Method lockDNSChallenge

agent/utils/ssl/client.go:226–257

()

}

func (c *AcmeClient) lockDNSChallenge() func() {
	if c.dnsChallengeConfig == nil {
		return func() {}
	}

	dnsChallengeMu.Lock()

	oldCNAME, hadCNAME := os.LookupEnv("LEGO_DISABLE_CNAME_SUPPORT")
	if c.dnsChallengeConfig.disableCNAME {
		_ = os.Setenv("LEGO_DISABLE_CNAME_SUPPORT", "true")
	} else {
		_ = os.Setenv("LEGO_DISABLE_CNAME_SUPPORT", "false")
	}

	previousClient := dns01.DefaultClient()
	// lego v5 removed dns01.AddRecursiveNameservers and dns01.AddDNSTimeout;
	// configure them via dns01.NewClient(&dns01.Options{...}) + SetDefaultClient.
	dns01.SetDefaultClient(dns01.NewClient(&dns01.Options{
		RecursiveNameservers: c.dnsChallengeConfig.recursiveNameservers,
		Timeout:              c.dnsChallengeConfig.timeout,
	}))

	return func() {
		dns01.SetDefaultClient(previousClient)
		if hadCNAME {
			_ = os.Setenv("LEGO_DISABLE_CNAME_SUPPORT", oldCNAME)
		} else {
			_ = os.Unsetenv("LEGO_DISABLE_CNAME_SUPPORT")
		}
		dnsChallengeMu.Unlock()
	}
}

func waitForRetry(ctx context.Context, delay time.Duration) error {
	timer := time.NewTimer(delay)