hook.sh

hook.sh

#!/bin/bash

function deploy_challenge {
    # This hook is called once for every domain that needs to be
    # validated, including any alternative names you may have listed.
    #
    # Parameters:
    # - DOMAIN
    #   The domain name (CN or subject alternative name) being
    #   validated.
    # - TOKEN_FILENAME
    #   The name of the file containing the token to be served for HTTP
    #   validation. Should be served by your web server as
    #   /.well-known/acme-challenge/${TOKEN_FILENAME}.
    # - TOKEN_VALUE
    #   The token value that needs to be served for validation. For DNS
    #   validation, this is what you want to put in the _acme-challenge
    #   TXT record. For HTTP validation it is the value that is expected
    #   be found in the $TOKEN_FILENAME file.

    uf="$(mktemp)"
    trap "rm \"$uf\"" RETURN

    while [ $# -ge 3 ]; do
        local DOMAIN="${1}" TOKEN_FILENAME="${2}" TOKEN_VALUE="${3}"
        echo -e "update add _acme-challenge.${DOMAIN}. 5 IN TXT \"${TOKEN_VALUE}\"\n" >> "${uf}"
        shift 3
    done

    echo -e "send\n" >> "${uf}"

    sudo nsupdate -l "${uf}" || return -1
    sleep 30
}

function clean_challenge {
    # This hook is called after attempting to validate each domain,
    # whether or not validation was successful. Here you can delete
    # files or DNS records that are no longer needed.
    #
    # The parameters are the same as for deploy_challenge.

    uf="$(mktemp)"
    trap "rm \"$uf\"" RETURN

    while [ $# -ge 3 ]; do
        local DOMAIN="${1}" TOKEN_FILENAME="${2}" TOKEN_VALUE="${3}"
        echo -e "update delete _acme-challenge.${DOMAIN}. 5 IN TXT\n" >> "$uf"
        shift 3
    done

    echo -e "send\n" >> "${uf}"

    sudo nsupdate -l "${uf}" || return -1
}

HANDLER="$1"; shift
if [[ "${HANDLER}" =~ ^(deploy_challenge|clean_challenge)$ ]]; then
  "$HANDLER" "$@"
fi