This commit is contained in:
ywdblog 2019-03-23 18:46:58 +08:00
parent d669b2eccb
commit 6b643ca91e
4 changed files with 73 additions and 675 deletions

View File

@ -1,240 +0,0 @@
<?php
date_default_timezone_set("GMT");
/*
//$obj = new AliDns(accessKeyId, accessSecrec, "newyingyong.cn");
//显示所有
//$data = $obj->DescribeDomainRecords();
//增加解析
//$data= $obj->AddDomainRecord("TXT", "test", "test");
//修改解析
//$data = $obj->UpdateDomainRecord("3965724468724736","TXT", "test", "test2");
//删除解析
//$data = $obj->DescribeDomainRecords();
//$data = $data["DomainRecords"]["Record"];
//if (is_array($data)) {
//foreach ($data as $v) {
//if ($v["RR"] == "test") {
//$obj->DeleteDomainRecord($v["RecordId"]);
//}
//}
//}
*/
/*
example:
php alydns.php "simplehttps.com" "dnsv" "dnsk" APPKEY APPTOKEN
*/
########## 配合 cerbot 运行
# 第一个参数是 action代表 (add/clean)
# 第二个参数是域名
# 第三个参数是主机名(第三个参数+第二个参数组合起来就是要添加的 TXT 记录)
# 第四个参数是 TXT 记录值
# 第五个参数是 APPKEY
# 第六个参数是 APPTOKEN
echo "域名 API 调用开始\n" ;
echo $argv[1] . "-" . $argv[2] . "-" . $argv[3] . "-" . $argv[5] . "-" . $argv[5] . "-" . $argv[6] . "\n";
$domainarray = AliDns::getDomain($argv[2]);
$selfdomain = ($domainarray[0]=="")?$argv[3]:$argv[3] . "." . $domainarray[0];
$obj = new AliDns($argv[5], $argv[6], $domainarray[1]);
switch ($argv[1]) {
case "clean":
$data = $obj->DescribeDomainRecords();
$data = $data["DomainRecords"]["Record"];
if (is_array($data)) {
foreach ($data as $v) {
if ($v["RR"] == $selfdomain) {
$res = $obj->DeleteDomainRecord($v["RecordId"]);
}
}
}
break;
case "add":
$res = $obj->AddDomainRecord("TXT", $selfdomain,$argv[3]);
break;
}
echo "域名 API 调用结束\n" ;
############ Class 定义
class AliDns {
private $accessKeyId = null;
private $accessSecrec = null;
private $DomainName = null;
public function __construct($accessKeyId, $accessSecrec, $domain) {
$this->accessKeyId = $accessKeyId;
$this->accessSecrec = $accessSecrec;
$this->DomainName = $domain;
}
/*
根据域名返回主机名和二级域名
*/
public static function getDomain($domain) {
//https://en.wikipedia.org/wiki/List_of_Internet_top-level_domains
//常见根域名
$arr[]=".co.jp";
$arr[]=".com.tw";
$arr[]=".net";
$arr[]=".com";
$arr[]=".com.cn";
$arr[]=".org";
$arr[]=".cn";
$arr[]=".gov";
$arr[]=".net.cn";
$arr[]=".io";
$arr[]=".top";
$arr[]=".me";
$arr[]=".int";
$arr[]=".edu";
$arr[]=".link";
$arr[]=".uk";
$arr[]=".hk";
//二级域名
$seconddomain ="";
//子域名
$selfdomain = "";
//根域名
$rootdomain = "";
foreach ($arr as $k=>$v) {
$pos = stripos($domain,$v);
if ($pos) {
$rootdomain = substr($domain,$pos);
$s = explode(".",substr($domain,0,$pos));
$seconddomain = $s[count($s)-1] . $rootdomain;
for ($i=0;$i<count($s)-1;$i++)
$selfdomain .= $s[$i];
break;
}
}
//echo $seconddomain ;exit;
if ($rootdomain=="") {
$seconddomain = $domain;
$selfdomain = "";
}
return array($selfdomain,$seconddomain);
}
public function DescribeDomainRecords() {
$requestParams = array(
"Action" => "DescribeDomainRecords"
);
$val = $this->send($requestParams);
return $this->out($val);
}
public function UpdateDomainRecord($id, $type, $rr,$value){
$requestParams = array(
"Action" => "UpdateDomainRecord",
"RecordId" => $id,
"RR" => $rr,
"Type" => $type,
"Value" => $value,
);
$val = $this->send($requestParams);
return $this->out($val);
}
public function DeleteDomainRecord($id) {
$requestParams = array(
"Action" => "DeleteDomainRecord",
"RecordId" => $id,
);
$val = $this->send($requestParams);
return $this->out($val);
