KskDnssecKeyVersion

class oci.dns.models.KskDnssecKeyVersion(**kwargs)

Bases: object

A key signing key (KSK) version. The version information contains timing and configuration data corresponding to the KSK that is used to apply DNSSEC on the zone.

Attributes

ALGORITHM_RSASHA256 A constant which can be used with the algorithm property of a KskDnssecKeyVersion.
algorithm Gets the algorithm of this KskDnssecKeyVersion.
ds_data Gets the ds_data of this KskDnssecKeyVersion.
key_tag Gets the key_tag of this KskDnssecKeyVersion.
length_in_bytes Gets the length_in_bytes of this KskDnssecKeyVersion.
predecessor_dnssec_key_version_uuid Gets the predecessor_dnssec_key_version_uuid of this KskDnssecKeyVersion.
successor_dnssec_key_version_uuid Gets the successor_dnssec_key_version_uuid of this KskDnssecKeyVersion.
time_activated Gets the time_activated of this KskDnssecKeyVersion.
time_created Gets the time_created of this KskDnssecKeyVersion.
time_expired Gets the time_expired of this KskDnssecKeyVersion.
time_inactivated Gets the time_inactivated of this KskDnssecKeyVersion.
time_promoted Gets the time_promoted of this KskDnssecKeyVersion.
time_published Gets the time_published of this KskDnssecKeyVersion.
time_unpublished Gets the time_unpublished of this KskDnssecKeyVersion.
uuid Gets the uuid of this KskDnssecKeyVersion.

Methods

__init__(**kwargs) Initializes a new KskDnssecKeyVersion object with values from keyword arguments.
ALGORITHM_RSASHA256 = 'RSASHA256'

A constant which can be used with the algorithm property of a KskDnssecKeyVersion. This constant has a value of “RSASHA256”

__init__(**kwargs)

Initializes a new KskDnssecKeyVersion object with values from keyword arguments. The following keyword arguments are supported (corresponding to the getters/setters of this class):

Parameters:
  • uuid (str) – The value to assign to the uuid property of this KskDnssecKeyVersion.
  • algorithm (str) – The value to assign to the algorithm property of this KskDnssecKeyVersion. Allowed values for this property are: “RSASHA256”, ‘UNKNOWN_ENUM_VALUE’. Any unrecognized values returned by a service will be mapped to ‘UNKNOWN_ENUM_VALUE’.
  • length_in_bytes (int) – The value to assign to the length_in_bytes property of this KskDnssecKeyVersion.
  • time_created (datetime) – The value to assign to the time_created property of this KskDnssecKeyVersion.
  • time_published (datetime) – The value to assign to the time_published property of this KskDnssecKeyVersion.
  • time_activated (datetime) – The value to assign to the time_activated property of this KskDnssecKeyVersion.
  • time_inactivated (datetime) – The value to assign to the time_inactivated property of this KskDnssecKeyVersion.
  • time_unpublished (datetime) – The value to assign to the time_unpublished property of this KskDnssecKeyVersion.
  • time_expired (datetime) – The value to assign to the time_expired property of this KskDnssecKeyVersion.
  • time_promoted (datetime) – The value to assign to the time_promoted property of this KskDnssecKeyVersion.
  • predecessor_dnssec_key_version_uuid (str) – The value to assign to the predecessor_dnssec_key_version_uuid property of this KskDnssecKeyVersion.
  • successor_dnssec_key_version_uuid (str) – The value to assign to the successor_dnssec_key_version_uuid property of this KskDnssecKeyVersion.
  • key_tag (int) – The value to assign to the key_tag property of this KskDnssecKeyVersion.
  • ds_data (list[oci.dns.models.DnssecKeyVersionDsData]) – The value to assign to the ds_data property of this KskDnssecKeyVersion.
algorithm

Gets the algorithm of this KskDnssecKeyVersion. The signing algorithm used for the key.

Allowed values for this property are: “RSASHA256”, ‘UNKNOWN_ENUM_VALUE’. Any unrecognized values returned by a service will be mapped to ‘UNKNOWN_ENUM_VALUE’.

Returns:The algorithm of this KskDnssecKeyVersion.
Return type:str
ds_data

Gets the ds_data of this KskDnssecKeyVersion. An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.

Returns:The ds_data of this KskDnssecKeyVersion.
Return type:list[oci.dns.models.DnssecKeyVersionDsData]
key_tag

Gets the key_tag of this KskDnssecKeyVersion. The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.

Returns:The key_tag of this KskDnssecKeyVersion.
Return type:int
length_in_bytes

Gets the length_in_bytes of this KskDnssecKeyVersion. The length of the corresponding private key in bytes, expressed as an integer.

Returns:The length_in_bytes of this KskDnssecKeyVersion.
Return type:int
predecessor_dnssec_key_version_uuid

Gets the predecessor_dnssec_key_version_uuid of this KskDnssecKeyVersion. When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.

Returns:The predecessor_dnssec_key_version_uuid of this KskDnssecKeyVersion.
Return type:str
successor_dnssec_key_version_uuid

Gets the successor_dnssec_key_version_uuid of this KskDnssecKeyVersion. When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.

Returns:The successor_dnssec_key_version_uuid of this KskDnssecKeyVersion.
Return type:str
time_activated

Gets the time_activated of this KskDnssecKeyVersion. The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_activated of this KskDnssecKeyVersion.
Return type:datetime
time_created

Gets the time_created of this KskDnssecKeyVersion. The date and time the key version was created, expressed in RFC 3339 timestamp format.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_created of this KskDnssecKeyVersion.
Return type:datetime
time_expired

Gets the time_expired of this KskDnssecKeyVersion. The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion’s successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_expired of this KskDnssecKeyVersion.
Return type:datetime
time_inactivated

Gets the time_inactivated of this KskDnssecKeyVersion. The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_inactivated of this KskDnssecKeyVersion.
Return type:datetime
time_promoted

Gets the time_promoted of this KskDnssecKeyVersion. The date and time the key version was promoted expressed in RFC 3339 timestamp format.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_promoted of this KskDnssecKeyVersion.
Return type:datetime
time_published

Gets the time_published of this KskDnssecKeyVersion. The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_published of this KskDnssecKeyVersion.
Return type:datetime
time_unpublished

Gets the time_unpublished of this KskDnssecKeyVersion. The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_unpublished of this KskDnssecKeyVersion.
Return type:datetime
uuid

Gets the uuid of this KskDnssecKeyVersion. The UUID of the DnssecKeyVersion.

Returns:The uuid of this KskDnssecKeyVersion.
Return type:str