mirror of
https://github.com/acmesh-official/acme.sh.git
synced 2025-05-08 08:22:44 +00:00
41ba9b15ca
My solution is to use dynamic variables and append the domain with the dot replaced by an underscore to the variable so you can export a set for each domain. Better yet would be to make use of the json file "/etc/letsencrypt/acmedns.json" that contains the accounts. Similar to how it is used here: https://github.com/joohoi/acme-dns-certbot-joohoi/blob/master/acme-dns-auth.py
105 lines
3.9 KiB
Bash
Executable File
105 lines
3.9 KiB
Bash
Executable File
#!/usr/bin/env sh
|
|
#
|
|
#Author: Wolfgang Ebner
|
|
#Author: Sven Neubuaer
|
|
#Report Bugs here: https://github.com/dampfklon/acme.sh
|
|
#
|
|
# Usage:
|
|
# export ACMEDNS_BASE_URL="https://auth.acme-dns.io"
|
|
#
|
|
# You can optionally define an already existing account:
|
|
#
|
|
# replace . in domain with _
|
|
# export ACMEDNS_USERNAME_$domain="<username>"
|
|
# export ACMEDNS_PASSWORD_$domain="<password>"
|
|
# export ACMEDNS_SUBDOMAIN_$domain="<subdomain>"
|
|
#
|
|
######## Public functions #####################
|
|
|
|
#Usage: dns_acmedns_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
|
|
# Used to add txt record
|
|
dns_acmedns_add() {
|
|
fulldomain=$1
|
|
i=2
|
|
d=$(printf "%s" "$fulldomain" | cut -d . -f $i-100)
|
|
h="${d/./_}"
|
|
txtvalue=$2
|
|
_info "Using acme-dns"
|
|
_debug "fulldomain $fulldomain"
|
|
_debug "domain $d"
|
|
_debug "$h"
|
|
_debug "txtvalue $txtvalue"
|
|
|
|
#for compatiblity from account conf
|
|
ACMEDNS_USERNAME="ACMEDNS_USERNAME_$h"
|
|
export ACMEDNS_USERNAME_$h="${!ACMEDNS_USERNAME:-$(_readaccountconf_mutable ACMEDNS_USERNAME)}"
|
|
_clearaccountconf_mutable $ACMEDNS_USERNAME
|
|
ACMEDNS_PASSWORD="ACMEDNS_PASSWORD_$h"
|
|
export ACMEDNS_PASSWORD_$h="${!ACMEDNS_PASSWORD:-$(_readaccountconf_mutable ACMEDNS_PASSWORD)}"
|
|
_clearaccountconf_mutable $ACMEDNS_PASSWORD
|
|
ACMEDNS_SUBDOMAIN="ACMEDNS_SUBDOMAIN_$h"
|
|
export ACMEDNS_SUBDOMAIN_$h="${!ACMEDNS_SUBDOMAIN:-$(_readaccountconf_mutable ACMEDNS_SUBDOMAIN)}"
|
|
_clearaccountconf_mutable $ACMEDNS_SUBDOMAIN
|
|
|
|
ACMEDNS_BASE_URL="${ACMEDNS_BASE_URL:-$(_readdomainconf ACMEDNS_BASE_URL)}"
|
|
export ACMEDNS_USERNAME_$h="${!ACMEDNS_USERNAME:-$(_readdomainconf ACMEDNS_USERNAME)}"
|
|
export ACMEDNS_PASSWORD_$h="${!ACMEDNS_PASSWORD:-$(_readdomainconf ACMEDNS_PASSWORD)}"
|
|
export ACMEDNS_SUBDOMAIN_$h="${!ACMEDNS_SUBDOMAIN:-$(_readdomainconf ACMEDNS_SUBDOMAIN)}"
|
|
|
|
if [ "$ACMEDNS_BASE_URL" = "" ]; then
|
|
ACMEDNS_BASE_URL="https://auth.acme-dns.io"
|
|
fi
|
|
|
|
ACMEDNS_UPDATE_URL="$ACMEDNS_BASE_URL/update"
|
|
ACMEDNS_REGISTER_URL="$ACMEDNS_BASE_URL/register"
|
|
|
|
if [ -z "${!ACMEDNS_USERNAME}" ] || [ -z "${!ACMEDNS_PASSWORD}" ]; then
|
|
response="$(_post "" "$ACMEDNS_REGISTER_URL" "" "POST")"
|
|
_debug response "$response"
|
|
export ACMEDNS_USERNAME_$h=$(echo "$response" | sed -n 's/^{.*\"username\":[ ]*\"\([^\"]*\)\".*}/\1/p')
|
|
_debug "received username: ${!ACMEDNS_USERNAME}"
|
|
export ACMEDNS_PASSWORD_$h=$(echo "$response" | sed -n 's/^{.*\"password\":[ ]*\"\([^\"]*\)\".*}/\1/p')
|
|
_debug "received password: ${!ACMEDNS_PASSWORD}"
|
|
export ACMEDNS_SUBDOMAIN_$h=$(echo "$response" | sed -n 's/^{.*\"subdomain\":[ ]*\"\([^\"]*\)\".*}/\1/p')
|
|
_debug "received subdomain: ${!ACMEDNS_SUBDOMAIN}"
|
|
ACMEDNS_FULLDOMAIN="ACMEDNS_FULLDOMAIN_$h"
|
|
export ACMEDNS_FULLDOMAIN_$h=$(echo "$response" | sed -n 's/^{.*\"fulldomain\":[ ]*\"\([^\"]*\)\".*}/\1/p')
|
|
_info "##########################################################"
|
|
_info "# Create $fulldomain CNAME ${!ACMEDNS_FULLDOMAIN} DNS entry #"
|
|
_info "##########################################################"
|
|
_info "Press enter to continue... "
|
|
read -r _
|
|
fi
|
|
|
|
_savedomainconf ACMEDNS_BASE_URL "$ACMEDNS_BASE_URL"
|
|
_savedomainconf $ACMEDNS_USERNAME "${!ACMEDNS_USERNAME}"
|
|
_savedomainconf $ACMEDNS_PASSWORD "${!ACMEDNS_PASSWORD}"
|
|
_savedomainconf $ACMEDNS_SUBDOMAIN "${!ACMEDNS_SUBDOMAIN}"
|
|
|
|
export _H1="X-Api-User: ${!ACMEDNS_USERNAME}"
|
|
export _H2="X-Api-Key: ${!ACMEDNS_PASSWORD}"
|
|
data="{\"subdomain\":\"${!ACMEDNS_SUBDOMAIN}\", \"txt\": \"$txtvalue\"}"
|
|
|
|
_debug data "$data"
|
|
response="$(_post "$data" "$ACMEDNS_UPDATE_URL" "" "POST")"
|
|
_debug response "$response"
|
|
|
|
if ! echo "$response" | grep "\"$txtvalue\"" >/dev/null; then
|
|
_err "invalid response of acme-dns"
|
|
return 1
|
|
fi
|
|
|
|
}
|
|
|
|
#Usage: fulldomain txtvalue
|
|
#Remove the txt record after validation.
|
|
dns_acmedns_rm() {
|
|
fulldomain=$1
|
|
txtvalue=$2
|
|
_info "Using acme-dns"
|
|
_debug "fulldomain $fulldomain"
|
|
_debug "txtvalue $txtvalue"
|
|
}
|
|
|
|
#################### Private functions below ##################################
|