Class Dnsruby::RR::RRSIG
In: lib/Dnsruby/resource/RRSIG.rb
Parent: RR
 (RFC4034, section 3)

DNSSEC uses public key cryptography to sign and authenticate DNS resource record sets (RRsets). Digital signatures are stored in RRSIG resource records and are used in the DNSSEC authentication process described in [RFC4035]. A validator can use these RRSIG RRs to authenticate RRsets from the zone. The RRSIG RR MUST only be used to carry verification material (digital signatures) used to secure DNS operations.

An RRSIG record contains the signature for an RRset with a particular name, class, and type. The RRSIG RR specifies a validity interval for the signature and uses the Algorithm, the Signer‘s Name, and the Key Tag to identify the DNSKEY RR containing the public key that a validator can use to verify the signature.

Methods

Constants

TypeValue = Types::RRSIG #:nodoc: all

Attributes

algorithm  [R]  The algorithm used for this RRSIG See Dnsruby::Algorithms for permitted values
expiration  [RW]  The signature expiration
inception  [RW]  The signature inception
key_tag  [RW]  The key tag value of the DNSKEY RR that validates this signature
labels  [RW]  The number of labels in the original RRSIG RR owner name Can be used to determine if name was synthesised from a wildcard.
original_ttl  [RW]  The TTL of the covered RRSet as it appears in the authoritative zone
signature  [RW]  contains the cryptographic signature that covers the RRSIG RDATA (excluding the Signature field) and the RRset specified by the RRSIG owner name, RRSIG class, and RRSIG Type Covered field
signers_name  [R]  identifies the owner name of the DNSKEY RR that a validator is supposed to use to validate this signature
type_covered  [R]  The type covered by this RRSIG

Public Class methods

Public Instance methods

[Validate]