Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
f62b956e
Commit
f62b956e
authored
Dec 06, 2018
by
neilpang
Browse files
Merge branch 'dev' of
https://github.com/Neilpang/acme.sh
into dev
parents
9841063d
803c8177
Changes
4
Hide whitespace changes
Inline
Side-by-side
README.md
View file @
f62b956e
...
...
@@ -35,7 +35,7 @@ Twitter: [@neilpangxa](https://twitter.com/neilpangxa)
-
[
discourse.org
](
https://meta.discourse.org/t/setting-up-lets-encrypt/40709
)
-
[
Centminmod
](
https://centminmod.com/letsencrypt-acmetool-https.html
)
-
[
splynx
](
https://forum.splynx.com/t/free-ssl-cert-for-splynx-lets-encrypt/297
)
-
[
archlinux
](
https://
aur
.archlinux.org/packages/acme.sh
-git/
)
-
[
archlinux
](
https://
www
.archlinux.org/packages/
community/any/
acme.sh
)
-
[
opnsense.org
](
https://github.com/opnsense/plugins/tree/master/security/acme-client/src/opnsense/scripts/OPNsense/AcmeClient
)
-
[
CentOS Web Panel
](
http://centos-webpanel.com/
)
-
[
lnmp.org
](
https://lnmp.org/
)
...
...
@@ -329,8 +329,9 @@ You don't have to do anything manually!
1.
Namecheap API (https://www.namecheap.com/)
1.
MyDNS.JP API (https://www.mydns.jp/)
1.
hosting.de (https://www.hosting.de)
1.
Neodigit.net API (https://www.neodigit.net)
And:
And:
**
lexicon DNS API: https://github.com/Neilpang/acme.sh/wiki/How-to-use-lexicon-dns-api
(DigitalOcean, DNSimple, DNSMadeEasy, DNSPark, EasyDNS, Namesilo, NS1, PointHQ, Rage4 and Vultr etc.)
**
...
...
dnsapi/README.md
View file @
f62b956e
...
...
@@ -264,9 +264,18 @@ when needed.
## 14. Use Linode domain API
First you need to login to your Linode account to get your API Key.
[
https://manager.linode.com/profile/api
](
https://manager.linode.com/profile/api
)
Then add an API key with label
*ACME*
and copy the new key.
*
[
Classic Manager
](
https://manager.linode.com/profile/api
)
Under "Add an API key", Give the new key a "Label" (we recommend
*ACME*
),
set the expiry to never, "Create API Key", and copy the new key into the
`LINODE_API_KEY`
command
below.
*
[
Cloud Manager
](
https://cloud.linode.com/profile/tokens
)
Click on "Add a Personal Access Token". Give the new key a "Label" (we
recommend
*ACME*
), give it Read/Write access to "Domains". "Submit", and
copy the new key into the
`LINODE_API_KEY`
command below.
```
sh
export
LINODE_API_KEY
=
"..."
...
...
@@ -1054,6 +1063,19 @@ acme.sh --issue --dns dns_hostingde -d example.com -d *.example.com
The hosting.de API key and endpoint will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
## 56. Use Neodigit.net API
```
export NEODIGIT_API_TOKEN="eXJxTkdUVUZmcHQ3QWJackQ4ZGlMejRDSklRYmo5VG5zcFFKK2thYnE0WnVnNnMy"
```
Ok, let's issue a cert now:
```
acme.sh --issue --dns dns_neodigit -d example.com -d www.example.com
```
Neodigit API Token will be saved in
`~/.acme.sh/account.conf`
and will be used when needed.
# Use custom API
If your API is not supported yet, you can write your own DNS API.
...
...
dnsapi/dns_linode.sh
View file @
f62b956e
...
...
@@ -2,7 +2,7 @@
#Author: Philipp Grosswiler <philipp.grosswiler@swiss-design.net>
LINODE_API_URL
=
"https://api.linode.com/
?api_key=
$LINODE_API_KEY
&api_action=
"
LINODE_API_URL
=
"https://api.linode.com/
v4/domains
"
######## Public functions #####################
...
...
@@ -27,10 +27,14 @@ dns_linode_add() {
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_parameters
=
"&DomainID=
$_domain_id
&Type=TXT&Name=
$_sub_domain
&Target=
$txtvalue
"
_payload
=
"{
\"
type
\"
:
\"
TXT
\"
,
\"
name
\"
:
\"
$_sub_domain
\"
,
\"
target
\"
:
\"
$txtvalue
\"
}"
if
_rest
GET
"domain.resource.create"
"
$_parameters
"
&&
[
-n
"
$response
"
]
;
then
_resource_id
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
ResourceID
\"
:
\s
*[0-9]+"
|
cut
-d
:
-f
2 |
tr
-d
" "
| _head_n 1
)
if
_rest
POST
"/
$_domain_id
/records"
"
$_payload
"
&&
[
-n
"
$response
"
]
;
then
_resource_id
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
id
\"
:
\s
*[0-9]+"
|
cut
-d
:
-f
2 |
tr
-d
" "
| _head_n 1
)
_debug _resource_id
"
$_resource_id
"
if
[
-z
"
$_resource_id
"
]
;
then
...
...
@@ -65,25 +69,21 @@ dns_linode_rm() {
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_parameters
=
"&DomainID=
$_domain_id
"
if
_rest GET
"domain.resource.list"
"
$_parameters
"
&&
[
-n
"
$response
"
]
;
then
if
_rest GET
"/
$_domain_id
/records"
&&
[
-n
"
$response
"
]
;
then
response
=
"
$(
echo
"
$response
"
|
tr
-d
"
\n
"
|
tr
'{'
"|"
|
sed
's/|/&{/g'
|
tr
"|"
"
\n
"
)
"
resource
=
"
$(
echo
"
$response
"
| _egrep_o
"{.*
\"
NAME
\"
:
\s
*
\"
$_sub_domain
\"
.*}"
)
"
resource
=
"
$(
echo
"
$response
"
| _egrep_o
"{.*
\"
name
\"
:
\s
*
\"
$_sub_domain
\"
.*}"
)
"
if
[
"
$resource
"
]
;
then
_resource_id
=
$(
printf
"%s
\n
"
"
$resource
"
| _egrep_o
"
\"
RESOURCEID
\"
:
\s
*[0-9]+"
| _head_n 1 |
cut
-d
:
-f
2 |
tr
-d
\
)
_resource_id
=
$(
printf
"%s
\n
"
"
$resource
"
| _egrep_o
"
\"
id
\"
:
\s
*[0-9]+"
| _head_n 1 |
cut
-d
:
-f
2 |
tr
-d
\
)
if
[
"
$_resource_id
"
]
;
then
_debug _resource_id
"
$_resource_id
"
_parameters
=
"&DomainID=
$_domain_id
&ResourceID=
$_resource_id
"
if
_rest GET
"domain.resource.delete"
"
$_parameters
"
&&
[
-n
"
$response
"
]
;
then
_resource_id
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
ResourceID
\"
:
\s
*[0-9]+"
|
cut
-d
:
-f
2 |
tr
-d
" "
| _head_n 1
)
_debug _resource_id
"
$_resource_id
"
if
_rest DELETE
"/
$_domain_id
/records/
$_resource_id
"
&&
[
-n
"
$response
"
]
;
then
# On 200/OK, empty set is returned. Check for error, if any.
_error_response
=
$(
printf
"%s
\n
"
"
$response
"
| _egrep_o
"
\"
errors
\"
"
|
cut
-d
:
-f
2 |
tr
-d
" "
| _head_n 1
)
if
[
-
z
"
$_
resource_id
"
]
;
then
_err
"Error deleting the domain resource
.
"
if
[
-
n
"
$_
error_response
"
]
;
then
_err
"Error deleting the domain resource
:
$_error_response
"
return
1
fi
...
...
@@ -127,7 +127,7 @@ _get_root() {
i
=
2
p
=
1
if
_rest GET
"domain.list"
;
then
if
_rest GET
;
then
response
=
"
$(
echo
"
$response
"
|
tr
-d
"
\n
"
|
tr
'{'
"|"
|
sed
's/|/&{/g'
|
tr
"|"
"
\n
"
)
"
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
...
...
@@ -137,9 +137,9 @@ _get_root() {
return
1
fi
hostedzone
=
"
$(
echo
"
$response
"
| _egrep_o
"{.*
\"
DOMAIN
\"
:
\s
*
\"
$h
\"
.*}"
)
"
hostedzone
=
"
$(
echo
"
$response
"
| _egrep_o
"{.*
\"
domain
\"
:
\s
*
\"
$h
\"
.*}"
)
"
if
[
"
$hostedzone
"
]
;
then
_domain_id
=
$(
printf
"%s
\n
"
"
$hostedzone
"
| _egrep_o
"
\"
DOMAINID
\"
:
\s
*[0-9]+"
| _head_n 1 |
cut
-d
:
-f
2 |
tr
-d
\
)
_domain_id
=
$(
printf
"%s
\n
"
"
$hostedzone
"
| _egrep_o
"
\"
id
\"
:
\s
*[0-9]+"
| _head_n 1 |
cut
-d
:
-f
2 |
tr
-d
\
)
if
[
"
$_domain_id
"
]
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_domain
=
$h
...
...
@@ -165,6 +165,7 @@ _rest() {
export
_H1
=
"Accept: application/json"
export
_H2
=
"Content-Type: application/json"
export
_H3
=
"Authorization: Bearer
$LINODE_API_KEY
"
if
[
"
$mtd
"
!=
"GET"
]
;
then
# both POST and DELETE.
...
...
dnsapi/dns_neodigit.sh
0 → 100644
View file @
f62b956e
#!/usr/bin/env sh
#
# NEODIGIT_API_TOKEN="jasdfhklsjadhflnhsausdfas"
# This is Neodigit.net api wrapper for acme.sh
#
# Author: Adrian Almenar
# Report Bugs here: https://github.com/tecnocratica/acme.sh
#
NEODIGIT_API_URL
=
"https://api.neodigit.net/v1"
#
######## Public functions #####################
# Usage: dns_myapi_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_neodigit_add
()
{
fulldomain
=
$1
txtvalue
=
$2
NEODIGIT_API_TOKEN
=
"
${
NEODIGIT_API_TOKEN
:-
$(
_readaccountconf_mutable NEODIGIT_API_TOKEN
)
}
"
if
[
-z
"
$NEODIGIT_API_TOKEN
"
]
;
then
NEODIGIT_API_TOKEN
=
""
_err
"You haven't specified a Token api key."
_err
"Please create the key and try again."
return
1
fi
#save the api key and email to the account conf file.
_saveaccountconf_mutable NEODIGIT_API_TOKEN
"
$NEODIGIT_API_TOKEN
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug fulldomain
"
$fulldomain
"
_debug txtvalue
"
$txtvalue
"
_debug domain
"
$_domain
"
_debug sub_domain
"
$_sub_domain
"
_debug
"Getting txt records"
_neo_rest GET
"dns/zones/
${
_domain_id
}
/records?type=TXT&name=
$fulldomain
"
_debug _code
"
$_code
"
if
[
"
$_code
"
!=
"200"
]
;
then
_err
"error retrieving data!"
return
1
fi
_debug fulldomain
"
$fulldomain
"
_debug txtvalue
"
$txtvalue
"
_debug domain
"
$_domain
"
_debug sub_domain
"
$_sub_domain
"
_info
"Adding record"
if
_neo_rest POST
"dns/zones/
$_domain_id
/records"
"{
\"
record
\"
:{
\"
type
\"
:
\"
TXT
\"
,
\"
name
\"
:
\"
$_sub_domain
\"
,
\"
content
\"
:
\"
$txtvalue
\"
,
\"
ttl
\"
:60}}"
;
then
if
printf
--
"%s"
"
$response
"
|
grep
"
$_sub_domain
"
>
/dev/null
;
then
_info
"Added, OK"
return
0
else
_err
"Add txt record error."
return
1
fi
fi
_err
"Add txt record error."
return
1
}
#fulldomain txtvalue
dns_neodigit_rm
()
{
fulldomain
=
$1
txtvalue
=
$2
NEODIGIT_API_TOKEN
=
"
${
NEODIGIT_API_TOKEN
:-
$(
_readaccountconf_mutable NEODIGIT_API_TOKEN
)
}
"
if
[
-z
"
$NEODIGIT_API_TOKEN
"
]
;
then
NEODIGIT_API_TOKEN
=
""
_err
"You haven't specified a Token api key."
_err
"Please create the key and try again."
return
1
fi
#save the api key and email to the account conf file.
_saveaccountconf_mutable NEODIGIT_API_TOKEN
"
$NEODIGIT_API_TOKEN
"
_debug
"First detect the root zone"
if
!
_get_root
"
$fulldomain
"
;
then
_err
"invalid domain"
return
1
fi
_debug _domain_id
"
$_domain_id
"
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_debug
"Getting txt records"
_neo_rest GET
"dns/zones/
${
_domain_id
}
/records?type=TXT&name=
$fulldomain
&content=
$txtvalue
"
if
[
"
$_code
"
!=
"200"
]
;
then
_err
"error retrieving data!"
return
1
fi
record_id
=
$(
echo
"
$response
"
| _egrep_o
"
\"
id
\"
:
\s
*[0-9]+"
| _head_n 1 |
cut
-d
:
-f2
|
cut
-d
,
-f1
)
_debug
"record_id"
"
$record_id
"
if
[
-z
"
$record_id
"
]
;
then
_err
"Can not get record id to remove."
return
1
fi
if
!
_neo_rest DELETE
"dns/zones/
$_domain_id
/records/
$record_id
"
;
then
_err
"Delete record error."
return
1
fi
}
#################### Private functions below ##################################
#_acme-challenge.www.domain.com
#returns
# _sub_domain=_acme-challenge.www
# _domain=domain.com
# _domain_id=dasfdsafsadg5ythd
_get_root
()
{
domain
=
$1
i
=
2
p
=
1
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
_debug h
"
$h
"
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
fi
if
!
_neo_rest GET
"dns/zones?name=
$h
"
;
then
return
1
fi
_debug p
"
$p
"
if
_contains
"
$response
"
"
\"
name
\"
:
\"
$h
\"
"
>
/dev/null
;
then
_domain_id
=
$(
echo
"
$response
"
| _egrep_o
"
\"
id
\"
:
\s
*[0-9]+"
| _head_n 1 |
cut
-d
:
-f2
|
cut
-d
,
-f1
)
if
[
"
$_domain_id
"
]
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_domain
=
$h
return
0
fi
return
1
fi
p
=
$i
i
=
$(
_math
"
$i
"
+ 1
)
done
return
1
}
_neo_rest
()
{
m
=
$1
ep
=
"
$2
"
data
=
"
$3
"
_debug
"
$ep
"
export
_H1
=
"X-TCPanel-Token:
$NEODIGIT_API_TOKEN
"
export
_H2
=
"Content-Type: application/json"
if
[
"
$m
"
!=
"GET"
]
;
then
_debug data
"
$data
"
response
=
"
$(
_post
"
$data
"
"
$NEODIGIT_API_URL
/
$ep
"
""
"
$m
"
)
"
else
response
=
"
$(
_get
"
$NEODIGIT_API_URL
/
$ep
"
)
"
fi
_code
=
"
$(
grep
"^HTTP"
"
$HTTP_HEADER
"
| _tail_n 1 |
cut
-d
" "
-f
2 |
tr
-d
"
\\
r
\\
n"
)
"
if
[
"
$?
"
!=
"0"
]
;
then
_err
"error
$ep
"
return
1
fi
_debug2 response
"
$response
"
return
0
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment