Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
bd9af86d
Commit
bd9af86d
authored
Jul 13, 2019
by
neilpang
Browse files
support jdcloud.com
parent
d694ee86
Changes
1
Hide whitespace changes
Inline
Side-by-side
dnsapi/dns_jd.sh
0 → 100644
View file @
bd9af86d
#!/usr/bin/env sh
#
#JD_ACCESS_KEY_ID="sdfsdfsdfljlbjkljlkjsdfoiwje"
#JD_ACCESS_KEY_SECRET="xxxxxxx"
#JD_REGION="cn-north-1"
#JD_PACK_ID=0
_JD_ACCOUNT
=
"https://uc.jdcloud.com/account/accesskey"
_JD_PROD
=
"clouddnsservice"
_JD_API
=
"jdcloud-api.com"
_JD_API_VERSION
=
"v1"
_JD_DEFAULT_REGION
=
"cn-north-1"
_JD_HOST
=
"
$_JD_PROD
.
$_JD_API
"
_JD_PACK_FREE
=
0
_JD_PACK_ENTERPRISE
=
1
_JD_PACK_PREMIUM
=
2
######## Public functions #####################
#Usage: dns_myapi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_jd_add
()
{
fulldomain
=
$1
txtvalue
=
$2
JD_ACCESS_KEY_ID
=
"
${
JD_ACCESS_KEY_ID
:-
$(
_readaccountconf_mutable JD_ACCESS_KEY_ID
)
}
"
JD_ACCESS_KEY_SECRET
=
"
${
JD_ACCESS_KEY_SECRET
:-
$(
_readaccountconf_mutable JD_ACCESS_KEY_SECRET
)
}
"
JD_REGION
=
"
${
JD_REGION
:-
$(
_readaccountconf_mutable JD_REGION
)
}
"
JD_PACK_ID
=
"
${
JD_PACK_ID
:-
$(
_readaccountconf_mutable JD_PACK_ID
)
}
"
if
[
-z
"
$JD_ACCESS_KEY_ID
"
]
||
[
-z
"
$JD_ACCESS_KEY_SECRET
"
]
;
then
JD_ACCESS_KEY_ID
=
""
JD_ACCESS_KEY_SECRET
=
""
_err
"You haven't specifed the jdcloud api key id or api key secret yet."
_err
"Please create your key and try again. see
$(
__green
$_JD_ACCOUNT
)
"
return
1
fi
_saveaccountconf_mutable JD_ACCESS_KEY_ID
"
$JD_ACCESS_KEY_ID
"
_saveaccountconf_mutable JD_ACCESS_KEY_SECRET
"
$JD_ACCESS_KEY_SECRET
"
if
[
-z
"
$JD_REGION
"
]
;
then
_debug
"Using default region:
$_JD_DEFAULT_REGION
"
JD_REGION
=
"
$_JD_DEFAULT_REGION
"
else
_saveaccountconf_mutable JD_REGION
"
$JD_REGION
"
fi
_JD_BASE_URI
=
"
$_JD_API_VERSION
/regions/
$JD_REGION
"
if
[
-z
"
$JD_PACK_ID
"
]
;
then
_debug
"Using default free pack:
$_JD_PACK_FREE
"
JD_PACK_ID
=
$_JD_PACK_FREE
else
_saveaccountconf_mutable JD_PACK_ID
"
$JD_PACK_ID
"
fi
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _domain_id
"
$_domain_id
"
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
#_debug "Getting getViewTree"
_debug
"Adding records"
_addrr
=
"{
\"
req
\"
:{
\"
hostRecord
\"
:
\"
$_sub_domain
\"
,
\"
hostValue
\"
:
\"
$txtvalue
\"
,
\"
ttl
\"
:120,
\"
type
\"
:
\"
TXT
\"
,
\"
viewValue
\"
:-1},
\"
regionId
\"
:
\"
$JD_REGION
\"
,
\"
domainId
\"
:
\"
$_domain_id
\"
}"
#_addrr='{"req":{"hostRecord":"xx","hostValue":"\"value4\"","jcloudRes":false,"mxPriority":null,"port":null,"ttl":300,"type":"TXT","weight":null,"viewValue":-1},"regionId":"cn-north-1","domainId":"8824"}'
if
jd_rest POST
"domain/
$_domain_id
/RRAdd"
""
"
$_addrr
"
;
then
_rid
=
"
$(
echo
"
$response
"
|
tr
'{},'
'\n'
|
grep
'"id":'
|
cut
-d
:
-f
2
)
"
if
[
-z
"
$_rid
"
]
;
then
_err
"Can not find record id from the result."
return
1
fi
_info
"TXT record added successfully."
_srid
=
"
$(
_readdomainconf
"JD_CLOUD_RIDS"
)
"
if
[
"
$_srid
"
]
;
then
_rid
=
"
$_srid
,
$_rid
"
fi
_savedomainconf
"JD_CLOUD_RIDS"
"
$_rid
"
return
0
fi
return
1
}
dns_jd_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
JD_ACCESS_KEY_ID
=
"
${
JD_ACCESS_KEY_ID
:-
$(
_readaccountconf_mutable JD_ACCESS_KEY_ID
)
}
"
JD_ACCESS_KEY_SECRET
=
"
${
JD_ACCESS_KEY_SECRET
:-
$(
_readaccountconf_mutable JD_ACCESS_KEY_SECRET
)
}
"
JD_REGION
=
"
${
JD_REGION
:-
$(
_readaccountconf_mutable JD_REGION
)
}
"
JD_PACK_ID
=
"
${
JD_PACK_ID
:-
$(
_readaccountconf_mutable JD_PACK_ID
)
}
"
if
[
-z
"
$JD_REGION
"
]
;
then
_debug
"Using default region:
$_JD_DEFAULT_REGION
"
JD_REGION
=
"
$_JD_DEFAULT_REGION
"
fi
_JD_BASE_URI
=
"
$_JD_API_VERSION
/regions/
$JD_REGION
"
_info
"Getting existing records for
$fulldomain
"
_srid
=
"
$(
_readdomainconf
"JD_CLOUD_RIDS"
)
"
_debug _srid
"
$_srid
"
if
[
-z
"
$_srid
"
]
;
then
_err
"Not rid skip"
return
0
fi
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _domain_id
"
$_domain_id
"
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_cleardomainconf JD_CLOUD_RIDS
_aws_tmpl_xml
=
"{
\"
ids
\"
:[
$_srid
],
\"
action
\"
:
\"
del
\"
,
\"
regionId
\"
:
\"
$JD_REGION
\"
,
\"
domainId
\"
:
\"
$_domain_id
\"
}"
if
jd_rest POST
"domain/
$_domain_id
/RROperate"
""
"
$_aws_tmpl_xml
"
&&
_contains
"
$response
"
"
\"
code
\"
:
\"
OK
\"
"
;
then
_info
"TXT record deleted successfully."
return
0
fi
return
1
}
#################### Private functions below ##################################
_get_root
()
{
domain
=
$1
i
=
1
p
=
1
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
_debug2
"Checking domain:
$h
"
if
!
jd_rest GET
"domain"
;
then
_err
"error get domain list"
return
1
fi
if
[
-z
"
$h
"
]
;
then
#not valid
_err
"Invalid domain"
return
1
fi
if
_contains
"
$response
"
"
\"
domainName
\"
:
\"
$h
\"
"
;
then
hostedzone
=
"
$(
echo
"
$response
"
|
tr
'{}'
'\n'
|
grep
"
\"
domainName
\"
:
\"
$h
\"
"
)
"
_debug hostedzone
"
$hostedzone
"
if
[
"
$hostedzone
"
]
;
then
_domain_id
=
"
$(
echo
"
$hostedzone
"
|
tr
','
'\n'
|
grep
"
\"
id
\"
:"
|
cut
-d
:
-f
2
)
"
if
[
"
$_domain_id
"
]
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_domain
=
$h
return
0
fi
fi
_err
"Can't find domain with id:
$h
"
return
1
fi
p
=
$i
i
=
$(
_math
"
$i
"
+ 1
)
done
return
1
}
#method uri qstr data
jd_rest
()
{
mtd
=
"
$1
"
ep
=
"
$2
"
qsr
=
"
$3
"
data
=
"
$4
"
_debug mtd
"
$mtd
"
_debug ep
"
$ep
"
_debug qsr
"
$qsr
"
_debug data
"
$data
"
CanonicalURI
=
"/
$_JD_BASE_URI
/
$ep
"
_debug2 CanonicalURI
"
$CanonicalURI
"
CanonicalQueryString
=
"
$qsr
"
_debug2 CanonicalQueryString
"
$CanonicalQueryString
"
RequestDate
=
"
$(
date
-u
+
"%Y%m%dT%H%M%SZ"
)
"
#RequestDate="20190713T082155Z" ######################################################
_debug2 RequestDate
"
$RequestDate
"
export
_H1
=
"X-Jdcloud-Date:
$RequestDate
"
RequestNonce
=
"2bd0852a-8bae-4087-b2d5-
$(
_time
)
"
#RequestNonce="894baff5-72d4-4244-883a-7b2eb51e7fbe" #################################
_debug2 RequestNonce
"
$RequestNonce
"
export
_H2
=
"X-Jdcloud-Nonce:
$RequestNonce
"
if
[
"
$data
"
]
;
then
CanonicalHeaders
=
"content-type:application/json
\n
"
SignedHeaders
=
"content-type;"
else
CanonicalHeaders
=
""
SignedHeaders
=
""
fi
CanonicalHeaders
=
"
${
CanonicalHeaders
}
host:
$_JD_HOST
\n
x-jdcloud-date:
$RequestDate
\n
x-jdcloud-nonce:
$RequestNonce
\n
"
SignedHeaders
=
"
${
SignedHeaders
}
host;x-jdcloud-date;x-jdcloud-nonce"
_debug2 CanonicalHeaders
"
$CanonicalHeaders
"
_debug2 SignedHeaders
"
$SignedHeaders
"
Hash
=
"sha256"
RequestPayload
=
"
$data
"
_debug2 RequestPayload
"
$RequestPayload
"
RequestPayloadHash
=
"
$(
printf
"%s"
"
$RequestPayload
"
| _digest
"
$Hash
"
hex | _lower_case
)
"
_debug2 RequestPayloadHash
"
$RequestPayloadHash
"
CanonicalRequest
=
"
$mtd
\n
$CanonicalURI
\n
$CanonicalQueryString
\n
$CanonicalHeaders
\n
$SignedHeaders
\n
$RequestPayloadHash
"
_debug2 CanonicalRequest
"
$CanonicalRequest
"
HashedCanonicalRequest
=
"
$(
printf
"
$CanonicalRequest
%s"
| _digest
"
$Hash
"
hex
)
"
_debug2 HashedCanonicalRequest
"
$HashedCanonicalRequest
"
Algorithm
=
"JDCLOUD2-HMAC-SHA256"
_debug2 Algorithm
"
$Algorithm
"
RequestDateOnly
=
"
$(
echo
"
$RequestDate
"
|
cut
-c
1-8
)
"
_debug2 RequestDateOnly
"
$RequestDateOnly
"
Region
=
"
$JD_REGION
"
Service
=
"
$_JD_PROD
"
CredentialScope
=
"
$RequestDateOnly
/
$Region
/
$Service
/jdcloud2_request"
_debug2 CredentialScope
"
$CredentialScope
"
StringToSign
=
"
$Algorithm
\n
$RequestDate
\n
$CredentialScope
\n
$HashedCanonicalRequest
"
_debug2 StringToSign
"
$StringToSign
"
kSecret
=
"JDCLOUD2
$JD_ACCESS_KEY_SECRET
"
_secure_debug2 kSecret
"
$kSecret
"
kSecretH
=
"
$(
printf
"%s"
"
$kSecret
"
| _hex_dump |
tr
-d
" "
)
"
_secure_debug2 kSecretH
"
$kSecretH
"
kDateH
=
"
$(
printf
"
$RequestDateOnly
%s"
| _hmac
"
$Hash
"
"
$kSecretH
"
hex
)
"
_debug2 kDateH
"
$kDateH
"
kRegionH
=
"
$(
printf
"
$Region
%s"
| _hmac
"
$Hash
"
"
$kDateH
"
hex
)
"
_debug2 kRegionH
"
$kRegionH
"
kServiceH
=
"
$(
printf
"
$Service
%s"
| _hmac
"
$Hash
"
"
$kRegionH
"
hex
)
"
_debug2 kServiceH
"
$kServiceH
"
kSigningH
=
"
$(
printf
"%s"
"jdcloud2_request"
| _hmac
"
$Hash
"
"
$kServiceH
"
hex
)
"
_debug2 kSigningH
"
$kSigningH
"
signature
=
"
$(
printf
"
$StringToSign
%s"
| _hmac
"
$Hash
"
"
$kSigningH
"
hex
)
"
_debug2 signature
"
$signature
"
Authorization
=
"
$Algorithm
Credential=
$JD_ACCESS_KEY_ID
/
$CredentialScope
, SignedHeaders=
$SignedHeaders
, Signature=
$signature
"
_debug2 Authorization
"
$Authorization
"
_H3
=
"Authorization:
$Authorization
"
_debug _H3
"
$_H3
"
url
=
"https://
$_JD_HOST$CanonicalURI
"
if
[
"
$qsr
"
]
;
then
url
=
"https://
$_JD_HOST$CanonicalURI
?
$qsr
"
fi
if
[
"
$mtd
"
=
"GET"
]
;
then
response
=
"
$(
_get
"
$url
"
)
"
else
response
=
"
$(
_post
"
$data
"
"
$url
"
""
"
$mtd
"
"application/json"
)
"
fi
_ret
=
"
$?
"
_debug2 response
"
$response
"
if
[
"
$_ret
"
=
"0"
]
;
then
if
_contains
"
$response
"
"
\"
error
\"
"
;
then
_err
"Response error:
$response
"
return
1
fi
fi
return
"
$_ret
"
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment