deblan-mirror/lego
1
0
Fork 0
mirror of https://github.com/go-acme/lego synced 2026-03-14 14:35:48 +01:00
Code Issues Projects Releases Packages Wiki Activity

Merge 0736895b03 into 87b172f103

Browse source
This commit is contained in:
Ludovic Fernandez 2026-03-13 06:58:12 +00:00 • committed by GitHub
commit 9a176d50b5
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 41 additions and 8 deletions
Download patch file Download diff file Expand all files Collapse all files

49
providers/dns/oraclecloud/oraclecloud.go
View file

@ -12,6 +12,7 @@ import (
"github.com/go-acme/lego/v4/challenge/dns01"
"github.com/go-acme/lego/v4/platform/config/env"
"github.com/go-acme/lego/v4/providers/dns/internal/clientdebug"
"github.com/go-acme/lego/v4/providers/dns/internal/ptr"
"github.com/nrdcg/oci-go-sdk/common/v1065"
"github.com/nrdcg/oci-go-sdk/common/v1065/auth"
"github.com/nrdcg/oci-go-sdk/dns/v1065"
@ -21,7 +22,8 @@ import (
const (
envNamespace = "OCI_"
EnvAuthType = envNamespace + "AUTH_TYPE"
EnvAuthType = envNamespace + "AUTH_TYPE"
EnvExtendedZoneDetection = envNamespace + "EXTENDED_ZONE_DETECTION"
EnvCompartmentOCID = envNamespace + "COMPARTMENT_OCID"
EnvRegion = envNamespace + "REGION"
@ -60,8 +62,9 @@ var _ challenge.ProviderTimeout = (*DNSProvider)(nil)
// Config is used to configure the creation of the DNSProvider.
type Config struct {
CompartmentID string
OCIConfigProvider common.ConfigurationProvider
CompartmentID string
OCIConfigProvider common.ConfigurationProvider
ExtendedZoneDetection bool
PropagationTimeout time.Duration
PollingInterval time.Duration
@ -90,6 +93,7 @@ type DNSProvider struct {
// NewDNSProvider returns a DNSProvider instance configured for OracleCloud.
func NewDNSProvider() (*DNSProvider, error) {
config := NewDefaultConfig()
config.ExtendedZoneDetection = env.GetOrDefaultBool(EnvExtendedZoneDetection, false)
switch env.GetOrFile(EnvAuthType) {
case string(common.InstancePrincipal):
@ -193,21 +197,28 @@ func (d *DNSProvider) Present(domain, token, keyAuth string) error {
func (d *DNSProvider) CleanUp(domain, token, keyAuth string) error {
info := dns01.GetChallengeInfo(domain, keyAuth)
zoneNameOrID, err := dns01.FindZoneByFqdn(info.EffectiveFQDN)
ctx := context.Background()
authZone, err := dns01.FindZoneByFqdn(info.EffectiveFQDN)
if err != nil {
return fmt.Errorf("oraclecloud: could not find zone for domain %q: %w", domain, err)
}
if d.config.ExtendedZoneDetection {
authZone, err = d.findZone(ctx, info.EffectiveFQDN, authZone)
if err != nil {
return fmt.Errorf("oraclecloud: %w", err)
}
}
// search to TXT record's hash to delete
getRequest := dns.GetDomainRecordsRequest{
ZoneNameOrId: common.String(zoneNameOrID),
ZoneNameOrId: common.String(authZone),
Domain: common.String(dns01.UnFqdn(info.EffectiveFQDN)),
CompartmentId: common.String(d.config.CompartmentID),
Rtype: common.String("TXT"),
}
ctx := context.Background()
domainRecords, err := d.client.GetDomainRecords(ctx, getRequest)
if err != nil {
return fmt.Errorf("oraclecloud: %w", err)
@ -236,7 +247,7 @@ func (d *DNSProvider) CleanUp(domain, token, keyAuth string) error {
}
patchRequest := dns.PatchDomainRecordsRequest{
ZoneNameOrId: common.String(zoneNameOrID),
ZoneNameOrId: common.String(authZone),
Domain: common.String(dns01.UnFqdn(info.EffectiveFQDN)),
PatchDomainRecordsDetails: dns.PatchDomainRecordsDetails{
Items: []dns.RecordOperation{recordOperation},
@ -257,3 +268,25 @@ func (d *DNSProvider) CleanUp(domain, token, keyAuth string) error {
func (d *DNSProvider) Timeout() (timeout, interval time.Duration) {
return d.config.PropagationTimeout, d.config.PollingInterval
}
func (d *DNSProvider) findZone(ctx context.Context, effectiveFQDN, requestedZone string) (string, error) {
zones, err := d.client.ListZones(ctx, dns.ListZonesRequest{
CompartmentId: common.String(d.config.CompartmentID),
NameContains: common.String(requestedZone),
SortBy: dns.ListZonesSortByName,
Limit: ptr.Pointer[int64](100),
})
if err != nil {
return "", err
}
for name := range dns01.UnFqdnDomainsSeq(effectiveFQDN) {
for _, item := range zones.Items {
if ptr.Deref(item.Name) == name {
return ptr.Deref(item.Name), nil
}
}
}
return "", fmt.Errorf("zone not found (%q/%q)", effectiveFQDN, requestedZone)
}