Class: Aws::Route53Domains::Types::DnssecKey
- Inherits:
-
Struct
- Object
- Struct
- Aws::Route53Domains::Types::DnssecKey
- Includes:
- Structure
- Defined in:
- lib/aws-sdk-route53domains/types.rb
Overview
Information about the DNSSEC key.
You get this from your DNS provider and then give it to Route 53 (by using [AssociateDelegationSignerToDomain]) to pass it to the registry to establish the chain of trust.
[1]: docs.aws.amazon.com/Route53/latest/APIReference/API_domains_AssociateDelegationSignerToDomain.html
Constant Summary collapse
- SENSITIVE =
[]
Instance Attribute Summary collapse
-
#algorithm ⇒ Integer
The number of the public key’s cryptographic algorithm according to an [IANA] assignment.
-
#digest ⇒ String
The delegation signer digest.
-
#digest_type ⇒ Integer
The number of the DS digest algorithm according to an IANA assignment.
-
#flags ⇒ Integer
Defines the type of key.
-
#id ⇒ String
An ID assigned to each DS record created by [AssociateDelegationSignerToDomain].
-
#key_tag ⇒ Integer
A numeric identification of the DNSKEY record referred to by this DS record.
-
#public_key ⇒ String
The base64-encoded public key part of the key pair that is passed to the registry .
Instance Attribute Details
#algorithm ⇒ Integer
The number of the public key’s cryptographic algorithm according to an [IANA] assignment.
If Route 53 is your DNS service, set this to 13.
For more information about enabling DNSSEC signing, see [Enabling DNSSEC signing and establishing a chain of trust].
[1]: www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xml [2]: docs.aws.amazon.com/Route53/latest/DeveloperGuide/dns-configuring-dnssec-enable-signing.html
698 699 700 701 702 703 704 705 706 707 708 |
# File 'lib/aws-sdk-route53domains/types.rb', line 698 class DnssecKey < Struct.new( :algorithm, :flags, :public_key, :digest_type, :digest, :key_tag, :id) SENSITIVE = [] include Aws::Structure end |
#digest ⇒ String
The delegation signer digest.
Digest is calculated from the public key provided using specified digest algorithm and this digest is the actual value returned from the registry nameservers as the value of DS records.
698 699 700 701 702 703 704 705 706 707 708 |
# File 'lib/aws-sdk-route53domains/types.rb', line 698 class DnssecKey < Struct.new( :algorithm, :flags, :public_key, :digest_type, :digest, :key_tag, :id) SENSITIVE = [] include Aws::Structure end |
#digest_type ⇒ Integer
The number of the DS digest algorithm according to an IANA assignment.
For more information, see [IANA] for DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms.
698 699 700 701 702 703 704 705 706 707 708 |
# File 'lib/aws-sdk-route53domains/types.rb', line 698 class DnssecKey < Struct.new( :algorithm, :flags, :public_key, :digest_type, :digest, :key_tag, :id) SENSITIVE = [] include Aws::Structure end |
#flags ⇒ Integer
Defines the type of key. It can be either a KSK (key-signing-key, value 257) or ZSK (zone-signing-key, value 256). Using KSK is always encouraged. Only use ZSK if your DNS provider isn’t Route 53 and you don’t have KSK available.
If you have KSK and ZSK keys, always use KSK to create a delegations signer (DS) record. If you have ZSK keys only – use ZSK to create a DS record.
698 699 700 701 702 703 704 705 706 707 708 |
# File 'lib/aws-sdk-route53domains/types.rb', line 698 class DnssecKey < Struct.new( :algorithm, :flags, :public_key, :digest_type, :digest, :key_tag, :id) SENSITIVE = [] include Aws::Structure end |
#id ⇒ String
An ID assigned to each DS record created by [AssociateDelegationSignerToDomain].
[1]: docs.aws.amazon.com/Route53/latest/APIReference/API_domains_AssociateDelegationSignerToDomain.html
698 699 700 701 702 703 704 705 706 707 708 |
# File 'lib/aws-sdk-route53domains/types.rb', line 698 class DnssecKey < Struct.new( :algorithm, :flags, :public_key, :digest_type, :digest, :key_tag, :id) SENSITIVE = [] include Aws::Structure end |
#key_tag ⇒ Integer
A numeric identification of the DNSKEY record referred to by this DS record.
698 699 700 701 702 703 704 705 706 707 708 |
# File 'lib/aws-sdk-route53domains/types.rb', line 698 class DnssecKey < Struct.new( :algorithm, :flags, :public_key, :digest_type, :digest, :key_tag, :id) SENSITIVE = [] include Aws::Structure end |
#public_key ⇒ String
The base64-encoded public key part of the key pair that is passed to the registry .
698 699 700 701 702 703 704 705 706 707 708 |
# File 'lib/aws-sdk-route53domains/types.rb', line 698 class DnssecKey < Struct.new( :algorithm, :flags, :public_key, :digest_type, :digest, :key_tag, :id) SENSITIVE = [] include Aws::Structure end |