SEARCH
NEW RPMS
DIRECTORIES
ABOUT
FAQ
VARIOUS
BLOG
DONATE




YUM REPOSITORY

 
 

MAN page from Mandriva 2010 perl-Net-DNS-SEC-0.160.0-1mdv2010.1.noarch.rpm

Keyset

Section: User Contributed Perl Documentation (3)
Updated: 2010-03-12
Index 

NAME

    Net::DNS::Keyset - DNSSEC Keyset object class
 

SYNOPSIS

use Net::DNS::Keyset; 

DESCRIPTION

A keyset is a ``administrative'' unit used for DNSSEC maintenance.

The bind dnssec-signzone tool uses it to genertate DS records. This classprovides interfaces for reading keysets, creating and parsing them.

Note that this class is still being developed. Attributes and methodsare subject to change. 

new (from file)

    $keyset=Net::DNS::Keyset->new("keyset-example.tld");

Creator method, will read the specified keyset file and return a keyset object. Fails if not all keys in the set are self-signed.

Sets $Net::DNS::Keyset::keyset_err and returns 0 on failure. 

new (by signing keys)

    $keyset=Net::DNS::Keyset->new(\@keyrr,$privatekeypath);

Creates a keyset object from the keys provided through the referenceto an array of Net::DNS::RR::Key objects.

The method will create selfsign the whole keyset. The private keys asgenerated by the BIND dnssec-keygen tool are assumed to be in thecurrent directory or, if specified, in the directory indicat by the$privatekeypath.

Sets $Net::DNS::Keyset::keyset_err and returns 0 on failure. 

new (from keys and sig RRsets)

    $keyset=Net::DNS::Keyset->new(\@keyrr,\@sigrr);

Creates a keyset object from the keys provided through the referenceto an array of Net::DNS::RR::DNSKEY and Net::DNS::RR::RRSIG objects.

Sets $Net::DNS::Keyset::keyset_err and returns 0 on failure. 

new (from Packet)

    $res = Net::DNS::Resolver->new;    $res->dnssec(1);       $packet = $res->query ("example.com", "DNSKEY", "IN");    $keyset=Net::DNS::Keyset->new($packet)        die "Corrupted selfsignature " if ! $keyset->verify;

Creates a keyset object from a Net::DNS::Packet that contains theanswer to a query for the apex key records.

This is the method you want to use for automatically fetching keys.

Sets $Net::DNS::Keyset::keyset_err and returns 0 on failure. 

keys

    @keyrr=$keyset->keys;

Returns an array of Net::DNS::RR::Key objects 

sigs

    @keyrr=$keyset->sigs;

Returns an array of Net::DNS::RR::Sig objects 

verify

    die $Net::DNS::Keyset::keyset_err if $keyset->verify;

If no arguments are given:

    - Verifies if all signatures present verify the keyset.    - Verifies if there are DNSKEYs with the SEP flag set there is      at least one RRSIG made using that key    - Verifies that if there are no DNSKEYS with the SEP flag set there is      at lease one RRSIG made with one of the keys from the keyset.

If an argument is given it is should be the KEYID of one of the keysin the keyset and the method verifies if the the RRSIG with that madewith that key verifies.

The argument returns 0 if verification fails and sets$Net::DNS::Keyset::keyset_err.

If verification succeeds an array is returne with the key-tags of thekeys for which signatures verified. 

print

    $keyset->print;

Prints the keyset 

string

    $keysetstring=$keyset->string;

Returns a string representation of the keyset

    print $keyset->string;    is similar to    $keyset->print;
 

extract_ds

    @ds=$keyset->extract_ds;    foreach $ds (@ds) {        $ds->print;    }

Extracts DS records from the keyset. Note that the keyset will be verifiedduring extraction: All keys will need to have a valid selfsignature. 

writekeyset

    die $Net::DNS::Keyset::keyset_err if ! $keyset->writekeyset($prefix, $path);

Writes the keyset to a file named ``keyset-<domain>.'' in the currentworking directory or the directory defined by $path. $prefix specifies anoptional prefix that will be prepended to the string ``keyset-<domain>.''Returns 0 on failure and sets keyset_err. 

COPYRIGHT

Copyright (c) 2002 RIPE NCC. Author Olaf M. Kolkman<net-dns-secAATTripe.net>

All Rights Reserved

Permission to use, copy, modify, and distribute this software and itsdocumentation for any purpose and without fee is hereby granted,provided that the above copyright notice appear in all copies and thatboth that copyright notice and this permission notice appear insupporting documentation, and that the name of the author not be usedin advertising or publicity pertaining to distribution of the softwarewithout specific, written prior permission.

THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS; IN NOEVENT SHALL AUTHOR BE LIABLE FOR ANY SPECIAL, INDIRECT ORCONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OFUSE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OROTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE ORPERFORMANCE OF THIS SOFTWARE.


 

Index

NAME
SYNOPSIS
DESCRIPTION
new (from file)
new (by signing keys)
new (from keys and sig RRsets)
new (from Packet)
keys
sigs
verify
print
string
extract_ds
writekeyset
COPYRIGHT

This document was created byman2html,using the manual pages.