org.jitsi.dnssec.validator

Class ValidatingResolver

java.lang.Object

org.jitsi.dnssec.validator.ValidatingResolver

All Implemented Interfaces:

org.xbill.DNS.Resolver

public class ValidatingResolver
extends Object
implements org.xbill.DNS.Resolver

This resolver validates responses with DNSSEC.

Field Summary

Fields

Modifier and Type	Field and Description
static int	VALIDATION_REASON_QCLASS The QCLASS being used for the injection of the reason why the validator came to the returned result.

Constructor Summary

Constructors

Constructor and Description
ValidatingResolver(org.xbill.DNS.Resolver headResolver) Creates a new instance of this class.
ValidatingResolver(org.xbill.DNS.Resolver headResolver, Clock clock) Creates a new instance of this class.

Method Summary

Modifier and Type	Method and Description
Duration	getTimeout()
TrustAnchorStore	getTrustAnchors() Gets the store with the loaded trust anchors.
void	init(Properties config) Initialize the module.
void	loadTrustAnchors(InputStream data) Load the trust anchor file into the trust anchor store.
CompletionStage<org.xbill.DNS.Message>	sendAsync(org.xbill.DNS.Message query) Asynchronously sends a message and validates the response with DNSSEC before returning it.
void	setEDNS(int version, int payloadSize, int flags, List<org.xbill.DNS.EDNSOption> options) The method is forwarded to the resolver, but always ensure that the level is 0 and the flags contains DO.
void	setIgnoreTruncation(boolean flag) This is a no-op, truncation is never ignored.
void	setPort(int port) Forwards the data to the head resolver passed at construction time.
void	setTCP(boolean flag) Forwards the data to the head resolver passed at construction time.
void	setTimeout(Duration duration)
void	setTSIGKey(org.xbill.DNS.TSIG key) Forwards the data to the head resolver passed at construction time.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.xbill.DNS.Resolver

send, sendAsync, setEDNS, setEDNS, setTimeout, setTimeout

Field Detail

VALIDATION_REASON_QCLASS

public static final int VALIDATION_REASON_QCLASS

The QCLASS being used for the injection of the reason why the validator came to the returned result.

See Also:

Constant Field Values

Constructor Detail

ValidatingResolver

public ValidatingResolver(org.xbill.DNS.Resolver headResolver)

Creates a new instance of this class.

Parameters:

headResolver - The resolver to which queries for DS, DNSKEY and referring CNAME records are sent.

ValidatingResolver

public ValidatingResolver(org.xbill.DNS.Resolver headResolver,
                          Clock clock)

Creates a new instance of this class.

Parameters:

headResolver - The resolver to which queries for DS, DNSKEY and referring CNAME records are sent.

clock - the Clock to validate messages.

Method Detail

init

public void init(Properties config)
          throws IOException

Initialize the module. The only recognized configuration value is org.jitsi.dnssec.trust_anchor_file.

Parameters:

config - The configuration data for this module.

Throws:

IOException - When the file specified in the config does not exist or cannot be read.

loadTrustAnchors

public void loadTrustAnchors(InputStream data)
                      throws IOException

Load the trust anchor file into the trust anchor store. The trust anchors are currently stored in a zone file format list of DNSKEY or DS records.

Parameters:

data - The trust anchor data.

Throws:

IOException - when the trust anchor data could not be read.

getTrustAnchors

public TrustAnchorStore getTrustAnchors()

Gets the store with the loaded trust anchors.

Returns:

The store with the loaded trust anchors.

setPort

public void setPort(int port)

Forwards the data to the head resolver passed at construction time.

Specified by:

setPort in interface org.xbill.DNS.Resolver

Parameters:

port - The IP destination port for the queries sent.

See Also:

Resolver.setPort(int)

setTCP

public void setTCP(boolean flag)

Forwards the data to the head resolver passed at construction time.

Specified by:

setTCP in interface org.xbill.DNS.Resolver

Parameters:

flag - true to enable TCP, false to disable it.

See Also:

Resolver.setTCP(boolean)

setIgnoreTruncation

public void setIgnoreTruncation(boolean flag)

This is a no-op, truncation is never ignored.

Specified by:

setIgnoreTruncation in interface org.xbill.DNS.Resolver

Parameters:

flag - unused

setEDNS

public void setEDNS(int version,
                    int payloadSize,
                    int flags,
                    List<org.xbill.DNS.EDNSOption> options)

The method is forwarded to the resolver, but always ensure that the level is 0 and the flags contains DO.

Specified by:

setEDNS in interface org.xbill.DNS.Resolver

Parameters:

version - The EDNS level to use. 0 indicates EDNS0.

payloadSize - The maximum DNS packet size that this host is capable of receiving over UDP. If 0 is specified, the default (1280) is used.

flags - EDNS extended flags to be set in the OPT record, ExtendedFlags.DO is always appended.

options - EDNS options to be set in the OPT record, specified as a List of OPTRecord.Option elements.

See Also:

Resolver.setEDNS(int, int, int, java.util.List)

setTSIGKey

public void setTSIGKey(org.xbill.DNS.TSIG key)

Forwards the data to the head resolver passed at construction time.

Specified by:

setTSIGKey in interface org.xbill.DNS.Resolver

Parameters:

key - The key.

See Also:

Resolver.setTSIGKey(org.xbill.DNS.TSIG)

getTimeout

public Duration getTimeout()

Specified by:

getTimeout in interface org.xbill.DNS.Resolver

setTimeout

public void setTimeout(Duration duration)

Specified by:

setTimeout in interface org.xbill.DNS.Resolver

sendAsync

public CompletionStage<org.xbill.DNS.Message> sendAsync(org.xbill.DNS.Message query)

Asynchronously sends a message and validates the response with DNSSEC before returning it.

Specified by:

sendAsync in interface org.xbill.DNS.Resolver

Parameters:

query - The query to send.

Returns:

A future that completes when the query is finished.