pfSense

<?php

/**

* r53.class for managing Amazon AWS Route53 Resources

* that integrates well with pfSense. Based on the original r53.class by

* Dan Myers at  http://sourceforge.net/projects/php-r53/ .

* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

* Copyright (c) 2011, Dan Myers.

* Parts copyright (c) 2008, Donovan Schonknecht.

* All rights reserved.

*

* Redistribution and use in source and binary forms, with or without

* modification, are permitted provided that the following conditions are met:

*

* - Redistributions of source code must retain the above copyright notice,

*   this list of conditions and the following disclaimer.

* - Redistributions in binary form must reproduce the above copyright

*   notice, this list of conditions and the following disclaimer in the

*   documentation and/or other materials provided with the distribution.

*

* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"

* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE

* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE

* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR

* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF

* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS

* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN

* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE

* POSSIBILITY OF SUCH DAMAGE.

*

* This is a modified BSD license (the third clause has been removed).

* The BSD license may be found here:

* http://www.opensource.org/licenses/bsd-license.php

*

* Amazon Route 53 is a trademark of Amazon.com, Inc. or its affiliates.

*

* Route53 is based on Donovan Schonknecht's Amazon S3 PHP class, found here:

* http://undesigned.org.za/2007/10/22/amazon-s3-php-class

*

* ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

*

*/

class Route53

{

	protected $__accessKey; // AWS Access key

	protected $__secretKey; // AWS Secret key

	* Constructor

	*

	* @param string $accessKey Access key

	* @param string $secretKey Secret key

	* @return void

	*/

	public function __construct($accessKey = null, $secretKey = null) {

		if ($accessKey !== null && $secretKey !== null) {

			$this->setAuth($accessKey, $secretKey);

		}

	}

	* Set AWS access key and secret key

	*

	* @param string $accessKey Access key

	* @param string $secretKey Secret key

	* @return void

	*/

	public function setAuth($accessKey, $secretKey) {

		$this->__accessKey = $accessKey;

		$this->__secretKey = $secretKey;

	}

	* Return XML document for POST

	*

	* @param string $fqdn FQDN to set/update

	* @param string $ip IP to set for the FQDN

	* @param string $ttl TTL for the record

	* @return string XML document

	*/

	public function getRequestBody($fqdn, $ip, $ttl){

		$xmlreq .= "<ChangeBatch><Changes><Change>";

		$xmlreq .= "<Action>UPSERT</Action>";

		$xmlreq .= "<ResourceRecordSet>";

		$xmlreq .= sprintf("<Name>%s</Name>", $fqdn);

		$xmlreq .= "<Type>A</Type>";

		$xmlreq .= sprintf("<TTL>%d</TTL>", $ttl);

		$xmlreq .= sprintf("<ResourceRecords><ResourceRecord><Value>%s</Value></ResourceRecord></ResourceRecords>",	$ip);

		$xmlreq .= "</ResourceRecordSet>";

		$xmlreq .= "</Change></Changes></ChangeBatch>";

		$xmlreq .= "</ChangeResourceRecordSetsRequest>";

	}

		$xmlreq = "<?xml version=\"1.0\" encoding=\"UTF-8\"?>";

		$xmlreq .= "<ChangeResourceRecordSetsRequest xmlns=\"https://route53.amazonaws.com/doc/2013-04-01/\">";

		$xmlreq .= "<ChangeBatch><Changes><Change>";

		$xmlreq .= "<Action>UPSERT</Action>";

		$xmlreq .= "<ResourceRecordSet>";

		$xmlreq .= sprintf("<Name>%s</Name>", $fqdn);

		$xmlreq .= "<Type>AAAA</Type>";

		$xmlreq .= sprintf("<TTL>%d</TTL>", $ttl);

		$xmlreq .= sprintf("<ResourceRecords><ResourceRecord><Value>%s</Value></ResourceRecord></ResourceRecords>",	$ip);

		$xmlreq .= "</ResourceRecordSet>";

		$xmlreq .= "</Change></Changes></ChangeBatch>";

		$xmlreq .= "</ChangeResourceRecordSetsRequest>";

	}

	* Return API URL

	*

	*/

	public function getApiUrl($zoneid){

		return sprintf("https://route53.amazonaws.com/2013-04-01/hostedzone/%s/rrset", $zoneid);

	}

	/**

	*

	* @param string regionId Amazon Region Code (e.g. us-east-1)

	* @param string requestBodySHA256 SHA256 hash of the request body

	*/

		$canonical_uri = sprintf("/2013-04-01/hostedzone/%s/rrset", $zoneId);

		$amz_date = sprintf("%sT%sZ", gmdate('Ymd'), gmdate('His'));

		$date_stamp = gmdate('Ymd');

		$signed_headers = "content-type;host;x-amz-date";

		$algorithm = "AWS4-HMAC-SHA256";

		$kDate = hash_hmac("sha256", $date_stamp, $kSecret, true);

		$kRegion = hash_hmac("sha256", $regionId, $kDate, true);

		$kService = hash_hmac("sha256", "route53", $kRegion, true);

		$signing_key = hash_hmac("sha256","aws4_request", $kService, true);

		$signature = bin2hex(hash_hmac("sha256", $string_to_sign, $signing_key, true));

		$httphead[] = "Content-Type: text/xml";

		$httphead[] = sprintf("X-Amz-Date: %s", $amz_date);

		$httphead[] = sprintf("Authorization: %s", $authorization_header);

	}

}