DnsSecApiProvider
final class DnsSecApiProvider implements DnssecProviderInterface (View source)
DnssecProviderInterface that manages zone keys, DS/DNSKEY records and rectification through the PowerDNS API.
Methods
No description
No description
No description
No description
No description
Whether the zone is signed, or null when PowerDNS could not be asked.
Whether the zone carries the PRESIGNED metadata, meaning it was signed at the primary server and DNSSEC cannot be managed locally.
No description
No description
No description
No description
No description
No description
The zone's keys, telling a server that could not be asked apart from a zone without keys.
Create a key and return it as the server created it, or null when it was refused or could not be asked.
No description
Serial as served by PowerDNS with SOA-EDIT applied (the "signed" serial), or null when the server does not expose it or the zone cannot be read.
Create a key from an existing ISC/BIND private key ("Private-key-format: v1.x") and return it as the server created it. The server derives algorithm and size from the key.
Export the private key of an existing cryptokey in the ISC/BIND format PowerDNS stores it in, or null when the key cannot be read.
Details
__construct(PowerdnsApiClient $client, LoggerInterface $logger, DnssecDataTransformer $transformer, string $clientIp, string $userLogin)
No description
bool
rectifyZone(string $zoneName)
No description
bool
secureZone(string $zoneName)
No description
bool
unsecureZone(string $zoneName)
No description
bool
isZoneSecured(string $zoneName, $config)
No description
bool|null
fetchZoneSecured(string $zoneName)
Whether the zone is signed, or null when PowerDNS could not be asked.
bool
isZonePresigned(string $zoneName)
Whether the zone carries the PRESIGNED metadata, meaning it was signed at the primary server and DNSSEC cannot be managed locally.
array
getDsRecords(string $zoneName)
No description
array
getDnsKeyRecords(string $zoneName)
No description
bool
activateZoneKey(string $zoneName, int $keyId)
No description
bool
deactivateZoneKey(string $zoneName, int $keyId)
No description
array
getKeys(string $zoneName)
No description
bool
removeZoneKey(string $zoneName, int $keyId)
No description
array|null
fetchZoneKeys(string $zoneName)
The zone's keys, telling a server that could not be asked apart from a zone without keys.
CryptoKey|null
createZoneKey(string $zoneName, string $keyType, int $keySize, string $algorithm, bool $active)
Create a key and return it as the server created it, or null when it was refused or could not be asked.
bool
isDnssecEnabled()
No description
int|null
getEditedSerial(string $zoneName)
Serial as served by PowerDNS with SOA-EDIT applied (the "signed" serial), or null when the server does not expose it or the zone cannot be read.
CryptoKey|DnssecKeyOutcome
importZoneKeyFromPrivateKey(string $zoneName, string $keyType, string $privateKey, bool $active)
Create a key from an existing ISC/BIND private key ("Private-key-format: v1.x") and return it as the server created it. The server derives algorithm and size from the key.
string|null
exportZonePrivateKey(string $zoneName, int $keyId)
Export the private key of an existing cryptokey in the ISC/BIND format PowerDNS stores it in, or null when the key cannot be read.