mirror of
https://github.com/go-acme/lego.git
synced 2024-12-14 14:10:05 +02:00
5f9a041680
* Add NS1 DNS provider. Integrates Lego with NS1 using their rest API. It uses NS1's official Go package as client: https://github.com/ns1/ns1-go Signed-off-by: David Calavera <david.calavera@gmail.com> * Add NS1 to the cli handlers. Signed-off-by: David Calavera <david.calavera@gmail.com>
98 lines
2.3 KiB
Go
98 lines
2.3 KiB
Go
// Package ns1 implements a DNS provider for solving the DNS-01 challenge
|
|
// using NS1 DNS.
|
|
package ns1
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"os"
|
|
"time"
|
|
|
|
"github.com/xenolf/lego/acme"
|
|
"gopkg.in/ns1/ns1-go.v2/rest"
|
|
"gopkg.in/ns1/ns1-go.v2/rest/model/dns"
|
|
)
|
|
|
|
// DNSProvider is an implementation of the acme.ChallengeProvider interface.
|
|
type DNSProvider struct {
|
|
client *rest.Client
|
|
}
|
|
|
|
// NewDNSProvider returns a DNSProvider instance configured for NS1.
|
|
// Credentials must be passed in the environment variables: NS1_API_KEY.
|
|
func NewDNSProvider() (*DNSProvider, error) {
|
|
key := os.Getenv("NS1_API_KEY")
|
|
if key == "" {
|
|
return nil, fmt.Errorf("NS1 credentials missing")
|
|
}
|
|
return NewDNSProviderCredentials(key)
|
|
}
|
|
|
|
// NewDNSProviderCredentials uses the supplied credentials to return a
|
|
// DNSProvider instance configured for NS1.
|
|
func NewDNSProviderCredentials(key string) (*DNSProvider, error) {
|
|
if key == "" {
|
|
return nil, fmt.Errorf("NS1 credentials missing")
|
|
}
|
|
|
|
httpClient := &http.Client{Timeout: time.Second * 10}
|
|
client := rest.NewClient(httpClient, rest.SetAPIKey(key))
|
|
|
|
return &DNSProvider{client}, nil
|
|
}
|
|
|
|
// Present creates a TXT record to fulfil the dns-01 challenge.
|
|
func (c *DNSProvider) Present(domain, token, keyAuth string) error {
|
|
fqdn, value, ttl := acme.DNS01Record(domain, keyAuth)
|
|
|
|
zone, err := c.getHostedZone(domain)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
record := c.newTxtRecord(zone, fqdn, value, ttl)
|
|
_, err = c.client.Records.Create(record)
|
|
if err != nil && err != rest.ErrRecordExists {
|
|
return err
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
// CleanUp removes the TXT record matching the specified parameters.
|
|
func (c *DNSProvider) CleanUp(domain, token, keyAuth string) error {
|
|
fqdn, _, _ := acme.DNS01Record(domain, keyAuth)
|
|
|
|
zone, err := c.getHostedZone(domain)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
name := acme.UnFqdn(fqdn)
|
|
_, err = c.client.Records.Delete(zone.Zone, name, "TXT")
|
|
return err
|
|
}
|
|
|
|
func (c *DNSProvider) getHostedZone(domain string) (*dns.Zone, error) {
|
|
zone, _, err := c.client.Zones.Get(domain)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return zone, nil
|
|
}
|
|
|
|
func (c *DNSProvider) newTxtRecord(zone *dns.Zone, fqdn, value string, ttl int) *dns.Record {
|
|
name := acme.UnFqdn(fqdn)
|
|
|
|
return &dns.Record{
|
|
Type: "TXT",
|
|
Zone: zone.Zone,
|
|
Domain: name,
|
|
TTL: ttl,
|
|
Answers: []*dns.Answer{
|
|
{Rdata: []string{value}},
|
|
},
|
|
}
|
|
}
|