Merge pull request #2455 from fraenki/acme_260

security/acme-client: release 2.6
This commit is contained in:
Frank Wall
2021-07-11 14:44:27 +02:00
committed by GitHub
6 changed files with 141 additions and 2 deletions
+5
View File
@@ -15,10 +15,15 @@ Added:
* add support for DDNSS DNS API (#2415)
* add support for Zone.eu DNS API (#2417)
* add support for Njalla DNS API (#2446)
* add support for Domeneshop DNS API (#2390)
* add support for IONOS domain API (#2345)
Fixed:
* sftp update of write protected cert files with a numeric owner (#2426)
Changed:
* Namecheap: change IP discovery URL to avoid rate-limits (#2419)
2.5
Added:
@@ -339,6 +339,21 @@
<label>Password</label>
<type>password</type>
</field>
<field>
<label>Domeneshop DNS API</label>
<type>header</type>
<style>table_dns table_dns_domeneshop</style>
</field>
<field>
<id>validation.dns_domeneshop_token</id>
<label>Token</label>
<type>text</type>
</field>
<field>
<id>validation.dns_domeneshop_secret</id>
<label>Secret</label>
<type>password</type>
</field>
<field>
<label>DNSPod</label>
<type>header</type>
@@ -535,6 +550,21 @@
<label>Password</label>
<type>password</type>
</field>
<field>
<label>IONOS domain API</label>
<type>header</type>
<style>table_dns table_dns_ionos</style>
</field>
<field>
<id>validation.dns_ionos_prefix</id>
<label>Prefix</label>
<type>text</type>
</field>
<field>
<id>validation.dns_ionos_secret</id>
<label>Secret</label>
<type>password</type>
</field>
<field>
<label>IPSConfig</label>
<type>header</type>
@@ -0,0 +1,45 @@
<?php
/*
* Copyright (C) 2021 Frank Wall
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions are met:
*
* 1. Redistributions of source code must retain the above copyright notice,
* this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
* INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
* AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
* AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
* OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*/
namespace OPNsense\AcmeClient\LeValidation;
use OPNsense\AcmeClient\LeValidationInterface;
use OPNsense\Core\Config;
/**
* Domeneshop API
* @package OPNsense\AcmeClient
*/
class DnsDomeneshop extends Base implements LeValidationInterface
{
public function prepare()
{
$this->acme_env['DOMENESHOP_Token'] = (string)$this->config->dns_domeneshop_token;
$this->acme_env['DOMENESHOP_Secret'] = (string)$this->config->dns_domeneshop_secret;
}
}
@@ -0,0 +1,45 @@
<?php
/*
* Copyright (C) 2021 Frank Wall
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions are met:
*
* 1. Redistributions of source code must retain the above copyright notice,
* this list of conditions and the following disclaimer.
*
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
* INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
* AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
* AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
* OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
* POSSIBILITY OF SUCH DAMAGE.
*/
namespace OPNsense\AcmeClient\LeValidation;
use OPNsense\AcmeClient\LeValidationInterface;
use OPNsense\Core\Config;
/**
* IONOS API
* @package OPNsense\AcmeClient
*/
class DnsIonos extends Base implements LeValidationInterface
{
public function prepare()
{
$this->acme_env['IONOS_PREFIX'] = (string)$this->config->dns_ionos_prefix;
$this->acme_env['IONOS_SECRET'] = (string)$this->config->dns_ionos_secret;
}
}
@@ -45,7 +45,7 @@ class DnsNamecheap extends Base implements LeValidationInterface
$this->acme_env['NAMECHEAP_SOURCEIP'] = (string)$this->config->dns_namecheap_sourceip;
} else {
// Use a public service to get our source IP for Namecheap API
$this->acme_env['NAMECHEAP_SOURCEIP'] = 'https://ifconfig.co/ip';
$this->acme_env['NAMECHEAP_SOURCEIP'] = 'https://ipinfo.io/ip';
}
}
}
@@ -1,6 +1,6 @@
<model>
<mount>//OPNsense/AcmeClient</mount>
<version>2.0.0</version>
<version>2.1.0</version>
<description>A secure Let's Encrypt plugin</description>
<items>
<settings>
@@ -387,6 +387,7 @@
<dns_dgon>DigitalOcean API</dns_dgon>
<dns_da>DirectAdmin API</dns_da>
<dns_dnsimple>DNSimple API</dns_dnsimple>
<dns_domeneshop>Domeneshop API</dns_domeneshop>
<dns_me>DNSMadeEasy.com API</dns_me>
<dns_dp>DNSPod.cn API</dns_dp>
<dns_doapi>Domain-Offensive LetsEncrypt API</dns_doapi>
@@ -408,6 +409,7 @@
<dns_infoblox>Infoblox API</dns_infoblox>
<dns_infomaniak>Infomaniak API</dns_infomaniak>
<dns_inwx>INWX XMLRPC API</dns_inwx>
<dns_ionos>IONOS domain API</dns_ionos>
<dns_ispconfig>ISPConfig 3.1+ API</dns_ispconfig>
<dns_joker>Joker API</dns_joker>
<dns_kinghost>KingHost DNS API</dns_kinghost>
@@ -545,6 +547,12 @@
<dns_do_password type="TextField">
<Required>N</Required>
</dns_do_password>
<dns_domeneshop_token type="TextField">
<Required>N</Required>
</dns_domeneshop_token>
<dns_domeneshop_secret type="TextField">
<Required>N</Required>
</dns_domeneshop_secret>
<dns_dp_id type="TextField">
<Required>N</Required>
</dns_dp_id>
@@ -614,6 +622,12 @@
<dns_inws_password type="TextField">
<Required>N</Required>
</dns_inws_password>
<dns_ionos_prefix type="TextField">
<Required>N</Required>
</dns_ionos_prefix>
<dns_ionos_secret type="TextField">
<Required>N</Required>
</dns_ionos_secret>
<dns_ispconfig_user type="TextField">
<Required>N</Required>
</dns_ispconfig_user>