| Package | Description |
|---|---|
| org.jitsi.dnssec | |
| org.jitsi.dnssec.validator |
| Modifier and Type | Method and Description |
|---|---|
SRRset |
SMessage.findAnswerRRset(org.xbill.DNS.Name qname,
int qtype,
int qclass)
Find an "answer" RRset.
|
SRRset |
SMessage.findRRset(org.xbill.DNS.Name name,
int type,
int dclass,
int section)
Find a specific (S)RRset in a given section.
|
| Modifier and Type | Method and Description |
|---|---|
List<SRRset> |
SMessage.getSectionRRsets(int section)
Gets signed RRsets for the queried section.
|
List<SRRset> |
SMessage.getSectionRRsets(int section,
int qtype)
Gets signed RRsets for the queried section.
|
| Constructor and Description |
|---|
SRRset(SRRset r)
Create a new SRRset from an existing SRRset.
|
| Modifier and Type | Class and Description |
|---|---|
class |
KeyEntry
DNSKEY cache entry for a given
Name, with or without actual keys. |
| Modifier and Type | Method and Description |
|---|---|
SRRset |
TrustAnchorStore.find(org.xbill.DNS.Name name,
int dclass)
Gets the closest trusted key for the given name or
null if no match is found. |
| Modifier and Type | Method and Description |
|---|---|
static KeyEntry |
KeyEntry.newKeyEntry(SRRset rrset)
Creates a new key entry from actual DNSKEYs.
|
static boolean |
ValUtils.nsecProvesNameError(SRRset set,
org.xbill.DNS.NSECRecord nsec,
org.xbill.DNS.Name qname)
Determine if the given NSEC proves a NameError (NXDOMAIN) for a given qname.
|
static ValUtils.NsecProvesNodataResponse |
ValUtils.nsecProvesNodata(SRRset set,
org.xbill.DNS.NSECRecord nsec,
org.xbill.DNS.Name qname,
int qtype)
Determine if a NSEC proves the NOERROR/NODATA conditions.
|
org.jitsi.dnssec.validator.JustifiedSecStatus |
ValUtils.nsecProvesNodataDsReply(org.xbill.DNS.Message request,
SMessage response,
SRRset keyRrset,
Instant date)
Check DS absence.
|
static boolean |
ValUtils.nsecProvesNoWC(SRRset set,
org.xbill.DNS.NSECRecord nsec,
org.xbill.DNS.Name qname)
Determine if a NSEC record proves the non-existence of a wildcard that could have produced
qname.
|
static org.xbill.DNS.Name |
ValUtils.nsecWildcard(org.xbill.DNS.Name domain,
SRRset set,
org.xbill.DNS.NSECRecord nsec)
Gets the closest encloser of
domain prepended with a wildcard label. |
static void |
ValUtils.setCanonicalNsecOwner(SRRset set,
org.xbill.DNS.RRSIGRecord sig)
Set the owner name of NSEC RRsets to the canonical name, i.e.
|
void |
TrustAnchorStore.store(SRRset rrset)
Stores the given RRset as known trusted keys.
|
SecurityStatus |
DnsSecVerifier.verify(SRRset rrset,
org.xbill.DNS.RRset keyRrset,
Instant date)
Verifies an RRset.
|
KeyEntry |
ValUtils.verifyNewDNSKEYs(SRRset dnskeyRrset,
SRRset dsRrset,
long badKeyTTL,
Instant date)
Given a DS rrset and a DNSKEY rrset, match the DS to a DNSKEY and verify the DNSKEY rrset with
that key.
|
SecurityStatus |
ValUtils.verifySRRset(SRRset rrset,
SRRset keyRrset,
Instant date)
Given an SRRset that is signed by a DNSKEY found in the key_rrset, verify it.
|
Copyright © 2020 jitsi.org. All rights reserved.