You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
98 lines
3.2 KiB
98 lines
3.2 KiB
#!/usr/bin/env sh |
|
|
|
######## Public functions ##################### |
|
|
|
#Usage: dns_nsupdate_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs" |
|
dns_nsupdate_add() { |
|
fulldomain=$1 |
|
txtvalue=$2 |
|
NSUPDATE_SERVER="${NSUPDATE_SERVER:-$(_readaccountconf_mutable NSUPDATE_SERVER)}" |
|
NSUPDATE_SERVER_PORT="${NSUPDATE_SERVER_PORT:-$(_readaccountconf_mutable NSUPDATE_SERVER_PORT)}" |
|
NSUPDATE_KEY="${NSUPDATE_KEY:-$(_readaccountconf_mutable NSUPDATE_KEY)}" |
|
NSUPDATE_ZONE="${NSUPDATE_ZONE:-$(_readaccountconf_mutable NSUPDATE_ZONE)}" |
|
|
|
_checkKeyFile || return 1 |
|
|
|
# save the dns server and key to the account conf file. |
|
_saveaccountconf_mutable NSUPDATE_SERVER "${NSUPDATE_SERVER}" |
|
_saveaccountconf_mutable NSUPDATE_SERVER_PORT "${NSUPDATE_SERVER_PORT}" |
|
_saveaccountconf_mutable NSUPDATE_KEY "${NSUPDATE_KEY}" |
|
_saveaccountconf_mutable NSUPDATE_ZONE "${NSUPDATE_ZONE}" |
|
|
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost" |
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53 |
|
|
|
_info "adding ${fulldomain}. 60 in txt \"${txtvalue}\"" |
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d" |
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D" |
|
if [ -z "${NSUPDATE_ZONE}" ]; then |
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug <<EOF |
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT} |
|
update add ${fulldomain}. 60 in txt "${txtvalue}" |
|
send |
|
EOF |
|
else |
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug <<EOF |
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT} |
|
zone ${NSUPDATE_ZONE}. |
|
update add ${fulldomain}. 60 in txt "${txtvalue}" |
|
send |
|
EOF |
|
fi |
|
if [ $? -ne 0 ]; then |
|
_err "error updating domain" |
|
return 1 |
|
fi |
|
|
|
return 0 |
|
} |
|
|
|
#Usage: dns_nsupdate_rm _acme-challenge.www.domain.com |
|
dns_nsupdate_rm() { |
|
fulldomain=$1 |
|
|
|
NSUPDATE_SERVER="${NSUPDATE_SERVER:-$(_readaccountconf_mutable NSUPDATE_SERVER)}" |
|
NSUPDATE_SERVER_PORT="${NSUPDATE_SERVER_PORT:-$(_readaccountconf_mutable NSUPDATE_SERVER_PORT)}" |
|
NSUPDATE_KEY="${NSUPDATE_KEY:-$(_readaccountconf_mutable NSUPDATE_KEY)}" |
|
NSUPDATE_ZONE="${NSUPDATE_ZONE:-$(_readaccountconf_mutable NSUPDATE_ZONE)}" |
|
|
|
_checkKeyFile || return 1 |
|
[ -n "${NSUPDATE_SERVER}" ] || NSUPDATE_SERVER="localhost" |
|
[ -n "${NSUPDATE_SERVER_PORT}" ] || NSUPDATE_SERVER_PORT=53 |
|
_info "removing ${fulldomain}. txt" |
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_1" ] && nsdebug="-d" |
|
[ -n "$DEBUG" ] && [ "$DEBUG" -ge "$DEBUG_LEVEL_2" ] && nsdebug="-D" |
|
if [ -z "${NSUPDATE_ZONE}" ]; then |
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug <<EOF |
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT} |
|
update delete ${fulldomain}. txt |
|
send |
|
EOF |
|
else |
|
nsupdate -k "${NSUPDATE_KEY}" $nsdebug <<EOF |
|
server ${NSUPDATE_SERVER} ${NSUPDATE_SERVER_PORT} |
|
zone ${NSUPDATE_ZONE}. |
|
update delete ${fulldomain}. txt |
|
send |
|
EOF |
|
fi |
|
if [ $? -ne 0 ]; then |
|
_err "error updating domain" |
|
return 1 |
|
fi |
|
|
|
return 0 |
|
} |
|
|
|
#################### Private functions below ################################## |
|
|
|
_checkKeyFile() { |
|
if [ -z "${NSUPDATE_KEY}" ]; then |
|
_err "you must specify a path to the nsupdate key file" |
|
return 1 |
|
fi |
|
if [ ! -r "${NSUPDATE_KEY}" ]; then |
|
_err "key ${NSUPDATE_KEY} is unreadable" |
|
return 1 |
|
fi |
|
}
|
|
|