4187 Commits

This Branch

This Branch

All Branches

• fix: revert _readini() function to be more generic

  Also switched [::space::] with a literal space for better
  cross-platform compatibility.
  
  Signed-off-by: Avi Miller <avi.miller@oracle.com>

  Avi Miller 2021-06-20 13:12:14 +10:00
  7666022840
• feat: enable automatic configuration from an OCI configuration file

  The individual parameters can still be overridden via the
  corresponding OCI_CLI environment variable.
  
  Signed-off-by: Avi Miller <avi.miller@oracle.com>

  Avi Miller 2021-06-20 09:10:24 +10:00
  946c8b498a
• fix: add missing else/return 1 to if block

  Signed-off-by: Avi Miller <avi.miller@oracle.com>

  Avi Miller 2021-06-19 15:41:34 +10:00
  ed971df93a
• fix: switch to using functions instead of calling OpenSSL directly

  Also reduced the number of environment variables which simplifies
  the documentation and requirements. The variable names now match
  those used by the OCI CLI.
  
  Signed-off-by: Avi Miller <avi.miller@oracle.com>

  Avi Miller 2021-06-18 12:00:42 +10:00
  017a10189c
• Add DNS API plugin for Oracle Cloud Infrastructure DNS Service

  This plugin is has noticeably more required fields than most
  other plugins due to the requirement that all requests to
  the OCI REST API must be cryptographically signed by the client
  using the draft standard proposed in draft-cavage-http-signatures-08[1].
  
  The OCI specific implementation details of the draft standard are
  documented in the Developer Guide[2].
  
  NOTE: there is maximum allowed clock skew of five minutes between the
  client and the API endpoint. Requests will be denied if the skew is
  greater.
  
  This PR also includes a minor tweak to the Solaris job in the DNS
  workflow so that it uses the pre-installed GNU tools, curl and OpenSSL 1.1.1.
  Without these changes, the signature generation function does not
  work on Solaris.
  
  [1]: https://datatracker.ietf.org/doc/html/draft-cavage-http-signatures-08
  [2]: https://docs.oracle.com/en-us/iaas/Content/API/Concepts/signingrequests.htm#five
  
  Signed-off-by: Avi Miller <avi.miller@oracle.com>

  Avi Miller 2021-06-05 21:55:40 +10:00
  6f88c81616
• Merge pull request #3535 from sparunakian/dev

  Fix typo (#3521)

  neil 2021-06-02 23:06:36 +08:00
  43cb230f19
• start 3.0.0
  neil 2021-06-02 23:06:12 +08:00
  fd6a59202d
• Fix typo
  Stéphane Parunakian 2021-06-02 16:06:08 +02:00
  e353f66eaa
• fix bug
  neil 2021-06-01 22:21:17 +08:00
  d154118600
• add debug info
  neil 2021-06-01 22:15:53 +08:00
  c2273d2c8e
• Merge pull request #3529 from Haarolean/bugfix/porkbun-fixes

  Porkbun DNS API fixes

  neil 2021-06-01 21:29:14 +08:00
  495ba01d8e
• add error message
  neil 2021-06-01 21:24:37 +08:00
  f627a02886
• check initAPI error
  neil 2021-06-01 21:23:00 +08:00
  5f9daa6640
• Merge pull request #3530 from DerVerruckteFuchs/1984-login-fix

  1984 login fix

  neil 2021-06-01 21:10:52 +08:00
  9edda556de
• change "$url" -> $url so the value of $url gets passed by reference, and the string "$url" does not erroneously get passed as a variable into _post()
  Christophe B Billheimer 2021-05-31 15:24:41 -04:00
  3891a52aeb
• Fix porkbun issues

  See gh-3450

  Roman Zabaluev 2021-05-30 18:23:13 +03:00
  1e5e3353f3
• upgrade cf-tunnel
  neil 2021-05-29 15:17:34 +08:00
  7aa4b8247c
• Merge pull request #3525 from tresni/synology_dsm

  Synology DSM - Make certificate descriptions sed safe

  neil 2021-05-27 21:04:24 +08:00
  37339ddafc
• shellcheck cleanup

  shellcheck sees '\\' as trying to escape the trailing quote (see
  koalaman/shellcheck#1548 ).

  Brian Hartvigsen 2021-05-26 15:25:58 -06:00
  dcb51683c5
• Make certificate descriptions sed safe

  This escapes special characters used in POSIX sed to prevent mismatches.
  e.g. `SYNO_Certficiate=*.example.com` would not match a description of
  "*.example.com" and would look to match any number of double quotes (the
  last character in the sed regex prior to certificate description),
  followed by any single character, followed by "example", followed by any
  character, followed by "com".
  
  After this change, it will properly match `*.example.com` and not
  `""zexamplefcom`.
  
  Additionally we now store the certificate description as base64 encoded
  to prevent issues with single quotes.
  
  Tested on DSM 7.0-41222 (VDSM) and DSM 6.2.4-25556 (DS1515+).

  Brian Hartvigsen 2021-05-26 15:25:58 -06:00
  74a4a788b1
• add debug info
  neilpang 2021-05-25 21:57:15 +08:00
  7909273a21
• Merge pull request #3522 from acmesh-official/dev

  sync

  neil 2021-05-23 23:55:23 +08:00
  130e8dbd40
• remove ngrok token
  neil 2021-05-23 23:16:04 +08:00
  40e2ebed95
• use cloudflare tunnel to test
  neil 2021-05-23 23:12:46 +08:00
  bf9b33acec
• fix format
  neil 2021-05-22 23:48:39 +08:00
  7710a33b6c
• remove ACME v1 support
  neil 2021-05-22 23:45:50 +08:00
  af3ea2d4fd
• Merge pull request #3520 from tresni/synology_dsm

  Better fix for Synology DSM setting wrong default

  neil 2021-05-20 23:05:34 +08:00
  52a3255936
• Better fix for Synology DSM setting wrong default

  As noted by @buxm, previous fix didn't work for all versions of DSM 6.
  The better fix appears to be simply not outputting the "as_default"
  parameter unless we are doing something with the default certificate.

  Brian Hartvigsen 2021-05-19 13:21:34 -06:00
  5ab9ca1c0d
• Merge pull request #3505 from willbrowningme/patch-1

  dnsapi/dns_desec.sh remove DEDYN_NAME variable

  neil 2021-05-08 21:12:56 +08:00
  461f602992
• minor
  neilpang 2021-05-08 21:09:56 +08:00
  46180435cc
• Merge pull request #3511 from acmesh-official/dev

  Dev

  neil 2021-05-08 21:00:02 +08:00
  7f2699c6da
• fix https://github.com/acmesh-official/acme.sh/issues/3504

  check invalid status first.

  neilpang 2021-05-07 22:02:40 +08:00
  aede5c486b
• Merge branch 'dev' of https://github.com/acmesh-official/acme.sh into dev
  neilpang 2021-05-07 21:50:22 +08:00
  fb2407386f
• fix https://github.com/acmesh-official/acme.sh/issues/3504
  neilpang 2021-05-07 21:49:47 +08:00
  aa59c46c4c
• Remove DEDYN_NAME variable from dns_desec.sh
  Will Browning 2021-05-06 16:51:43 +01:00
  c5557fc488
• Merge pull request #3350 from temoffey/deploy-gcore_cdn

  Deploy gcore_cdn fix

  neil 2021-05-05 23:48:37 +08:00
  8c14150536
• start 2.9.0
  neilpang 2021-05-04 13:32:59 +08:00
  0881cf1379
• Merge pull request #3499 from acmesh-official/dev

  sync

  neil 2021-05-03 22:20:20 +08:00
  2.8.9 d0a16b0ec0
• minor
  neil 2021-05-03 17:14:54 +08:00
  290beb90a7
• fix nginx relative path issue:

  https://github.com/acmesh-official/acme.sh/issues/1743
  https://github.com/acmesh-official/acme.sh/issues/1914

  neil 2021-05-03 17:11:02 +08:00
  0a4ef17135
• minor
  neil 2021-05-03 16:42:09 +08:00
  e0c32ce700
• fix https://github.com/acmesh-official/acme.sh/issues/3487

  suppor Ali doh and dnspod doh.

  neil 2021-05-03 16:37:13 +08:00
  e65144a105
• Merge pull request #3498 from tresni/synology_dsm

  FIX: Synology sets "default" on wrong certificate

  neil 2021-05-03 15:57:09 +08:00
  ae40445dba
• fix https://github.com/acmesh-official/acme.sh/issues/3421
  neil 2021-05-03 15:52:56 +08:00
  25a8240d12
• FIX: Synology sets "default" on wrong certificate

  For some DSM installs, it appears that setting the "default" flag to the
  string "false" actually sets it to true.  This causes Synology to set
  the last updated certificate to be the default certificate.  Using an
  empty string appears to still be accepted as a false-y value for DSMs
  where this isn't happening and corrects the behavior in the cases that
  it was.
  
  Credit to @Run-King for identifying the fix and @buxm for reporting.

  Brian Hartvigsen 2021-05-02 13:37:59 -06:00
  1a4a180e8c
• Merge branch 'dev' of https://github.com/acmesh-official/acme.sh into dev
  neilpang 2021-05-02 22:20:27 +08:00
  aea10a3b93
• upgrade freebsd
  neilpang 2021-05-02 22:20:04 +08:00
  f855862ade
• fix compatibility issue
  neil 2021-05-01 22:32:44 +08:00
  91d37c7875
• Merge pull request #3493 from goekesmi/master

  Pass content via printf string format and argument

  neil 2021-05-01 10:16:30 +08:00
  5707b93110
• arguments passed to printf are more generic

  On systems that /bin/sh is served by shells other than bash, or 
  shells that don't implement the same syntax as the bash printf builtin,
  printf -- fails to produce the output necessary for standalone operation.
  
  The test case for this was SmartOS, which uses ksh93 as its /bin/sh.
  
  This change uses the more generic method of passing a format parameter
  of a single string, and then the argument to replace it with.

  Jeff Goeke-Smith 2021-04-29 16:46:32 -04:00
  81b2d0732f