Skip to content

Conversation

@kbabioch
Copy link
Contributor

According to 1 Basic Auth seems to be broken since a while for he.net. The documentation 2 is outdated, and still mentions Basic Auth, but switching to parameter-based authentication seems to fix the issue.

📦 Package Details

Maintainer: @feckert (?)

Description:
ddns-scripts: Use parameter-based authentication for he.net
According to 1 Basic Auth seems to be broken since a while for he.net.
The documentation 2 is outdated, and still mentions Basic Auth, but
switching to parameter-based authentication seems to fix the issue.

Signed-off-by: Karol Babioch [email protected]


✅ Formalities

  • I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

@Ansuel
Copy link
Member

Ansuel commented Nov 22, 2025

problem is that we need https and certificate support for this?

@kbabioch
Copy link
Contributor Author

Well, I don't see this to be a problem, to be honest. Theoretically we could drop the https in favor of http, but at least for 18 other services, https is also used.

  • afraid.org-basicauth.json
  • afraid.org-keyauth.json
  • afraid.org-v2-basic.json
  • afraid.org-v2-token.json
  • desec.io.json
  • google.com.json
  • hosting.de.json
  • infomaniak.com.json
  • ipnodns.ru.json
  • moniker.com.json
  • mythic-beasts.com-v2.json
  • njal.la.json
  • now-dns.com.json
  • simply.com.json
  • sitelutions.com.json
  • spdyn.de.json
  • ydns.io.json
  • he.net.json

Is anyone really willing to send credentials (either via HTTP Basic Auth and/or via URL) over non-encrypted HTTP channels these days anyway?

@Ansuel
Copy link
Member

Ansuel commented Nov 22, 2025

no one should you are right... just not sure if ddns depends on ssl and ca-certificates... i assume yes?

@kbabioch
Copy link
Contributor Author

From my point of view this is a more fundamental discussion that should be addressed - but not in this pull request. I can't find an explicit dependency in the Makefile, but this is also true for any of the other 18 services that are using https (see above).

So, another PR might be needed to add SSL support explicitly.

@BKPepe BKPepe requested a review from feckert November 23, 2025 07:46
Copy link
Member

@feckert feckert left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please bump the PKG_RELEASE in the Makefile

kbabioch added a commit to kbabioch/packages that referenced this pull request Nov 24, 2025
This bumps the PKG_RELEASE after the last commit, as requested by @feckert [1].

[1]: openwrt#27921 (review)

Signed-off-by: Karol Babioch <[email protected]>
@kbabioch
Copy link
Contributor Author

Done with 0648669

@feckert
Copy link
Member

feckert commented Nov 24, 2025

Please squash this two commits so we have only one in this PR

@kbabioch
Copy link
Contributor Author

Personally I much prefer atomic commits for independent tasks, but here you go: dd33436

@feckert
Copy link
Member

feckert commented Nov 25, 2025

Thanks merged!!

Regarding the https topic, see #27940

According to [1] Basic Auth seems to be broken since a while for he.net.
The documentation [2] is outdated, and still mentions Basic Auth, but
switching to parameter-based authentication seems to fix the issue.

It also bumps PKG_RELEASE in order to ensure a new version is packaged.

[1]: openwrt#27593
[2]: https://dns.he.net/docs.html

Signed-off-by: Karol Babioch <[email protected]>
@feckert feckert merged commit 11f7c36 into openwrt:master Nov 25, 2025
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants