Merge e4ee5a43dd into 50e8d2ed00
This commit is contained in:
Chanceler Shaffer
GitHub
commit
822f0761c7
3 changed files with 495 additions and 7 deletions
|
|
@ -57,6 +57,7 @@ AM_PL_LOG_FLAGS = -Mstrict -w \
|
||||||
-I'$(abs_top_srcdir)'/t/lib \
|
-I'$(abs_top_srcdir)'/t/lib \
|
||||||
-MDevel::Autoflush
|
-MDevel::Autoflush
|
||||||
handwritten_tests = \
|
handwritten_tests = \
|
||||||
|
t/aws_signed_request.pl \
|
||||||
t/builtinfw_query.pl \
|
t/builtinfw_query.pl \
|
||||||
t/check_value.pl \
|
t/check_value.pl \
|
||||||
t/get_ip_from_if.pl \
|
t/get_ip_from_if.pl \
|
||||||
|
|
|
||||||
429
ddclient.in
429
ddclient.in
|
|
@ -1311,6 +1311,20 @@ our %protocols = (
|
||||||
'max-interval' => setv(T_DELAY, 0, 'inf', 0),
|
'max-interval' => setv(T_DELAY, 0, 'inf', 0),
|
||||||
},
|
},
|
||||||
),
|
),
|
||||||
|
'route53' => ddclient::Protocol->new(
|
||||||
|
'update' => \&nic_route53_update,
|
||||||
|
'examples' => \&nic_route53_examples,
|
||||||
|
'cfgvars' => {
|
||||||
|
%{$cfgvars{'protocol-common-defaults'}},
|
||||||
|
'login' => undef,
|
||||||
|
'password' => undef,
|
||||||
|
'hosted-zone-id' => setv(T_STRING, 1, undef, undef),
|
||||||
|
# TODO: Add AWS Security Token Service (STS) support for more secure way to access.
|
||||||
|
'aws-secret-access-key' => setv(T_STRING, 1, undef, undef),
|
||||||
|
'aws-access-key-id' => setv(T_STRING, 1, undef, undef),
|
||||||
|
'aws-region' => setv(T_STRING, 0, 'us-east-1', undef),
|
||||||
|
},
|
||||||
|
),
|
||||||
);
|
);
|
||||||
$cfgvars{'merged'} = {
|
$cfgvars{'merged'} = {
|
||||||
map({ %{$protocols{$_}{'cfgvars'}} } keys(%protocols)),
|
map({ %{$protocols{$_}{'cfgvars'}} } keys(%protocols)),
|
||||||
|
|
@ -2119,8 +2133,8 @@ sub init_config {
|
||||||
# given?
|
# given?
|
||||||
|
|
||||||
my @protos = map(opt('protocol', $_), keys(%config));
|
my @protos = map(opt('protocol', $_), keys(%config));
|
||||||
my @needs_sha1 = grep({ my $p = $_; grep($_ eq $p, @protos); } qw(freedns nfsn));
|
my @needs_sha = grep({ my $p = $_; grep($_ eq $p, @protos); } qw(freedns nfsn route53));
|
||||||
load_sha1_support(join(', ', @needs_sha1)) if @needs_sha1;
|
load_sha_support(join(', ', @needs_sha)) if @needs_sha;
|
||||||
my @needs_json = grep({ my $p = $_; grep($_ eq $p, @protos); }
|
my @needs_json = grep({ my $p = $_; grep($_ eq $p, @protos); }
|
||||||
qw(1984 cloudflare digitalocean directnic dnsexit2 gandi godaddy hetzner
|
qw(1984 cloudflare digitalocean directnic dnsexit2 gandi godaddy hetzner
|
||||||
nfsn njalla porkbun yandex));
|
nfsn njalla porkbun yandex));
|
||||||
|
|
@ -2721,16 +2735,13 @@ sub check_value {
|
||||||
return $value;
|
return $value;
|
||||||
}
|
}
|
||||||
|
|
||||||
######################################################################
|
sub load_sha_support {
|
||||||
## load_sha1_support
|
|
||||||
######################################################################
|
|
||||||
sub load_sha1_support {
|
|
||||||
my ($protocol) = @_;
|
my ($protocol) = @_;
|
||||||
eval { require Digest::SHA; } or fatal(<<"EOM");
|
eval { require Digest::SHA; } or fatal(<<"EOM");
|
||||||
Error loading the Perl module Digest::SHA needed for $protocol update.
|
Error loading the Perl module Digest::SHA needed for $protocol update.
|
||||||
On Debian, the package libdigest-sha-perl must be installed.
|
On Debian, the package libdigest-sha-perl must be installed.
|
||||||
EOM
|
EOM
|
||||||
Digest::SHA->import(qw/sha1_hex/);
|
Digest::SHA->import(qw/sha1_hex sha256_hex hmac_sha256_hex hmac_sha256/);
|
||||||
}
|
}
|
||||||
|
|
||||||
######################################################################
|
######################################################################
|
||||||
|
|
@ -7683,6 +7694,410 @@ Example ${program}.conf file entries:
|
||||||
EoEXAMPLE
|
EoEXAMPLE
|
||||||
}
|
}
|
||||||
|
|
||||||
|
######################################################################
|
||||||
|
## nic_route53_examples
|
||||||
|
######################################################################
|
||||||
|
sub nic_route53_examples {
|
||||||
|
return <<"EoEXAMPLE";
|
||||||
|
|
||||||
|
o 'route53'
|
||||||
|
|
||||||
|
The 'route53' protocol is used for the Amazon AWS Route 53 service.
|
||||||
|
|
||||||
|
Configuration variables applicable to the 'route53' protocol are:
|
||||||
|
protocol=route53
|
||||||
|
hosted-zone-id=[string] ## (Required) The ID of the Hosted Zone.
|
||||||
|
ttl=[number] ## TTL for record (Defaults to 300).
|
||||||
|
region=[string] ## AWS Region (Defaults to us-east-1)
|
||||||
|
aws-access-key-id=[string] ## (Required) AWS access key ID.
|
||||||
|
aws-secret-access-key=[string] ## (Required) AWS secret access key.
|
||||||
|
example.com ## Domain name to update.
|
||||||
|
|
||||||
|
Example ${program}.conf file entries:
|
||||||
|
protocol=route53 \\
|
||||||
|
hosted-zone-id=ZXXXXXXXXXXX \\
|
||||||
|
aws-access-key-id=AKIAIOSFODNN7EXAMPLE \\
|
||||||
|
aws-secret-access-key="wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY" \\
|
||||||
|
my.address.com
|
||||||
|
|
||||||
|
# Obtaining the access key ID and secret from environment variables:
|
||||||
|
protocol=route53 \\
|
||||||
|
hosted-zone-id=ZXXXXXXXXXXX \\
|
||||||
|
aws-access-key-id_env=AWS_ACCESS_KEY_ID \\
|
||||||
|
aws-secret-access-key_env=AWS_SECRET_ACCESS_KEY \\
|
||||||
|
my.address.com
|
||||||
|
|
||||||
|
EoEXAMPLE
|
||||||
|
}
|
||||||
|
|
||||||
|
sub append_zero {
|
||||||
|
my (
|
||||||
|
$input
|
||||||
|
) = @_;
|
||||||
|
return sprintf("%02d", $input);
|
||||||
|
}
|
||||||
|
|
||||||
|
# Not create a whole package so discount version of a class I guess
|
||||||
|
# Start Date object
|
||||||
|
sub create_date {
|
||||||
|
my ($time) = @_;
|
||||||
|
my ($sec,$min,$hour,$mday,$mon,$year) = gmtime($time // time);
|
||||||
|
|
||||||
|
my %date = (
|
||||||
|
year => $year + 1900,
|
||||||
|
month => append_zero($mon + 1),
|
||||||
|
day => append_zero($mday),
|
||||||
|
hour => append_zero($hour),
|
||||||
|
min => append_zero($min),
|
||||||
|
sec => append_zero($sec)
|
||||||
|
);
|
||||||
|
|
||||||
|
return \%date;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub to_iso_string {
|
||||||
|
my ($date) = @_;
|
||||||
|
return $date->{'year'}.$date->{'month'}.$date->{'day'}."T".$date->{'hour'}.$date->{'min'}.$date->{'sec'}."Z";
|
||||||
|
}
|
||||||
|
|
||||||
|
sub to_short_date {
|
||||||
|
my ($date) = @_;
|
||||||
|
return $date->{'year'}.$date->{'month'}.$date->{'day'};
|
||||||
|
}
