Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
3abcfd8f
Unverified
Commit
3abcfd8f
authored
Sep 02, 2023
by
KincaidYang
Committed by
GitHub
Sep 02, 2023
Browse files
Add dns_tencent.sh
Adapt to Tencent Cloud (DNSPod) API 3.0
parent
f4ff2d5d
Changes
1
Show whitespace changes
Inline
Side-by-side
dnsapi/dns_tencent.sh
0 → 100644
View file @
3abcfd8f
#!/usr/bin/env sh
Tencent_API
=
"https://dnspod.tencentcloudapi.com"
#Tencent_SecretId="AKIDz81d2cd22cdcdc2dcd1cc1d1A"
#Tencent_SecretKey="Gu5t9abcabcaabcbabcbbbcbcbbccbbcb"
#Usage: dns_tencent_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_tencent_add
()
{
fulldomain
=
$1
txtvalue
=
$2
Tencent_SecretId
=
"
${
Tencent_SecretId
:-
$(
_readaccountconf_mutable Tencent_SecretId
)
}
"
Tencent_SecretKey
=
"
${
Tencent_SecretKey
:-
$(
_readaccountconf_mutable Tencent_SecretKey
)
}
"
if
[
-z
"
$Tencent_SecretId
"
]
||
[
-z
"
$Tencent_SecretKey
"
]
;
then
Tencent_SecretId
=
""
Tencent_SecretKey
=
""
_err
"You don't specify tencent api SecretId and SecretKey yet."
return
1
fi
#save the api SecretId and SecretKey to the account conf file.
_saveaccountconf_mutable Tencent_SecretId
"
$Tencent_SecretId
"
_saveaccountconf_mutable Tencent_SecretKey
"
$Tencent_SecretKey
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
return
1
fi
_debug
"Add record"
_add_record_query
"
$_domain
"
"
$_sub_domain
"
"
$txtvalue
"
&&
_tencent_rest
"CreateRecord"
}
dns_tencent_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
Tencent_SecretId
=
"
${
Tencent_SecretId
:-
$(
_readaccountconf_mutable Tencent_SecretId
)
}
"
Tencent_SecretKey
=
"
${
Tencent_SecretKey
:-
$(
_readaccountconf_mutable Tencent_SecretKey
)
}
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
return
1
fi
_debug
"Get record list"
attempt
=
1
max_attempts
=
5
while
[
-z
"
$record_id
"
]
&&
[
$attempt
-le
$max_attempts
]
;
do
_check_exist_query
"
$_domain
"
"
$_sub_domain
"
"
$txtvalue
"
&&
_tencent_rest
"DescribeRecordFilterList"
record_id
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
RecordId
\"
:
\s
*[0-9]+"
| _egrep_o
"[0-9]+"
)
"
_debug2 record_id
"
$record_id
"
if
[
-z
"
$record_id
"
]
;
then
_debug
"Due to TencentCloud API synchronization delay, record not found, waiting 10 seconds and retrying"
sleep
10
attempt
=
$((
attempt
+
1
))
fi
done
record_id
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
RecordId
\"
:
\s
*[0-9]+"
| _egrep_o
"[0-9]+"
)
"
_debug2 record_id
"
$record_id
"
if
[
-z
"
$record_id
"
]
;
then
_debug
"record not found after
$max_attempts
attempts, skip"
else
_debug
"Delete record"
_delete_record_query
"
$record_id
"
&&
_tencent_rest
"DeleteRecord"
fi
}
#################### Private functions below ##################################
_get_root
()
{
domain
=
$1
i
=
2
p
=
1
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
"
$i
"
-100
)
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
_describe_records_query
"
$h
"
"@"
if
!
_tencent_rest
"DescribeRecordList"
"ignore"
;
then
return
1
fi
if
_contains
"
$response
"
"
\"
TotalCount
\"
:"
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
"
$p
"
)
_debug _sub_domain
"
$_sub_domain
"
_domain
=
"
$h
"
_debug _domain
"
$_domain
"
return
0
fi
p
=
"
$i
"
i
=
$(
_math
"
$i
"
+ 1
)
done
return
1
}
_tencent_rest
()
{
action
=
$1
service
=
"dnspod"
payload
=
"
${
query
}
"
timestamp
=
$(
date
-u
+%s
)
token
=
$(
tencent_signature_v3
$service
"
$action
"
"
$payload
"
"
$timestamp
"
)
version
=
"2021-03-23"
if
!
