Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
6151debe
Commit
6151debe
authored
Jun 11, 2019
by
AndreyIsakov
Browse files
dnsapi for regru: CI linter ok
parent
e05ef230
Changes
1
Hide whitespace changes
Inline
Side-by-side
dnsapi/dns_regru.sh
View file @
6151debe
#!/usr/bin/env sh
#
#
CF_Key="sdfsdfsdfljlbjkljlkjsdfoiwje
"
#
REGRU_API_Username="test
"
#
#CF_Email="xxxx@sss.com"
# REGRU_API_Password="test"
#
_domain
=
$_domain
CF_Api
=
"https://api.
cloudflare.com/client/v4
"
REGRU_API_URL
=
"https://api.
reg.ru/api/regru2
"
######## Public functions #####################
#Usage: add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_cf_add
()
{
dns_regru_add
()
{
fulldomain
=
$1
txtvalue
=
$2
CF_Key
=
"
${
CF_Key
:-
$(
_readaccountconf_mutable CF_Key
)
}
"
CF_Email
=
"
${
CF_Email
:-
$(
_readaccountconf_mutable CF_Email
)
}
"
if
[
-z
"
$CF_Key
"
]
||
[
-z
"
$CF_Email
"
]
;
then
CF_Key
=
""
CF_Email
=
""
_err
"You didn't specify a Cloudflare api key and email yet."
_err
"You can get yours from here https://dash.cloudflare.com/profile."
return
1
fi
if
!
_contains
"
$CF_Email
"
"@"
;
then
_err
"It seems that the CF_Email=
$CF_Email
is not a valid email address."
_err
"Please check and retry."
REGRU_API_Username
=
"
${
REGRU_API_Username
:-
$(
_readaccountconf_mutable REGRU_API_Username
)
}
"
REGRU_API_Password
=
"
${
REGRU_API_Password
:-
$(
_readaccountconf_mutable REGRU_API_Password
)
}
"
if
[
-z
"
$REGRU_API_Username
"
]
||
[
-z
"
$REGRU_API_Password
"
]
;
then
REGRU_API_Username
=
""
REGRU_API_Password
=
""
_err
"You don't specify regru password or username."
return
1
fi
#save the api key and email to the account conf file.
_saveaccountconf_mutable CF_Key
"
$CF_Key
"
_saveaccountconf_mutable CF_Email
"
$CF_Email
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _domain_id
"
$_domain_id
"
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_saveaccountconf_mutable REGRU_API_Username
"
$REGRU_API_Username
"
_saveaccountconf_mutable REGRU_API_Password
"
$REGRU_API_Password
"
_debug
"Getting txt records"
_cf_rest GET
"zones/
${
_domain_id
}
/dns_records?type=TXT&name=
$fulldomain
"
if
!
printf
"%s"
"
$response
"
|
grep
\"
success
\"
:true
>
/dev/null
;
then
_err
"Error"
return
1
fi
_info
"Adding TXT record to
${
fulldomain
}
"
response
=
"
$(
_get
"
$REGRU_API_URL
/zone/add_txt?input_data={%22username%22:%22
${
REGRU_API_Username
}
%22,%22password%22:%22
${
REGRU_API_Password
}
%22,%22domains%22:[{%22dname%22:%22
${
_domain
}
%22}],%22subdomain%22:%22_acme-challenge%22,%22text%22:%22
${
txtvalue
}
%22,%22output_content_type%22:%22plain%22}&input_format=json"
)
"
# For wildcard cert, the main root domain and the wildcard domain have the same txt subdomain name, so
# we can not use updating anymore.
# count=$(printf "%s\n" "$response" | _egrep_o "\"count\":[^,]*" | cut -d : -f 2)
# _debug count "$count"
# if [ "$count" = "0" ]; then
_info
"Adding record"
if
_cf_rest POST
"zones/
$_domain_id
/dns_records"
"{
\"
type
\"
:
\"
TXT
\"
,
\"
name
\"
:
\"
$fulldomain
\"
,
\"
content
\"
:
\"
$txtvalue
\"
,
\"
ttl
\"
:120}"
;
then
if
_contains
"
$response
"
"
$txtvalue
"
;
then
_info
"Added, OK"
return
0
elif
_contains
"
$response
"
"The record already exists"
;
then
_info
"Already exists, OK"
return
0
else
_err
"Add txt record error."
return
1
fi
if
_contains
"
${
response
}
"
'success'
;
then
return
0
fi
_err
"Add txt record error."
_err
"Could not create resource record, check logs"
_err
"
${
response
}
"
return
1
# else
# _info "Updating record"
# record_id=$(printf "%s\n" "$response" | _egrep_o "\"id\":\"[^\"]*\"" | cut -d : -f 2 | tr -d \" | head -n 1)
# _debug "record_id" "$record_id"
#
# _cf_rest PUT "zones/$_domain_id/dns_records/$record_id" "{\"id\":\"$record_id\",\"type\":\"TXT\",\"name\":\"$fulldomain\",\"content\":\"$txtvalue\",\"zone_id\":\"$_domain_id\",\"zone_name\":\"$_domain\"}"
# if [ "$?" = "0" ]; then
# _info "Updated, OK"
# return 0
# fi
# _err "Update error"
# return 1
# fi
}
#fulldomain txtvalue
dns_cf_rm
()
{
dns_regru_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
CF_Key
=
"
${
CF_Key
:-
$(
_readaccountconf_mutable CF_Key
)
}
"
CF_Email
=
"
${
CF_Email
:-
$(
_readaccountconf_mutable CF_Email
)
}
"
if
[
-z
"
$CF_Key
"
]
||
[
-z
"
$CF_Email
"
]
;
then
CF_Key
=
""
CF_Email
=
""
_err
"You didn't specify a Cloudflare api key and email yet."
_err
"You can get yours from here https://dash.cloudflare.com/profile."
return
1
fi
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
echo
'RM-ONE '
"
$1
"
echo
'RM-TWO '
"
$2
"
REGRU_API_Username
=
"
${
REGRU_API_Username
:-
$(
_readaccountconf_mutable REGRU_API_Username
)
}
"
REGRU_API_Password
=
"
${
REGRU_API_Password
:-
$(
_readaccountconf_mutable REGRU_API_Password
)
}
"
if
[
-z
"
$REGRU_API_Username
"
]
||
[
-z
"
$REGRU_API_Password
"
]
;
then
REGRU_API_Username
=
""
REGRU_API_Password
=
""
_err
"You don't specify regru password or username."
return
1
fi
_debug _domain_id
"
$_domain_id
"
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_
debug
"Getting txt records
"
_cf_rest GET
"zones/
${
_domain_id
}
/dns_records?type=TXT&name=
$fulldomain
&content=
$txtvalue
"
_
info
"Deleting resource record
$fulldomain
"
response
=
"
$(
_get
"
$REGRU_API_URL
/zone/remove_record?input_data={%22username%22:%22
${
REGRU_API_Username
}
%22,%22password%22:%22
${
REGRU_API_Password
}
%22,%22domains%22:[{%22dname%22:%22
${
_domain
}
%22}],%22subdomain%22:%22_acme-challenge%22,%22content%22:%22
${
txtvalue
}
%22,%22record_type%22:%22TXT%22,%22output_content_type%22:%22plain%22}&input_format=json"
)
"
if
!
printf
"%s"
"
$response
"
|
grep
\"
success
\"
:true
>
/dev/null
;
then
_err
"Error"
return
1
if
_contains
"
${
response
}
"
'success'
;
then
return
0
fi
count
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
count
\"
:[^,]*"
|
cut
-d
:
-f
2
)
_debug count
"
$count
"
if
[
"
$count
"
=
"0"
]
;
then
_info
"Don't need to remove."
else
record_id
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
id
\"
:
\"
[^
\"
]*
\"
"
|
cut
-d
:
-f
2 |
tr
-d
\"
|
head
-n
1
)
_debug
"record_id"
"
$record_id
"
if
[
-z
"
$record_id
"
]
;
then
_err
"Can not get record id to remove."
return
1
fi
if
!
_cf_rest DELETE
"zones/
$_domain_id
/dns_records/
$record_id
"
;
then
_err
"Delete record error."
return
1
fi
_contains
"
$response
"
'"success":true'
fi
}
#################### Private functions below ##################################
#_acme-challenge.www.domain.com
#returns
# _sub_domain=_acme-challenge.www
# _domain=domain.com
# _domain_id=sdjkglgdfewsdfg
_get_root
()
{
domain
=
$1
i
=
1
p
=
1
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
_debug h
"
$h
"
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
if
!
_cf_rest GET
"zones?name=
$h
"
;
then
return
1
fi
if
_contains
"
$response
"
"
\"
name
\"
:
\"
$h
\"
"
||
_contains
"
$response
"
'"total_count":1'
;
then
_domain_id
=
$(
echo
"
$response
"
| _egrep_o
"
\[
.
\"
id
\"
:
\"
[^
\"
]*
\"
"
| _head_n 1 |
cut
-d
:
-f
2 |
tr
-d
\"
)
if
[
"
$_domain_id
"
]
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_domain
=
$h
return
0
fi
return
1
fi
p
=
$i
i
=
$(
_math
"
$i
"
+ 1
)
done
_err
"Could not delete resource record, check logs"
_err
"
${
response
}
"
return
1
}
_cf_rest
()
{
m
=
$1
ep
=
"
$2
"
data
=
"
$3
"
_debug
"
$ep
"
email_trimmed
=
$(
echo
$CF_Email
|
tr
-d
'"'
)
key_trimmed
=
$(
echo
$CF_Key
|
tr
-d
'"'
)
export
_H1
=
"X-Auth-Email:
$email_trimmed
"
export
_H2
=
"X-Auth-Key:
$key_trimmed
"
export
_H3
=
"Content-Type: application/json"
if
[
"
$m
"
!=
"GET"
]
;
then
_debug data
"
$data
"
response
=
"
$(
_post
"
$data
"
"
$CF_Api
/
$ep
"
""
"
$m
"
)
"
else
response
=
"
$(
_get
"
$CF_Api
/
$ep
"
)
"
fi
if
[
"
$?
"
!=
"0"
]
;
then
_err
"error
$ep
"
return
1
fi
_debug2 response
"
$response
"
return
0
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment