Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
71ebcac7
Unverified
Commit
71ebcac7
authored
Jan 22, 2021
by
neil
Committed by
GitHub
Jan 22, 2021
Browse files
Merge pull request #3377 from lbrocke/dns-api-ionos
Add IONOS API support
parents
289f79bb
f06aee21
Changes
1
Show whitespace changes
Inline
Side-by-side
dnsapi/dns_ionos.sh
0 → 100755
View file @
71ebcac7
#!/usr/bin/env sh
# Supports IONOS DNS API Beta v1.0.0
#
# Usage:
# Export IONOS_PREFIX and IONOS_SECRET before calling acme.sh:
#
# $ export IONOS_PREFIX="..."
# $ export IONOS_SECRET="..."
#
# $ acme.sh --issue --dns dns_ionos ...
IONOS_API
=
"https://api.hosting.ionos.com/dns"
IONOS_ROUTE_ZONES
=
"/v1/zones"
IONOS_TXT_TTL
=
60
# minimum accepted by API
IONOS_TXT_PRIO
=
10
dns_ionos_add
()
{
fulldomain
=
$1
txtvalue
=
$2
if
!
_ionos_init
;
then
return
1
fi
_new_record
=
"{
\"
name
\"
:
\"
$_sub_domain
.
$_domain
\"
,
\"
type
\"
:
\"
TXT
\"
,
\"
content
\"
:
\"
$txtvalue
\"
,
\"
ttl
\"
:
$IONOS_TXT_TTL
,
\"
prio
\"
:
$IONOS_TXT_PRIO
,
\"
disabled
\"
:false}"
# As no POST route is supported by the API, check for existing records and include them in the PATCH request in order not delete them.
# This is required to support ACME v2 wildcard certificate creation, where two TXT records for the same domain name are created.
_ionos_get_existing_records
"
$fulldomain
"
"
$_zone_id
"
if
[
"
$_existing_records
"
]
;
then
_body
=
"[
$_new_record
,
$_existing_records
]"
else
_body
=
"[
$_new_record
]"
fi
if
_ionos_rest PATCH
"
$IONOS_ROUTE_ZONES
/
$_zone_id
"
"
$_body
"
&&
[
-z
"
$response
"
]
;
then
_info
"TXT record has been created successfully."
return
0
fi
return
1
}
dns_ionos_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
if
!
_ionos_init
;
then
return
1
fi
if
!
_ionos_get_record
"
$fulldomain
"
"
$_zone_id
"
"
$txtvalue
"
;
then
_err
"Could not find _acme-challenge TXT record."
return
1
fi
if
_ionos_rest DELETE
"
$IONOS_ROUTE_ZONES
/
$_zone_id
/records/
$_record_id
"
&&
[
-z
"
$response
"
]
;
then
_info
"TXT record has been deleted successfully."
return
0
fi
return
1
}
_ionos_init
()
{
IONOS_PREFIX
=
"
${
IONOS_PREFIX
:-
$(
_readaccountconf_mutable IONOS_PREFIX
)
}
"
IONOS_SECRET
=
"
${
IONOS_SECRET
:-
$(
_readaccountconf_mutable IONOS_SECRET
)
}
"
if
[
-z
"
$IONOS_PREFIX
"
]
||
[
-z
"
$IONOS_SECRET
"
]
;
then
_err
"You didn't specify an IONOS api prefix and secret yet."
_err
"Read https://beta.developer.hosting.ionos.de/docs/getstarted to learn how to get a prefix and secret."
_err
""
_err
"Then set them before calling acme.sh:"
_err
"
\$
export IONOS_PREFIX=
\"
...
\"
"
_err
"
\$
export IONOS_SECRET=
\"
...
\"
"
_err
"
\$
acme.sh --issue -d ... --dns dns_ionos"
return
1
fi
_saveaccountconf_mutable IONOS_PREFIX
"
$IONOS_PREFIX
"
_saveaccountconf_mutable IONOS_SECRET
"
$IONOS_SECRET
"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"Cannot find this domain in your IONOS account."
return
1
fi
}
_get_root
()
{
domain
=
$1
i
=
1
p
=
1
if
_ionos_rest GET
"
$IONOS_ROUTE_ZONES
"
;
then
response
=
"
$(
echo
"
$response
"
|
tr
-d
"
\n
"
)
"
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
if
[
-z
"
$h
"
]
;
then
return
1
fi
_zone
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
name
\"
:
\"
$h
\"
.*
\}
"
)
"
if
[
"
$_zone
"
]
;
then
_zone_id
=
$(
printf
"%s
\n
"
"
$_zone
"
| _egrep_o
"
\"
id
\"
:
\"
[a-fA-F0-9
\-
]*
\"
"
| _head_n 1 |
cut
-d
:
-f
2 |
tr
-d
'\"'
)
if
[
"
$_zone_id
"
]
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_domain
=
$h
return
0
fi
return
1
fi
p
=
$i
i
=
$(
_math
"
$i
"
+ 1
)
done
fi
return
1
}
_ionos_get_existing_records
()
{
fulldomain
=
$1
zone_id
=
$2
if
_ionos_rest GET
"
$IONOS_ROUTE_ZONES
/
$zone_id
?recordName=
$fulldomain
&recordType=TXT"
;
then
response
=
"
$(
echo
"
$response
"
|
tr
-d
"
\n
"
)
"
_existing_records
=
"
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
records
\"
:
\[
.*
\]
"
| _head_n 1 |
cut
-d
'['
-f
2 |
sed
's/]//'
)
"
fi
}
_ionos_get_record
()
{
fulldomain
=
$1
zone_id
=
$2
txtrecord
=
$3
if
_ionos_rest GET
"
$IONOS_ROUTE_ZONES
/
$zone_id
?recordName=
$fulldomain
&recordType=TXT"
;
then
response
=
"
$(
echo
"
$response
"
|
tr
-d
"
\n
"
)
"
_record
=
"
$(
echo
"
$response
"
| _egrep_o
"
\"
name
\"
:
\"
$fulldomain
\"
[^
\}
]*
\"
type
\"
:
\"
TXT
\"
[^
\}
]*
\"
content
\"
:
\"\\\\\"
$txtrecord
\\\\\"\"
.*
\}
"
)
"
if
[
"
$_record
"
]
;
then
_record_id
=
$(
printf
"%s
\n
"
"
$_record
"
| _egrep_o
"
\"
id
\"
:
\"
[a-fA-F0-9
\-
]*
\"
"
| _head_n 1 |
cut
-d
:
-f
2 |
tr
-d
'\"'
)
return
0
fi
fi
return
1
}
_ionos_rest
()
{
method
=
"
$1
"
route
=
"
$2
"
data
=
"
$3
"
IONOS_API_KEY
=
"
$(
printf
"%s.%s"
"
$IONOS_PREFIX
"
"
$IONOS_SECRET
"
)
"
export
_H1
=
"X-API-Key:
$IONOS_API_KEY
"
if
[
"
$method
"
!=
"GET"
]
;
then
export
_H2
=
"Accept: application/json"
export
_H3
=
"Content-Type: application/json"
response
=
"
$(
_post
"
$data
"
"
$IONOS_API$route
"
""
"
$method
"
)
"
else
export
_H2
=
"Accept: */*"
response
=
"
$(
_get
"
$IONOS_API$route
"
)
"
fi
if
[
"
$?
"
!=
"0"
]
;
then
_err
"Error
$route
"
return
1
fi
return
0
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment