Struct aws_sdk_route53domains::types::DnssecKey

#[non_exhaustive]
pub struct DnssecKey {
    pub algorithm: Option<i32>,
    pub flags: Option<i32>,
    pub public_key: Option<String>,
    pub digest_type: Option<i32>,
    pub digest: Option<String>,
    pub key_tag: Option<i32>,
    pub id: Option<String>,
}

Information about the DNSSEC key.

You get this from your DNS provider and then give it to Route 53 (by using AssociateDelegationSignerToDomain) to pass it to the registry to establish the chain of trust.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

algorithm: Option<i32>

The number of the public key’s cryptographic algorithm according to an IANA assignment.

If Route 53 is your DNS service, set this to 13.

For more information about enabling DNSSEC signing, see Enabling DNSSEC signing and establishing a chain of trust.

flags: Option<i32>

Defines the type of key. It can be either a KSK (key-signing-key, value 257) or ZSK (zone-signing-key, value 256). Using KSK is always encouraged. Only use ZSK if your DNS provider isn't Route 53 and you don’t have KSK available.

If you have KSK and ZSK keys, always use KSK to create a delegations signer (DS) record. If you have ZSK keys only – use ZSK to create a DS record.

public_key: Option<String>

The base64-encoded public key part of the key pair that is passed to the registry .

digest_type: Option<i32>

The number of the DS digest algorithm according to an IANA assignment.

For more information, see IANA for DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms.

digest: Option<String>

The delegation signer digest.

Digest is calculated from the public key provided using specified digest algorithm and this digest is the actual value returned from the registry nameservers as the value of DS records.

key_tag: Option<i32>

A numeric identification of the DNSKEY record referred to by this DS record.

id: Option<String>

An ID assigned to each DS record created by AssociateDelegationSignerToDomain.

Implementations

impl DnssecKey

pub fn algorithm(&self) -> Option<i32>

The number of the public key’s cryptographic algorithm according to an IANA assignment.

If Route 53 is your DNS service, set this to 13.

For more information about enabling DNSSEC signing, see Enabling DNSSEC signing and establishing a chain of trust.

pub fn flags(&self) -> Option<i32>

Defines the type of key. It can be either a KSK (key-signing-key, value 257) or ZSK (zone-signing-key, value 256). Using KSK is always encouraged. Only use ZSK if your DNS provider isn't Route 53 and you don’t have KSK available.

If you have KSK and ZSK keys, always use KSK to create a delegations signer (DS) record. If you have ZSK keys only – use ZSK to create a DS record.

pub fn public_key(&self) -> Option<&str>

The base64-encoded public key part of the key pair that is passed to the registry .

pub fn digest_type(&self) -> Option<i32>

The number of the DS digest algorithm according to an IANA assignment.

For more information, see IANA for DNSSEC Delegation Signer (DS) Resource Record (RR) Type Digest Algorithms.

pub fn digest(&self) -> Option<&str>

The delegation signer digest.

Digest is calculated from the public key provided using specified digest algorithm and this digest is the actual value returned from the registry nameservers as the value of DS records.

pub fn key_tag(&self) -> Option<i32>

A numeric identification of the DNSKEY record referred to by this DS record.

pub fn id(&self) -> Option<&str>

An ID assigned to each DS record created by AssociateDelegationSignerToDomain.

impl DnssecKey

pub fn builder() -> DnssecKeyBuilder

Creates a new builder-style object to manufacture DnssecKey.

Trait Implementations

impl Clone for DnssecKey

fn clone(&self) -> DnssecKey

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DnssecKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for DnssecKey

fn eq(&self, other: &DnssecKey) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for DnssecKey