-
-
Notifications
You must be signed in to change notification settings - Fork 477
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
374 changed files
with
11,262 additions
and
14 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
40 changes: 40 additions & 0 deletions
40
internal/pkg/core/applicant/acme-dns-01/lego-providers/cmcc/cmcc.go
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,40 @@ | ||
| package cmcc | ||
|
|
||
| import ( | ||
| "errors" | ||
| "time" | ||
|
|
||
| "github.com/go-acme/lego/v4/challenge" | ||
|
|
||
| "github.com/usual2970/certimate/internal/pkg/core/applicant/acme-dns-01/lego-providers/cmcc/internal" | ||
| ) | ||
|
|
||
| type CmccApplicantConfig struct { | ||
| AccessKeyId string `json:"accessKeyId"` | ||
| AccessKeySecret string `json:"accessKeySecret"` | ||
| DnsPropagationTimeout int32 `json:"dnsPropagationTimeout,omitempty"` | ||
| DnsTTL int32 `json:"dnsTTL,omitempty"` | ||
| } | ||
|
|
||
| func NewChallengeProvider(config *CmccApplicantConfig) (challenge.Provider, error) { | ||
| if config == nil { | ||
| return nil, errors.New("config is nil") | ||
| } | ||
|
|
||
| providerConfig := internal.NewDefaultConfig() | ||
| providerConfig.AccessKeyId = config.AccessKeyId | ||
| providerConfig.AccessKeySecret = config.AccessKeySecret | ||
| if config.DnsTTL != 0 { | ||
| providerConfig.TTL = config.DnsTTL | ||
| } | ||
| if config.DnsPropagationTimeout != 0 { | ||
| providerConfig.PropagationTimeout = time.Duration(config.DnsPropagationTimeout) * time.Second | ||
| } | ||
|
|
||
| provider, err := internal.NewDNSProviderConfig(providerConfig) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
|
|
||
| return provider, nil | ||
| } |
219 changes: 219 additions & 0 deletions
219
internal/pkg/core/applicant/acme-dns-01/lego-providers/cmcc/internal/lego.go
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,219 @@ | ||
| package internal | ||
|
|
||
| import ( | ||
| "encoding/json" | ||
| "errors" | ||
| "fmt" | ||
| "strings" | ||
| "time" | ||
|
|
||
| "github.com/go-acme/lego/v4/challenge" | ||
| "github.com/go-acme/lego/v4/challenge/dns01" | ||
| "github.com/go-acme/lego/v4/platform/config/env" | ||
| "gitlab.ecloud.com/ecloud/ecloudsdkclouddns" | ||
| "gitlab.ecloud.com/ecloud/ecloudsdkclouddns/model" | ||
| "gitlab.ecloud.com/ecloud/ecloudsdkcore/config" | ||
| ) | ||
|
|
||
| const ( | ||
| envNamespace = "CMCC_" | ||
|
|
||
| EnvAccessKeyId = envNamespace + "ACCESS_KEY_ID" | ||
| EnvAccessKeySecret = envNamespace + "ACCESS_KEY_SECRET" | ||
| EnvTTL = envNamespace + "TTL" | ||
| EnvPropagationTimeout = envNamespace + "PROPAGATION_TIMEOUT" | ||
| EnvPollingInterval = envNamespace + "POLLING_INTERVAL" | ||
| EnvReadTimeOut = envNamespace + "READ_TIMEOUT" | ||
| EnvConnectTimeout = envNamespace + "CONNECT_TIMEOUT" | ||
| ) | ||
|
|
||
| var _ challenge.ProviderTimeout = (*DNSProvider)(nil) | ||
|
|
||
| type Config struct { | ||
| AccessKeyId string | ||
| AccessKeySecret string | ||
| ReadTimeOut int | ||
| ConnectTimeout int | ||
| PropagationTimeout time.Duration | ||
| PollingInterval time.Duration | ||
| TTL int32 | ||
| } | ||
|
|
||
| type DNSProvider struct { | ||
| client *ecloudsdkclouddns.Client | ||
| config *Config | ||
| } | ||
|
|
||
| func NewDefaultConfig() *Config { | ||
| return &Config{ | ||
| ReadTimeOut: env.GetOrDefaultInt(EnvReadTimeOut, 30), | ||
| ConnectTimeout: env.GetOrDefaultInt(EnvConnectTimeout, 30), | ||
| TTL: int32(env.GetOrDefaultInt(EnvTTL, 600)), | ||
| PropagationTimeout: env.GetOrDefaultSecond(EnvPropagationTimeout, 2*time.Minute), | ||
| PollingInterval: env.GetOrDefaultSecond(EnvPollingInterval, dns01.DefaultPollingInterval), | ||
| } | ||
| } | ||
|
|
||
| func NewDNSProvider() (*DNSProvider, error) { | ||
| values, err := env.Get(EnvAccessKeyId, EnvAccessKeySecret) | ||
| if err != nil { | ||
| return nil, fmt.Errorf("cmcc: %w", err) | ||
| } | ||
|
|
||
| cfg := NewDefaultConfig() | ||
| cfg.AccessKeyId = values[EnvAccessKeyId] | ||
| cfg.AccessKeySecret = values[EnvAccessKeySecret] | ||
|
|
||
| return NewDNSProviderConfig(cfg) | ||
| } | ||
|
|
||
| func NewDNSProviderConfig(cfg *Config) (*DNSProvider, error) { | ||
| if cfg == nil { | ||
| return nil, errors.New("cmcc: the configuration of the DNS provider is nil") | ||
| } | ||
|
|
||
| client := ecloudsdkclouddns.NewClient(&config.Config{ | ||
| AccessKey: cfg.AccessKeyId, | ||
| SecretKey: cfg.AccessKeySecret, | ||
| // 资源池常量见: https://ecloud.10086.cn/op-help-center/doc/article/54462 | ||
| // 默认全局 | ||
| PoolId: "CIDC-CORE-00", | ||
| ReadTimeOut: cfg.ReadTimeOut, | ||
| ConnectTimeout: cfg.ConnectTimeout, | ||
| }) | ||
|
|
||
| return &DNSProvider{ | ||
| client: client, | ||
| config: cfg, | ||
| }, nil | ||
| } | ||
|
|
||
| func (d *DNSProvider) Present(domain, token, keyAuth string) error { | ||
| info := dns01.GetChallengeInfo(domain, keyAuth) | ||
|
|
||
| zoneName, err := dns01.FindZoneByFqdn(info.EffectiveFQDN) | ||
| if err != nil { | ||
| return fmt.Errorf("cmcc: %w", err) | ||
| } | ||
|
|
||
| subDomain, err := dns01.ExtractSubDomain(info.EffectiveFQDN, zoneName) | ||
| if err != nil { | ||
| return fmt.Errorf("cmcc: %w", err) | ||
| } | ||
|
|
||
| readDomain := strings.Trim(zoneName, ".") | ||
| record, err := d.getDomainRecord(readDomain, subDomain) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if record == nil { // add new record | ||
| resp, err := d.client.CreateRecordOpenapi(&model.CreateRecordOpenapiRequest{ | ||
| CreateRecordOpenapiBody: &model.CreateRecordOpenapiBody{ | ||
| LineId: "0", // 默认线路 | ||
| Rr: subDomain, | ||
| DomainName: readDomain, | ||
| Description: "from certimate", | ||
| Type: model.CreateRecordOpenapiBodyTypeEnumTxt, | ||
| Value: info.Value, | ||
| Ttl: &d.config.TTL, | ||
| }, | ||
| }) | ||
| if err != nil { | ||
| return fmt.Errorf("lego: %w", err) | ||
| } | ||
| if resp.State != model.CreateRecordOpenapiResponseStateEnumOk { | ||
| return fmt.Errorf("lego: create record failed, response state: %s, message: %s, code: %s", resp.State, resp.ErrorMessage, resp.ErrorCode) | ||
| } | ||
| return nil | ||
| } else { // update record | ||
| resp, err := d.client.ModifyRecordOpenapi(&model.ModifyRecordOpenapiRequest{ | ||
| ModifyRecordOpenapiBody: &model.ModifyRecordOpenapiBody{ | ||
| RecordId: record.RecordId, | ||
| Rr: subDomain, | ||
| DomainName: readDomain, | ||
| Description: "from certmate", | ||
| LineId: "0", | ||
| Type: model.ModifyRecordOpenapiBodyTypeEnumTxt, | ||
| Value: info.Value, | ||
| Ttl: &d.config.TTL, | ||
| }, | ||
| }) | ||
| if err != nil { | ||
| return fmt.Errorf("lego: %w", err) | ||
| } | ||
| if resp.State != model.ModifyRecordOpenapiResponseStateEnumOk { | ||
| return fmt.Errorf("lego: create record failed, response state: %s", resp.State) | ||
| } | ||
| return nil | ||
| } | ||
| } | ||
|
|
||
| func (d *DNSProvider) CleanUp(domain, token, keyAuth string) error { | ||
| challengeInfo := dns01.GetChallengeInfo(domain, keyAuth) | ||
| zoneName, err := dns01.FindZoneByFqdn(challengeInfo.FQDN) | ||
| if err != nil { | ||
| return fmt.Errorf("cmcc: %w", err) | ||
| } | ||
| subDomain, err := dns01.ExtractSubDomain(challengeInfo.FQDN, zoneName) | ||
| if err != nil { | ||
| return fmt.Errorf("cmcc: %w", err) | ||
| } | ||
| readDomain := strings.Trim(zoneName, ".") | ||
| record, err := d.getDomainRecord(readDomain, subDomain) | ||
| if err != nil { | ||
| return err | ||
| } | ||
| if record == nil { | ||
| return nil | ||
| } | ||
| resp, err := d.client.DeleteRecordOpenapi(&model.DeleteRecordOpenapiRequest{ | ||
| DeleteRecordOpenapiBody: &model.DeleteRecordOpenapiBody{ | ||
| RecordIdList: []string{record.RecordId}, | ||
| }, | ||
| }) | ||
| if err != nil { | ||
| return fmt.Errorf("lego: %w", err) | ||
| } | ||
| if resp.State != model.DeleteRecordOpenapiResponseStateEnumOk { | ||
| return fmt.Errorf("lego: delete record failed, response state: %s", resp.State) | ||
| } | ||
| return nil | ||
| } | ||
|
|
||
| func (d *DNSProvider) Timeout() (timeout, interval time.Duration) { | ||
| return d.config.PropagationTimeout, d.config.PollingInterval | ||
| } | ||
|
|
||
| func (d *DNSProvider) getDomainRecord(domain string, rr string) (*model.ListRecordOpenapiResponseData, error) { | ||
| pageSize := int32(50) | ||
| page := int32(1) | ||
| for { | ||
| resp, err := d.client.ListRecordOpenapi(&model.ListRecordOpenapiRequest{ | ||
| ListRecordOpenapiBody: &model.ListRecordOpenapiBody{ | ||
| DomainName: domain, | ||
| }, | ||
| ListRecordOpenapiQuery: &model.ListRecordOpenapiQuery{ | ||
| PageSize: &pageSize, | ||
| Page: &page, | ||
| }, | ||
| }) | ||
| if err != nil { | ||
| return nil, err | ||
| } | ||
| if resp.State != model.ListRecordOpenapiResponseStateEnumOk { | ||
| respStr, _ := json.Marshal(resp) | ||
| return nil, fmt.Errorf("request error. %s", string(respStr)) | ||
| } | ||
| if resp.Body.Data != nil { | ||
| for _, item := range *resp.Body.Data { | ||
| if item.Rr == rr { | ||
| return &item, nil | ||
| } | ||
| } | ||
| } | ||
| if resp.Body.TotalPages == nil || page >= *resp.Body.TotalPages { | ||
| return nil, nil | ||
| } | ||
| page++ | ||
| } | ||
| } |
Oops, something went wrong.