domain 0.7.1

A DNS library for Rust.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58

//! Key and Signer using OpenSSL.
#![cfg(feature = "openssl")]
#![cfg_attr(docsrs, doc(cfg(feature = "openssl")))]

use std::vec::Vec;
use openssl::error::ErrorStack;
use openssl::hash::MessageDigest;
use openssl::pkey::{PKey, Private};
use openssl::sha::sha256;
use openssl::sign::Signer as OpenSslSigner;
use unwrap::unwrap;
use crate::base::iana::DigestAlg;
use crate::base::name::ToDname;
use crate::base::octets::Compose;
use crate::rdata::{Ds, Dnskey};
use super::key::SigningKey;


pub struct Key {
    dnskey: Dnskey<Vec<u8>>,
    key: PKey<Private>,
    digest: MessageDigest,
}

impl SigningKey for Key {
    type Octets = Vec<u8>;
    type Signature = Vec<u8>;
    type Error = ErrorStack;

    fn dnskey(&self) -> Result<Dnskey<Self::Octets>, Self::Error> {
        Ok(self.dnskey.clone())
    }

    fn ds<N: ToDname>(
        &self,
        owner: N
    ) -> Result<Ds<Self::Octets>, Self::Error> {
        let mut buf = Vec::new();
        unwrap!(owner.compose_canonical(&mut buf));
        unwrap!(self.dnskey.compose_canonical(&mut buf));
        let digest = Vec::from(sha256(&buf).as_ref());
        Ok(Ds::new(
            self.key_tag()?,
            self.dnskey.algorithm(),
            DigestAlg::Sha256,
            digest,
        ))
    }

    fn sign(&self, data: &[u8]) -> Result<Self::Signature, Self::Error> {
        let mut signer = OpenSslSigner::new(
            self.digest, &self.key
        )?;
        signer.update(data)?;
        signer.sign_to_vec()
    }
}