signedHeaders
=
'content-type;host;x-tc-action'
canonicalRequest
=
"POST
\n
$canonicalUri
\n
$canonicalQuery
\n
$canonicalHeaders
\n
$signedHeaders
\n
$(
tencent_sha256
"
$payload
"
)
"
credentialScope
=
"
$date
/
$service
/tc3_request"
stringToSign
=
"
$algorithm
\n
$timestamp
\n
$credentialScope
\n
$(
tencent_sha256
"
$canonicalRequest
"
)
"
secretDate
=
$(
tencent_hmac_sha256
"TC3
$secretKey
"
"
$date
"
)
secretService
=
$(
tencent_hmac_sha256_hexkey
"
$secretDate
"
"
$service
"
)
secretSigning
=
$(
tencent_hmac_sha256_hexkey
"
$secretService
"
'tc3_request'
)
signature
=
$(
tencent_hmac_sha256_hexkey
"
$secretSigning
"
"
$stringToSign
"
)
echo
"
$algorithm
Credential=
$secretId
/
$credentialScope
, SignedHeaders=
$signedHeaders
, Signature=
$signature
"
}
tencent_api_request
()
{
service
=
$1
version
=
$2
action
=
$3
payload
=
${
4
:-
'{}'
}
timestamp
=
${
5
:-
$(
date
+%s
)
}
token
=
$(
tencent_signature_v3
"
$service
"
"
$action
"
"
$payload
"
"
$timestamp
"
)
_H1
=
"Content-Type: application/json"
_H2
=
"Authorization:
$token
"
_H3
=
"X-TC-Version:
$version
"
_H4
=
"X-TC-Timestamp:
$timestamp
"
_H5
=
"X-TC-Action:
$action
"
_post
"
$payload
"
"
$Tencent_API
"
""
"POST"
"application/json"
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment