pub struct Route53DnssecMaterialResponse {
pub hosted_zone_id: String,
pub key_signing_key_name: String,
pub algorithm: u8,
pub flags: u16,
pub key_tag: u16,
pub dnskey_public_key_b64: String,
pub ds_digest_sha256_hex: String,
}Expand description
Response body for GET /_fakecloud/route53/zones/{id}/dnssec. Surfaces
the deterministic ECDSA P-256 DNSSEC chain-of-trust material for a
hosted zone with at least one ACTIVE Key Signing Key. Real Route 53
keeps this material inside KMS; fakecloud derives it from the
(zone_id, ksk_name) pair so persistence reloads, multiple test
runs, and verifier code see stable values.
Fields§
§hosted_zone_id: StringHosted zone the material belongs to (without the
/hostedzone/ prefix).
key_signing_key_name: StringKSK name used to derive the keypair.
algorithm: u8Algorithm number (always 13 for ECDSAP256SHA256).
flags: u16DNSKEY flags field (always 257 for a KSK).
key_tag: u16Standard DNSKEY key tag (RFC 4034 Appendix B).
dnskey_public_key_b64: StringDNSKEY public-key wire bytes (X || Y, 64 bytes for P-256),
base64-encoded — what would appear in the DNSKEY RDATA.
ds_digest_sha256_hex: StringSHA-256 DS digest hex over the canonical owner name + DNSKEY RDATA. Equivalent to what the parent zone publishes.
Trait Implementations§
Source§impl Clone for Route53DnssecMaterialResponse
impl Clone for Route53DnssecMaterialResponse
Source§fn clone(&self) -> Route53DnssecMaterialResponse
fn clone(&self) -> Route53DnssecMaterialResponse
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more