Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
8fe813ac
Unverified
Commit
8fe813ac
authored
Mar 05, 2022
by
neil
Committed by
GitHub
Mar 05, 2022
Browse files
Merge pull request #3932 from peterlh/master
Added curanet dns support
parents
e88442cb
9a677534
Changes
1
Show whitespace changes
Inline
Side-by-side
dnsapi/dns_curanet.sh
0 → 100644
View file @
8fe813ac
#!/usr/bin/env sh
#Script to use with curanet.dk, scannet.dk, wannafind.dk, dandomain.dk DNS management.
#Requires api credentials with scope: dns
#Author: Peter L. Hansen <peter@r12.dk>
#Version 1.0
CURANET_REST_URL
=
"https://api.curanet.dk/dns/v1/Domains"
CURANET_AUTH_URL
=
"https://apiauth.dk.team.blue/auth/realms/Curanet/protocol/openid-connect/token"
CURANET_ACCESS_TOKEN
=
""
######## Public functions #####################
#Usage: dns_curanet_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_curanet_add
()
{
fulldomain
=
$1
txtvalue
=
$2
_info
"Using curanet"
_debug fulldomain
"
$fulldomain
"
_debug txtvalue
"
$txtvalue
"
CURANET_AUTHCLIENTID
=
"
${
CURANET_AUTHCLIENTID
:-
$(
_readaccountconf_mutable CURANET_AUTHCLIENTID
)
}
"
CURANET_AUTHSECRET
=
"
${
CURANET_AUTHSECRET
:-
$(
_readaccountconf_mutable CURANET_AUTHSECRET
)
}
"
if
[
-z
"
$CURANET_AUTHCLIENTID
"
]
||
[
-z
"
$CURANET_AUTHSECRET
"
]
;
then
CURANET_AUTHCLIENTID
=
""
CURANET_AUTHSECRET
=
""
_err
"You don't specify curanet api client and secret."
_err
"Please create your auth info and try again."
return
1
fi
#save the credentials to the account conf file.
_saveaccountconf_mutable CURANET_AUTHCLIENTID
"
$CURANET_AUTHCLIENTID
"
_saveaccountconf_mutable CURANET_AUTHSECRET
"
$CURANET_AUTHSECRET
"
if
!
_get_token
;
then
_err
"Unable to get token"
return
1
fi
if
!
_get_root
"
$fulldomain
"
;
then
_err
"Invalid domain"
return
1
fi
export
_H1
=
"Content-Type: application/json-patch+json"
export
_H2
=
"Accept: application/json"
export
_H3
=
"Authorization: Bearer
$CURANET_ACCESS_TOKEN
"
data
=
"{
\"
name
\"
:
\"
$fulldomain
\"
,
\"
type
\"
:
\"
TXT
\"
,
\"
ttl
\"
: 60,
\"
priority
\"
: 0,
\"
data
\"
:
\"
$txtvalue
\"
}"
response
=
"
$(
_post
"
$data
"
"
$CURANET_REST_URL
/
${
_domain
}
/Records"
""
""
)
"
if
_contains
"
$response
"
"
$txtvalue
"
;
then
_debug
"TXT record added OK"
else
_err
"Unable to add TXT record"
return
1
fi
return
0
}
#Usage: fulldomain txtvalue
#Remove the txt record after validation.
dns_curanet_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
_info
"Using curanet"
_debug fulldomain
"
$fulldomain
"
_debug txtvalue
"
$txtvalue
"
CURANET_AUTHCLIENTID
=
"
${
CURANET_AUTHCLIENTID
:-
$(
_readaccountconf_mutable CURANET_AUTHCLIENTID
)
}
"
CURANET_AUTHSECRET
=
"
${
CURANET_AUTHSECRET
:-
$(
_readaccountconf_mutable CURANET_AUTHSECRET
)
}
"
if
!
_get_token
;
then
_err
"Unable to get token"
return
1
fi
if
!
_get_root
"
$fulldomain
"
;
then
_err
"Invalid domain"
return
1
fi
_debug
"Getting current record list to identify TXT to delete"
export
_H1
=
"Content-Type: application/json"
export
_H2
=
"Accept: application/json"
export
_H3
=
"Authorization: Bearer
$CURANET_ACCESS_TOKEN
"
response
=
"
$(
_get
"
$CURANET_REST_URL
/
${
_domain
}
/Records"
""
""
)
"
if
!
_contains
"
$response
"
"
$txtvalue
"
;
then
_err
"Unable to delete record (does not contain
$txtvalue
)"
return
1
fi
recordid
=
$(
echo
"
$response
"
| _egrep_o
"{
\"
id
\"
:[0-9]+,
\"
name
\"
:
\"
$fulldomain
\"
,
\"
type
\"
:
\"
TXT
\"
,
\"
ttl
\"
:60,
\"
priority
\"
:0,
\"
data
\"
:
\"
..
$txtvalue
"
| _egrep_o
"id
\"
:[0-9]+"
|
cut
-c
5-
)
if
[
-z
"
$recordid
"
]
;
then
_err
"Unable to get recordid"
_debug
"regex {
\"
id
\"
:[0-9]+,
\"
name
\"
:
\"
$fulldomain
\"
,
\"
type
\"
:
\"
TXT
\"
,
\"
ttl
\"
:60,
\"
priority
\"
:0,
\"
data
\"
:
\"
..
$txtvalue
"
_debug
"response
$response
"
return
1
fi
_debug
"Deleting recordID
$recordid
"
response
=
"
$(
_post
""
"
$CURANET_REST_URL
/
${
_domain
}
/Records/
$recordid
"
""
"DELETE"
)
"
return
0
}
#################### Private functions below ##################################
_get_token
()
{
response
=
"
$(
_post
"grant_type=client_credentials&client_id=
$CURANET_AUTHCLIENTID
&client_secret=
$CURANET_AUTHSECRET
&scope=dns"
"
$CURANET_AUTH_URL
"
""
""
)
"
if
!
_contains
"
$response
"
"access_token"
;
then
_err
"Unable get access token"
return
1
fi
CURANET_ACCESS_TOKEN
=
$(
echo
"
$response
"
| _egrep_o
"
\"
access_token
\"
:
\"
[^
\"
]+"
|
cut
-c
17-
)
if
[
-z
"
$CURANET_ACCESS_TOKEN
"
]
;
then
_err
"Unable to get token"
return
1
fi
return
0
}
#_acme-challenge.www.domain.com
#returns
# _domain=domain.com
# _domain_id=sdjkglgdfewsdfg
_get_root
()
{
domain
=
$1
i
=
1
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
_debug h
"
$h
"
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
export
_H1
=
"Content-Type: application/json"
export
_H2
=
"Accept: application/json"
export
_H3
=
"Authorization: Bearer
$CURANET_ACCESS_TOKEN
"
response
=
"
$(
_get
"
$CURANET_REST_URL
/
$h
/Records"
""
""
)
"
if
[
!
"
$(
echo
"
$response
"
| _egrep_o
"Entity not found"
)
"
]
;
then
_domain
=
$h
return
0
fi
i
=
$(
_math
"
$i
"
+ 1
)
done
return
1
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment