CDNSKEYRecordValidator
class CDNSKEYRecordValidator implements DnsRecordValidatorInterface (View source)
CDNSKEY record validator
The CDNSKEY (Child DNSKEY) record is defined in RFC 7344 for automating DNSSEC delegation trust maintenance. It allows a child zone to signal to its parent what DS records it would like the parent to publish.
Format:
Where:
- flags: 0, 256, or 257 (determines if the key is a Zone Key and/or Secure Entry Point)
- protocol: Must be 3 as per RFC 4034
- algorithm: DNSSEC algorithm number (1-16 currently defined in RFC 8624)
- public-key: Base64 encoded public key
Special case: For deletion, the content "0 3 0 AA==" is used as per RFC 8078.
Methods
validate(string $content, string $name, mixed $prio, int|string|null $ttl, int $defaultTTL, mixed ...$args)
Validates CDNSKEY record content
Details
__construct(ConfigurationManager $config)
No description
ValidationResult
validate(string $content, string $name, mixed $prio, int|string|null $ttl, int $defaultTTL, mixed ...$args)
Validates CDNSKEY record content