letsencrypt.sh hook script for dns-01 challenge using AWS Route 53

hook.sh

#!/bin/sh

HOSTED_ZONE="Route53 zone ID"

payload() {
  local action=$1
  cat <<EOF
  {
    "Changes": [
    { "Action": "${action}",
      "ResourceRecordSet": { "Name: "_acme-challenge.${altname}",
                             "Type": "TXT",
			     "TTL": 60,
			     "ResourceRecords": [ { "Value": "\\\"${keyauth_hook}\\\"" } ]
			   }
    }
    ]
  }
EOF
}

# Options: update, delete challenge
altname="$2"
challenge_token="$3"
keyauth_hook="$4"

# Options: deploy certificate
domain="$2"
private_key="$3"
cert="$4"
chain="$5"


case "$1" in
  "clean_challenge")
    aws route53 \
      change-resource-record-sets \
      --hosted-zone-id $HOSTED_ZONE \
      --change-batch \
      `payload DELETE`
    ;;
  "deploy_challenge")
    aws route53 \
      change-resource-record-sets \
      --hosted-zone-id $HOSTED_ZONE \
      --change-batch \
      `payload UPSERT`
    sleep 20
    ;;
  "deploy_cert")
    echo "COPY CERT TO THE RIGHT LOCATION"
    ;;
  debug)
    echo "Payloads:"
    DEL=`payload DELETE`
    UPS=`payload UPSERT`
    echo " == DELETE => $DEL"
    echo " == UPSERT => $UPS"
    ;;
esac

# vim: set et sts=4 sw=4 tw=120 ft=sh