}
public function AddDomainRecord($type, $rr, $value) {
$requestParams = array(
"Action" => "AddDomainRecord",
"RR" => $rr,
"Type" => $type,
"Value" => $value,
);
$val = $this->send($requestParams);
return $this->out($val);
}
private function send($requestParams) {
$publicParams = array(
"DomainName" => $this->DomainName,
"Format" => "JSON",
"Version" => "2015-01-09",
"AccessKeyId" => $this->accessKeyId,
"Timestamp" => date("Y-m-d\TH:i:s\Z"),
"SignatureMethod" => "HMAC-SHA1",
"SignatureVersion" => "1.0",
"SignatureNonce" => substr(md5(rand(1, 99999999)), rand(1, 9), 14),
);
$params = array_merge($publicParams, $requestParams);
$params['Signature'] = $this->sign($params, $this->accessSecrec);
$uri = http_build_query($params);
$url = 'http://alidns.aliyuncs.com/?'.$uri;
return $this->curl($url);
}
private function sign($params, $accessSecrec, $method = "GET") {
ksort($params);
$stringToSign = strtoupper($method).'&'.$this->percentEncode('/').'&';
$tmp = "";
foreach($params as $key => $val){
$tmp .= '&'.$this->percentEncode($key).'='.$this->percentEncode($val);
}
$tmp = trim($tmp, '&');
$stringToSign = $stringToSign.$this->percentEncode($tmp);
$key = $accessSecrec.'&';
$hmac = hash_hmac("sha1", $stringToSign, $key, true);
return base64_encode($hmac);
}
private function percentEncode($value = null){
$en = urlencode($value);
$en = str_replace("+", "%20", $en);
$en = str_replace("*", "%2A", $en);
$en = str_replace("%7E", "~", $en);
return $en;
}
private function curl($url) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url );
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1 );
$result = curl_exec ($ch);
curl_close($ch);
return $result;
}
private function out($msg) {
return json_decode($msg, true);
}
}

85
au.sh
View File

@ -1,23 +1,84 @@
#!/bin/bash
# 阿里云操作 DNS Hook
#填写腾讯云的AccessKey ID及AccessKey Secret
#如何申请见https://help.aliyun.com/knowledge_detail/38738.html
ALY_KEY="LTAIkLV6coSSKklZ"
ALY_TOKEN="YEGDVHQV4oBC6AGQM9BWaHStUtNE5M"
#填写腾讯云的SecretId及SecretKey
#如何申请见https://console.cloud.tencent.com/cam/capi
TXY_KEY="AKIDwlPr7DUpLgpZBb4tlT0MWUHtIVXOJwxm"
TXY_TOKEN="mMkxzoTxOirrfJlFYfbS7g7792jEi5GG"
#GoDaddy的SecretId及SecretKey
#如何申请见https://developer.godaddy.com/getstarted
GODADDY_KEY=""
GODADDY_TOKEN=""
PATH=$(cd `dirname $0`; pwd)
echo $PATH"/alydns.php"
plang=$1 #python or php
pdns=$2
paction=$3 #add or clean
phpcmd="/usr/bin/php"
pythoncmd="/usr/bin/python"
cmd=""
key=""
token=""
# 调用 PHP 脚本,自动设置 DNS TXT 记录。
# 第一个参数:需要为那个域名设置 DNS 记录
# 第二个参数:需要为具体那个 RR 设置
# 第三个参数: letsencrypt 动态传递的 RR 值
if [[ "paction" != "clean" ]]; then
paction="add"
fi
echo $CERTBOT_DOMAIN"_acme-challenge"$CERTBOT_VALIDATION
#
#
# 第三个参数:需要为那个域名设置 DNS 记录
# 第四个参数:需要为具体那个 RR 设置
# 第五个参数: letsencrypt 动态传递的 RR 值
case $plang in
"php")
cmd=$phpcmd
if [[ "$pdns" == "aly" ]]; then
dnsapi="php-version/alydns.php"
elif [[ "$pdns" == "txy" ]] ;then
dnsapi="php-version/txydns.php"
else
dnsapi="php-version/godaddydns.php"
fi
;;
"python")
cmd=$ythoncmd
if [[ "$pdns" == "aly" ]]; then
dnsapi="python-version/alydns.py"
elif [[ "$pdns" == "txy" ]] ;then
echo "目前不支持python版本的非阿里云DNS处理"
exit
else
echo "目前不支持python版本的非阿里云DNS处理"
exit
fi
;;
esac
$cmd $dnsapi $paction $CERTBOT_DOMAIN "_acme-challenge" $CERTBOT_VALIDATION >"/var/log/certd.log"
/usr/bin/php $PATH"/alydns.php" $CERTBOT_DOMAIN "_acme-challenge" $CERTBOT_VALIDATION >"/var/log/certdebug.log"
# DNS TXT 记录刷新时间
/bin/sleep 20
