Module dnssec

Available on crate feature dnssec only.

dns security extension related modules

Re-exports

• pub use self::proof::Proof;
• pub use self::proof::ProofError;
• pub use self::proof::ProofErrorKind;
• pub use self::proof::ProofFlags;
• pub use self::proof::Proven;
• pub use self::public_key::PublicKey;
• pub use self::public_key::PublicKeyBuf;
• pub use self::public_key::PublicKeyEnum;
• pub use self::tbs::TBS;

Modules

• proof
  DNSSEC related Proof of record authenticity
• public_key
  Public Key implementations for supported key types
• rdata
  All record data structures and related serialization methods
• tbs
  hash functions for DNSSEC operations
• tsig
  Trust dns implementation of Secret Key Transaction Authentication for DNS (TSIG) RFC 8945 November 2020

Structs

• Digestdnssec-ring
  A calculated digest value.
• EcSigningKeydnssec-openssl
  An ECDSA signing key pair (backed by OpenSSL).
• EcdsaSigningKeydnssec-ring
  An ECDSA signing key pair (backed by ring).
• Ed25519SigningKeydnssec-ring
  An Ed25519 signing key pair (backed by ring).
• RsaSigningKeydnssec-openssl
  An RSA signing key pair (backed by OpenSSL).
• SigSigner
  Use for performing signing and validation of DNSSEC based components. The SigSigner can be used for singing requests and responses with SIG0, or DNSSEC RRSIG records. The format is based on the SIG record type.
• SupportedAlgorithms
  Used to specify the set of SupportedAlgorithms between a client and server
• TrustAnchor
  The root set of trust anchors for validating DNSSEC, anything in this set will be trusted

Enums

• Algorithm
  DNSSEC signing and validation algorithms.
• DigestType
  This is the digest format for the
• KeyFormatdnssec-openssl or dnssec-ring
  The format of the binary key
• Nsec3HashAlgorithm
• Privatednssec-openssl
  A tag type indicating that a key has private components.
• Publicdnssec-openssl
  A tag type indicating that a key only has public components.

Traits

• HasPrivatednssec-openssl
  A trait indicating that a key has private components.
• HasPublicdnssec-openssl
  A trait indicating that a key has public components.
• SigningKey
  A key that can be used to sign records.
• Verifier
  Types which are able to verify DNS based signatures

Functions

• decode_key
  Decode private key

Type Aliases

• DnsSecResult
  An alias for dnssec results returned by functions of this crate