Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
47359c1a
Unverified
Commit
47359c1a
authored
Feb 15, 2018
by
neil
Committed by
GitHub
Feb 15, 2018
Browse files
Merge pull request #1267 from Neilpang/dev
sync
parents
5c6af92a
abd0dad2
Changes
8
Hide whitespace changes
Inline
Side-by-side
README.md
View file @
47359c1a
...
...
@@ -315,12 +315,7 @@ You don't have to do anything manually!
1.
Azure DNS
1.
selectel.com(selectel.ru) DNS API
1.
zonomi.com DNS API
1.
DreamHost.com API
And:
...
...
acme.sh
View file @
47359c1a
...
...
@@ -3598,6 +3598,10 @@ $_authorizations_map"
_debug entry
"
$entry
"
if
[
-z
"
$entry
"
]
;
then
_err
"Error, can not get domain token entry
$d
"
_supported_vtypes
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
challenges
\"
:
\[
[^]]*]"
|
tr
'{'
"
\n
"
|
grep type
|
cut
-d
'"'
-f
4 |
tr
"
\n
"
' '
)
"
if
[
"
$_supported_vtypes
"
]
;
then
_err
"The supported validation types are:
$_supported_vtypes
, but you specified:
$vtype
"
fi
_clearup
_on_issue_err
"
$_post_hook
"
return
1
...
...
dnsapi/README.md
View file @
47359c1a
...
...
@@ -515,7 +515,7 @@ acme.sh --issue --dns dns_nsone -d example.com -d www.example.com
export DuckDNS_Token="aaaaaaaa-bbbb-cccc-dddd-eeeeeeeeeeee"
```
Please note that since DuckDNS uses StartSSL as their cert provider, thus
Please note that since DuckDNS uses StartSSL as their cert provider, thus
--insecure may need to be used when issuing certs:
```
acme.sh --insecure --issue --dns dns_duckdns -d mydomain.duckdns.org
...
...
@@ -744,6 +744,18 @@ acme.sh --issue --dns dns_zonomi -d example.com -d www.example.com
The
`ZM_Key`
will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
## 40. Use DreamHost DNS API
DNS API keys may be created at https://panel.dreamhost.com/?tree=home.api.
Ensure the created key has add and remove privelages.
```
export DH_API_Key="<api key>"
acme.sh --issue --dns dns_dreamhost -d example.com -d www.example.com
```
The 'DH_API_KEY' will be saved in
`~/.acme.sh/account.conf`
and will
be reused when needed.
# Use custom API
...
...
dnsapi/dns_ali.sh
View file @
47359c1a
...
...
@@ -10,6 +10,8 @@ dns_ali_add() {
fulldomain
=
$1
txtvalue
=
$2
Ali_Key
=
"
${
Ali_Key
:-
$(
_readaccountconf_mutable Ali_Key
)
}
"
Ali_Secret
=
"
${
Ali_Secret
:-
$(
_readaccountconf_mutable Ali_Secret
)
}
"
if
[
-z
"
$Ali_Key
"
]
||
[
-z
"
$Ali_Secret
"
]
;
then
Ali_Key
=
""
Ali_Secret
=
""
...
...
@@ -18,8 +20,8 @@ dns_ali_add() {
fi
#save the api key and secret to the account conf file.
_saveaccountconf Ali_Key
"
$Ali_Key
"
_saveaccountconf Ali_Secret
"
$Ali_Secret
"
_saveaccountconf
_mutable
Ali_Key
"
$Ali_Key
"
_saveaccountconf
_mutable
Ali_Secret
"
$Ali_Secret
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
...
...
@@ -32,6 +34,15 @@ dns_ali_add() {
dns_ali_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
Ali_Key
=
"
${
Ali_Key
:-
$(
_readaccountconf_mutable Ali_Key
)
}
"
Ali_Secret
=
"
${
Ali_Secret
:-
$(
_readaccountconf_mutable Ali_Secret
)
}
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
return
1
fi
_clean
}
...
...
@@ -76,16 +87,14 @@ _ali_rest() {
return
1
fi
_debug2 response
"
$response
"
if
[
-z
"
$2
"
]
;
then
message
=
"
$(
printf
"%s"
"
$response
"
| _egrep_o
"
\"
Message
\"
:
\"
[^
\"
]*
\"
"
|
cut
-d
:
-f
2 |
tr
-d
\"
)
"
if
[
-n
"
$message
"
]
;
then
message
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
Message
\"
:
\"
[^
\"
]*
\"
"
|
cut
-d
:
-f
2 |
tr
-d
\"
)
"
if
[
"
$message
"
]
;
then
_err
"
$message
"
return
1
fi
fi
_debug2 response
"
$response
"
return
0
}
_ali_urlencode
()
{
...
...
