ddns-scripts: SignatureDoesNotMatch

Package Name

ddns-scripts

Maintainer

@feckert

OpenWrt Version

24.10.3

OpenWrt Target/Subtarget

ramips/mt7621

Steps to Reproduce

update_aliyun_com.sh error

 025528       : parsing script '/usr/lib/ddns/update_aliyun_com.sh'
 025529       : Run command #> /usr/bin/curl -sSL -o /var/run/ddns/myddns_ipv6.dat --stderr /var/run/ddns/myddns_ipv6.err -w '%{http_code}' "https://alidns.aliyuncs.com/?AccessKeyId=LTxxxRtRFCetdBy&Action=DescribeSubDomainRecords&DomainName=xxx.asia&Format=JSON&SignatureMethod=HMAC-SHA1&SignatureNonce=8140029684790513&SignatureVersion=1.0&SubDomain=ly.xxx.asia&Timestamp=2025-10-19T18%3A55%3A28Z&Type=AAAA&Version=2015-01-09&Signature=http://aliyun.com/"
 025530 ERROR : Run command got error, curl err: 0, http_code: 400
 025530       : DATFILE: {"RequestId":"BF547BC9-5CA7-513A-B73C-E9961E465481","Message":"Specified signature is not matched with our calculation. server string to sign is:GET&%2F&AccessKeyId%3DLTAI5t6PZxxxxtRFCetdBy%26Action%3DDescribeSubDomainRecords%26DomainName%3Dxxxx.asia%26Format%3DJSON%26SignatureMethod%3DHMAC-SHA1%26SignatureNonce%3D8140029684790513%26SignatureVersion%3D1.0%26SubDomain%3Dly.xxxx.asia%26Timestamp%3D2025-10-19T18%253A55%253A28Z%26Type%3DAAAA%26Version%3D2015-01-09","Recommend":"https://api.aliyun.com/troubleshoot?q=SignatureDoesNotMatch&product=Alidns&requestId=BF547BC9-5CA7-513A-B73C-E9961E465481","HostId":"alidns.aliyuncs.com","Code":"SignatureDoesNotMatch"} ERRFILE 

I've found the issue: when installing luci-app-ddns, the packages libopenssl3 and openssl-util weren't installed alongside it, and there’s no check for this dependency in the code either.

Actual Behaviour

Api request error

Confirmation Checklist

• The package is maintained in this repository.
• I understand that issues related to the base OpenWrt repository or LuCI repository will be closed.
• I am reporting an issue for OpenWrt, not an unsupported fork.

Start with the ddns-scripts package metadata and the update_aliyun_com.sh entry point mentioned in the report. Check how luci-app-ddns installs its runtime dependencies, including libopenssl3 and openssl-util, then verify that an Aliyun DNS update no longer returns SignatureDoesNotMatch after installation.