Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
37161d30
Unverified
Commit
37161d30
authored
Mar 20, 2019
by
neil
Committed by
GitHub
Mar 20, 2019
Browse files
Merge pull request #2105 from TheLastProject/feature/dns-openprovider
Add OpenProvider support
parents
236acbd6
4532037e
Changes
3
Hide whitespace changes
Inline
Side-by-side
README.md
View file @
37161d30
...
@@ -294,7 +294,6 @@ You don't have to do anything manually!
...
@@ -294,7 +294,6 @@ You don't have to do anything manually!
https://github.com/Neilpang/acme.sh/wiki/dnsapi
https://github.com/Neilpang/acme.sh/wiki/dnsapi
# 9. Use DNS manual mode:
# 9. Use DNS manual mode:
See: https://github.com/Neilpang/acme.sh/wiki/dns-manual-mode first.
See: https://github.com/Neilpang/acme.sh/wiki/dns-manual-mode first.
...
...
dnsapi/README.md
View file @
37161d30
# How to use DNS API
# How to use DNS API
DNS api usage:
DNS api usage:
https://github.com/Neilpang/acme.sh/wiki/dnsapi
https://github.com/Neilpang/acme.sh/wiki/dnsapi
\ No newline at end of file
dnsapi/dns_openprovider.sh
0 → 100755
View file @
37161d30
#!/usr/bin/env sh
# This is the OpenProvider API wrapper for acme.sh
#
# Author: Sylvia van Os
# Report Bugs here: https://github.com/Neilpang/acme.sh/issues/2104
#
# export OPENPROVIDER_USER="username"
# export OPENPROVIDER_PASSWORDHASH="hashed_password"
#
# Usage:
# acme.sh --issue --dns dns_openprovider -d example.com
OPENPROVIDER_API
=
"https://api.openprovider.eu/"
#OPENPROVIDER_API="https://api.cte.openprovider.eu/" # Test API
######## Public functions #####################
#Usage: dns_openprovider_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_openprovider_add
()
{
fulldomain
=
"
$1
"
txtvalue
=
"
$2
"
OPENPROVIDER_USER
=
"
${
OPENPROVIDER_USER
:-
$(
_readaccountconf_mutable OPENPROVIDER_USER
)
}
"
OPENPROVIDER_PASSWORDHASH
=
"
${
OPENPROVIDER_PASSWORDHASH
:-
$(
_readaccountconf_mutable OPENPROVIDER_PASSWORDHASH
)
}
"
if
[
-z
"
$OPENPROVIDER_USER
"
]
||
[
-z
"
$OPENPROVIDER_PASSWORDHASH
"
]
;
then
_err
"You didn't specify the openprovider user and/or password hash."
return
1
fi
# save the username and password to the account conf file.
_saveaccountconf_mutable OPENPROVIDER_USER
"
$OPENPROVIDER_USER
"
_saveaccountconf_mutable OPENPROVIDER_PASSWORDHASH
"
$OPENPROVIDER_PASSWORDHASH
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _domain_name
"
$_domain_name
"
_debug _domain_extension
"
$_domain_extension
"
_debug
"Getting current records"
existing_items
=
""
results_retrieved
=
0
while
true
;
do
_openprovider_request
"
$(
printf
'<searchZoneRecordDnsRequest><name>%s.%s</name><offset>%s</offset></searchZoneRecordDnsRequest>'
"
$_domain_name
"
"
$_domain_extension
"
"
$results_retrieved
"
)
"
items
=
"
$response
"
while
true
;
do
item
=
"
$(
echo
"
$items
"
| _egrep_o
'<openXML>.*<\/openXML>'
|
sed
-n
's/.*\(<item>.*<\/item>\).*/\1/p'
)
"
_debug existing_items
"
$existing_items
"
_debug results_retrieved
"
$results_retrieved
"
_debug item
"
$item
"
if
[
-z
"
$item
"
]
;
then
break
fi
items
=
"
$(
echo
"
$items
"
|
sed
"s|
${
item
}
||"
)
"
results_retrieved
=
"
$(
_math
"
$results_retrieved
"
+ 1
)
"
new_item
=
"
$(
echo
"
$item
"
|
sed
-n
's/.*<item>.*\(<name>\(.*\)\.'
"
$_domain_name
"
'\.'
"
$_domain_extension
"
'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p'
)
"
if
[
-z
"
$new_item
"
]
;
then
# Base record
new_item
=
"
$(
echo
"
$item
"
|
sed
-n
's/.*<item>.*\(<name>\(.*\)'
"
$_domain_name
"
'\.'
"
$_domain_extension
"
'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p'
)
"
fi
if
[
-z
"
$(
echo
"
$new_item
"
| _egrep_o
".*<type>(A|AAAA|CNAME|MX|SPF|SRV|TXT|TLSA|SSHFP|CAA)<
\/
type>.*"
)
"
]
;
then
_debug
"not an allowed record type, skipping"
"
$new_item
"
continue
fi
existing_items
=
"
$existing_items$new_item
"
done
total
=
"
$(
echo
"
$response
"
| _egrep_o
'<total>.*?<\/total>'
|
sed
-n
's/.*<total>\(.*\)<\/total>.*/\1/p'
)
"
_debug total
"
$total
"
if
[
"
$results_retrieved
"
-eq
"
$total
"
]
;
then
break
fi
done
_debug
"Creating acme record"
acme_record
=
"
$(
echo
"
$fulldomain
"
|
sed
-e
"s/.
$_domain_name
.
$_domain_extension$/
/"
)
"
_openprovider_request
"
$(
printf
'<modifyZoneDnsRequest><domain><name>%s</name><extension>%s</extension></domain><type>master</type><records><array>%s<item><name>%s</name><type>TXT</type><value>%s</value><ttl>86400</ttl></item></array></records></modifyZoneDnsRequest>'
"
$_domain_name
"
"
$_domain_extension
"
"
$existing_items
"
"
$acme_record
"
"
$txtvalue
"
)
"
return
0
}
#Usage: fulldomain txtvalue
#Remove the txt record after validation.
dns_openprovider_rm
()
{
fulldomain
=
"
$1
"
txtvalue
=
"
$2
"
OPENPROVIDER_USER
=
"
${
OPENPROVIDER_USER
:-
$(
_readaccountconf_mutable OPENPROVIDER_USER
)
}
"
OPENPROVIDER_PASSWORDHASH
=
"
${
OPENPROVIDER_PASSWORDHASH
:-
$(
_readaccountconf_mutable OPENPROVIDER_PASSWORDHASH
)
}
"
if
[
-z
"
$OPENPROVIDER_USER
"
]
||
[
-z
"
$OPENPROVIDER_PASSWORDHASH
"
]
;
then
_err
"You didn't specify the openprovider user and/or password hash."
return
1
fi
# save the username and password to the account conf file.
_saveaccountconf_mutable OPENPROVIDER_USER
"
$OPENPROVIDER_USER
"
_saveaccountconf_mutable OPENPROVIDER_PASSWORDHASH
"
$OPENPROVIDER_PASSWORDHASH
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _domain_name
"
$_domain_name
"
_debug _domain_extension
"
$_domain_extension
"
_debug
"Getting current records"
existing_items
=
""
results_retrieved
=
0
while
true
;
do
_openprovider_request
"
$(
printf
'<searchZoneRecordDnsRequest><name>%s.%s</name><offset>%s</offset></searchZoneRecordDnsRequest>'
"
$_domain_name
"
"
$_domain_extension
"
"
$results_retrieved
"
)
"
# Remove acme records from items
items
=
"
$response
"
while
true
;
do
item
=
"
$(
echo
"
$items
"
| _egrep_o
'<openXML>.*<\/openXML>'
|
sed
-n
's/.*\(<item>.*<\/item>\).*/\1/p'
)
"
_debug existing_items
"
$existing_items
"
_debug results_retrieved
"
$results_retrieved
"
_debug item
"
$item
"
if
[
-z
"
$item
"
]
;
then
break
fi
items
=
"
$(
echo
"
$items
"
|
sed
"s|
${
item
}
||"
)
"
results_retrieved
=
"
$(
_math
"
$results_retrieved
"
+ 1
)
"
if
!
echo
"
$item
"
|
grep
-v
"
$fulldomain
"
;
then
_debug
"acme record, skipping"
"
$item
"
continue
fi
new_item
=
"
$(
echo
"
$item
"
|
sed
-n
's/.*<item>.*\(<name>\(.*\)\.'
"
$_domain_name
"
'\.'
"
$_domain_extension
"
'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p'
)
"
if
[
-z
"
$new_item
"
]
;
then
# Base record
new_item
=
"
$(
echo
"
$item
"
|
sed
-n
's/.*<item>.*\(<name>\(.*\)'
"
$_domain_name
"
'\.'
"
$_domain_extension
"
'<\/name>.*\(<type>.*<\/type>\).*\(<value>.*<\/value>\).*\(<prio>.*<\/prio>\).*\(<ttl>.*<\/ttl>\)\).*<\/item>.*/<item><name>\2<\/name>\3\4\5\6<\/item>/p'
)
"
fi
if
[
-z
"
$(
echo
"
$new_item
"
| _egrep_o
".*<type>(A|AAAA|CNAME|MX|SPF|SRV|TXT|TLSA|SSHFP|CAA)<
\/
type>.*"
)
"
]
;
then
_debug
"not an allowed record type, skipping"
"
$new_item
"
continue
fi
existing_items
=
"
$existing_items$new_item
"
done
total
=
"
$(
echo
"
$response
"
| _egrep_o
'<total>.*?<\/total>'
|
sed
-n
's/.*<total>\(.*\)<\/total>.*/\1/p'
)
"
_debug total
"
$total
"
if
[
"
$results_retrieved
"
-eq
"
$total
"
]
;
then
break
fi
done
_debug
"Removing acme record"
_openprovider_request
"
$(
printf
'<modifyZoneDnsRequest><domain><name>%s</name><extension>%s</extension></domain><type>master</type><records><array>%s</array></records></modifyZoneDnsRequest>'
"
$_domain_name
"
"
$_domain_extension
"
"
$existing_items
"
)
"
return
0
}
#################### Private functions below ##################################
#_acme-challenge.www.domain.com
#returns
# _domain_name=domain
# _domain_extension=com
_get_root
()
{
domain
=
$1
i
=
2
results_retrieved
=
0
while
true
;
do
h
=
$(
echo
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
_debug h
"
$h
"
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
_openprovider_request
"
$(
printf
'<searchDomainRequest><domainNamePattern>%s</domainNamePattern><offset>%s</offset></searchDomainRequest>'
"
$(
echo
"
$h
"
|
cut
-d
.
-f
1
)
"
"
$results_retrieved
"
)
"
items
=
"
$response
"
while
true
;
do
item
=
"
$(
echo
"
$items
"
| _egrep_o
'<openXML>.*<\/openXML>'
|
sed
-n
's/.*\(<domain>.*<\/domain>\).*/\1/p'
)
"
_debug existing_items
"
$existing_items
"
_debug results_retrieved
"
$results_retrieved
"
_debug item
"
$item
"
if
[
-z
"
$item
"
]
;
then
break
fi
items
=
"
$(
echo
"
$items
"
|
sed
"s|
${
item
}
||"
)
"
results_retrieved
=
"
$(
_math
"
$results_retrieved
"
+ 1
)
"
_domain_name
=
"
$(
echo
"
$item
"
|
sed
-n
's/.*<domain>.*<name>\(.*\)<\/name>.*<\/domain>.*/\1/p'
)
"
_domain_extension
=
"
$(
echo
"
$item
"
|
sed
-n
's/.*<domain>.*<extension>\(.*\)<\/extension>.*<\/domain>.*/\1/p'
)
"
_debug _domain_name
"
$_domain_name
"
_debug _domain_extension
"
$_domain_extension
"
if
[
"
$_domain_name
.
$_domain_extension
"
=
"
$h
"
]
;
then
return
0
fi
done
total
=
"
$(
echo
"
$response
"
| _egrep_o
'<total>.*?<\/total>'
|
sed
-n
's/.*<total>\(.*\)<\/total>.*/\1/p'
)
"
_debug total
"
$total
"
if
[
"
$results_retrieved
"
-eq
"
$total
"
]
;
then
results_retrieved
=
0
i
=
"
$(
_math
"
$i
"
+ 1
)
"
fi
done
return
1
}
_openprovider_request
()
{
request_xml
=
$1
xml_prefix
=
'<?xml version="1.0" encoding="UTF-8"?>'
xml_content
=
$(
printf
'<openXML><credentials><username>%s</username><hash>%s</hash></credentials>%s</openXML>'
"
$OPENPROVIDER_USER
"
"
$OPENPROVIDER_PASSWORDHASH
"
"
$request_xml
"
)
response
=
"
$(
_post
"
$(
echo
"
$xml_prefix$xml_content
"
|
tr
-d
'\n'
)
"
"
$OPENPROVIDER_API
"
""
"POST"
"application/xml"
)
"
_debug response
"
$response
"
if
!
_contains
"
$response
"
"<openXML><reply><code>0</code>.*</reply></openXML>"
;
then
_err
"API request failed."
return
1
fi
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment