Class | Dnsruby::RR::DNSKEY |
In: |
lib/Dnsruby/resource/DNSKEY.rb
|
Parent: | RR |
RFC4034, section 2 DNSSEC uses public key cryptography to sign and authenticate DNS resource record sets (RRsets). The public keys are stored in DNSKEY resource records and are used in the DNSSEC authentication process described in [RFC4035]: A zone signs its authoritative RRsets by using a private key and stores the corresponding public key in a DNSKEY RR. A resolver can then use the public key to validate signatures covering the RRsets in the zone, and thus to authenticate them.
TypeValue | = | Types::DNSKEY #:nodoc: all | ||
REVOKED_KEY | = | 0x80 | Key is revoked | |
ZONE_KEY | = | 0x100 | Key is a zone key | |
SEP_KEY | = | 0x1 | Key is a secure entry point key |
algorithm | [R] | The algorithm used for this key See Dnsruby::Algorithms for permitted values |
flags | [R] | The flags for the DNSKEY RR |
key | [R] | The public key |
protocol | [R] | The protocol for this DNSKEY RR. MUST be 3. |
Return the the key tag this key would have had before it was revoked If the key is not revoked, then the current key_tag will be returned