security/acme-client: more CloudFlare tweaks, refs #1625

This commit is contained in:
Frank Wall
2019-12-26 23:48:28 +01:00
parent 8e00362dcd
commit 861b663b0a
2 changed files with 4 additions and 1 deletions
@@ -187,6 +187,7 @@
<field>
<label>Global API Key</label>
<type>header</type>
<style>table_dns table_dns_cf</style>
</field>
<field>
<id>validation.dns_cf_email</id>
@@ -202,6 +203,7 @@
<field>
<label>Restricted API Token</label>
<type>header</type>
<style>table_dns table_dns_cf</style>
</field>
<field>
<id>validation.dns_cf_account_id</id>
@@ -652,9 +652,10 @@ function run_acme_validation($certObj, $valObj, $acctObj)
$proc_env['AZUREDNS_CLIENTSECRET'] = (string)$valObj->dns_azuredns_clientsecret;
break;
case 'dns_cf':
// Global API key (insecure)
$proc_env['CF_Key'] = (string)$valObj->dns_cf_key;
$proc_env['CF_Email'] = (string)$valObj->dns_cf_email;
// FIXME Only one auth method should be present in ENV
// Restricted API token (recommended)
$proc_env['CF_Token'] = (string)$valObj->dns_cf_token;
$proc_env['CF_Account_ID'] = (string)$valObj->dns_cf_account_id;
break;