class CAARecordValidator implements DnsRecordValidatorInterface (View source)

CAA record validator

Validates CAA (Certification Authority Authorization) records according to:

  • RFC 8659: DNS Certification Authority Authorization (CAA) Resource Record
  • RFC 6844: DNS Certification Authority Authorization (CAA) Resource Record (obsoleted by RFC 8659)

CAA records specify which Certificate Authorities (CAs) are allowed to issue certificates for a domain. The format is:

Where: - flags: 8-bit integer (0-255) where bit 0 is the critical bit - tag: one of "issue", "issuewild", "iodef", or others registered with IANA - value: tag-specific value, enclosed in quotes

Methods

__construct(ConfigurationManager $config)

No description

validate(string $content, string $name, mixed $prio, int|string|null $ttl, int $defaultTTL, mixed ...$args)

Validates CAA record content

Details

__construct(ConfigurationManager $config)

No description

Parameters

ConfigurationManager $config

ValidationResult validate(string $content, string $name, mixed $prio, int|string|null $ttl, int $defaultTTL, mixed ...$args)

Validates CAA record content

Parameters

string $content

The content part of the record

string $name

The name part of the record

mixed $prio

The priority value (if applicable)

int|string|null $ttl

The TTL value

int $defaultTTL

The default TTL to use if not specified

mixed ...$args

Additional validator-specific parameters

Return Value

ValidationResult

ValidationResult containing validated data or error messages