Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
4f5995ab
Unverified
Commit
4f5995ab
authored
Jul 10, 2018
by
neil
Committed by
GitHub
Jul 10, 2018
Browse files
Merge pull request #1717 from initit/master
added dnsapi for euserv.eu
parents
884461f1
2945b230
Changes
5
Show whitespace changes
Inline
Side-by-side
README.md
View file @
4f5995ab
...
@@ -320,6 +320,7 @@ You don't have to do anything manually!
...
@@ -320,6 +320,7 @@ You don't have to do anything manually!
1.
Loopia.se API
1.
Loopia.se API
1.
acme-dns (https://github.com/joohoi/acme-dns)
1.
acme-dns (https://github.com/joohoi/acme-dns)
1.
TELE3 (https://www.tele3.cz)
1.
TELE3 (https://www.tele3.cz)
1.
EUSERV.EU (https://www.euserv.eu)
And:
And:
...
...
deploy/README.md
View file @
4f5995ab
...
@@ -255,3 +255,23 @@ acme.sh --deploy -d fritzbox.example.com --deploy-hook fritzbox
...
@@ -255,3 +255,23 @@ acme.sh --deploy -d fritzbox.example.com --deploy-hook fritzbox
```
sh
```
sh
acme.sh
--deploy
-d
ftp.example.com
--deploy-hook
strongswan
acme.sh
--deploy
-d
ftp.example.com
--deploy-hook
strongswan
```
```
## 10. Deploy the cert to HAProxy
You must specify the path where you want the concatenated key and certificate chain written.
```
sh
export
DEPLOY_HAPROXY_PEM_PATH
=
/etc/haproxy
```
You may optionally define the command to reload HAProxy. The value shown below will be used as the default if you don't set this environment variable.
```
sh
export
DEPLOY_HAPROXY_RELOAD
=
"/usr/sbin/service haproxy restart"
```
You can then deploy the certificate as follows
```
sh
acme.sh
--deploy
-d
haproxy.example.com
--deploy-hook
haproxy
```
The path for the PEM file will be stored with the domain configuration and will be available when renewing, so that deploy will happen automatically when renewed.
deploy/haproxy.sh
View file @
4f5995ab
...
@@ -20,7 +20,39 @@ haproxy_deploy() {
...
@@ -20,7 +20,39 @@ haproxy_deploy() {
_debug _cca
"
$_cca
"
_debug _cca
"
$_cca
"
_debug _cfullchain
"
$_cfullchain
"
_debug _cfullchain
"
$_cfullchain
"
_err
"deploy cert to haproxy server, Not implemented yet"
# handle reload preference
DEFAULT_HAPROXY_RELOAD
=
"/usr/sbin/service haproxy restart"
if
[
-z
"
${
DEPLOY_HAPROXY_RELOAD
}
"
]
;
then
_reload
=
"
${
DEFAULT_HAPROXY_RELOAD
}
"
_cleardomainconf DEPLOY_HAPROXY_RELOAD
else
_reload
=
"
${
DEPLOY_HAPROXY_RELOAD
}
"
_savedomainconf DEPLOY_HAPROXY_RELOAD
"
$DEPLOY_HAPROXY_RELOAD
"
fi
_savedomainconf DEPLOY_HAPROXY_PEM_PATH
"
$DEPLOY_HAPROXY_PEM_PATH
"
# work out the path where the PEM file should go
_pem_path
=
"
${
DEPLOY_HAPROXY_PEM_PATH
}
"
if
[
-z
"
$_pem_path
"
]
;
then
_err
"Path to save PEM file not found. Please define DEPLOY_HAPROXY_PEM_PATH."
return
1
fi
_pem_full_path
=
"
$_pem_path
/
$_cdomain
.pem"
_info
"Full path to PEM
$_pem_full_path
"
# combine the key and fullchain into a single pem and install
cat
"
$_cfullchain
"
"
$_ckey
"
>
"
$_pem_full_path
"
chmod
600
"
$_pem_full_path
"
_info
"Certificate successfully deployed"
# restart HAProxy
_info
"Run reload:
$_reload
"
if
eval
"
$_reload
"
;
then
_info
"Reload success!"
return
0
else
_err
"Reload error"
return
1
return
1
fi
}
}
dnsapi/README.md
View file @
4f5995ab
...
@@ -876,6 +876,27 @@ acme.sh --issue --dns dns_tele3 -d example.com -d *.example.com
...
@@ -876,6 +876,27 @@ acme.sh --issue --dns dns_tele3 -d example.com -d *.example.com
```
```
The TELE3_Key and TELE3_Secret will be saved in ~/.acme.sh/account.conf and will be reused when needed.
The TELE3_Key and TELE3_Secret will be saved in ~/.acme.sh/account.conf and will be reused when needed.
## 47. Use Euserv.eu API
First you need to login to your euserv.eu account and activate your API Administration (API Verwaltung).
[
https://support.euserv.com
](
https://support.euserv.com
)
Once you've activate, login to your API Admin Interface and create an API account.
Please specify the scope (active groups: domain) and assign the allowed IPs.
```
export EUSERV_Username="99999.user123"
export EUSERV_Password="Asbe54gHde"
```
Ok, let's issue a cert now: (Be aware to use the
`--insecure`
flag, cause euserv.eu is still using self-signed certificates!)
```
acme.sh --issue --dns dns_euserv -d example.com -d *.example.com --insecure
```
The
`EUSERV_Username`
and
`EUSERV_Password`
will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
Please report any issues to https://github.com/initit/acme.sh or to
<github@initit.de>
# Use custom API
# Use custom API
If your API is not supported yet, you can write your own DNS API.
If your API is not supported yet, you can write your own DNS API.
...
...
dnsapi/dns_euserv.sh
0 → 100644
View file @
4f5995ab
#!/usr/bin/env sh
#This is the euserv.eu api wrapper for acme.sh
#
#Author: Michael Brueckner
#Report Bugs: https://www.github.com/initit/acme.sh or mbr@initit.de
#
#EUSERV_Username="username"
#
#EUSERV_Password="password"
#
# Dependencies:
# -------------
# - none -
EUSERV_Api
=
"https://api.euserv.net"
######## Public functions #####################
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_euserv_add
()
{
fulldomain
=
"
$(
echo
"
$1
"
| _lower_case
)
"
txtvalue
=
$2
EUSERV_Username
=
"
${
EUSERV_Username
:-
$(
_readaccountconf_mutable EUSERV_Username
)
}
"
EUSERV_Password
=
"
${
EUSERV_Password
:-
$(
_readaccountconf_mutable EUSERV_Password
)
}
"
if
[
-z
"
$EUSERV_Username
"
]
||
[
-z
"
$EUSERV_Password
"
]
;
then
EUSERV_Username
=
""
EUSERV_Password
=
""
_err
"You don't specify euserv user and password yet."
_err
"Please create your key and try again."
return
1
fi
#save the user and email to the account conf file.
_saveaccountconf_mutable EUSERV_Username
"
$EUSERV_Username
"
_saveaccountconf_mutable EUSERV_Password
"
$EUSERV_Password
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug
"_sub_domain"
"
$_sub_domain
"
_debug
"_domain"
"
$_domain
"
_info
"Adding record"
if
!
_euserv_add_record
"
$_domain
"
"
$_sub_domain
"
"
$txtvalue
"
;
then
return
1
fi
}
#fulldomain txtvalue
dns_euserv_rm
()
{
fulldomain
=
"
$(
echo
"
$1
"
| _lower_case
)
"
txtvalue
=
$2
EUSERV_Username
=
"
${
EUSERV_Username
:-
$(
_readaccountconf_mutable EUSERV_Username
)
}
"
EUSERV_Password
=
"
${
EUSERV_Password
:-
$(
_readaccountconf_mutable EUSERV_Password
)
}
"
if
[
-z
"
$EUSERV_Username
"
]
||
[
-z
"
$EUSERV_Password
"
]
;
then
EUSERV_Username
=
""
EUSERV_Password
=
""
_err
"You don't specify euserv user and password yet."
