acme.sh/dnsapi/dns_pdns.sh

234 lines
5.4 KiB
Bash
Raw Permalink Normal View History

#!/usr/bin/env sh
2017-03-26 05:26:43 +00:00
#PowerDNS Embedded API
#https://doc.powerdns.com/md/httpapi/api_spec/
#
#PDNS_Url="http://ns.example.com:8081"
#PDNS_ServerId="localhost"
#PDNS_Token="0123456789ABCDEF"
#PDNS_Ttl=60
2016-10-09 14:15:15 +00:00
DEFAULT_PDNS_TTL=60
######## Public functions #####################
#Usage: add _acme-challenge.www.domain.com "123456789ABCDEF0000000000000000000000000000000000000"
2016-11-17 11:52:00 +00:00
#fulldomain
#txtvalue
dns_pdns_add() {
fulldomain=$1
txtvalue=$2
2016-11-09 11:30:39 +00:00
if [ -z "$PDNS_Url" ]; then
2016-11-12 03:13:40 +00:00
PDNS_Url=""
_err "You don't specify PowerDNS address."
_err "Please set PDNS_Url and try again."
return 1
fi
2016-11-09 11:30:39 +00:00
if [ -z "$PDNS_ServerId" ]; then
2016-11-12 03:13:40 +00:00
PDNS_ServerId=""
_err "You don't specify PowerDNS server id."
_err "Please set you PDNS_ServerId and try again."
return 1
fi
2016-11-09 11:30:39 +00:00
if [ -z "$PDNS_Token" ]; then
2016-11-12 03:13:40 +00:00
PDNS_Token=""
_err "You don't specify PowerDNS token."
_err "Please create you PDNS_Token and try again."
return 1
fi
2016-11-09 11:30:39 +00:00
if [ -z "$PDNS_Ttl" ]; then
2016-11-11 15:30:14 +00:00
PDNS_Ttl="$DEFAULT_PDNS_TTL"
fi
#save the api addr and key to the account conf file.
_saveaccountconf PDNS_Url "$PDNS_Url"
_saveaccountconf PDNS_ServerId "$PDNS_ServerId"
_saveaccountconf PDNS_Token "$PDNS_Token"
2016-11-09 11:30:39 +00:00
if [ "$PDNS_Ttl" != "$DEFAULT_PDNS_TTL" ]; then
2016-10-09 14:15:15 +00:00
_saveaccountconf PDNS_Ttl "$PDNS_Ttl"
fi
2016-11-17 11:52:00 +00:00
_debug "Detect root zone"
2016-11-11 15:30:14 +00:00
if ! _get_root "$fulldomain"; then
_err "invalid domain"
return 1
fi
_debug _domain "$_domain"
2016-11-09 11:30:39 +00:00
if ! set_record "$_domain" "$fulldomain" "$txtvalue"; then
return 1
fi
return 0
}
#fulldomain
dns_pdns_rm() {
fulldomain=$1
txtvalue=$2
if [ -z "$PDNS_Ttl" ]; then
PDNS_Ttl="$DEFAULT_PDNS_TTL"
fi
2016-11-17 11:52:00 +00:00
_debug "Detect root zone"
if ! _get_root "$fulldomain"; then
_err "invalid domain"
return 1
fi
2016-11-17 11:52:00 +00:00
_debug _domain "$_domain"
if ! rm_record "$_domain" "$fulldomain" "$txtvalue"; then
2016-11-17 11:52:00 +00:00
return 1
fi
return 0
}
set_record() {
_info "Adding record"
root=$1
full=$2
new_challenge=$3
_record_string=""
2018-03-22 10:13:46 +00:00
_build_record_string "$new_challenge"
_list_existingchallenges
2018-03-22 10:13:46 +00:00
for oldchallenge in $_existing_challenges; do
_build_record_string "$oldchallenge"
done
if ! _pdns_rest "PATCH" "/api/v1/servers/$PDNS_ServerId/zones/$root" "{\"rrsets\": [{\"changetype\": \"REPLACE\", \"name\": \"$full.\", \"type\": \"TXT\", \"ttl\": $PDNS_Ttl, \"records\": [$_record_string]}]}" "application/json"; then
_err "Set txt record error."