|
||||||
|
|
||||||
|
# End date object
|
||||||
|
|
||||||
|
sub get_encoded_query_string {
|
||||||
|
my ($query_parameter_map) = @_;
|
||||||
|
|
||||||
|
my @sorted_query_string_keys = sort(keys(%$query_parameter_map));
|
||||||
|
my $encoded_query_string = "";
|
||||||
|
foreach my $key (@sorted_query_string_keys) {
|
||||||
|
$encoded_query_string = $encoded_query_string.$key."=".%{%$query_parameter_map}{$key};
|
||||||
|
if ($key ne $sorted_query_string_keys[$#sorted_query_string_keys]) {
|
||||||
|
$encoded_query_string = $encoded_query_string."&";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return $encoded_query_string;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub get_encoded_url {
|
||||||
|
my (
|
||||||
|
$protocol_cp,
|
||||||
|
$host_cp,
|
||||||
|
$path_cp,
|
||||||
|
$query_parameter_map
|
||||||
|
) = @_;
|
||||||
|
|
||||||
|
my $query_string = $protocol_cp."://".$host_cp.$path_cp.get_encoded_query_string($query_parameter_map);
|
||||||
|
|
||||||
|
return $query_string;
|
||||||
|
}
|
||||||
|
|
||||||
|
# End URL object
|
||||||
|
|
||||||
|
sub create_canonical_request_hash {
|
||||||
|
my (
|
||||||
|
$method,
|
||||||
|
$host_cp,
|
||||||
|
$path_cp,
|
||||||
|
$query_parameter_map,
|
||||||
|
$sent_payload,
|
||||||
|
$incoming_headers,
|
||||||
|
$date
|
||||||
|
) = @_;
|
||||||
|
|
||||||
|
my $http_method = $method // "GET";
|
||||||
|
my $payload_to_hash = $sent_payload // "";
|
||||||
|
my $payload = lc sha256_hex($payload_to_hash);
|
||||||
|
|
||||||
|
my %generated_headers = (
|
||||||
|
host => $host_cp,
|
||||||
|
'x-amz-content-sha256' => $payload,
|
||||||
|
'x-amz-date' => to_iso_string($date)
|
||||||
|
);
|
||||||
|
|
||||||
|
my %finalized_headers = (%{$incoming_headers}, %generated_headers);
|
||||||
|
|
||||||
|
my $header_string = "";
|
||||||
|
my $signed_headers = "";
|
||||||
|
my @finalized_header_keys = sort keys %finalized_headers;
|
||||||
|
my %formatted_finalized_headers = ();
|
||||||
|
debug("\n");
|
||||||
|
for my $header_key (@finalized_header_keys) {
|
||||||
|
my $value = $finalized_headers{$header_key};
|
||||||
|
$value =~ s/^\s+|\s+$//g;
|
||||||
|
debug("Key: ".$header_key." | Value: ".$value."\n");
|
||||||
|
$header_string = $header_string.(lc $header_key).':'.($value)."\n";
|
||||||
|
$signed_headers = $signed_headers.(lc $header_key);
|
||||||
|
|
||||||
|
if ($header_key ne $finalized_header_keys[$#finalized_header_keys]) {
|
||||||
|
$signed_headers = $signed_headers.';';
|
||||||
|
}
|
||||||
|
|
||||||
|
$formatted_finalized_headers{lc $header_key} = $value;
|
||||||
|
}
|
||||||
|
debug("\n");
|
||||||
|
|
||||||
|
my $canonical_query_string = get_encoded_query_string($query_parameter_map);
|
||||||
|
debug("\nPayload: ".$payload_to_hash."\n");
|
||||||
|
my $canonical_request = "$method\n$path_cp\n$canonical_query_string\n$header_string\n$signed_headers\n$payload";
|
||||||
|
|
||||||
|
debug("Canonical Request\n-------------\n$canonical_request\n-------------\n\n");
|
||||||
|
|
||||||
|
my %result = (
|
||||||
|
hash => lc sha256_hex($canonical_request),
|
||||||
|
signed_headers => $signed_headers,
|
||||||
|
finalized_headers => \%formatted_finalized_headers
|
||||||
|
);
|
||||||
|
|
||||||
|
return \%result;
|
||||||
|
}
|
||||||
|
|
||||||
|
my $ALGORITHM = "AWS4-HMAC-SHA256";
|
||||||
|
|
||||||
|
sub create_string_to_sign {
|
||||||
|
my (
|
||||||
|
$hash,
|
||||||
|
$service,
|
||||||
|
$region,
|
||||||
|
$date
|
||||||
|
) = @_;
|
||||||
|
|
||||||
|
my $scope = to_short_date($date)."/$region/$service/aws4_request";
|
||||||
|
my %result = (
|
||||||
|
string => $ALGORITHM."\n".(to_iso_string($date))."\n$scope\n$hash",
|
||||||
|
scope => $scope
|
||||||
|
);
|
||||||
|
|
||||||
|
debug("String To Sign\n-------------\n".$result{"string"}."\n-------------\n");
|
||||||
|
|
||||||
|
return \%result;
|
||||||
|
}
|
||||||
|
|
||||||
|
sub create_signature {
|
||||||
|
my (
|
||||||
|
$string_to_sign,
|
||||||
|
$secret_access_key,
|
||||||
|
$region,
|
||||||
|
$service,
|
||||||
|
$date
|
||||||
|
) = @_;
|
||||||
|
debug("\n\nSecret: "."AWS4".$secret_access_key." | Short-Date: ".to_short_date($date)."\n\n");
|
||||||
|
debug("Region: ".$region." | Service: ".$service."\n\n");
|
||||||
|
my $k_date = hmac_sha256(to_short_date($date), "AWS4".$secret_access_key);
|
||||||
|
my $k_region = hmac_sha256($region, $k_date,);
|
||||||
|
my $k_service = hmac_sha256($service, $k_region);
|
||||||
|
my $k_signing = hmac_sha256("aws4_request", $k_service);
|
||||||
|
return lc hmac_sha256_hex($string_to_sign, $k_signing);
|
||||||
|
}
|
||||||
|
|
||||||
|
sub create_signed_request {
|
||||||
|
my %params = @_;
|
||||||
|
my $service = $params{"service"}; # In the future will likely parse this from the url
|
||||||
|
my $region = $params{'region'};
|
||||||
|
my $aws_secret_access_key = $params{'aws_secret_access_key'};
|
||||||
|
my $aws_access_key_id = $params{'aws_access_key_id'};
|
||||||
|
my $request_url_protocol = $params{'request_url_protocol'};
|
||||||
|
my $request_url_host = $params{'request_url_host'};
|
||||||
|
my $request_url_path = $params{'request_url_path'};
|
||||||
|
my $request_url_query_string = $params{'request_url_query_string'} // "";
|
||||||
|
my $request_method = $params{'request_method'} // "GET";
|
||||||
|
my $request_payload = $params{'request_payload'} // "";
|
||||||
|
my $request_headers = $params{'request_headers'} // {};
|
||||||
|
|
||||||
|
# Error will bubble up to primary update function done to prevent extra logic in
|
||||||
|
# main function required to parse different return types
|
||||||
|
my $parsed_query_string = $request_url_query_string;
|
||||||
|
my @seperated_query_params = split(/\&/,$parsed_query_string);
|
||||||
|
my %query_parameter_map = ();
|
||||||
|
foreach my $query_param (@seperated_query_params) {
|
||||||
|
my ($key, $value) = split("=", $query_param);
|
||||||
|
$key =~ s/([^A-Za-z0-9\-])/sprintf("%%%02X", ord($1))/seg;
|
||||||
|
$key =~ s/%2D/\-/g; # Correct unexpected encoding
|
||||||
|
if (defined $value) {
|
||||||
|
$value =~ s/([^A-Za-z0-9])/sprintf("%%%02X", ord($1))/seg;
|
||||||
|
$query_parameter_map{$key} = $value;
|
||||||
|
} else {
|
||||||
|
$query_parameter_map{$key} = sprintf("%%%02X", "");
|
||||||
|
}
|
||||||
|
}
|
||||||
|
my $date = create_date();
|
||||||
|
|
||||||
|
my $canonical_request = create_canonical_request_hash(
|
||||||
|
$request_method,
|
||||||
|
$request_url_host,
|
||||||
|
$request_url_path,
|
||||||
|
\%query_parameter_map,
|
||||||
|
$request_payload,
|
||||||
|
$request_headers,
|
||||||
|
$date
|
||||||
|
);
|
||||||
|
|
||||||
|
# Interesting so when pulling out by key if not within another variable the keys is pulled too....
|
||||||
|
my $canonical_request_hash = %$canonical_request{hash};
|
||||||
|
my $string_to_sign = create_string_to_sign($canonical_request_hash, $service, $region, $date);
|
||||||
|
|
||||||
|
my $result_string = %$string_to_sign{string};
|
||||||
|
my $signature = create_signature($result_string, $aws_secret_access_key, $region, $service, $date);
|
||||||
|
|
||||||
|
# curl subroutine above is expected headers to be a string
|
||||||
|
my $aws_authorization = $ALGORITHM." Credential=".$aws_access_key_id."/".%$string_to_sign{"scope"}.",SignedHeaders=".%$canonical_request{"signed_headers"}.",Signature=".$signature;
|
||||||
|
|
||||||
|
debug("\nAuthorization:".$aws_authorization."\n\n");
|
||||||
|
my $request_header_string = "";
|
||||||
|
my %compiled_headers = (%{%$canonical_request{"finalized_headers"}}, ( Authorization => $aws_authorization));
|
||||||
|
my @compiled_headers_key = sort keys %compiled_headers;
|
||||||
|
for my $header_key (@compiled_headers_key) {
|
||||||
|
$request_header_string = $request_header_string.(lc $header_key).":".($compiled_headers{$header_key});
|
||||||
|
|
||||||
|
if ($header_key ne $compiled_headers_key[$#compiled_headers_key]) {
|
||||||
|
$request_header_string = $request_header_string."\n";
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
my %curl_opts = (
|
||||||
|
url => get_encoded_url($request_url_protocol, $request_url_host, $request_url_path, \%query_parameter_map),
|
||||||
|
method => $request_method,
|
||||||
|
headers => $request_header_string
|
||||||
|
);
|
||||||
|
|
||||||
|
if ($request_method =~ "PUT|POST|PATCH") {
|
||||||
|
debug("Body: ".$request_payload."\n");
|
||||||
|
$curl_opts{data} = $request_payload;
|
||||||
|
}
|
||||||
|
|
||||||
|
return geturl(%curl_opts);
|
||||||
|
}
|
||||||
|
|
||||||
|
sub update_route53_one {
|
||||||
|
my (
|
||||||
|
$hosted_zone_id,
|
||||||
|
$h,
|
||||||
|
$resource_set_type,
|
||||||
|
$ip,
|
||||||
|
$ipv,
|
||||||
|
$resource_type,
|
||||||
|
$ttl,
|
||||||
|
$aws_access_key_id,
|
||||||
|
$aws_secret_access_key,
|
||||||
|
$aws_region
|
||||||
|
) = @_;
|
||||||
|
my $ttl_to_use = $ttl // 300;
|
||||||
|
|
||||||
|
my $ROUTE53_NS = "https://route53.amazonaws.com/doc/2013-04-01/";
|
||||||
|
my $request_xml = <<"Route53Payload";
|
||||||
|
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
|
||||||
|
<ChangeResourceRecordSetsRequest xmlns=\"$ROUTE53_NS\">
|
||||||
|
<ChangeBatch>
|
||||||
|
<Changes>
|
||||||
|
<Change>
|
||||||
|
<Action>UPSERT</Action>
|
||||||
|
<ResourceRecordSet>
|
||||||
|
<Name>$h</Name>
|
||||||
|
<Type>$resource_set_type</Type>
|
||||||
|
<TTL>$ttl_to_use</TTL>
|
||||||
|
<ResourceRecords>
|
||||||
|
<ResourceRecord>
|
||||||
|
<Value>$ip</Value>
|
||||||
|
</ResourceRecord>
|
||||||
|
</ResourceRecords>
|
||||||
|
</ResourceRecordSet>
|
||||||
|
</Change>
|
||||||
|
</Changes>
|
||||||
|
</ChangeBatch>
|
||||||
|
</ChangeResourceRecordSetsRequest>"
|
||||||
|
Route53Payload
|
||||||
|
;
|
||||||
|
my $reply;
|
||||||
|
eval {
|
||||||
|
$reply = create_signed_request((
|
||||||
|
service => "route53",
|
||||||
|
region => $aws_region,
|
||||||
|
request_url_protocol => "https",
|
||||||
|
request_url_host => "route53.amazonaws.com",
|
||||||
|
request_url_path => "/2013-04-01/hostedzone/".$hosted_zone_id."/rrset/",
|
||||||
|
request_url_query_string => "",
|
||||||
|
request_method => "POST",
|
||||||
|
request_headers => {
|
||||||
|
"content-type" => "application/xml",
|
||||||
|
},
|
||||||
|
request_payload => $request_xml,
|
||||||
|
aws_secret_access_key => $aws_secret_access_key,
|
||||||
|
aws_access_key_id => $aws_access_key_id
|
||||||
|
));
|
||||||
|
};
|
||||||
|
|
||||||
|
if ($@) {
|
||||||
|
$config{$h}{"status"} = 'failed';
|
||||||
|
$config{$h}{"status-ip$ipv"} = 'failed';
|
||||||
|
failed("Error while making request: $@");
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
# No response, declare as failed
|
||||||
|
if (!defined($reply) || !$reply) {
|
||||||
|
failed("Route53 updating %s: Could not connect to %s.", $h, $config{$h}{'server'});
|
||||||
|
$config{$h}{"status-ip$ipv"} = 'failed';
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (header_ok($h, $reply)) {
|
||||||
|
$config{$h}{"ipv$ipv"} = $ip;
|
||||||
|
$config{$h}{'mtime'} = $now;
|
||||||
|
$config{$h}{"status-ip$ipv"} = 'good';
|
||||||
|
success("updating %s: good: IP address set to %s", $h, $ip);
|
||||||
|
} else {
|
||||||
|
$config{$h}{"status-ip$ipv"} = 'failed';
|
||||||
|
failed("updating %s: Server said: '$reply'", $h);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
######################################################################
|
||||||
|
## nic_route53_update
|
||||||
|
##
|
||||||
|
## written by Chanceler Shaffer
|
||||||
|
##
|
||||||
|
## based on:
|
||||||
|
## - https://docs.aws.amazon.com/Route53/latest/APIReference/API_ChangeResourceRecordSets.html
|
||||||
|
## - https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-header-based-auth.html
|
||||||
|
##
|
||||||
|
## needs the following to update:
|
||||||
|
## - AWS_SECRET_ACCESS_KEY
|
||||||
|
## - AWS_ACCESS_KEY_ID
|
||||||
|
######################################################################
|
||||||
|
sub nic_route53_update {
|
||||||
|
debug("\nnic_route53_update---------------------");
|
||||||
|
|
||||||
|
foreach my $h (@_) {
|
||||||
|
my $ipv4 = delete $config{$h}{'wantipv4'};
|
||||||
|
my $ipv6 = delete $config{$h}{'wantipv6'};
|
||||||
|
verbose("UPDATE:", "updating %s", $h);
|
||||||
|
|
||||||
|
foreach my $ip ($ipv4, $ipv6) {
|
||||||
|
next if (!$ip);
|
||||||
|
info("setting IP address to %s for %s", $ip, $h);
|
||||||
|
my $ipv = ($ip eq ($ipv6 // '')) ? '6' : '4';
|
||||||
|
my $type = ($ip eq ($ipv6 // '') ? 'AAAA' : 'A');
|
||||||
|
|
||||||
|
# Only works for IPV4 at the moment
|
||||||
|
update_route53_one(
|
||||||
|
$config{$h}{'hosted-zone-id'},
|
||||||
|
$h,
|
||||||
|
$type,
|
||||||
|
$ip,
|
||||||
|
$ipv,
|
||||||
|
$type,
|
||||||
|
300,
|
||||||
|
$config{$h}{'aws-access-key-id'},
|
||||||
|
$config{$h}{'aws-secret-access-key'},
|
||||||
|
$config{$h}{'aws-region'}
|
||||||
|
)
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
# Execute main() if this file is run as a script or run via PAR (https://metacpan.org/pod/PAR),
|
# Execute main() if this file is run as a script or run via PAR (https://metacpan.org/pod/PAR),
|
||||||
# otherwise do nothing. This "modulino" pattern makes it possible to import this file as a module
|
# otherwise do nothing. This "modulino" pattern makes it possible to import this file as a module
|
||||||
# and test its functions directly; there's no need for test-only command-line arguments or stdout
|
# and test its functions directly; there's no need for test-only command-line arguments or stdout
|
||||||
|
|
|
||||||
72
t/aws_signed_request.pl
Normal file
72
t/aws_signed_request.pl
Normal file
|
|
@ -0,0 +1,72 @@
|
||||||
|
use Test::More;
|
||||||
|
use ddclient::t;
|
||||||
|
SKIP: { eval { require Test::Warnings; } or skip($@, 1); }
|
||||||
|
eval { require 'ddclient'; } or BAIL_OUT($@);
|
||||||
|
ddclient::load_sha_support("route53");
|
||||||
|
|
||||||
|
my $TARGET_REQUEST_HASH = "18edc7204269d65bfa6a075381b0496cdb38166dfc3654207e929c6178d1a1ba";
|
||||||
|
|
||||||
|
my $hosted_zone_id = "Z123456789ABCDEXAMPLE";
|
||||||
|
my $aws_access_key_id = "AKIAIOSFODNN7EXAMPLE";
|
||||||
|
my $aws_secret_access_key = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY";
|
||||||
|
my $ttl_to_use = 300;
|
||||||
|
my $h = "test.example.com";
|
||||||
|
my $ip = "127.0.0.1";
|
||||||
|
my $resource_set_type = 'A';
|
||||||
|
my $date = ddclient::create_date(1369353600);
|
||||||
|
|
||||||
|
my $ROUTE53_NS = "https://route53.amazonaws.com/doc/2013-04-01/";
|
||||||
|
|
||||||
|
my $request_xml =<<"Route53Payload";
|
||||||
|
<?xml version=\"1.0\" encoding=\"UTF-8\"?>
|
||||||
|
<ChangeResourceRecordSetsRequest xmlns=\"$ROUTE53_NS\">
|
||||||
|
<ChangeBatch>
|
||||||
|
<Changes>
|
||||||
|
<Change>
|
||||||
|
<Action>UPSERT</Action>
|
||||||
|
<ResourceRecordSet>
|
||||||
|
<Name>$h</Name>
|
||||||
|
<Type>$resource_set_type</Type>
|
||||||
|
<TTL>$ttl_to_use</TTL>
|
||||||
|
<ResourceRecords>
|
||||||
|
<ResourceRecord>
|
||||||
|
<Value>$ip</Value>
|
||||||
|
</ResourceRecord>
|
||||||
|
</ResourceRecords>
|
||||||
|
</ResourceRecordSet>
|
||||||
|
</Change>
|
||||||
|
</Changes>
|
||||||
|
</ChangeBatch>
|
||||||
|
</ChangeResourceRecordSetsRequest>
|
||||||
|
Route53Payload
|
||||||
|
;
|
||||||
|
|
||||||
|
subtest "canonical_request_hash" => sub {
|
||||||
|
my %query_parameter_map = ();
|
||||||
|
my %headers = (
|
||||||
|
"content-type" => "application/xml"
|
||||||
|
);
|
||||||
|
|
||||||
|
my $canonical_request = ddclient::create_canonical_request_hash(
|
||||||
|
"POST",
|
||||||
|
"route53.amazonaws.com",
|
||||||
|
"/2013-04-01/hostedzone/".$hosted_zone_id."/rrset/",
|
||||||
|
\%query_parameter_map,
|
||||||
|
$request_xml,
|
||||||
|
\%headers,
|
||||||
|
$date
|
||||||
|
);
|
||||||
|
|
||||||
|
is(%$canonical_request{hash}, $TARGET_REQUEST_HASH);
|
||||||
|
};
|
||||||
|
|
||||||
|
subtest "canonical_request_signature" => sub {
|
||||||
|
my $string_to_sign = ddclient::create_string_to_sign($TARGET_REQUEST_HASH,"route53","us-east-1",$date);
|
||||||
|
my $result_string = %$string_to_sign{string};
|
||||||
|
my $signature = ddclient::create_signature($result_string,$aws_secret_access_key,"us-east-1","route53",$date);
|
||||||
|
is($signature, "2bcc6ad2c792934174d1065d49e58b91c8fb874521a625eb0af785f33ef8829d");
|
||||||
|
};
|
||||||
|
|
||||||
|
# maybe add some more test to ensure headers and such, but the most critical parts have tests so yay!
|
||||||
|
|
||||||
|
done_testing();
|
||||||
Loading…
Reference in a new issue