4029 Commits

This Branch

This Branch

All Branches

• Fixes response handling and thereby allow issuing of subdomain certs
  Kristian Johansson 2021-03-21 16:20:32 +01:00
  b0f5ad75ae
• No need to include EC parameters explicitly with the private key.

  (they are embedded)

  Geert Hendrickx 2021-03-21 16:20:32 +01:00
  a290f63a15
• Update dns_dp.sh

  没有encode中文字符会导致提交失败

  czeming 2021-03-21 16:20:32 +01:00
  d078ce794e
• Change default SMTP_SECURE to "tls"

  Secure by default. Also try to minimize configuration errors.
  (Many ESPs/ISPs require STARTTLS, and most support it.)

  medmunds 2021-03-21 16:20:32 +01:00
  06f51a5c34
• Prefer Python to curl when both available
  medmunds 2021-03-21 16:20:32 +01:00
  db96778064
• Use email.policy.default in Python 3 implementation

  Improves standards compatibility and utf-8 handling
  in Python 3.3-3.8. (email.policy.default becomes the
  default in Python 3.9.)

  medmunds 2021-03-21 16:20:32 +01:00
  d8918ea156
• Add Date email header in Python implementation
  medmunds 2021-03-21 16:20:32 +01:00
  3503474bb8
• Clarify _readaccountconf_mutable_default
  medmunds 2021-03-21 16:20:32 +01:00
  eb1606b086
• Clean email headers and warn on unsupported address format

  Just in case, make sure CR or NL don't end up in
  an email header.

  medmunds 2021-03-21 16:20:32 +01:00
  1330a092fa
• Implement _rfc2822_date helper
  medmunds 2021-03-21 16:20:32 +01:00
  d3c74cfb45
• Rework read/save config to not save default values

  Add and use _readaccountconf_mutable_default and
  _saveaccountconf_mutable_default helpers to capture
  common default value handling.
  
  New approach also eliminates need for separate
  underscore-prefixed version of each conf var.

  medmunds 2021-03-21 16:20:32 +01:00
  d044545520
• Add _clearaccountconf_mutable()
  medmunds 2021-03-21 16:20:32 +01:00
  d1cdc1c6a0
• Use PROJECT_NAME and VER for X-Mailer header

  Also add X-Mailer header to Python version

  medmunds 2021-03-21 16:20:32 +01:00
  dc8d91ea39
• make the fix for rsa key only
  neilpang 2021-03-21 16:20:32 +01:00
  ae5a6d330d
• support openssl 3.0

  fix https://github.com/acmesh-official/acme.sh/issues/3399

  neilpang 2021-03-21 16:20:32 +01:00
  fe0bee21b0
• fix: fix freebsd and solaris
  Easton Man 2021-03-21 16:20:32 +01:00
  c090c19bfe
• feat: add huaweicloud error handling
  Easton Man 2021-03-21 16:20:32 +01:00
  8fbec785e8
• Fix: Unifi deploy hook support Unifi Cloud Key (#3327)

  * fix: unifi deploy hook also update Cloud Key nginx certs
  
  When running on a Unifi Cloud Key device, also deploy to
  /etc/ssl/private/cloudkey.{crt,key} and reload nginx. This
  makes the new cert available for the Cloud Key management
  app running via nginx on port 443 (as well as the port 8443
  Unifi Controller app the deploy hook already supported).
  
  Fixes #3326
  
  * Improve settings documentation comments
  
  * Improve Cloud Key pre-flight error messaging
  
  * Fix typo
  
  * Add support for UnifiOS (Cloud Key Gen2)
  
  Since UnifiOS does not use the Java keystore (like a Unifi
  Controller or Cloud Key Gen1 deploy), this also reworks
  the settings validation and error messaging somewhat.
  
  * PR review fixes
  
  * Detect unsupported Cloud Key java keystore location
  
  * Don't try to restart inactive services
  
  (and remove extra spaces from reload command)
  
  * Clean up error messages and internal variables
  
  * Change to _getdeployconf/_savedeployconf
  
  * Switch from cp to cat to preserve file permissions

  Mike Edmunds 2021-03-21 16:20:32 +01:00
  06fb3d9476
• More than one blank line is an abomination, apparently

  I will not try to use whitespace to group code visually

  medmunds 2021-03-21 16:20:32 +01:00
  fe3e8a7bb6
• Implement curl version of smtp notify-hook
  medmunds 2021-03-21 16:20:32 +01:00
  ce2ff25edd
• Prep for curl or Python; clean up SMTP_* variable usage
  medmunds 2021-03-21 16:20:32 +01:00
  65a1b892e3
• Add instructions for reporting bugs
  medmunds 2021-03-21 16:20:32 +01:00
  e272fde95e
• Only save config if send is successful
  medmunds 2021-03-21 16:20:32 +01:00
  d48bff0e20
• Make shfmt happy

  (I'm open to better ways of formatting the heredoc
  that embeds the Python script.)

  medmunds 2021-03-21 16:20:32 +01:00
  6e61c34f0f
• Implement smtp notify hook

  Support notifications via direct SMTP server connection.
  Uses Python (2.7.x or 3.4+) to communicate with SMTP server.

  medmunds 2021-03-21 16:20:32 +01:00
  2d9506eb54
• duckdns - fix "integer expression expected" errors (#3397)

  * fix "integer expression expected" errors
  
  * duckdns fix
  
  * Update dns_duckdns.sh
  
  * Update dns_duckdns.sh

  jerrm 2021-03-21 16:20:32 +01:00
  b1988c7b67
• upgrade freebsd and solaris
  neilpang 2021-03-21 16:20:32 +01:00
  fb5d72c29b
• Chain (#3408)

  * fix https://github.com/acmesh-official/acme.sh/issues/3384
  match the issuer to the root CA cert subject
  
  * fix format
  
  * fix https://github.com/acmesh-official/acme.sh/issues/3384
  
  * remove the alt files. https://github.com/acmesh-official/acme.sh/issues/3384

  neil 2021-03-21 16:20:32 +01:00
  ac148ce0e9
• dnsapi/pdns: also normalize json response in detecting root zone
  manuel 2021-03-21 16:20:32 +01:00
  016dca654e
• Updated --preferred-chain to issue ISRG properly

  To support different openssl crl2pkcs7 help cli format

  Gnought 2021-03-21 16:20:32 +01:00
  6502bdecbe
• change name actor
  Vahid Fardi 2021-03-21 16:20:32 +01:00
  91a739af6e
• change Author name
  Vahid Fardi 2021-03-21 16:20:32 +01:00
  e232565971
• change arvan api script
  Vahid Fardi 2021-03-21 16:20:32 +01:00
  472488ebe8
• Revert "Syncing with the original repo (#2)"

  This reverts commit c384ed960c.

  Alexander Kulumbeg 2021-03-21 16:16:38 +01:00
  8de3698b23
• Syncing with the original repo (#2)

  * change arvan api script
  
  * change Author name
  
  * change name actor
  
  * Updated --preferred-chain to issue ISRG properly
  
  To support different openssl crl2pkcs7 help cli format
  
  * dnsapi/pdns: also normalize json response in detecting root zone
  
  * Chain (#3408)
  
  * fix https://github.com/acmesh-official/acme.sh/issues/3384
  match the issuer to the root CA cert subject
  
  * fix format
  
  * fix https://github.com/acmesh-official/acme.sh/issues/3384
  
  * remove the alt files. https://github.com/acmesh-official/acme.sh/issues/3384
  
  * upgrade freebsd and solaris
  
  * duckdns - fix "integer expression expected" errors (#3397)
  
  * fix "integer expression expected" errors
  
  * duckdns fix
  
  * Update dns_duckdns.sh
  
  * Update dns_duckdns.sh
  
  * Implement smtp notify hook
  
  Support notifications via direct SMTP server connection.
  Uses Python (2.7.x or 3.4+) to communicate with SMTP server.
  
