rfc2136

Documentation

Index

• func GetSupportedAlgorithms() []string
• func ValidNameserver(nameserver string) (string, error)
• type DNSProvider
  • func NewDNSProvider() (*DNSProvider, error)
  • func NewDNSProviderCredentials(nameserver, tsigAlgorithm, tsigKeyName, tsigSecret string) (*DNSProvider, error)
  • func (r *DNSProvider) CleanUp(domain, token, keyAuth string) error
  • func (r *DNSProvider) Present(domain, token, keyAuth string) error
  • func (r *DNSProvider) Timeout() (timeout, interval time.Duration)

Functions

func GetSupportedAlgorithms

func GetSupportedAlgorithms() []string

Returns a slice of all the supported algorithms It should contain all listed in https://tools.ietf.org/html/rfc4635#section-2 but miekd/dns supports only supportedAlgorithms(keys)

func ValidNameserver

func ValidNameserver(nameserver string) (string, error)

This function make a valid nameserver as per RFC2136

Types

type DNSProvider

type DNSProvider struct {
	// contains filtered or unexported fields
}

DNSProvider is an implementation of the acme.ChallengeProvider interface that uses dynamic DNS updates (RFC 2136) to create TXT records on a nameserver.

func NewDNSProvider

func NewDNSProvider() (*DNSProvider, error)

NewDNSProvider returns a DNSProvider instance configured for rfc2136 dynamic update. Configured with environment variables: RFC2136_NAMESERVER: Network address in the form "host" or "host:port". RFC2136_TSIG_ALGORITHM: Defaults to hmac-md5.sig-alg.reg.int. (HMAC-MD5). See https://github.com/miekg/dns/blob/master/tsig.go for supported values. RFC2136_TSIG_KEY: Name of the secret key as defined in DNS server configuration. RFC2136_TSIG_SECRET: Secret key payload. To disable TSIG authentication, leave the RFC2136_TSIG* variables unset.

func NewDNSProviderCredentials

func NewDNSProviderCredentials(nameserver, tsigAlgorithm, tsigKeyName, tsigSecret string) (*DNSProvider, error)

NewDNSProviderCredentials uses the supplied credentials to return a DNSProvider instance configured for rfc2136 dynamic update. To disable TSIG authentication, leave the TSIG parameters as empty strings. nameserver must be a network address in the form "IP" or "IP:port".

func (*DNSProvider) CleanUp

func (r *DNSProvider) CleanUp(domain, token, keyAuth string) error

CleanUp removes the TXT record matching the specified parameters

func (*DNSProvider) Present

func (r *DNSProvider) Present(domain, token, keyAuth string) error

Present creates a TXT record using the specified parameters

func (*DNSProvider) Timeout

func (r *DNSProvider) Timeout() (timeout, interval time.Duration)

Timeout returns the timeout and interval to use when checking for DNS propagation. 300s (5m) is usually a default time for TTL in DNS