Module dnssec

Available on crate feature dnssec-ring only.

dns security extension related modules

Re-exports

pub use self::proof::Proof;

pub use self::proof::ProofError;

pub use self::proof::ProofErrorKind;

pub use self::proof::ProofFlags;

pub use self::proof::Proven;

pub use self::public_key::PublicKey;

pub use self::public_key::PublicKeyBuf;

pub use self::tbs::TBS;

Modules

proof

DNSSEC related Proof of record authenticity

public_key

Public Key implementations for supported key types

rdata

All record data structures and related serialization methods

ring

ring implementations of DNSSEC traits.

tbs

hash functions for DNSSEC operations

tsig

Trust dns implementation of Secret Key Transaction Authentication for DNS (TSIG) RFC 8945 November 2020

Structs

DnsSecError

The error type for dnssec errors that get returned in the crate

DnssecDnsHandle

Performs DNSSEC validation of all DNS responses from the wrapped DnsHandle

SigSigner

Use for performing signing and validation of DNSSEC based components. The SigSigner can be used for singing requests and responses with SIG0, or DNSSEC RRSIG records. The format is based on the SIG record type.

SupportedAlgorithms

Used to specify the set of SupportedAlgorithms between a client and server

TrustAnchor

The root set of trust anchors for validating DNSSEC, anything in this set will be trusted

Enums

Algorithm

DNSSEC signing and validation algorithms.

DigestType

DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms

DnsSecErrorKind

The error kind for dnssec errors that get returned in the crate

KeyFormat

The format of the binary key

Nsec3HashAlgorithm

Traits

SigningKey

A key that can be used to sign records.

Verifier

Types which are able to verify DNS based signatures

Type Aliases

DnsSecResult

An alias for dnssec results returned by functions of this crate