echo "END"
###

View File

@ -1,166 +0,0 @@
<?php
date_default_timezone_set("GMT");
//accessKeyId 和 accessSecrec 在 https://developer.godaddy.com/getstarted 申请
define("accessKeyId", "");
define("accessSecrec", "");
$type = 'TXT';
$domainarray = GodaddyDns::getDomain($argv[1]);
//证书申请域名
$selfdomain = ($domainarray[0] == "") ? $argv[2] : $argv[2].".".$domainarray[0];
//根域名
$domain = $domainarray[1];
$obj = new GodaddyDns(accessKeyId, accessSecrec, $domain);
$data = $obj->GetDNSRecord($domain, $type);
$code = $data['httpCode'];
if ($code != 200) {
echo 'code='.$code;
echo '<br/>';
echo $data['result'];
exit;
}
$data_obj = json_decode($data['result']);
$count = count($data_obj);
if ($count <= 0) {
$r = $obj->CreateDNSRecord($domain, $selfdomain, $argv[3], $type);
} else {
$r = $obj->UpdateDNSRecord($domain, $selfdomain, $argv[3], $type); //$domain,$name,$value,$recordType='TXT
}
class GodaddyDns
{
private $accessKeyId = null;
private $accessSecrec = null;
private $DomainName = null;
private $Host = "";
private $Path = "";
public function __construct($accessKeyId, $accessSecrec, $domain = "")
{
$this->accessKeyId = $accessKeyId;
$this->accessSecrec = $accessSecrec;
$this->DomainName = $domain;
}
/*
根据域名返回主机名和二级域名
*/
public static function getDomain($domain)
{
//常见根域名 【https://en.wikipedia.org/wiki/List_of_Internet_top-level_domains】
// 【http://www.seobythesea.com/2006/01/googles-most-popular-and-least-popular-top-level-domains/】
$arr[] = ".co.jp";
$arr[] = ".com.tw";
$arr[] = ".net";
$arr[] = ".com";
$arr[] = ".com.cn";
$arr[] = ".org";
$arr[] = ".cn";
$arr[] = ".gov";
$arr[] = ".net.cn";
$arr[] = ".io";
$arr[] = ".top";
$arr[] = ".me";
$arr[] = ".int";
$arr[] = ".edu";
$arr[] = ".link";
$arr[] = ".uk";
$arr[] = ".hk";
//二级域名
$seconddomain = "";
//子域名
$selfdomain = "";
//根域名
$rootdomain = "";
foreach ($arr as $k => $v) {
$pos = stripos($domain, $v);
if ($pos) {
$rootdomain = substr($domain, $pos);
$s = explode(".", substr($domain, 0, $pos));
$seconddomain = $s[count($s) - 1].$rootdomain;
for ($i = 0; $i < count($s) - 1; $i++)
$selfdomain .= $s[$i];
break;
}
}
//echo $seconddomain ;exit;
if ($rootdomain == "") {
$seconddomain = $domain;
$selfdomain = "";
}
return array($selfdomain, $seconddomain);
}
public function error($code, $str)
{
echo "操作错误:".$code.":".$str;
exit;
}
private function curl($url, $header = '', $data = '', $method = 'get')
{
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_CUSTOMREQUEST, $method); //设置请求方式
curl_setopt($ch, CURLOPT_HTTPHEADER, $header);
curl_setopt($ch, CURLOPT_POSTFIELDS, $data); //设置提交的字符串
$result = curl_exec($ch);
$httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
return array(
'result' => $result,
'httpCode' => $httpCode
);
}
private function out($msg)
{
return json_decode($msg, true);
}
public function GetDNSRecord($domain, $recordType = 'TXT')
{
$url = "https://api.godaddy.com/v1/domains/$domain/records/$recordType/_acme-challenge";
$header = ['accept: application/json', 'authorization:sso-key '.$this->accessKeyId.':'.$this->accessSecrec];
return $this->curl($url, $header);
}
public function UpdateDNSRecord($domain, $name, $value, $recordType = 'TXT')
{
$url = "https://api.godaddy.com/v1/domains/$domain/records/$recordType/$name";
$header = ['accept: application/json', 'Content-Type: application/json',
'authorization:sso-key '.$this->accessKeyId.':'.$this->accessSecrec];
$data = array(
array(
'data' => $value,
'name' => $name,
'ttl' => 3600,
'type' => $recordType)
);
return $this->curl($url, $header, json_encode($data), 'put');
}
public function CreateDNSRecord($domain, $name, $value, $recordType = 'TXT')
{
$url = "https://api.godaddy.com/v1/domains/$domain/records";
$header = ['accept: application/json', 'Content-Type: application/json',
'authorization:sso-key '.$this->accessKeyId.':'.$this->accessSecrec];
$data = array(
array(
'data' => $value,
'name' => $name,
'ttl' => 3600,
'type' => $recordType)
);
return $this->curl($url, $header, json_encode($data), 'PATCH');
}
}

View File

@ -1,257 +0,0 @@
<?php
date_default_timezone_set("GMT");
############ 请在腾讯云申请“API密钥”替换下面两个常量
//去 https://console.cloud.tencent.com/cam/capi 页面申请
//https://cloud.tencent.com/document/product/302/4032
define("txyaccessKeyId", "AKIDwlPr7DUpLgpZBb4tlT0MWUHtIVXOJwxm");
define("txyaccessSecrec", "mMkxzoTxOirrfJlFYfbS7g7792jEi5GG");
/*
$obj = new TxyDns(txyaccessKeyId, txyaccessSecrec, "yudadan.com");
//显示所有域名
$data = $obj->DomainList();
if ($data["code"]!=0) {
echo $data["message"] . "\n";
}
//可以增加同名的二条
$data = $obj->RecordCreate("www3","TXT",rand(10,1000));
$data = $obj->RecordCreate("www3","TXT",rand(10,1000));
$data = $obj->RecordCreate("www3.www3","TXT",rand(10,1000));
if ($data["code"]!=0) {
echo $data["message"] . "\n";
}
//查看一个主机的所有txt 记录
$data = $obj->RecordList("www3.www3","TXT");
$data = $obj->RecordList("www3","TXT");
$records = $data["data"]["records"];
foreach ($records as $k=>$v) {
//根据ID修改记录
$data = $obj->RecordModify("www3", "TXT", rand(1000,2000), $v["id"]);
//根据ID删除记录
$obj->RecordDelete($v["id"]);
}
*/
###### 代码运行
// php txydns.php "simplehttps.com" "txtname" "txtvalue"
//$argv[1] = "simplehttps.com";
//$argv[2] = "www3";
//$argv[3] = "ssssss";
$domainarray = TxyDns::getDomain($argv[1]);
$selfdomain = ($domainarray[0]=="")?$argv[2]:$argv[2] . "." . $domainarray[0];
//为了匹配出二级域名以及正确的RR
$obj = new TxyDns(txyaccessKeyId, txyaccessSecrec, $domainarray[1]);
$data = $obj->RecordList($selfdomain , "TXT");
if ($data["code"] != "0") {
$obj->error($data["code"], $data["message"]);
}
$records = $data["data"]["records"];
foreach ($records as $k => $v) {
// 如果存在记录,则直接修改。
if ($v["name"] == $selfdomain) {
$data = $obj->RecordModify($selfdomain, "TXT", $argv[3], $v["id"]);
if ($data["code"] != "0") {
$obj->error($data["code"], $data["message"]);
}
//$obj->RecordDelete($v["id"]);
exit;
}
}
//如果不存在,就增加 TXT 记录
$data = $obj->RecordCreate($selfdomain, "TXT", $argv[3]);
if ($data["code"] != "0") {
//失败,则记录日志
$obj->error($data["code"], $data["message"]);
}
####### 基于腾讯云 DNS API 实现的 PHP 类,参考 https://cloud.tencent.com/document/product/302/4032
class TxyDns {
private $accessKeyId = null;
private $accessSecrec = null;
private $DomainName = null;
private $Host = "cns.api.qcloud.com";
private $Path = "/v2/index.php";
public function __construct($accessKeyId, $accessSecrec, $domain = "") {
$this->accessKeyId = $accessKeyId;
$this->accessSecrec = $accessSecrec;
$this->DomainName = $domain;
}
/*
根据域名返回主机名和二级域名
*/
public static function getDomain($domain) {
//常见根域名 【https://en.wikipedia.org/wiki/List_of_Internet_top-level_domains】
// 【http://www.seobythesea.com/2006/01/googles-most-popular-and-least-popular-top-level-domains/】
$arr[]=".uk";
$arr[]=".hk";
$arr[]=".net";
$arr[]=".com";
$arr[]=".edu";
$arr[]=".mil";
$arr[]=".com.cn";
$arr[]=".org";
