]> git.ipfire.org Git - thirdparty/dnspython.git/commitdiff
dnssec doco
authorBob Halley <halley@dnspython.org>
Sun, 15 Jan 2017 23:52:30 +0000 (15:52 -0800)
committerBob Halley <halley@dnspython.org>
Sun, 15 Jan 2017 23:52:30 +0000 (15:52 -0800)
dns/dnssec.py
doc/dnssec.rst [new file with mode: 0644]
doc/exceptions.rst
doc/manual.rst

index d50393c17a92bc2f841eb16e7afe67fa00761f57..6e9d41030ec2d376a51ffcb1dc65e52c29393f4d 100644 (file)
@@ -37,19 +37,34 @@ class UnsupportedAlgorithm(dns.exception.DNSException):
 class ValidationFailure(dns.exception.DNSException):
     """The DNSSEC signature is invalid."""
 
+
+#: RSAMD5
 RSAMD5 = 1
+#: DH
 DH = 2
+#: DSA
 DSA = 3
+#: ECC
 ECC = 4
+#: RSASHA1
 RSASHA1 = 5
+#: DSANSEC3SHA1
 DSANSEC3SHA1 = 6
+#: RSASHA1NSEC3SHA1
 RSASHA1NSEC3SHA1 = 7
+#: RSASHA256
 RSASHA256 = 8
+#: RSASHA512
 RSASHA512 = 10
+#: ECDSAP256SHA256
 ECDSAP256SHA256 = 13
+#: ECDSAP384SHA384
 ECDSAP384SHA384 = 14
+#: INDIRECT
 INDIRECT = 252
+#: PRIVATEDNS
 PRIVATEDNS = 253
+#: PRIVATEOID
 PRIVATEOID = 254
 
 _algorithm_by_text = {
diff --git a/doc/dnssec.rst b/doc/dnssec.rst
new file mode 100644 (file)
index 0000000..c16a618
--- /dev/null
@@ -0,0 +1,39 @@
+.. module:: dns.dnssec
+.. _dnssec:
+
+DNSSEC
+======
+
+Dnspython can do simple DNSSEC signature validation, but
+currently has no facilities for signing.  In order to
+use DNSSEC functions, you must have ``pycrypto`` installed.
+If you want to do elliptic curves, you must also have
+``ecdsa`` installed.
+
+DNSSEC Algorithms
+-----------------
+
+.. autodata:: dns.dnssec.RSAMD5
+.. autodata:: dns.dnssec.DH
+.. autodata:: dns.dnssec.DSA
+.. autodata:: dns.dnssec.ECC
+.. autodata:: dns.dnssec.RSASHA1
+.. autodata:: dns.dnssec.DSANSEC3SHA1
+.. autodata:: dns.dnssec.RSASHA1NSEC3SHA1
+.. autodata:: dns.dnssec.RSASHA256
+.. autodata:: dns.dnssec.RSASHA512
+.. autodata:: dns.dnssec.ECDSAP256SHA256
+.. autodata:: dns.dnssec.ECDSAP384SHA384
+.. autodata:: dns.dnssec.INDIRECT
+.. autodata:: dns.dnssec.PRIVATEDNS
+.. autodata:: dns.dnssec.PRIVATEOID
+
+DNSSEC Functions
+----------------
+
+.. autofunction:: dns.dnssec.algorithm_from_text
+.. autofunction:: dns.dnssec.algorithm_to_text
+.. autofunction:: dns.dnssec.key_id
+.. autofunction:: dns.dnssec.make_ds
+.. autofunction:: dns.dnssec.validate
+.. autofunction:: dns.dnssec.validate_rrsig
index 879e593a98e9a406b29c281baee3a670c11fdc43..9f5e22cc0a18057dec9715d8f7e0de256569efb2 100644 (file)
@@ -9,6 +9,13 @@ Common Exceptions
 .. automodule:: dns.exception
    :members:
 
+dns.dnssec Exceptions
+---------------------
+
+.. autoexception:: dns.dnssec.UnsupportedAlgorithm
+.. autoexception:: dns.dnssec.ValidationFailure
+
+      
 dns.message Exceptions
 ----------------------
 
index c88f8e000e82d3f3216ffc7dcbe1f71c05fee8db..c032f4f94b863ed46c9e22bdd8d96f8ffc831b5e 100644 (file)
@@ -9,5 +9,6 @@ Dnspython Manual
    name
    rdata
    message
+   dnssec
    exceptions
    utilities