@@ -112,12 +121,14 @@ _ali_nonce() {
}
_check_exist_query
()
{
_qdomain
=
"
$1
"
_qsubdomain
=
"
$2
"
query
=
''
query
=
$query
'AccessKeyId='
$Ali_Key
query
=
$query
'&Action=DescribeDomainRecords'
query
=
$query
'&DomainName='
$
1
query
=
$query
'&DomainName='
$
_qdomain
query
=
$query
'&Format=json'
query
=
$query
'&RRKeyWord=
_acme-challenge'
query
=
$query
'&RRKeyWord=
'
$_qsubdomain
query
=
$query
'&SignatureMethod=HMAC-SHA1'
query
=
$query
"&SignatureNonce=
$(
_ali_nonce
)
"
query
=
$query
'&SignatureVersion=1.0'
...
...
@@ -169,17 +180,21 @@ _describe_records_query() {
}
_clean
()
{
_check_exist_query
"
$_domain
"
_check_exist_query
"
$_domain
"
"
$_sub_domain
"
if
!
_ali_rest
"Check exist records"
"ignore"
;
then
return
1
fi
records
=
"
$(
echo
"
$response
"
-n
| _egrep_o
"
\"
RecordId
\"
:
\"
[^
\"
]*
\"
"
|
cut
-d
:
-f
2 |
tr
-d
\"
)
"
printf
"%s"
"
$records
"
\
|
while
read
-r
record_id
;
do
_delete_record_query
"
$record_id
"
_ali_rest
"Delete record
$record_id
"
"ignore"
done
record_id
=
"
$(
echo
"
$response
"
|
tr
'{'
"
\n
"
|
grep
"
$_sub_domain
"
|
grep
"
$txtvalue
"
|
tr
","
"
\n
"
|
grep
RecordId |
cut
-d
'"'
-f
4
)
"
_debug2 record_id
"
$record_id
"
if
[
-z
"
$record_id
"
]
;
then
_debug
"record not found, skip"
else
_delete_record_query
"
$record_id
"
_ali_rest
"Delete record
$record_id
"
"ignore"
fi
}
_timestamp
()
{
...
...
dnsapi/dns_dp.sh
View file @
47359c1a
...
...
@@ -93,12 +93,7 @@ add_record() {
return
1
fi
if
_contains
"
$response
"
"Action completed successful"
;
then
return
0
fi
return
1
#error
_contains
"
$response
"
"Action completed successful"
||
_contains
"
$response
"
"Domain record already exists"
}
#################### Private functions below ##################################
...
...
dnsapi/dns_dreamhost.sh
0 → 100644
View file @
47359c1a
#!/usr/bin/env sh
#Author: RhinoLance
#Report Bugs here: https://github.com/RhinoLance/acme.sh
#
#define the api endpoint
DH_API_ENDPOINT
=
"https://api.dreamhost.com/"
querystring
=
""
######## Public functions #####################
#Usage: dns_myapi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_dreamhost_add
()
{
fulldomain
=
$1
txtvalue
=
$2
if
!
validate
"
$fulldomain
"
"
$txtvalue
"
;
then
return
1
fi
querystring
=
"key=
$DH_API_KEY
&cmd=dns-add_record&record=
$fulldomain
&type=TXT&value=
$txtvalue
"
if
!
submit
"
$querystring
"
;
then
return
1
fi
return
0
}
#Usage: fulldomain txtvalue
#Remove the txt record after validation.
dns_dreamhost_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
if
!
validate
"
$fulldomain
"
"
$txtvalue
"
;
then
return
1
fi
querystring
=
"key=
$DH_API_KEY
&cmd=dns-remove_record&record=
$fulldomain
&type=TXT&value=
$txtvalue
"
if
!
submit
"
$querystring
"
;
then
return
1
fi
return
0
}
#################### Private functions below ##################################
#send the command to the api endpoint.
submit
()
{
querystring
=
$1
url
=
"
$DH_API_ENDPOINT
?
$querystring
"
_debug url
"
$url
"
if
!
response
=
"
$(
_get
"
$url
"
)
"
;
then
_err
"Error <
$1
>"
return
1
fi
if
[
-z
"
$2
"
]
;
then
message
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
Message
\"
:
\"
[^
\"
]*
\"
"
|
cut
-d
:
-f
2 |
tr
-d
\"
)
"
if
[
-n
"
$message
"
]
;
then
_err
"
$message
"
return
1
fi
fi
_debug response
"
$response
"
return
0
}
#check that we have a valid API Key
validate
()
{
fulldomain
=
$1
txtvalue
=
$2
_info
"Using dreamhost"
_debug fulldomain
"
$fulldomain
"
_debug txtvalue
"
$txtvalue
"
#retrieve the API key from the environment variable if it exists, otherwise look for a saved key.
DH_API_KEY
=
"
${
DH_API_KEY
:-
$(
_readaccountconf_mutable DH_API_KEY
)
}
"
if
[
-z
"
$DH_API_KEY
"
]
;
then
DH_API_KEY
=
""
_err
"You didn't specify the DreamHost api key yet (export DH_API_KEY=
\"
<api key>
\"
)"
_err
"Please login to your control panel, create a key and try again."
return
1
fi
#save the api key to the account conf file.
_saveaccountconf_mutable DH_API_KEY
"
$DH_API_KEY
"
}
dnsapi/dns_lua.sh
View file @
47359c1a
...
...
@@ -17,6 +17,8 @@ dns_lua_add() {
fulldomain
=
$1
txtvalue
=
$2
LUA_Key
=
"
${
LUA_Key
:-
$(
_readaccountconf_mutable LUA_Key
)
}
"
LUA_Email
=
"
${
LUA_Email
:-
$(
_readaccountconf_mutable LUA_Email
)
}
"
if
[
-z
"
$LUA_Key
"
]
||
[
-z
"
$LUA_Email
"
]
;
then
LUA_Key
=
""
LUA_Email
=
""
...
...
@@ -26,8 +28,8 @@ dns_lua_add() {
fi
#save the api key and email to the account conf file.
_saveaccountconf LUA_Key
"
$LUA_Key
"
_saveaccountconf LUA_Email
"
$LUA_Email
"
_saveaccountconf
_mutable
LUA_Key
"
$LUA_Key
"
_saveaccountconf
_mutable
LUA_Email
"
$LUA_Email
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
...
...
@@ -38,50 +40,26 @@ dns_lua_add() {
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_debug
"Getting txt records"
_LUA_rest GET
"zones/
${
_domain_id
}
/records"
if
!
_contains
"
$response
"
"
\"
id
\"
:"
;
then
_err
"Error"
return
1
fi
count
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
name
\"
:
\"
$fulldomain
.
\"
,
\"
type
\"
:
\"
TXT
\"
"
|
wc
-l
|
tr
-d
" "
)
_debug count
"
$count
"
if
[
"
$count
"
=
"0"
]
;
then
_info
"Adding record"
if
_LUA_rest POST
"zones/
$_domain_id
/records"
"{
\"
type
\"
:
\"
TXT
\"
,
\"
name
\"
:
\"
$fulldomain
.
\"
,
\"
content
\"
:
\"
$txtvalue
\"
,
\"
ttl
\"
:120}"
;
then
if
_contains
"
$response
"
"
$fulldomain
"
;
then
_info
"Added"
#todo: check if the record takes effect
return
0
else
_err
"Add txt record error."
return
1
fi
fi
_err
"Add txt record error."
else
_info
"Updating record"
record_id
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
id
\"
:[^,]*,
\"
name
\"
:
\"
$fulldomain
.
\"
,
\"
type
\"
:
\"
TXT
\"
"
| _head_n 1 |
cut
-d
:
-f2
|
cut
-d
,
-f1
)
_debug
"record_id"
"
$record_id
"
_LUA_rest PUT
"zones/
$_domain_id
/records/
$record_id
"
"{
\"
id
\"
:
$record_id
,
\"
type
\"
:
\"
TXT
\"
,
\"
name
\"
:
\"
$fulldomain
.
\"
,
\"
content
\"
:
\"
$txtvalue
\"
,
\"
zone_id
\"
:
$_domain_id
,
\"
ttl
\"
:120}"
if
[
"
$?
"
=
"0"
]
&&
_contains
"
$response
"
"updated_at"
;
then
_info
"Updated!"
_info
"Adding record"
if
_LUA_rest POST
"zones/
$_domain_id
/records"
"{
\"
type
\"
:
\"
TXT
\"
,
\"
name
\"
:
\"
$fulldomain
.
\"
,
\"
content
\"
:
\"
$txtvalue
\"
,
\"
ttl
\"
:120}"
;
then
if
_contains
"
$response
"
"
$fulldomain
"
;
then
_info
"Added"
#todo: check if the record takes effect
return
0
else
_err
"Add txt record error."
return
1
fi
_err
"Update error"
return
1
fi
}
#fulldomain
dns_lua_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
LUA_Key
=
"
${
LUA_Key
:-
$(
_readaccountconf_mutable LUA_Key
)
}
"
LUA_Email
=
"
${
LUA_Email
:-
$(
_readaccountconf_mutable LUA_Email
)
}
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
...
...
dnsapi/dns_ovh.sh
View file @
47359c1a
...
...
@@ -90,6 +90,10 @@ _initAuth() {
return
1
fi
if
[
"
$OVH_AK
"
!=
"
$(
_readaccountconf OVH_AK
)
"
]
;
then
_info
"It seems that your ovh key is changed, let's clear consumer key first."
_clearaccountconf OVH_CK
fi
_saveaccountconf_mutable OVH_AK
"
$OVH_AK
"
_saveaccountconf_mutable OVH_AS
"
$OVH_AS
"
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment