Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

First attempt at implementing a DNSMADEEASY provider using their API #254

Merged
merged 5 commits into from
Oct 26, 2017

Conversation

MatthewSteeples
Copy link
Contributor

Comments welcome

@rayholtz
Copy link

This would be great! I was going to start writing a powershell script to interface with DNSMadeEasy to insert the TXT records, but if this provider is built, all the better! Let me know if you need help testing!

@MatthewSteeples
Copy link
Contributor Author

Used this properly ourselves today, and successfully renewed our certificates automagically

Complete-ACMEChallenge $DnsIdentifier -ChallengeType dns-01 -Handler dnsme -HandlerParameters @{ApiKey="abc123"; SecretKey="abc123"}

@MatthewSteeples
Copy link
Contributor Author

Rebased off master, I think this is probably ready to go in now @ebekker

}
}

private string getRecordId(DnsChallenge dnsChallenge, DomainDetails domainDetails, string records)
Copy link
Owner

@ebekker ebekker Aug 2, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Correct the casing of the method as per default conventions. There are several other locations throughout down below as well.


namespace ACMESharp.ACME.Providers
{
/// <summary>
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Update the XML Comments and attribute description with specifics for the DNSME provider.

@ebekker
Copy link
Owner

ebekker commented Aug 2, 2017

@MatthewSteeples , thank you for the contribution! I've requested a few changes in the code to improve the code quality.

@ebekker
Copy link
Owner

ebekker commented Aug 16, 2017

@MatthewSteeples, are you able to test out this code against the DME SANDBOX environment (e.g. API endpoint https://api.sandbox.dnsmadeeasy.com/V2.0)?

That is, if you use the sandbox, will it actually make changes that can be queried by the Let's Encrypt servers. In my testing, any record that I put into a SANDBOX account do not resolve. So if I create a TXT resource record, it can't be queried by the LE servers.

Is this the same thing you are finding?

@MatthewSteeples
Copy link
Contributor Author

@ebekker Sorry for the delay. I'll get the code updated this week

Regarding sandbox, any changes you make to DME Sandbox will not be returned to public DNS queries so LE will not be able to query it. You can test that the updates are being made, but only with a production DME account will LE be able to action the changes

@MatthewSteeples
Copy link
Contributor Author

Pushed an update to resolve the merge conflicts, update method names to fit in with existing convention and updated XML docs

@engageant
Copy link

Hi folks, where are we at with this? I have a need to use DNS Made Easy as a provider and was about to roll my own when I stumbled upon this.

@ebekker ebekker merged commit 2e1c952 into ebekker:master Oct 26, 2017
@ebekker
Copy link
Owner

ebekker commented Oct 26, 2017

The docs have also been updated with this, so hopefully everything works for those with DNS-M-E, give it a try and let us know.

@engageant
Copy link

Forgive me for my limited knowledge, but I cannot seem to get this working with staging. If I specify my HandlerParamaters as @{ApiKey = "xxxx"; SecretKey = "yyyy"; Staging = "true"} I get an InvalidCastException. When I omit the Staging option, my PS console crashes without displaying an error. I can't seem to figure out the correct syntax for the Staging boolean - what am I missing?

@ebekker
Copy link
Owner

ebekker commented Oct 31, 2017

@MatthewSteeples is going to have to step in here to help, I have no access to DME.

@MatthewSteeples
Copy link
Contributor Author

Which version of Windows / Powershell are you running?

@engageant
Copy link

Server 2016, Powershell 5.1.14393.1770

@MatthewSteeples
Copy link
Contributor Author

@engageant I can't get the same error here locally. Do you have the right kind of DNSME account for API access (it's not on the basic tier). If you do, could you do a Fiddler trace and send me (privately if you want) a Fiddler trace of the requests to/from DNSME?

@engageant
Copy link

engageant commented Oct 31, 2017 via email

@MatthewSteeples
Copy link
Contributor Author

@engageant Correct. It's more for testing the functionality of the code rather than the certificates that you want to create. Any changes made in DNSME's sandbox will not be visible to LE's servers, which means that they won't be able to use those results to produce certificates

@engageant
Copy link

@MatthewSteeples I'm using a sandbox account for my testing here. The domain I'm requesting a cert for is set up in the sandbox account. Am I formatting the staging parameter correctly?

@ebekker
Copy link
Owner

ebekker commented Nov 4, 2017

@MatthewSteeples was saying that changes made in STAGING will not be visible to LE, so you cannot make a request for a cert from LE if you're using only DME STAGING.

DME STAGING is just so you can test interaction with DME's APIs only.

@engageant
Copy link

engageant commented Nov 6, 2017 via email

@MatthewSteeples
Copy link
Contributor Author

I've just noticed in your variable that Staging may need to be a boolean rather than a string. Can you try $True instead of true in quotes?

Doesn't explain which it's crashing if you omit the variable though

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants