You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
172 lines
6.4 KiB
172 lines
6.4 KiB
#!/usr/bin/env sh |
|
# shellcheck disable=SC2034 |
|
dns_he_info='Hurricane Electric HE.net |
|
Site: dns.he.net |
|
Docs: github.com/acmesh-official/acme.sh/wiki/dnsapi#dns_he |
|
Options: |
|
HE_Username Username |
|
HE_Password Password |
|
Issues: github.com/angel333/acme.sh/issues/ |
|
Author: Ondrej Simek <me@ondrejsimek.com> |
|
' |
|
|
|
#-- dns_he_add() - Add TXT record -------------------------------------- |
|
# Usage: dns_he_add _acme-challenge.subdomain.domain.com "XyZ123..." |
|
|
|
dns_he_add() { |
|
_full_domain=$1 |
|
_txt_value=$2 |
|
_info "Using DNS-01 Hurricane Electric hook" |
|
|
|
HE_Username="${HE_Username:-$(_readaccountconf_mutable HE_Username)}" |
|
HE_Password="${HE_Password:-$(_readaccountconf_mutable HE_Password)}" |
|
if [ -z "$HE_Username" ] || [ -z "$HE_Password" ]; then |
|
HE_Username= |
|
HE_Password= |
|
_err "No auth details provided. Please set user credentials using the \$HE_Username and \$HE_Password environment variables." |
|
return 1 |
|
fi |
|
_saveaccountconf_mutable HE_Username "$HE_Username" |
|
_saveaccountconf_mutable HE_Password "$HE_Password" |
|
|
|
# Fills in the $_zone_id |
|
_find_zone "$_full_domain" || return 1 |
|
_debug "Zone id \"$_zone_id\" will be used." |
|
username_encoded="$(printf "%s" "${HE_Username}" | _url_encode)" |
|
password_encoded="$(printf "%s" "${HE_Password}" | _url_encode)" |
|
body="email=${username_encoded}&pass=${password_encoded}" |
|
body="$body&account=" |
|
body="$body&menu=edit_zone" |
|
body="$body&Type=TXT" |
|
body="$body&hosted_dns_zoneid=$_zone_id" |
|
body="$body&hosted_dns_recordid=" |
|
body="$body&hosted_dns_editzone=1" |
|
body="$body&Priority=" |
|
body="$body&Name=$_full_domain" |
|
body="$body&Content=$_txt_value" |
|
body="$body&TTL=300" |
|
body="$body&hosted_dns_editrecord=Submit" |
|
response="$(_post "$body" "https://dns.he.net/")" |
|
exit_code="$?" |
|
if [ "$exit_code" -eq 0 ]; then |
|
_info "TXT record added successfully." |
|
else |
|
_err "Couldn't add the TXT record." |
|
fi |
|
_debug2 response "$response" |
|
return "$exit_code" |
|
} |
|
|
|
#-- dns_he_rm() - Remove TXT record ------------------------------------ |
|
# Usage: dns_he_rm _acme-challenge.subdomain.domain.com "XyZ123..." |
|
|
|
dns_he_rm() { |
|
_full_domain=$1 |
|
_txt_value=$2 |
|
_info "Cleaning up after DNS-01 Hurricane Electric hook" |
|
HE_Username="${HE_Username:-$(_readaccountconf_mutable HE_Username)}" |
|
HE_Password="${HE_Password:-$(_readaccountconf_mutable HE_Password)}" |
|
# fills in the $_zone_id |
|
_find_zone "$_full_domain" || return 1 |
|
_debug "Zone id \"$_zone_id\" will be used." |
|
|
|
# Find the record id to clean |
|
username_encoded="$(printf "%s" "${HE_Username}" | _url_encode)" |
|
password_encoded="$(printf "%s" "${HE_Password}" | _url_encode)" |
|
body="email=${username_encoded}&pass=${password_encoded}" |
|
body="$body&hosted_dns_zoneid=$_zone_id" |
|
body="$body&menu=edit_zone" |
|
body="$body&hosted_dns_editzone=" |
|
|
|
response="$(_post "$body" "https://dns.he.net/")" |
|
_debug2 "response" "$response" |
|
if ! _contains "$response" "$_txt_value"; then |
|
_debug "The txt record is not found, just skip" |
|
return 0 |
|
fi |
|
_record_id="$(echo "$response" | tr -d "#" | sed "s/<tr/#<tr/g" | tr -d "\n" | tr "#" "\n" | grep "$_full_domain" | grep '"dns_tr"' | grep -- "$_txt_value" | cut -d '"' -f 4)" |
|
_debug2 _record_id "$_record_id" |
|
if [ -z "$_record_id" ]; then |
|
_err "Can not find record id" |
|
return 1 |
|
fi |
|
# Remove the record |
|
username_encoded="$(printf "%s" "${HE_Username}" | _url_encode)" |
|
password_encoded="$(printf "%s" "${HE_Password}" | _url_encode)" |
|
body="email=${username_encoded}&pass=${password_encoded}" |
|
body="$body&menu=edit_zone" |
|
body="$body&hosted_dns_zoneid=$_zone_id" |
|
body="$body&hosted_dns_recordid=$_record_id" |
|
body="$body&hosted_dns_editzone=1" |
|
body="$body&hosted_dns_delrecord=1" |
|
body="$body&hosted_dns_delconfirm=delete" |
|
_post "$body" "https://dns.he.net/" | |
|
grep '<div id="dns_status" onClick="hideThis(this);">Successfully removed record.</div>' \ |
|
>/dev/null |
|
exit_code="$?" |
|
if [ "$exit_code" -eq 0 ]; then |
|
_info "Record removed successfully." |
|
else |
|
_err "Could not clean (remove) up the record. Please go to HE administration interface and clean it by hand." |
|
return "$exit_code" |
|
fi |
|
} |
|
|
|
########################## PRIVATE FUNCTIONS ########################### |
|
|
|
_find_zone() { |
|
_domain="$1" |
|
username_encoded="$(printf "%s" "${HE_Username}" | _url_encode)" |
|
password_encoded="$(printf "%s" "${HE_Password}" | _url_encode)" |
|
body="email=${username_encoded}&pass=${password_encoded}" |
|
response="$(_post "$body" "https://dns.he.net/")" |
|
_debug2 response "$response" |
|
if _contains "$response" '>Incorrect<'; then |
|
_err "Unable to login to dns.he.net please check username and password" |
|
return 1 |
|
fi |
|
_table="$(echo "$response" | tr -d "#" | sed "s/<table/#<table/g" | tr -d "\n" | tr "#" "\n" | grep 'id="domains_table"')" |
|
_debug2 _table "$_table" |
|
_matches="$(echo "$_table" | sed "s/<tr/#<tr/g" | tr "#" "\n" | grep 'alt="edit"' | tr -d " " | sed "s/<td/#<td/g" | tr "#" "\n" | grep 'hosted_dns_zoneid')" |
|
_debug2 _matches "$_matches" |
|
# Zone names and zone IDs are in same order |
|
_zone_ids=$(echo "$_matches" | _egrep_o "hosted_dns_zoneid=[0-9]*&" | cut -d = -f 2 | tr -d '&') |
|
_zone_names=$(echo "$_matches" | _egrep_o "name=.*onclick" | cut -d '"' -f 2) |
|
_debug2 "These are the zones on this HE account:" |
|
_debug2 "_zone_names" "$_zone_names" |
|
_debug2 "And these are their respective IDs:" |
|
_debug2 "_zone_ids" "$_zone_ids" |
|
if [ -z "$_zone_names" ] || [ -z "$_zone_ids" ]; then |
|
_err "Can not get zone names." |
|
return 1 |
|
fi |
|
# Walk through all possible zone names |
|
_strip_counter=1 |
|
while true; do |
|
_attempted_zone=$(echo "$_domain" | cut -d . -f ${_strip_counter}-) |
|
|
|
# All possible zone names have been tried |
|
if [ -z "$_attempted_zone" ]; then |
|
_err "No zone for domain \"$_domain\" found." |
|
return 1 |
|
fi |
|
|
|
_debug "Looking for zone \"${_attempted_zone}\"" |
|
|
|
line_num="$(echo "$_zone_names" | grep -n "^$_attempted_zone\$" | _head_n 1 | cut -d : -f 1)" |
|
_debug2 line_num "$line_num" |
|
if [ "$line_num" ]; then |
|
_zone_id=$(echo "$_zone_ids" | sed -n "${line_num}p") |
|
if [ -z "$_zone_id" ]; then |
|
_err "Can not find zone id." |
|
return 1 |
|
fi |
|
_debug "Found relevant zone \"$_attempted_zone\" with id \"$_zone_id\" - will be used for domain \"$_domain\"." |
|
return 0 |
|
fi |
|
|
|
_debug "Zone \"$_attempted_zone\" doesn't exist, let's try a less specific zone." |
|
_strip_counter=$(_math "$_strip_counter" + 1) |
|
done |
|
} |
|
# vim: et:ts=2:sw=2:
|
|
|