| java.lang.Object
 org.xbill.DNS.DNSSEC
| DNSSEC | | public class DNSSEC (Code) | | Constants and functions relating to DNSSEC (algorithm constants).
DNSSEC provides authentication for DNS information. RRsets are
signed by an appropriate key, and a SIG record is added to the set.
A KEY record is obtained from DNS and used to validate the signature,
The KEY record must also be validated or implicitly trusted - to
validate a key requires a series of validations leading to a trusted
key. The key must also be authorized to sign the data.
See Also: SIGRecord
See Also: KEYRecord
See Also: RRset
author:
Brian Wellington |
| Inner Class :public static class Algorithm | |
| Field Summary | |
| final public static int | DH
| | final public static int | DSA
| | final public static int | Failed
| | final public static int | Insecure
| | final public static int | RSA
| | final public static int | RSAMD5
| | final public static int | RSASHA1
| | final public static int | Secure
|
| Method Summary | |
| public static byte[] | digestMessage(SIGRecord sig, Message msg, byte[] previous)
Creates a byte array containing the concatenation of the fields of the
SIG record and the message to be signed/verified. | | public static byte[] | digestRRset(RRSIGRecord sig, RRset rrset)
Creates a byte array containing the concatenation of the fields of the
SIG record and the RRsets to be signed/verified. |
| DH | | final public static int DH(Code) | | |
| DSA | | final public static int DSA(Code) | | |
| Failed | | final public static int Failed(Code) | | |
| Insecure | | final public static int Insecure(Code) | | |
| RSA | | final public static int RSA(Code) | | |
| RSAMD5 | | final public static int RSAMD5(Code) | | |
| RSASHA1 | | final public static int RSASHA1(Code) | | |
| Secure | | final public static int Secure(Code) | | |
| digestMessage | | public static byte[] digestMessage(SIGRecord sig, Message msg, byte[] previous)(Code) | | Creates a byte array containing the concatenation of the fields of the
SIG record and the message to be signed/verified. This does not perform
a cryptographic digest.
Parameters:
sig - The SIG record used to sign/verify the rrset.
Parameters:
msg - The message to be signed/verified.
Parameters:
previous - If this is a response, the signature from the query. The data to be cryptographically signed or verified. |
| digestRRset | | public static byte[] digestRRset(RRSIGRecord sig, RRset rrset)(Code) | | Creates a byte array containing the concatenation of the fields of the
SIG record and the RRsets to be signed/verified. This does not perform
a cryptographic digest.
Parameters:
sig - The SIG record used to sign/verify the rrset.
Parameters:
rrset - The data to be signed/verified. The data to be cryptographically signed or verified. |
|
|