$arr[]=".cn";
$arr[]=".gov";
$arr[]=".net.cn";
$arr[]=".io";
$arr[]=".co.jp";
$arr[]=".com.tw";
$arr[]=".info";
$arr[]=".io";
$arr[]=".top";
$arr[]=".me";
$arr[]=".int";
$arr[]=".edu";
//二级域名
$seconddomain ="";
//子域名
$selfdomain = "";
//根域名
$rootdomain = "";
foreach ($arr as $k=>$v) {
$pos = stripos($domain,$v);
if ($pos) {
$rootdomain = substr($domain,$pos);
$s = explode(".",substr($domain,0,$pos));
$seconddomain = $s[count($s)-1] . $rootdomain;
for ($i=0;$i<count($s)-1;$i++)
$selfdomain .= $s[$i];
break;
}
}
//echo $seconddomain ;exit;
if ($rootdomain=="") {
$seconddomain = $domain;
$selfdomain = "";
}
return array($selfdomain,$seconddomain);
}
public function error($code, $str) {
echo "操作错误:" . $code . ":" . $str;
exit;
}
public function RecordDelete($recordId) {
$param["domain"] = $this->DomainName;
$param["recordId"] = $recordId;
$data = $this->send("RecordDelete", "GET", $param);
return ($this->out($data));
}
public function RecordList($subDomain, $recordType = "") {
if ($recordType != "")
$param["recordType"] = $recordType;
$param["subDomain"] = $subDomain;
$param["domain"] = $this->DomainName;
$data = $this->send("RecordList", "GET", $param);
return ($this->out($data));
}
public function RecordModify($subDomain, $recordType = "TXT", $value, $recordId) {
$param["recordType"] = $recordType;
$param["subDomain"] = $subDomain;
$param["recordId"] = $recordId;
$param["domain"] = $this->DomainName;
$param["recordLine"] = "默认";
$param["value"] = $value;
$data = $this->send("RecordModify", "GET", $param);
return ($this->out($data));
}
public function RecordCreate($subDomain, $recordType = "TXT", $value) {
$param["recordType"] = $recordType;
$param["subDomain"] = $subDomain;
$param["domain"] = $this->DomainName;
$param["recordLine"] = "默认";
$param["value"] = $value;
$data = $this->send("RecordCreate", "GET", $param);
return ($this->out($data));
}
public function DomainList() {
$data = $this->send("DomainList", "GET", array());
return ($this->out($data));
}
private function send($action, $reqMethod, $requestParams) {
$params = $this->formatRequestData($action, $requestParams, $reqMethod);
$uri = http_build_query($params);
$url = "https://" . $this->Host . "" . $this->Path . "?" . $uri;
return $this->curl($url);
}
private function formatRequestData($action, $request, $reqMethod) {
$param = $request;
$param["Action"] = ucfirst($action);
//$param["RequestClient"] = $this->sdkVersion;
$param["Nonce"] = rand();
$param["Timestamp"] = time();
//$param["Version"] = $this->apiVersion;
$param["SecretId"] = $this->accessKeyId;
$signStr = $this->formatSignString($this->Host, $this->Path, $param, $reqMethod);
$param["Signature"] = $this->sign($signStr);
return $param;
}
//签名
private function formatSignString($host, $path, $param, $requestMethod) {
$tmpParam = [];
ksort($param);
foreach ($param as $key => $value) {
array_push($tmpParam, str_replace("_", ".", $key) . "=" . $value);
}
$strParam = join("&", $tmpParam);
$signStr = strtoupper($requestMethod) . $host . $path . "?" . $strParam;
return $signStr;
}
private function sign($signStr) {
$signature = base64_encode(hash_hmac("sha1", $signStr, $this->accessSecrec, true));
return $signature;
}
private function curl($url) {
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$result = curl_exec($ch);
curl_close($ch);
return $result;
}
private function out($msg) {
return json_decode($msg, true);
}
}