hook-dns-transip-api.php

#!/usr/bin/php

<?php

// Include domainservice
require_once('Transip/DomainService.php');
require_once('dns.inc.php');
require_once('config.inc.php');

echo (new DateTime)->format(DATE_RFC850)." Executing hook with params: ".implode(", ", $argv)."\n";

$action = $argv[1];     // Letsencrypt.sh hook action
$domain = sizeof($argv) > 2 ? $argv[2] : null;     // Full domain-name to work on
$zone = null;

$domains_pattern = implode("|", $my_domains);
$domains_pattern = str_replace(".", "\.", $domains_pattern);

$pattern = '/^((.*)\.)?(' . $domains_pattern . ')$/';

if( $action === "deploy_cert" )
{
    $file1 = $argv[3];
    $file2 = $argv[4];

    $result = `cat "$file1" "$file2" > "$(dirname "$file1")/privcert.pem"`;

    exit(0);
}

if( $domain) {
    if( preg_match($pattern, $argv[2], $matches ) )
    {
    //  echo "Host-part: ", $matches[1], "\n";
        $subdomain = $matches[2];
        rtrim($subdomain, ".");
    //  echo "Domain-part: ", $matches[2], "\n";
        $zone = $matches[3];
    }
    else
    {
        echo "No domain-name and/or subdomain found\n";
        exit(1);
    }

    // What record should we update
    if ( empty($subdomain))
    {
        $acmedomain = "_acme-challenge";
    }
    else
    {
        $acmedomain = "_acme-challenge.$subdomain";
    }

    // Retrieve all DNS records for the zone
    $dnsEntries = Transip_DomainService::getInfo($zone)->dnsEntries;
}

if( $action === "deploy_challenge" )
{
    $tokenfile = $argv[3];
    $tokenvalue = $argv[4];
    $found = 0;

    echo "DEPLOY_CHALLENGE with tokenvalue: '$tokenvalue' on zone: '$zone' and record: '$acmedomain'\n\n";

    $dnsEntries[] = new Transip_DnsEntry("$acmedomain", $ttl, Transip_DnsEntry::TYPE_TXT, $tokenvalue);

    try
    {
        // Commit the changes to the TransIP DNS servers
        Transip_DomainService::setDnsEntries($zone, $dnsEntries);
        echo "DNS updated\n\n";
    }
    catch(SoapFault $f)
    {
        echo "DNS not updated. " . $f->getMessage() , "\n\n";
        exit(1);
    }

    $continue = 0;
    while( $continue < sizeof($dns_servers) )
    {
        foreach( $dns_servers as $dns_server)
        {
            $dns_query=new DNSQuery($dns_server);
            $dns_result=$dns_query->Query("$acmedomain.$zone","TXT");

            if ( ($dns_result===false) || ($dns_query->error!=0) ) // error occured
            {
                echo $dns_query->lasterror;
                exit();
            }

            //Process Results
            $dns_result_count=$dns_result->count; // number of results returned
            if( $dns_result_count >= 1) // Allow for multiple results
            {
		    foreach( $dns_result->results as $dns_txt )
		    {
			if ( $tokenvalue == $dns_txt->data )
        	        {
                	    $continue++;
			}
		    }
            }
        }

        if ($continue < sizeof($dns_servers) )
        {
            echo "Result not ready, retrying in $sleeptime seconds, waiting for DNS record to become known.\n";
            sleep($sleeptime);
            $continue++;
        }
    }
    echo "Sleeping an additional 5 minute, waiting for DNS record to become known.";
    sleep(300);
}
elseif( $action === "clean_challenge" )
{
    $tokenfile = $argv[3];
    $tokenvalue = $argv[4];
    $found = 0;

    foreach ($dnsEntries as $key => $dnsEntry)
    {
        if($dnsEntry->name == "$acmedomain")
        {
            unset($dnsEntries[$key]);
            $found++;
        }
    }

    if( $found > 0)
    {
        $dnsEntries = array_values($dnsEntries);
        try
        {
            // Commit the changes to the TransIP DNS servers
            Transip_DomainService::setDnsEntries($zone, $dnsEntries);
            echo "DNS updated\n\n";
        }
        catch(SoapFault $f)
        {
            echo "DNS not updated. ", $f->getMessage() , "\n\n";
            echo "Please remove manually\n\n";
        }
    }
    else
    {
        echo "No need to update, record not found\n";
        exit(0);
    }
}
elseif( $action === "unchanged_cert" )
{
}
elseif( $action === "startup_hook" )
{
}
elseif( $action === "exit_hook" )
{
}
elseif( $action === "this_hookscript_is_broken__dehydrated_is_working_fine__please_ignore_unknown_hooks_in_your_script" )
{
}
else
{
    echo "Unknown hook action, '$action'";
}

exit(0);
?>