DnssecProvider
interface DnssecProvider (View source)
DNSSEC operations for one zone, implemented over the PowerDNS API and as a no-op provider for installations without DNSSEC.
Methods
No description
No description
No description
No description
Whether the zone carries the PRESIGNED metadata, meaning it was signed at the primary server and DNSSEC cannot be managed locally.
No description
No description
No description
No description
No description
No description
No description
No description
No description
No description
Serial as served by PowerDNS with SOA-EDIT applied (the "signed" serial), or null when the server does not expose it or the zone cannot be read.
Import a DNSSEC key from a PEM-encoded private key. Requires PowerDNS 4.7+; older servers should return false. Implementations that do not back onto the PowerDNS API may also return false.
Export the PEM-encoded private key for an existing cryptokey, or null when the server does not support PEM export (pre-4.7) or the key cannot be read.
Details
bool
rectifyZone(string $zoneName)
No description
bool
secureZone(string $zoneName)
No description
bool
unsecureZone(string $zoneName)
No description
bool
isZoneSecured(string $zoneName, $config)
No description
bool
isZonePresigned(string $zoneName)
Whether the zone carries the PRESIGNED metadata, meaning it was signed at the primary server and DNSSEC cannot be managed locally.
array
getDsRecords(string $zoneName)
No description
array
getDnsKeyRecords(string $zoneName)
No description
bool
activateZoneKey(string $zoneName, int $keyId)
No description
bool
deactivateZoneKey(string $zoneName, int $keyId)
No description
array
getKeys(string $zoneName)
No description
bool
addZoneKey(string $zoneName, string $keyType, int $keySize, string $algorithm)
No description
bool
removeZoneKey(string $zoneName, int $keyId)
No description
bool
keyExists(string $zoneName, int $keyId)
No description
array
getZoneKey(string $zoneName, int $keyId)
No description
bool
isDnssecEnabled()
No description
int|null
getEditedSerial(string $zoneName)
Serial as served by PowerDNS with SOA-EDIT applied (the "signed" serial), or null when the server does not expose it or the zone cannot be read.
bool
importZoneKey(string $zoneName, string $keyType, string $algorithm, string $privateKeyPem)
Import a DNSSEC key from a PEM-encoded private key. Requires PowerDNS 4.7+; older servers should return false. Implementations that do not back onto the PowerDNS API may also return false.
string|null
exportZoneKeyPem(string $zoneName, int $keyId)
Export the PEM-encoded private key for an existing cryptokey, or null when the server does not support PEM export (pre-4.7) or the key cannot be read.