2433 Commits

Include renames

• feat: Add Volcano Engine DNS API (#7069)

  * feat: add volcengine dns api
  
  * fix(volcengine): address review findings and fix record matching
  
  Code review fixes:
  - fix format string usage in signature computation (use printf %b / %s)
  - clear _H1.._H5 header state at start of request to avoid leaking
    conditionally-set headers into subsequent requests
  - check ListZones return status in _get_root
  - document Volcengine_SESSION_TOKEN option and fix duplicate "and" typo
  - fix Docs and Issues sections
  - remove and update some code comments
  
  Functional fixes:
  - stop matching ListRecords results by FQDN string: Volcengine lowercases
    the Host/FQDN in responses, so a case-sensitive compare against
    $fulldomain failed for mixed-case names, making rm silently skip
    deletion and add lose idempotency. ListRecords is already filtered by
    ZID+Host+Value+SearchMode:exact, so just extract RecordID from the
    result instead.
  - reset _record_id at the start of add/rm to avoid stale state leaking
    across calls within the same process
  - tag created records with Remark "acme.sh" for easier identification
  - adjust debug levels: hide Authorization header behind _debug2, surface
    response at _debug
  
  Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
  
  ---------
  
  Co-authored-by: wenxuan70 <t736660416@gmail.com>
  Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

  3 people 2026-07-03 10:09:32 +00:00
  fdf528c26c
• fix https://github.com/acmesh-official/acme.sh/issues/6851
  neil 2026-07-02 23:18:26 +08:00
  42e13fa797
• DNS_IONOS double sending content type & case sensitive mismatch (#7028)

  * double sending content type results in error from ionos
  
  * Normalize fulldomain to lowercase in the _ionos_get_record function.

  MarFri 2026-07-02 23:08:59 +08:00
  a50fad865f
• Add Glesys dnsapi provider (#7059)

  * Add Glesys dnsapi provider
  
  * Fix typo in error message for dns_glesys_add
  
  * Use API to get record id in Glesys provider
  
  * Use listrecords API endpoint to find root domain
  
  * Remove record id parsin from add function

  Toni Karppi 2026-07-02 13:10:29 +08:00
  5433ea86c8
• fix https://github.com/acmesh-official/acme.sh/issues/7062
  neil 2026-07-02 13:09:59 +08:00
  e52d75d762
• Implemented support for Aruba Business DNS API (#7042)

  * Add support for arubabusiness api
  
  * Fix formatting
  
  * record names are always converted to lowercase
  
  * Docs
  
  * remove leftover unconditional authentication call
  lowercase
  urlencoded body + x-www-form-urlencoded content-type
  cleanup header variables
  cleanup typos
  grammar
  
  * Strengthen _ab_rest failure checks
  Properly process parallel lists in _ab_dns_record_id
  Remove hard fails when a txt record already exists
  
  * fix json parsing
  
  * Fix formatting
  
  ---------
  
  Co-authored-by: Manwe-Sulimo <blarghonaut@gmail.com>

  Manwe SulimoandManwe-Sulimo 2026-07-02 13:06:41 +08:00
  cb40b47a4e
• fix(dns_baidu): prefer new Baidu DNS API with legacy BCD fallback (#6992)

  * fix(acme): prefer new Baidu DNS API with legacy BCD fallback
  
  Keep the existing BCD implementation and add fallback support for the newer Baidu DNS record API. Prefer the new API by default, then fall back to the legacy BCD API to reduce compatibility risk.
  
  * fix(dns_baidu): route through _get/_post + restore legacy BCD auth headers
  
  Per review: _baidu_dns_call now uses _get/_post with _H1.._H5 (no raw curl, no __HTTP_STATUS__ parsing); _baidu_bcd_post restores _H1.._H5 so the legacy BCD path sends the Authorization signature again (fixes 401).
  
  ---------
  
  Co-authored-by: neil <github@neilpang.com>

  pxMan79andneil 2026-07-02 13:02:30 +08:00
  b039ff3087
• dns_inwx: fix IDN zone detection without python dependency (#7056)

  * dns_inwx: fix IDN zone detection without python dependency
  
  INWX returns zone names in Unicode form (e.g. lünenschloß.de) even when
  the domain was registered as an IDN. When acme.sh passes the SAN in
  punycode (xn--lnenschlo-o1a42a.de), _contains never matches and
  _get_root falls through to the TLD, placing the TXT record in the wrong
  zone.
  
  Previous fix used python3 which is not available in all environments
  (BusyBox, BSD, minimal containers). Replace with _idn()-based approach:
  extract <string> values from the nameserver.list XML response, encode
  each via _idn(), and compare to $h. When a match is found, use the
  original Unicode zone name for createRecord.
  
  Fixes #7038
  
  * dns_inwx: fix shebang, use _egrep_o, shfmt cleanup
  
  - Revert shebang to #!/usr/bin/env sh (POSIX sh, fixes ShellCheck)
  - Replace grep -o with _egrep_o for portability
  - shfmt -i 2: drop backslash continuation after pipe, fix indentation
  
  Requested by @neilpang
  
  * fix: drop closing </string> from _egrep_o pattern to avoid sed delimiter collision
  
  ---------
  
  Co-authored-by: bluenenschloss <bernd.luenenschloss@7p-group.com>

  bluenenschlossandbluenenschloss 2026-07-02 13:00:49 +08:00
  c83eed4994
• fix https://github.com/acmesh-official/acme.sh/issues/6498
  neil 2026-07-01 21:59:41 +08:00
  81100db2f3
• fix(dns_infomaniak): correctly detect API errors (#7048)

  The add/rm success check never rejected anything: for any non-empty API
  response it always reported "Record added"/"Record deleted" and returned
  0, so the _err branch was dead code. A valid key looked fine only because
  the API call genuinely created the record; an invalid key returning
  {"result":"error"} produced the same "Record added" output even though
  nothing was created.
  
  Root cause, in:
    if [ -n "$response" ]; then
      if [ ! "$(echo "$response" | _contains '"result":"success"')" ]; then
  
    - _contains() ignores stdin (it reads only $1 and $2), so the piped
      "$response" was discarded.
    - The pattern '"result":"success"' was passed as $1 (the haystack),
      leaving $2 (the needle) empty, so it ran:
        echo '"result":"success"' | grep -- "" >/dev/null 2>&1
      grep with an empty pattern always matches.
    - That grep output is redirected to /dev/null, so the command
      substitution always captured "", making [ ! "" ] always true.
  
  Fix: call _contains "$response" '"result":"success"' directly and branch
  on its exit code, so error responses now correctly fail (return 1).
  
  Co-authored-by: neil <github@neilpang.com>

  Jonas Zürcherandneil 2026-07-01 21:05:07 +08:00
  ae8ef74c4b
• Update dns_hostup.sh to v2 API (#7014)

  * Update dns_hostup.sh
  
  Update to v2 api support; developer.hostup.se
  
  * Update dns_hostup.sh

  hostup 2026-07-01 20:44:21 +08:00
  0d53d29f7e
• fix(dns_desec): fix rate limit and compatibility issues (#7027)

  * fix(dns_desec): sleep after DNS record change to prevent rate limit issues
  
  Also: make sure the subname is lowercase to fix tests where
  the acmetestXyzRandomName subdomain is used.
  
  * fix: make regexes POSIX-compatible (for OpenBSD)
  
  * chore: use _sleep instead of sleep to follow acme.sh standards

  Alexander Stehlik 2026-07-01 18:54:24 +08:00
  2998106bd1
• Implement support for DNS Level27 (#7043)

  * Add Level27 DNS API support
  
  Implements dns_level27_add and dns_level27_rm for the Level27 (level27.eu) DNS API, used for ACME dns-01 challenges.
  
  - Authenticates with a persistent API key via the Authorization header.
  - Resolves the registered zone with domains?filter and exact fullname match (supports DNS alias mode).
  - Removes the challenge record by its exact TXT value, leaving other records intact (wildcard-safe).
  - Optional LEVEL27_API override for non-default/staging endpoints.
  
  * A little better documentation
  
  ---------
  
  Co-authored-by: Jeroen Moors <jeroen.moors@level27.be>

  Jeroen MoorsandJeroen Moors 2026-06-29 01:27:41 +08:00
  b3579ff18d
• Fix dns_namesilo_rm failing to remove TXT record (#6969)

  * Fixes #6907

  regisvidal-bitmapz 2026-06-19 14:24:20 +02:00
  365d2d10f3
• Updated AWS Route53 service endpoint to the dual-stack endpoint (#6994)

  * Update to dual-stack service endpoint

  Bill 2026-06-05 22:06:49 +02:00
  d98fa53f62
• Add CDMON Api (#6984)

  * Added CDMon DNS API

  aitor422 2026-06-05 22:02:14 +02:00
  9b597b3f1b
• dns_1984hosting: cleanup, memoize zone id (#6978)

  * dns_1984hosting: cleanup, memoize zone id, optional OTP

  Adrian Fedoreanu 2026-06-05 19:28:08 +02:00
  a2f046306e
• remove dns_hetzner.sh

  https://github.com/acmesh-official/acme.sh/issues/6990#issuecomment-4576551997

  neil 2026-05-30 11:48:06 +02:00
  5713c1d39d
• Add Poweradmin DNS API plugin (dns_poweradmin) (#6943)

  * Add Poweradmin DNS API plugin (dns_poweradmin)

  Jakob Næss 2026-05-24 22:34:56 +02:00
  206f4494ac
• [dnsapi] add IP-Projects dns hook (#6959)
  Markus Ebner 2026-05-24 22:24:00 +02:00
  ce07759ced
• Improve Simply.com API (#6933)

  Improve Simply.com API (#6933)

  Tom Sommer 2026-05-24 22:20:40 +02:00
  010bd1111a
• Add EuroDNS DNS API plugin (dns_eurodns) (#6903)

  Co-authored-by: Nicolas Santorelli <nsantorelli@eurodns.com>

  nsantorelliandNicolas Santorelli 2026-05-02 10:56:13 +02:00
  96f87844cd
• Add dns_firestorm.sh plugin for Firestorm.ch DNS API (#6829)

  Firestorm.ch is a Swiss hosting provider with managed DNS (PowerDNS).
  This plugin allows customers to automate Let's Encrypt DNS-01 challenges
  via the Firestorm DNS API.

  firestormisp 2026-05-02 10:56:13 +02:00
  10e7e458af
• Add dns_cpanel_uapi DNS API plugin (#6878)

  * Add dns_cpanel_uapi.sh

  Adam Bodnar 2026-04-26 14:29:40 +02:00
  fd6ff7b173
• Add Gname.com dnsapi support (#6808)

  * add gname dns acme.sh

  GNDevProd 2026-04-14 20:57:22 +08:00
  454cec6e43
• add dnsapi for baidu cloud dns (#6844)
  wangzhizhou 2026-04-14 20:44:30 +08:00
  afba1455b8
• [dnsapi] add SiteHost DNS API hook (#6891)

  Co-authored-by: Jordan Russell <jordan.russell@sitehost.co.nz>

  Jordan RussellandJordan Russell 2026-04-08 22:07:30 +08:00
  618735d11e
• dns_world4you: Adapt to latest record id changes (#6897)
  Lorenz Stechauner 2026-04-08 22:00:42 +08:00
  08b2186afe
• Add bHosted.nl DNS API (#6864)

  Add bHosted.nl DNS API (#6864)

  Stefan Bottelier 2026-04-08 21:59:09 +08:00
  3509f6404f
• [dnsapi] add subreg.cz dns hook (#6848)

  * Add DNS hook for subreg.cz

  Tomáš Pavlič 2026-03-22 11:40:44 +08:00
  3c8c735362
• Add BEST-HOSTING DNS API (#6859)

  * Add BEST-HOSTING DNS API

  heximcz 2026-03-22 11:36:29 +08:00
  c397bd6573
• Add dns_czechia DNS API plugin (#6764)

  * Create dns_czechia.sh
  
  This PR adds a DNS API plugin for CZECHIA.COM / RegZone (ZONER a.s.).

  CZECHIA-COM 2026-03-16 20:17:18 +08:00
  8aea731bd4
• dnsapi/dns_me: ignore "already exists" error for multi-domain support (#6830)
  Ludwig 2026-03-08 18:37:29 +08:00
  03860a4978
• shfmt edit
  Travis 2026-03-03 05:31:51 -08:00
  f0146bd90e
• Merge branch 'dev' into add_technitium_expiry_ttl
  Tra5is 2026-03-03 04:59:54 -08:00
  20722ea030
• Add Expiry TTL option for Technitium DNS API
  Travis 2026-02-18 09:29:47 -08:00
  70f9e255d3
• Add the information from my last accepted pull that the TSIG key is optional.
  alexandergott-afk 2026-02-12 15:32:53 +01:00
  83424e7ba4
• Allow more than one DNS server for HA environments
  alexandergott-afk 2026-02-12 15:27:23 +01:00
  5bc44caf50
• Update dns_nsupdate.sh
  alexandergott-afk 2026-02-12 15:24:45 +01:00
  47412d1822
• too many spaces removed
  alexandergott-afk 2026-02-09 10:39:27 +01:00
  34052e56d7
• Fix Tab
  alexandergott-afk 2026-02-09 10:03:26 +01:00
  4807df0c3e
• Merge branch 'dev' into master
  alexandergott-afk 2026-02-05 10:39:19 +01:00
  ec0dc40ad8
• Update dns_nsupdate.sh
  alexandergott-afk 2026-02-05 09:20:51 +01:00
  7236ba2d7c
• Merge branch 'dev' into dns_infomaniak_API_v2
  JF DAGUIN 2026-01-30 23:08:17 +01:00
  274fd53c83
• Merge branch 'acmesh-official:master' into dns_infomaniak_API_v2
  JF DAGUIN 2026-01-30 23:04:36 +01:00
  a4595f334e
• Rewrite token scope and URL to add one

  Updated comments for clarity and formatting.

  JF DAGUIN 2026-01-30 23:00:25 +01:00
  477277bd2d
• fix: start zone detection from i=1 per acme.sh convention
  Kilian Ries 2026-01-23 09:20:00 +01:00
  9c245eb37a
• Merge branch 'dev' into add-opusdns-provider
  Kilian Ries 2026-01-22 18:34:04 +01:00
  713251c65b
• Fix zone detection: check for dnssec_status instead of name

  The error response also contains 'name' in 'zone_name' field,
  causing false positives. Check for 'dnssec_status' which only
  exists in valid zone responses.

  Kilian Ries 2026-01-22 18:13:51 +01:00
  2e85e6f9bb
• Refactor: Add _opusdns_api helper, simplify code

  - Added _opusdns_api() for all API requests
  - Added _opusdns_init() for config initialization
  - Removed duplicate code in add/rm functions
  - Removed dead code (orphaned lines 173-178)
  - Script now 158 lines (was 255, originally 379)

  Kilian Ries 2026-01-22 18:13:09 +01:00
  9e584e346d