_err
"Please create your key and try again."
return
1
fi
#save the user and email to the account conf file.
_saveaccountconf_mutable EUSERV_Username
"
$EUSERV_Username
"
_saveaccountconf_mutable EUSERV_Password
"
$EUSERV_Password
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug
"_sub_domain"
"
$_sub_domain
"
_debug
"_domain"
"
$_domain
"
_debug
"Getting txt records"
xml_content
=
$(
printf
'<?xml version="1.0" encoding="UTF-8"?>
<methodCall>
<methodName>domain.dns_get_active_records</methodName>
<params>
<param>
<value>
<struct>
<member>
<name>login</name>
<value>
<string>%s</string>
</value>
</member>
<member>
<name>password</name>
<value>
<string>%s</string>
</value>
</member>
<member>
<name>domain_id</name>
<value>
<int>%s</int>
</value>
</member>
</struct>
</value>
</param>
</params>
</methodCall>'
"
$EUSERV_Username
"
"
$EUSERV_Password
"
"
$_euserv_domain_id
"
)
export
_H1
=
"Content-Type: text/xml"
response
=
"
$(
_post
"
$xml_content
"
"
$EUSERV_Api
"
""
"POST"
)
"
if
!
_contains
"
$response
"
"<member><name>status</name><value><i4>100</i4></value></member>"
;
then
_err
"Error could not get txt records"
_debug
"xml_content"
"
$xml_content
"
_debug
"response"
"
$response
"
return
1
fi
if
!
echo
"
$response
"
|
grep
'>dns_record_content<.*>'
"
$txtvalue
"
'<'
>
/dev/null
;
then
_info
"Do not need to delete record"
else
# find XML block where txtvalue is in. The record_id is allways prior this line!
_endLine
=
$(
echo
"
$response
"
|
grep
-n
'>dns_record_content<.*>'
"
$txtvalue
"
'<'
|
cut
-d
':'
-f
1
)
# record_id is the last <name> Tag with a number before the row _endLine, identified by </name><value><struct>
_record_id
=
$(
echo
"
$response
"
|
sed
-n
'1,'
"
$_endLine
"
'p'
|
grep
'</name><value><struct>'
| _tail_n 1 |
sed
's/.*<name>\([0-9]*\)<\/name>.*/\1/'
)
_info
"Deleting record"
_euserv_delete_record
"
$_record_id
"
fi
}
#################### Private functions below ##################################
_get_root
()
{
domain
=
$1
_debug
"get root"
# Just to read the domain_orders once
domain
=
$1
i
=
2
p
=
1
if
!
_euserv_get_domain_orders
;
then
return
1
fi
# Get saved response with domain_orders
response
=
"
$_euserv_domain_orders
"
while
true
;
do
h
=
$(
echo
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
_debug h
"
$h
"
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
if
_contains
"
$response
"
"
$h
"
;
then
_sub_domain
=
$(
echo
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_domain
=
"
$h
"
if
!
_euserv_get_domain_id
"
$_domain
"
;
then
_err
"invalid domain"
return
1
fi
return
0
fi
p
=
$i
i
=
$(
_math
"
$i
"
+ 1
)
done
return
1
}
_euserv_get_domain_orders
()
{
# returns: _euserv_domain_orders
_debug
"get domain_orders"
xml_content
=
$(
printf
'<?xml version="1.0" encoding="UTF-8"?>
<methodCall>
<methodName>domain.get_domain_orders</methodName>
<params>
<param>
<value>
<struct>
<member>
<name>login</name>
<value><string>%s</string></value>
</member>
<member>
<name>password</name>
<value><string>%s</string></value>
</member>
</struct>
</value>
</param>
</params>
</methodCall>'
"
$EUSERV_Username
"
"
$EUSERV_Password
"
)
export
_H1
=
"Content-Type: text/xml"
response
=
"
$(
_post
"
$xml_content
"
"
$EUSERV_Api
"
""
"POST"
)
"
if
!
_contains
"
$response
"
"<member><name>status</name><value><i4>100</i4></value></member>"
;
then
_err
"Error could not get domain orders"
_debug
"xml_content"
"
$xml_content
"
_debug
"response"
"
$response
"
return
1
fi
# save response to reduce API calls
_euserv_domain_orders
=
"
$response
"
return
0
}
_euserv_get_domain_id
()
{
# returns: _euserv_domain_id
domain
=
$1
_debug
"get domain_id"
# find line where the domain name is within the $response
_startLine
=
$(
echo
"
$_euserv_domain_orders
"
|
grep
-n
'>domain_name<.*>'
"
$domain
"
'<'
|
cut
-d
':'
-f
1
)
# next occurency of domain_id after the domain_name is the correct one
_euserv_domain_id
=
$(
echo
"
$_euserv_domain_orders
"
|
sed
-n
"
$_startLine
"
',$p'
|
grep
'>domain_id<'
| _head_n 1 |
sed
's/.*<i4>\([0-9]*\)<\/i4>.*/\1/'
)
if
[
-z
"
$_euserv_domain_id
"
]
;
then
_err
"Could not find domain_id for domain
$domain
"
_debug
"_euserv_domain_orders"
"
$_euserv_domain_orders
"
return
1
fi
return
0
}
_euserv_delete_record
()
{
record_id
=
$1
xml_content
=
$(
printf
'<?xml version="1.0" encoding="UTF-8"?>
<methodCall>
<methodName>domain.dns_delete_record</methodName>
<params>
<param>
<value>
<struct>
<member>
<name>login</name>
<value>
<string>%s</string>
</value>
</member>
<member>
<name>password</name>
<value>
<string>%s</string>
</value>
</member>
<member>
<name>dns_record_id</name>
<value>
<int>%s</int>
</value>
</member>
</struct>
</value>
</param>
</params>
</methodCall>'
"
$EUSERV_Username
"
"
$EUSERV_Password
"
"
$record_id
"
)
export
_H1
=
"Content-Type: text/xml"
response
=
"
$(
_post
"
$xml_content
"
"
$EUSERV_Api
"
""
"POST"
)
"
if
!
_contains
"
$response
"
"<member><name>status</name><value><i4>100</i4></value></member>"
;
then
_err
"Error deleting record"
_debug
"xml_content"
"
$xml_content
"
_debug
"response"
"
$response
"
return
1
fi
return
0
}
_euserv_add_record
()
{
domain
=
$1
sub_domain
=
$2
txtval
=
$3
xml_content
=
$(
printf
'<?xml version="1.0" encoding="UTF-8"?>
<methodCall>
<methodName>domain.dns_create_record</methodName>
<params>
<param>
<value>
<struct>
<member>
<name>login</name>
<value>
<string>%s</string>
</value>
</member>
<member>
<name>password</name>
<value>
<string>%s</string></value>
</member>
<member>
<name>domain_id</name>
<value>
<int>%s</int>
</value>
</member>
<member>
<name>dns_record_subdomain</name>
<value>
<string>%s</string>
</value>
</member>
<member>
<name>dns_record_type</name>
<value>
<string>TXT</string>
</value>
</member>
<member>
<name>dns_record_value</name>
<value>
<string>%s</string>
</value>
</member>
<member>
<name>dns_record_ttl</name>
<value>
<int>300</int>
</value>
</member>
</struct>
</value>
</param>
</params>
</methodCall>'
"
$EUSERV_Username
"
"
$EUSERV_Password
"
"
$_euserv_domain_id
"
"
$sub_domain
"
"
$txtval
"
)
export
_H1
=
"Content-Type: text/xml"
response
=
"
$(
_post
"
$xml_content
"
"
$EUSERV_Api
"
""
"POST"
)
"
if
!
_contains
"
$response
"
"<member><name>status</name><value><i4>100</i4></value></member>"
;
then
_err
"Error could not create record"
_debug
"xml_content"
"
$xml_content
"
_debug
"response"
"
$response
"
return
1
fi
return
0
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment