forked from TrueCloudLab/lego
112 lines
2.3 KiB
Go
112 lines
2.3 KiB
Go
package sakuracloud
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"sync"
|
|
|
|
"github.com/go-acme/lego/v4/challenge/dns01"
|
|
"github.com/sacloud/iaas-api-go"
|
|
"github.com/sacloud/iaas-api-go/search"
|
|
)
|
|
|
|
// This mutex is required for concurrent updates.
|
|
// see: https://github.com/go-acme/lego/pull/850
|
|
var mu sync.Mutex
|
|
|
|
func (d *DNSProvider) addTXTRecord(fqdn, value string, ttl int) error {
|
|
mu.Lock()
|
|
defer mu.Unlock()
|
|
|
|
zone, err := d.getHostedZone(fqdn)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
subDomain, err := dns01.ExtractSubDomain(fqdn, zone.Name)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
records := append(zone.Records, &iaas.DNSRecord{
|
|
Name: subDomain,
|
|
Type: "TXT",
|
|
RData: value,
|
|
TTL: ttl,
|
|
})
|
|
|
|
_, err = d.client.UpdateSettings(context.Background(), zone.ID, &iaas.DNSUpdateSettingsRequest{
|
|
Records: records,
|
|
SettingsHash: zone.SettingsHash,
|
|
})
|
|
if err != nil {
|
|
return fmt.Errorf("API call failed: %w", err)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (d *DNSProvider) cleanupTXTRecord(fqdn, value string) error {
|
|
mu.Lock()
|
|
defer mu.Unlock()
|
|
|
|
zone, err := d.getHostedZone(fqdn)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
subDomain, err := dns01.ExtractSubDomain(fqdn, zone.Name)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
var updRecords iaas.DNSRecords
|
|
for _, r := range zone.Records {
|
|
if !(r.Name == subDomain && r.Type == "TXT" && r.RData == value) {
|
|
updRecords = append(updRecords, r)
|
|
}
|
|
}
|
|
|
|
settings := &iaas.DNSUpdateSettingsRequest{
|
|
Records: updRecords,
|
|
SettingsHash: zone.SettingsHash,
|
|
}
|
|
_, err = d.client.UpdateSettings(context.Background(), zone.ID, settings)
|
|
if err != nil {
|
|
return fmt.Errorf("API call failed: %w", err)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func (d *DNSProvider) getHostedZone(domain string) (*iaas.DNS, error) {
|
|
authZone, err := dns01.FindZoneByFqdn(domain)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("could not find zone: %w", err)
|
|
}
|
|
|
|
zoneName := dns01.UnFqdn(authZone)
|
|
|
|
conditions := &iaas.FindCondition{
|
|
Filter: search.Filter{
|
|
search.Key("Name"): search.ExactMatch(zoneName),
|
|
},
|
|
}
|
|
|
|
res, err := d.client.Find(context.Background(), conditions)
|
|
if err != nil {
|
|
if iaas.IsNotFoundError(err) {
|
|
return nil, fmt.Errorf("zone %s not found on SakuraCloud DNS: %w", zoneName, err)
|
|
}
|
|
|
|
return nil, fmt.Errorf("API call failed: %w", err)
|
|
}
|
|
|
|
for _, zone := range res.DNS {
|
|
if zone.Name == zoneName {
|
|
return zone, nil
|
|
}
|
|
}
|
|
|
|
return nil, fmt.Errorf("zone %s not found", zoneName)
|
|
}
|