tools

type Context struct {
	Config *ContextConfig
	File   io.Reader      // zone path
	Output io.WriteCloser // Out path

	Log            *log.Logger         // Logger
	SignAlgorithm  SignAlgorithm       // Sign Algorithm
	DelegatedZones map[string]struct{} // Map with Delegated zones.
	WithDS         map[string]struct{} // Map with zones with a DS RR
	DNSKEYS        struct {
		ZSK, KSK map[uint16]*dns.DNSKEY // DNSKEYS
	}
	// contains filtered or unexported fields
}

type ContextConfig struct {
	Zone            string    // Zone name
	CreateKeys      bool      // If True, the sign process creates new keys for the signature.
	NSEC3           bool      // If true, the zone is signed using NSEC3
	OptOut          bool      // If true and NSEC3 is true, the zone is signed using OptOut NSEC3 flag.
	DigestEnabled   bool      // If true, the zone is hashed and DigestEnabled is used
	SignAlgorithm   string    // Signature algorithm
	FilePath        string    // Output Path
	OutputPath      string    // Output Path
	RRSIGExpDate    time.Time // RRSIG Expiration Date
	Info            bool      // If true, a credits txt will be added to _dnstools subdomain.
	Lazy            bool      // If true, the zone will not be signed if it is not needed.
	VerifyThreshold time.Time // Verification Threshold
	HashAlg         uint8     // 1:sha384 (default), 2:sha512
	NSEC3Iterations uint16
	NSEC3SaltLength uint8
	NSEC3SaltValue  string
}

type FileSession struct {
	// contains filtered or unexported fields
}

type NSEC3List struct {
	// contains filtered or unexported fields
}

type PKCS11RRSigner struct {
	Session *PKCS11Session      // PKCS#11 PKCS11Session
	SK, PK  pkcs11.ObjectHandle // Secret and Public PKCS11Key handles
}

type PKCS11Session struct {
	P11Context *pkcs11.Ctx          // PKCS#11 Context
	Handle     pkcs11.SessionHandle // PKCS11Session Handle
	Label      string               // Signature Label
	Key        string               // Signature key
	// contains filtered or unexported fields
}

type RRArray []dns.RR

type RRSetList []RRArray

type RRSigPair struct {
	RRSig *dns.RRSIG
	RRSet RRArray
}

type SigKeys struct {
	// contains filtered or unexported fields
}

type SignAlgorithm uint8

type SignSession interface {
	Context() *Context
	GetKeys() (*SigKeys, error)
	GetPublicKeyBytes(*SigKeys) (zskBytes, kskBytes []byte, err error)
	DestroyAllKeys() error
	End() error
}