getssl icon indicating copy to clipboard operation
getssl copied to clipboard

Possible problems with linode dns add/del scripts

Open p-b-west opened this issue 7 years ago • 2 comments

It seems that the dns_add_linode and dns_del_linode scripts assume that the base of the dns name is always two components long. This is not true for most national dns domains ouside the US. For example, com.au, net.au, org.au etc.

I don't know whether this will matter in practice, but it would seem a better idea to match a request domain against domain record with the longest trailing substring of the request domain. For example, if the DNS server returns records for domains b.a and c.b.a, and the request domain is d.c.b.a, then the challenge should be associated with the c.b.a record.

I have no idea whether such situations occur in practice.

Another possible problem is with the delete script. It is possible for multiple identical TXT records to be present, differeing only in the resourceid.d When deleting such a resource, would it not be desirable to remove all of the mathing TXT resources?

p-b-west avatar May 19 '17 13:05 p-b-west

I wrote a script to address these possible problems. To keep it out of the way of the existing scripts, I link dns-add-linode and dns-del-linode to this script. (.txt extension to allow me to attach.) dns_add_del_linode.txt

p-b-west avatar May 22 '17 10:05 p-b-west

Thanks - I've been away / busy for a while - I'll try and catch up with the backlog of issues / PR's here.

srvrco avatar May 22 '17 10:05 srvrco