  * Make shfmt happy
  
  (I'm open to better ways of formatting the heredoc
  that embeds the Python script.)
  
  * Only save config if send is successful
  
  * Add instructions for reporting bugs
  
  * Prep for curl or Python; clean up SMTP_* variable usage
  
  * Implement curl version of smtp notify-hook
  
  * More than one blank line is an abomination, apparently
  
  I will not try to use whitespace to group code visually
  
  * Fix: Unifi deploy hook support Unifi Cloud Key (#3327)
  
  * fix: unifi deploy hook also update Cloud Key nginx certs
  
  When running on a Unifi Cloud Key device, also deploy to
  /etc/ssl/private/cloudkey.{crt,key} and reload nginx. This
  makes the new cert available for the Cloud Key management
  app running via nginx on port 443 (as well as the port 8443
  Unifi Controller app the deploy hook already supported).
  
  Fixes #3326
  
  * Improve settings documentation comments
  
  * Improve Cloud Key pre-flight error messaging
  
  * Fix typo
  
  * Add support for UnifiOS (Cloud Key Gen2)
  
  Since UnifiOS does not use the Java keystore (like a Unifi
  Controller or Cloud Key Gen1 deploy), this also reworks
  the settings validation and error messaging somewhat.
  
  * PR review fixes
  
  * Detect unsupported Cloud Key java keystore location
  
  * Don't try to restart inactive services
  
  (and remove extra spaces from reload command)
  
  * Clean up error messages and internal variables
  
  * Change to _getdeployconf/_savedeployconf
  
  * Switch from cp to cat to preserve file permissions
  
  * feat: add huaweicloud error handling
  
  * fix: fix freebsd and solaris
  
  * support openssl 3.0
  fix https://github.com/acmesh-official/acme.sh/issues/3399
  
  * make the fix for rsa key only
  
  * Use PROJECT_NAME and VER for X-Mailer header
  
  Also add X-Mailer header to Python version
  
  * Add _clearaccountconf_mutable()
  
  * Rework read/save config to not save default values
  
  Add and use _readaccountconf_mutable_default and
  _saveaccountconf_mutable_default helpers to capture
  common default value handling.
  
  New approach also eliminates need for separate
  underscore-prefixed version of each conf var.
  
  * Implement _rfc2822_date helper
  
  * Clean email headers and warn on unsupported address format
  
  Just in case, make sure CR or NL don't end up in
  an email header.
  
  * Clarify _readaccountconf_mutable_default
  
  * Add Date email header in Python implementation
  
  * Use email.policy.default in Python 3 implementation
  
  Improves standards compatibility and utf-8 handling
  in Python 3.3-3.8. (email.policy.default becomes the
  default in Python 3.9.)
  
  * Prefer Python to curl when both available
  
  * Change default SMTP_SECURE to "tls"
  
  Secure by default. Also try to minimize configuration errors.
  (Many ESPs/ISPs require STARTTLS, and most support it.)
  
  * Update dns_dp.sh
  
  没有encode中文字符会导致提交失败
  
  * No need to include EC parameters explicitly with the private key.
  (they are embedded)
  
  * Fixes response handling and thereby allow issuing of subdomain certs
  
  * Adds comment
  
  * fix https://github.com/acmesh-official/acme.sh/issues/3402
  
  * dnsapi/ionos: Use POST instead of PATCH for adding TXT record
  
  The API now supports a POST route for adding records. Therefore
  checking for already existing records and including them in a PATCH
  request is no longer necessary.
  
  * fix https://github.com/acmesh-official/acme.sh/issues/3433
  
  * fix https://github.com/acmesh-official/acme.sh/issues/3019
  
  * fix format
  
  * Update dns_servercow.sh to support wildcard certs
  
  Updated dns_servercow.sh to support txt records with multiple entries. This supports wildcard certificates that require txt records with the same name and different contents.
  
  * Update dns_servercow.sh to support wildcard certs
  
  Updated dns_servercow.sh to support txt records with multiple entries. This supports wildcard certificates that require txt records with the same name and different contents.
  
  * fix https://github.com/acmesh-official/acme.sh/issues/3312
  
  * fix format
  
  * feat: add dns_porkbun
  
  * fix: prevent rate limit
  
  Co-authored-by: Vahid Fardi <vahid.fardi@snapp.cab>
  Co-authored-by: neil <github@neilpang.com>
  Co-authored-by: Gnought <1684105+gnought@users.noreply.github.com>
  Co-authored-by: manuel <manuel@mausz.at>
  Co-authored-by: jerrm <jerrm@users.noreply.github.com>
  Co-authored-by: medmunds <medmunds@gmail.com>
  Co-authored-by: Mike Edmunds <github@to.mikeedmunds.com>
  Co-authored-by: Easton Man <manyang.me@outlook.com>
  Co-authored-by: czeming <loser_wind@163.com>
  Co-authored-by: Geert Hendrickx <geert@hendrickx.be>
  Co-authored-by: Kristian Johansson <kristian.johansson86@gmail.com>
  Co-authored-by: Lukas Brocke <lukas@brocke.net>
  Co-authored-by: anom-human <80478363+anom-human@users.noreply.github.com>
  Co-authored-by: neil <win10@neilpang.com>
  Co-authored-by: Quentin Dreyer <quentin.dreyer@rgsystem.com>

  +616 people 2021-03-20 16:01:09 +01:00
  c384ed960c
• String change
  Alexander Kulumbeg 2021-03-20 15:26:32 +01:00
  2386d2e299
• Final try, leaving _hmac as before
  Alexander Kulumbeg 2021-02-04 19:03:35 +01:00
  aa479948f9
• Update dns_websupport.sh
  Alexander Kulumbeg 2021-02-04 18:38:40 +01:00
  fa3cee9d58
• Changing the _hmac auth back

  It only works this way, apparently

  Alexander Kulumbeg 2021-02-04 17:27:39 +01:00
  0021fb8a33
• added hex param to _hmac

  but removed "printf "s%" ...

  Alexander Kulumbeg 2021-02-04 17:21:33 +01:00
  c8c727e6c6
• Update dns_websupport.sh
  Alexander Kulumbeg 2021-02-04 17:15:22 +01:00
  b8494ab3cc
• Changing the _hmac call into Neil's suggestion
  Alexander Kulumbeg 2021-02-04 15:32:51 +01:00
  2eda03f5de
• Trying the original solution

  _hmac sha1 "$(printf "%s" "$WS_ApiSecret" | _hex_dump | tr -d " ")" hex)

  Alexander Kulumbeg 2021-02-04 15:22:53 +01:00
  3a38358946
• adding the hex parameter to _hmac call
  Alexander Kulumbeg 2021-02-04 15:18:39 +01:00
  6c9845b9f3
• Typo

  Forgot a quotation mark on line 161

  Alexander Kulumbeg 2021-02-04 15:15:17 +01:00
  9e146a8a5a
• Implementing/testing Neil's suggestions
  Alexander Kulumbeg 2021-02-04 15:11:53 +01:00
  433d9bfb02
• Testing double 2>/dev/null into _utc_date with sed
  Alexander Kulumbeg 2021-02-04 11:18:22 +01:00
  94917e315e
• 2>/dev/null/ to 2>/dev/null

  Silly mistake with a "/" -.-

  Alexander Kulumbeg 2021-02-04 11:15:13 +01:00
  ced6852735
• Extra test - adding date -u -d

  Adding this to at least partially prevent the virtually nonexistent possibility of timestamp and _utc_date() mismatch. If the normal date -u -d does not get converted (looking at you Solaris!), the poor man's method with manipulating the _utc_date() string output kicks in.

  Alexander Kulumbeg 2021-02-04 10:13:36 +01:00
  8dc55f417d
• Fixing the shebang accident
  Alexander Kulumbeg 2021-02-04 00:31:46 +01:00
  3d338bba3c