syy/acme.sh
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

dns_cn: convert IDN domain to punycode before API calls

Browse Source 
Core-Networks' API rejects Unicode domain names with "invalid domain";
it requires punycode. dns_cn_add / dns_cn_rm passed the raw challenge
domain straight through, so IDN certs failed at the TXT add step
(issue #4804). Run fulldomain through _idn() in both functions. For
ASCII/punycode input _idn() is a pass-through, so non-IDN domains are
unaffected.

Fixes #4804
This commit is contained in:
neil
2026-07-04 21:58:57 +08:00 Unverified
parent 988afd0f59
commit 9764f67619
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dnsapi/dns_cn.sh
+4 -2
View File
@@ -15,7 +15,8 @@ CN_API="https://beta.api.core-networks.de"
######## Public functions ##################### ######## Public functions #####################
dns_cn_add() { dns_cn_add() {
fulldomain=$1 # Core-Networks API requires punycode for IDN domains
fulldomain=$(_idn "$1")
txtvalue=$2 txtvalue=$2
if ! _cn_login; then if ! _cn_login; then
@@ -58,7 +59,8 @@ dns_cn_add() {
} }
dns_cn_rm() { dns_cn_rm() {
fulldomain=$1 # Core-Networks API requires punycode for IDN domains
fulldomain=$(_idn "$1")
txtvalue=$2 txtvalue=$2
if ! _cn_login; then if ! _cn_login; then