return 1
fi
2016-11-17 11:52:00 +00:00
if ! notify_slaves "$root"; then
return 1
fi
2016-11-17 11:52:00 +00:00
return 0
}
rm_record() {
_info "Remove record"
root=$1
full=$2
txtvalue=$3
2016-11-17 11:52:00 +00:00
#Enumerate existing acme challenges
_list_existingchallenges
2016-11-17 11:52:00 +00:00
if _contains "$_existing_challenges" "$txtvalue"; then
#Delete all challenges (PowerDNS API does not allow to delete content)
if ! _pdns_rest "PATCH" "/api/v1/servers/$PDNS_ServerId/zones/$root" "{\"rrsets\": [{\"changetype\": \"DELETE\", \"name\": \"$full.\", \"type\": \"TXT\"}]}" "application/json"; then
_err "Delete txt record error."
return 1
fi
_record_string=""
#If the only existing challenge was the challenge to delete: nothing to do
if ! [ "$_existing_challenges" = "$txtvalue" ]; then
for oldchallenge in $_existing_challenges; do
#Build up the challenges to re-add, ommitting the one what should be deleted
if ! [ "$oldchallenge" = "$txtvalue" ]; then
_build_record_string "$oldchallenge"
fi
done
#Recreate the existing challenges
if ! _pdns_rest "PATCH" "/api/v1/servers/$PDNS_ServerId/zones/$root" "{\"rrsets\": [{\"changetype\": \"REPLACE\", \"name\": \"$full.\", \"type\": \"TXT\", \"ttl\": $PDNS_Ttl, \"records\": [$_record_string]}]}" "application/json"; then
_err "Set txt record error."
return 1
fi
fi
if ! notify_slaves "$root"; then
return 1
fi
else
_info "Record not found, nothing to remove"
2016-11-17 11:52:00 +00:00
fi
return 0
}
notify_slaves() {
root=$1
2018-03-15 01:38:17 +00:00
if ! _pdns_rest "PUT" "/api/v1/servers/$PDNS_ServerId/zones/$root/notify"; then
2016-11-17 11:52:00 +00:00
_err "Notify slaves error."
return 1
fi
2016-11-17 11:52:00 +00:00
return 0
}
2016-12-14 20:32:24 +00:00
#################### Private functions below ##################################
#_acme-challenge.www.domain.com
#returns
# _domain=domain.com
_get_root() {
domain=$1
i=1
2016-11-09 11:30:39 +00:00
if _pdns_rest "GET" "/api/v1/servers/$PDNS_ServerId/zones"; then
_zones_response=$(echo "$response" | _normalizeJson)
fi
2016-11-11 15:30:14 +00:00
while true; do
h=$(printf "%s" "$domain" | cut -d . -f $i-100)
if _contains "$_zones_response" "\"name\":\"$h.\""; then
2018-03-15 01:38:17 +00:00
_domain="$h."
if [ -z "$h" ]; then
_domain="=2E"
fi
return 0
fi
2018-03-15 01:38:17 +00:00
if [ -z "$h" ]; then
return 1
fi
2016-11-11 15:30:14 +00:00
i=$(_math $i + 1)
done
_debug "$domain not found"
2016-11-17 11:52:00 +00:00
return 1
}
_pdns_rest() {
method=$1
ep=$2
data=$3
ct=$4
export _H1="X-API-Key: $PDNS_Token"
2016-11-09 11:30:39 +00:00
if [ ! "$method" = "GET" ]; then
_debug data "$data"
response="$(_post "$data" "$PDNS_Url$ep" "" "$method" "$ct")"
else
response="$(_get "$PDNS_Url$ep")"
fi
2016-11-09 11:30:39 +00:00
if [ "$?" != "0" ]; then
_err "error $ep"
return 1
fi
_debug2 response "$response"
return 0
2016-11-09 11:30:39 +00:00
}
_build_record_string() {
_record_string="${_record_string:+${_record_string}, }{\"content\": \"\\\"${1}\\\"\", \"disabled\": false}"
}
_list_existingchallenges() {
_pdns_rest "GET" "/api/v1/servers/$PDNS_ServerId/zones/$root"
_existing_challenges=$(echo "$response" | _normalizeJson | _egrep_o "\"name\":\"${fulldomain}[^]]*}" | _egrep_o 'content\":\"\\"[^\\]*' | sed -n 's/^content":"\\"//p')
}