acme.sh/dnsapi/dns_nsupdate.sh

66 lines
2.0 KiB
Bash
Raw Normal View History

#!/usr/bin/env sh
2016-10-26 09:52:26 +00:00
######## Public functions #####################
#Usage: dns_nsupdate_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
dns_nsupdate_add() {
fulldomain=$1
txtvalue=$2
_checkKeyFile || return 1
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
2016-10-26 09:52:26 +00:00
# save the dns server and key to the account conf file.
2018-04-05 09:50:55 +00:00
_saveaccountconf NSUPDATE_SERVER "${NSUPDATE_SERVER}"
_saveaccountconf NSUPDATE_SERVER_PORT "${NSUPDATE_SERVER_PORT}"
2016-10-26 09:52:26 +00:00
_saveaccountconf NSUPDATE_KEY "${NSUPDATE_KEY}"
_info "adding ${fulldomain}. 60 in txt \"${txtvalue}\""
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d"
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D"
nsupdate -k "${NSUPDATE_KEY}" $nsdebug <<EOF
2018-04-05 09:45:15 +00:00
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}
2016-10-26 09:52:26 +00:00
update add ${fulldomain}. 60 in txt "${txtvalue}"
send
EOF
if [ $? -ne 0 ]; then
_err "error updating domain"
2016-10-26 09:52:26 +00:00
return 1
fi
2016-11-16 14:44:39 +00:00
2016-10-26 09:52:26 +00:00
return 0
}
#Usage: dns_nsupdate_rm _acme-challenge.www.domain.com
dns_nsupdate_rm() {
fulldomain=$1
_checkKeyFile || return 1
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost"
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53
_info "removing ${fulldomain}. txt"
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d"
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D"
nsupdate -k "${NSUPDATE_KEY}" $nsdebug <<EOF
2018-04-05 09:45:15 +00:00
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT}
2016-10-26 09:52:26 +00:00
update delete ${fulldomain}. txt
send
EOF
if [ $? -ne 0 ]; then
_err "error updating domain"
2016-10-26 09:52:26 +00:00
return 1
fi
return 0
}
2016-12-14 20:32:24 +00:00
#################### Private functions below ##################################
2016-10-26 09:52:26 +00:00
_checkKeyFile() {
if [ -z "${NSUPDATE_KEY}" ]; then
_err "you must specify a path to the nsupdate key file"
return 1
fi
if [ ! -r "${NSUPDATE_KEY}" ]; then
_err "key ${NSUPDATE_KEY} is unreadable"
return 1
fi
}