response
=
"
$(
tencent_api_request
$service
$version
"
$action
"
"
$payload
"
"
$timestamp
"
)
"
;
then
_err
"Error <
$1
>"
return
1
fi
_debug2 response
"
$response
"
if
[
-z
"
$2
"
]
;
then
message
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
Message
\"
:
\"
[^
\"
]*
\"
"
|
cut
-d
:
-f
2 |
tr
-d
\"
)
"
if
[
"
$message
"
]
;
then
_err
"
$message
"
return
1
fi
fi
}
_add_record_query
()
{
query
=
"{
\"
Domain
\"
:
\"
$1
\"
,
\"
SubDomain
\"
:
\"
$2
\"
,
\"
RecordType
\"
:
\"
TXT
\"
,
\"
RecordLineId
\"
:
\"
0
\"
,
\"
RecordLine
\"
:
\"
0
\"
,
\"
Value
\"
:
\"
$3
\"
,
\"
TTL
\"
:600}"
}
_describe_records_query
()
{
query
=
"{
\"
Domain
\"
:
\"
$1
\"
,
\"
Limit
\"
:3000}"
}
_delete_record_query
()
{
query
=
"{
\"
Domain
\"
:
\"
$_domain
\"
,
\"
RecordId
\"
:
$1
}"
}
_check_exist_query
()
{
_domain
=
"
$1
"
_subdomain
=
"
$2
"
_value
=
"
$3
"
query
=
"{
\"
Domain
\"
:
\"
$_domain
\"
,
\"
SubDomain
\"
:
\"
$_subdomain
\"
,
\"
RecordValue
\"
:
\"
$_value
\"
}"
}
# shell client for tencent cloud api v3 | @author: rehiy
tencent_sha256
()
{
printf
%b
"
$@
"
|
${
ACME_OPENSSL_BIN
:-
openssl
}
dgst
-sha256
-hex
|
sed
's/^.* //'
}
tencent_hmac_sha256
()
{
k
=
$1
shift
printf
%b
"
$@
"
|
${
ACME_OPENSSL_BIN
:-
openssl
}
dgst
-sha256
-hmac
"
$k
"
|
sed
's/^.* //'
}
tencent_hmac_sha256_hexkey
()
{
k
=
$1
shift
printf
%b
"
$@
"
|
${
ACME_OPENSSL_BIN
:-
openssl
}
dgst
-sha256
-mac
HMAC
-macopt
"hexkey:
$k
"
|
sed
's/^.* //'
}
tencent_signature_v3
()
{
service
=
$1
action
=
$(
echo
"
$2
"
|
tr
'[:upper:]'
'[:lower:]'
)
payload
=
${
3
:-
'{}'
}
timestamp
=
${
4
:-
$(
date
+%s
)
}
domain
=
"
$service
.tencentcloudapi.com"
secretId
=
${
Tencent_SecretId
:-
'tencent-cloud-secret-id'
}
secretKey
=
${
Tencent_SecretKey
:-
'tencent-cloud-secret-key'
}
algorithm
=
'TC3-HMAC-SHA256'
date
=
$(
date
-u
-d
"@
$timestamp
"
+%Y-%m-%d 2>/dev/null
)
[
-z
"
$date
"
]
&&
date
=
$(
date
-u
-r
"
$timestamp
"
+%Y-%m-%d
)
canonicalUri
=
'/'
canonicalQuery
=
''
canonicalHeaders
=
"content-type:application/json
\n
host:
$domain
\n
x-tc-action:
$action
\n
"
signedHeaders
=
'content-type;host;x-tc-action'
canonicalRequest
=
"POST
\n
$canonicalUri
\n
$canonicalQuery
\n
$canonicalHeaders
\n
$signedHeaders
\n
$(
tencent_sha256
"
$payload
"
)
"
credentialScope
=
"
$date
/
$service
/tc3_request"
stringToSign
=
"
$algorithm
\n
$timestamp
\n
$credentialScope
\n
$(
tencent_sha256
"
$canonicalRequest
"
)
"
secretDate
=
$(
tencent_hmac_sha256
"TC3
$secretKey
"
"
$date
"
)
secretService
=
$(
tencent_hmac_sha256_hexkey
"
$secretDate
"
"
$service
"
)
secretSigning
=
$(
tencent_hmac_sha256_hexkey
"
$secretService
"
'tc3_request'
)
signature
=
$(
tencent_hmac_sha256_hexkey
"
$secretSigning
"
"
$stringToSign
"
)
echo
"
$algorithm
Credential=
$secretId
/
$credentialScope
, SignedHeaders=
$signedHeaders
, Signature=
$signature
"
}
tencent_api_request
()
{
service
=
$1
version
=
$2
action
=
$3
payload
=
${
4
:-
'{}'
}
timestamp
=
${
5
:-
$(
date
+%s
)
}
token
=
$(
tencent_signature_v3
"
$service
"
"
$action
"
"
$payload
"
"
$timestamp
"
)
_H1
=
"Content-Type: application/json"
_H2
=
"Authorization:
$token
"
_H3
=
"X-TC-Version:
$version
"
_H4
=
"X-TC-Timestamp:
$timestamp
"
_H5
=
"X-TC-Action:
$action
"
_post
"
$payload
"
"
$Tencent_API
"
""
"POST"
"application/json"
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment