-
-
Notifications
You must be signed in to change notification settings - Fork 5.2k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #3980 from acmesh-official/dev
sync
- Loading branch information
Showing
12 changed files
with
721 additions
and
56 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,159 @@ | ||
| #!/usr/bin/env sh | ||
|
|
||
| #Script to use with curanet.dk, scannet.dk, wannafind.dk, dandomain.dk DNS management. | ||
| #Requires api credentials with scope: dns | ||
| #Author: Peter L. Hansen <peter@r12.dk> | ||
| #Version 1.0 | ||
|
|
||
| CURANET_REST_URL="https://api.curanet.dk/dns/v1/Domains" | ||
| CURANET_AUTH_URL="https://apiauth.dk.team.blue/auth/realms/Curanet/protocol/openid-connect/token" | ||
| CURANET_ACCESS_TOKEN="" | ||
|
|
||
| ######## Public functions ##################### | ||
|
|
||
| #Usage: dns_curanet_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" | ||
| dns_curanet_add() { | ||
| fulldomain=$1 | ||
| txtvalue=$2 | ||
| _info "Using curanet" | ||
| _debug fulldomain "$fulldomain" | ||
| _debug txtvalue "$txtvalue" | ||
|
|
||
| CURANET_AUTHCLIENTID="${CURANET_AUTHCLIENTID:-$(_readaccountconf_mutable CURANET_AUTHCLIENTID)}" | ||
| CURANET_AUTHSECRET="${CURANET_AUTHSECRET:-$(_readaccountconf_mutable CURANET_AUTHSECRET)}" | ||
| if [ -z "$CURANET_AUTHCLIENTID" ] || [ -z "$CURANET_AUTHSECRET" ]; then | ||
| CURANET_AUTHCLIENTID="" | ||
| CURANET_AUTHSECRET="" | ||
| _err "You don't specify curanet api client and secret." | ||
| _err "Please create your auth info and try again." | ||
| return 1 | ||
| fi | ||
|
|
||
| #save the credentials to the account conf file. | ||
| _saveaccountconf_mutable CURANET_AUTHCLIENTID "$CURANET_AUTHCLIENTID" | ||
| _saveaccountconf_mutable CURANET_AUTHSECRET "$CURANET_AUTHSECRET" | ||
|
|
||
| if ! _get_token; then | ||
| _err "Unable to get token" | ||
| return 1 | ||
| fi | ||
|
|
||
| if ! _get_root "$fulldomain"; then | ||
| _err "Invalid domain" | ||
| return 1 | ||
| fi | ||
|
|
||
| export _H1="Content-Type: application/json-patch+json" | ||
| export _H2="Accept: application/json" | ||
| export _H3="Authorization: Bearer $CURANET_ACCESS_TOKEN" | ||
| data="{\"name\": \"$fulldomain\",\"type\": \"TXT\",\"ttl\": 60,\"priority\": 0,\"data\": \"$txtvalue\"}" | ||
| response="$(_post "$data" "$CURANET_REST_URL/${_domain}/Records" "" "")" | ||
|
|
||
| if _contains "$response" "$txtvalue"; then | ||
| _debug "TXT record added OK" | ||
| else | ||
| _err "Unable to add TXT record" | ||
| return 1 | ||
| fi | ||
|
|
||
| return 0 | ||
| } | ||
|
|
||
| #Usage: fulldomain txtvalue | ||
| #Remove the txt record after validation. | ||
| dns_curanet_rm() { | ||
| fulldomain=$1 | ||
| txtvalue=$2 | ||
| _info "Using curanet" | ||
| _debug fulldomain "$fulldomain" | ||
| _debug txtvalue "$txtvalue" | ||
|
|
||
| CURANET_AUTHCLIENTID="${CURANET_AUTHCLIENTID:-$(_readaccountconf_mutable CURANET_AUTHCLIENTID)}" | ||
| CURANET_AUTHSECRET="${CURANET_AUTHSECRET:-$(_readaccountconf_mutable CURANET_AUTHSECRET)}" | ||
|
|
||
| if ! _get_token; then | ||
| _err "Unable to get token" | ||
| return 1 | ||
| fi | ||
|
|
||
| if ! _get_root "$fulldomain"; then | ||
| _err "Invalid domain" | ||
| return 1 | ||
| fi | ||
|
|
||
| _debug "Getting current record list to identify TXT to delete" | ||
|
|
||
| export _H1="Content-Type: application/json" | ||
| export _H2="Accept: application/json" | ||
| export _H3="Authorization: Bearer $CURANET_ACCESS_TOKEN" | ||
|
|
||
| response="$(_get "$CURANET_REST_URL/${_domain}/Records" "" "")" | ||
|
|
||
| if ! _contains "$response" "$txtvalue"; then | ||
| _err "Unable to delete record (does not contain $txtvalue )" | ||
| return 1 | ||
| fi | ||
|
|
||
| recordid=$(echo "$response" | _egrep_o "{\"id\":[0-9]+,\"name\":\"$fulldomain\",\"type\":\"TXT\",\"ttl\":60,\"priority\":0,\"data\":\"..$txtvalue" | _egrep_o "id\":[0-9]+" | cut -c 5-) | ||
|
|
||
| if [ -z "$recordid" ]; then | ||
| _err "Unable to get recordid" | ||
| _debug "regex {\"id\":[0-9]+,\"name\":\"$fulldomain\",\"type\":\"TXT\",\"ttl\":60,\"priority\":0,\"data\":\"..$txtvalue" | ||
| _debug "response $response" | ||
| return 1 | ||
| fi | ||
|
|
||
| _debug "Deleting recordID $recordid" | ||
| response="$(_post "" "$CURANET_REST_URL/${_domain}/Records/$recordid" "" "DELETE")" | ||
| return 0 | ||
| } | ||
|
|
||
| #################### Private functions below ################################## | ||
|
|
||
| _get_token() { | ||
| response="$(_post "grant_type=client_credentials&client_id=$CURANET_AUTHCLIENTID&client_secret=$CURANET_AUTHSECRET&scope=dns" "$CURANET_AUTH_URL" "" "")" | ||
| if ! _contains "$response" "access_token"; then | ||
| _err "Unable get access token" | ||
| return 1 | ||
| fi | ||
| CURANET_ACCESS_TOKEN=$(echo "$response" | _egrep_o "\"access_token\":\"[^\"]+" | cut -c 17-) | ||
|
|
||
| if [ -z "$CURANET_ACCESS_TOKEN" ]; then | ||
| _err "Unable to get token" | ||
| return 1 | ||
| fi | ||
|
|
||
| return 0 | ||
|
|
||
| } | ||
|
|
||
| #_acme-challenge.www.domain.com | ||
| #returns | ||
| # _domain=domain.com | ||
| # _domain_id=sdjkglgdfewsdfg | ||
| _get_root() { | ||
| domain=$1 | ||
| i=1 | ||
|
|
||
| while true; do | ||
| h=$(printf "%s" "$domain" | cut -d . -f $i-100) | ||
| _debug h "$h" | ||
| if [ -z "$h" ]; then | ||
| #not valid | ||
| return 1 | ||
| fi | ||
|
|
||
| export _H1="Content-Type: application/json" | ||
| export _H2="Accept: application/json" | ||
| export _H3="Authorization: Bearer $CURANET_ACCESS_TOKEN" | ||
| response="$(_get "$CURANET_REST_URL/$h/Records" "" "")" | ||
|
|
||
| if [ ! "$(echo "$response" | _egrep_o "Entity not found")" ]; then | ||
| _domain=$h | ||
| return 0 | ||
| fi | ||
|
|
||
| i=$(_math "$i" + 1) | ||
| done | ||
| return 1 | ||
| } |
Oops, something went wrong.