DnssecProviderInterface
interface DnssecProviderInterface implements ZoneRectifierInterface, ZoneSigningInterface, ZoneKeyManagementInterface (View source)
DNSSEC operations for one zone.
Union of the DNSSEC provider roles; consumers should depend on the narrowest role they use.
Methods
Whether the zone is signed, or null when PowerDNS could not be asked.
Whether the zone carries the PRESIGNED metadata, meaning it was signed at the primary server and DNSSEC cannot be managed locally.
Serial as served by PowerDNS with SOA-EDIT applied (the "signed" serial), or null when the server does not expose it or the zone cannot be read.
The zone's keys, telling a server that could not be asked apart from a zone without keys.
Create a key and return it as the server created it, or null when it was refused or could not be asked.
Create a key from an existing ISC/BIND private key ("Private-key-format: v1.x") and return it as the server created it. The server derives algorithm and size from the key.
Export the private key of an existing cryptokey in the ISC/BIND format PowerDNS stores it in, or null when the key cannot be read.
Details
bool
rectifyZone(string $zoneName)
No description
bool
secureZone(string $zoneName)
No description
bool
unsecureZone(string $zoneName)
No description
bool
isZoneSecured(string $zoneName, $config)
No description
bool|null
fetchZoneSecured(string $zoneName)
Whether the zone is signed, or null when PowerDNS could not be asked.
bool
isZonePresigned(string $zoneName)
Whether the zone carries the PRESIGNED metadata, meaning it was signed at the primary server and DNSSEC cannot be managed locally.
bool
isDnssecEnabled()
No description
int|null
getEditedSerial(string $zoneName)
Serial as served by PowerDNS with SOA-EDIT applied (the "signed" serial), or null when the server does not expose it or the zone cannot be read.
array
getDsRecords(string $zoneName)
No description
array
getDnsKeyRecords(string $zoneName)
No description
bool
activateZoneKey(string $zoneName, int $keyId)
No description
bool
deactivateZoneKey(string $zoneName, int $keyId)
No description
array
getKeys(string $zoneName)
No description
bool
removeZoneKey(string $zoneName, int $keyId)
No description
array|null
fetchZoneKeys(string $zoneName)
The zone's keys, telling a server that could not be asked apart from a zone without keys.
CryptoKey|null
createZoneKey(string $zoneName, string $keyType, int $keySize, string $algorithm, bool $active)
Create a key and return it as the server created it, or null when it was refused or could not be asked.
CryptoKey|DnssecKeyOutcome
importZoneKeyFromPrivateKey(string $zoneName, string $keyType, string $privateKey, bool $active)
Create a key from an existing ISC/BIND private key ("Private-key-format: v1.x") and return it as the server created it. The server derives algorithm and size from the key.
string|null
exportZonePrivateKey(string $zoneName, int $keyId)
Export the private key of an existing cryptokey in the ISC/BIND format PowerDNS stores it in, or null when the key cannot be read.