Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
7d64e141
Commit
7d64e141
authored
Jul 12, 2017
by
Ondrej Simek
Browse files
Add dns_he - DNS API script for Hurricane Electric DNS service
... Although not yet fully Posix compatible.
parent
e5244cf3
Changes
2
Show whitespace changes
Inline
Side-by-side
dnsapi/README.md
View file @
7d64e141
...
...
@@ -572,6 +572,24 @@ acme.sh --issue --dns dns_dyn -d example.com -d www.example.com
The
`DYN_Customer`
,
`DYN_Username`
and
`DYN_Password`
will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
# 30. Use Hurricane Electric
Hurricane Electric doesn't have an API so just set your login credentials like so:
```
export HE_Username="yourusername"
export HE_Password="password"
```
Then you can issue your certificate:
```
acme.sh --issue --dns dns_he -d example.com -d www.example.com
```
The
`HE_Username`
and
`HE_Password`
settings will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
Please report any issues to https://github.com/angel333/acme.sh or to
<me@ondrejsimek.com>
.
# Use custom API
...
...
dnsapi/dns_he.sh
0 → 100755
View file @
7d64e141
#!/usr/bin/env sh
# TODO Somehow use _get instead of curl - not sure how to support
# cookies though...
########################################################################
# Hurricane Electric hook script for acme.sh
#
# Environment variables:
#
# - $HE_Username (your dns.he.net username)
# - $HE_Password (your dns.he.net password)
#
# Author: Ondrej Simek <me@ondrejsimek.com>
# Git repo: https://github.com/angel333/acme.sh
#-- dns_he_add() - Add TXT record --------------------------------------
# Usage: dns_he_add _acme-challenge.subdomain.domain.com "XyZ123..."
dns_he_add
()
{
_full_domain
=
$1
_txt_value
=
$2
_info
"Using DNS-01 Hurricane Electric hook"
_authenticate
||
return
1
_saveaccountconf HE_Username
"
$HE_Username
"
_saveaccountconf HE_Password
"
$HE_Password
"
# fills in the $_zone_id
_find_zone
$_full_domain
||
return
1
_debug
"Zone id
\"
$_zone_id
\"
will be used."
curl
-L
--silent
--show-error
--cookie
"
$_he_cookie
"
\
--form
"account="
\
--form
"menu=edit_zone"
\
--form
"Type=TXT"
\
--form
"hosted_dns_zoneid=
$_zone_id
"
\
--form
"hosted_dns_recordid="
\
--form
"hosted_dns_editzone=1"
\
--form
"Priority="
\
--form
"Name=
$_full_domain
"
\
--form
"Content=
$_txt_value
"
\
--form
"TTL=300"
\
--form
"hosted_dns_editrecord=Submit"
\
"https://dns.he.net/"
\
>
/dev/null
}
#-- dns_he_rm() - Remove TXT record ------------------------------------
# Usage: dns_he_rm _acme-challenge.subdomain.domain.com "XyZ123..."
dns_he_rm
()
{
_full_domain
=
$1
_txt_value
=
$2
_info
"Cleaning up after DNS-01 Hurricane Electric hook"
_authenticate
||
return
1
# fills in the $_zone_id
_find_zone
$_full_domain
||
return
1
_debug
"Zone id
\"
$_zone_id
\"
will be used."
# Find the record id to clean
_record_id
=
$(
\
curl
-L
--silent
--show-error
--cookie
"
$_he_cookie
"
\
"https://dns.he.net/?hosted_dns_zoneid=
$_zone_id
&menu=edit_zone&hosted_dns_editzone"
\
|
grep
-A
1
"data=
\"\(
"
\)\?
${
_txt_value
}
\(
"
\)\?\"
"
\
|
tail
-n
1
\
| _egrep_o
"'[[:digit:]]+','[^']+','TXT'"
\
|
cut
-b
2-
\
| _egrep_o
"[[:digit:]]+"
\
|
head
-n1
)
# ... oh my, what have I done...
# Remove the record
curl
-L
--silent
--show-error
--cookie
"
$_he_cookie
"
\
--form
"menu=edit_zone"
\
--form
"hosted_dns_zoneid=
$_zone_id
"
\
--form
"hosted_dns_recordid=
$_record_id
"
\
--form
"hosted_dns_editzone=1"
\
--form
"hosted_dns_delrecord=1"
\
--form
"hosted_dns_delconfirm=delete"
\
--form
"hosted_dns_editzone=1"
\
"https://dns.he.net/"
\
|
grep
'<div id="dns_status" onClick="hideThis(this);">Successfully removed record.</div>'
\
>
/dev/null
if
[
$?
-eq
0
]
;
then
_info
"Record removed successfuly."
else
_err
\
"Could not clean (remove) up the record. Please go to HE"
\
"administration interface and clean it by hand."
fi
}
########################## PRIVATE FUNCTIONS ###########################
#-- _find_zone() -------------------------------------------------------
# Usage: _authenticate
#
# - needs $HE_Username and $HE_Password
# - sets the $_he_cookie
_authenticate
()
{
if
[
-z
"
$HE_Username
"
]
&&
[
-z
"
$HE_Password
"
]
;
then
_err
\
'No auth details provided. Please set user credentials using the \
\$HE_Username and \$HE_Password envoronment variables.'
return
1
fi
# Just get a session
_he_cookie
=
$(
\
curl
-L
--silent
--show-error
-I
"https://dns.he.net/"
\
|
grep
'^Set-Cookie:'
\
| _egrep_o
'CGISESSID=[a-z0-9]*'
)
# Attempt login
curl
-L
--silent
--show-error
--cookie
"
$_he_cookie
"
\
--form
"email=
${
HE_Username
}
"
\
--form
"pass=
${
HE_Password
}
"
\
"https://dns.he.net/"
\
>
/dev/null
# TODO detect unsuccessful logins
}
#-- _find_zone() -------------------------------------------------------
# Returns the most specific zone found in administration interface.
#
# - needs $_he_cookie
#
# Example:
#
# _find_zone first.second.third.co.uk
#
# ... will return the first zone that exists in admin out of these:
# - "first.second.third.co.uk"
# - "second.third.co.uk"
# - "third.co.uk"
# - "co.uk" <-- unlikely
# - "uk" <-'
#
# (another approach would be something like this:
# https://github.com/hlandau/acme/blob/master/_doc/dns.hook
# - that's better if there are multiple pages. It's so much simpler.
# )
_find_zone
()
{
_domain
=
"
$1
"
## _all_zones is an array that looks like this:
## ( zone1:id zone2:id ... )
_all_zones
=(
$(
curl
-L
--silent
--show-error
--cookie
"
$_he_cookie
"
\
"https://dns.he.net/"
\
| _egrep_o
"delete_dom.*name=
\"
[^
\"
]+
\"
value=
\"
[0-9]+"
\
|
cut
-d
'"'
-f
3,5
--output-delimiter
=
":"
\
)
)
_strip_counter
=
1
while
[
true
]
do
_attempted_zone
=
$(
echo
$_domain
|
cut
-d
.
-f
${
_strip_counter
}
-
)
# All possible zone names have been tried
if
[
"
$_attempted_zone
"
==
""
]
then
_err
"No zone for domain
\"
$_domain
\"
found."
break
fi
# Walk through all zones on the account
#echo "$_all_zones" | while IFS=' ' read _zone_name _zone_id
for
i
in
${
_all_zones
[@]
}
do
_zone_name
=
$(
echo
$i
|
cut
-d
':'
-f
1
)
_zone_id
=
$(
echo
$i
|
cut
-d
':'
-f
2
)
if
[
"
$_zone_name
"
==
"
$_attempted_zone
"
]
then
# Zone found - we got $_zone_name and $_zone_id, let's get out...
_debug
"Found relevant zone
\"
$_zone_name
\"
with id"
\
"
\"
$_zone_id
\"
- will be used for domain
\"
$_domain
\"
."
return
0
fi
done
_debug
"Zone
\"
$_attempted_zone
\"
doesn't exist, let's try another
\
variation."
_strip_counter
=
$(
expr
$_strip_counter
+ 1
)
done
# No zone found.
return
1
}
# vim: et:ts=2:sw=2:
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment