Net::DNS::RR::DNSKEY - DNS DNSKEY resource record


Net-DNS-SEC documentation  | view source Contained in the Net-DNS-SEC distribution.

Index


NAME

Top

Net::DNS::RR::DNSKEY - DNS DNSKEY resource record

SYNOPSIS

Top

use Net::DNS::RR;

DESCRIPTION

Top

Class for DNSSEC KEY (DNSKEY) resource records.

METHODS

Top

flags

    print "flags" = ", $rr->flags, "\n";

Returns the RR's flags in decimal representation

protocol

    print "protocol" = ", $rr->protocol, "\n";

Returns the RR's protocol field in decimal representation

algorithm

    print "algoritm" = ", $rr->algorithm, "\n";

Returns the RR's algorithm field in decimal representation

    1 = RSA/MD5
    2 = DH
    3 = DSA/SHA-1
    4 = Elliptic Curve
    5 = RSA/SHA-1
    6 - DSA/SHA-1 (NSEC3)
    7 - RSA/SHA-1 (NSEC3)
    8 - RSA/SHA-256 
    10 - RSA/SHA-512

Note that only algorithm 1 and 3 are supported by the methods provided through Net::DNS::RR::SIG.pm.

key

    print "key" = ", $rr->key, "\n";

Returns the key in base64 representation

keybin

    $keybin =  $rr->keybin;

Returns the key binary material

keytag

    print "keytag" = ", $rr->keytag, "\n";

Returns the key tag of the key. (RFC2535 4.1.6)

privatekeyname

    $privatekeyname=$rr->privatekeyname

Returns the name of the privatekey as it would be generated by the BIND dnssec-keygen program. The format of that name being K\<fqdn\>+\<algorithm\>+\<keyid\>.private

is_sep, set_sep, clear_sep

is_sep() returns 1 if the secure entry point flag field is set, set_sep() sets secure entry point flag field is set and clear_sep() clears the value.

keylength

Return the length of a key.

For RSA this method returns the length (in bits) of the modulus.

For DSA this method returnse the value of the T parameter (See RFC2536)

Returns -1 if the keysize cannot be determined (e.g. for unknown algorithms algorithm).

COPYRIGHT

Top

SEE ALSO

Top

http://www.net-dns.org/

perl(1), Net::DNS, Net::DNS::Resolver, Net::DNS::Packet, Net::DNS::Header, Net::DNS::Question, Net::DNS::RR, RFC 4033, RFC 4034, RFC 4035.


Net-DNS-SEC documentation  | view source Contained in the Net-DNS-SEC distribution.