ZskDnssecKeyVersion¶
-
class
oci.dns.models.
ZskDnssecKeyVersion
(**kwargs)¶ Bases:
object
A zone signing key (ZSK) version. The version information contains timing and configuration data for the ZSK that is used to apply DNSSEC on the zone.
Attributes
ALGORITHM_RSASHA256
A constant which can be used with the algorithm property of a ZskDnssecKeyVersion. algorithm
Gets the algorithm of this ZskDnssecKeyVersion. key_tag
Gets the key_tag of this ZskDnssecKeyVersion. length_in_bytes
Gets the length_in_bytes of this ZskDnssecKeyVersion. predecessor_dnssec_key_version_uuid
Gets the predecessor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. successor_dnssec_key_version_uuid
Gets the successor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. time_activated
Gets the time_activated of this ZskDnssecKeyVersion. time_created
Gets the time_created of this ZskDnssecKeyVersion. time_expired
Gets the time_expired of this ZskDnssecKeyVersion. time_inactivated
Gets the time_inactivated of this ZskDnssecKeyVersion. time_promoted
Gets the time_promoted of this ZskDnssecKeyVersion. time_published
Gets the time_published of this ZskDnssecKeyVersion. time_unpublished
Gets the time_unpublished of this ZskDnssecKeyVersion. uuid
Gets the uuid of this ZskDnssecKeyVersion. Methods
__init__
(**kwargs)Initializes a new ZskDnssecKeyVersion object with values from keyword arguments. -
ALGORITHM_RSASHA256
= 'RSASHA256'¶ A constant which can be used with the algorithm property of a ZskDnssecKeyVersion. This constant has a value of “RSASHA256”
-
__init__
(**kwargs)¶ Initializes a new ZskDnssecKeyVersion object with values from keyword arguments. The following keyword arguments are supported (corresponding to the getters/setters of this class):
Parameters: - uuid (str) – The value to assign to the uuid property of this ZskDnssecKeyVersion.
- algorithm (str) – The value to assign to the algorithm property of this ZskDnssecKeyVersion. Allowed values for this property are: “RSASHA256”, ‘UNKNOWN_ENUM_VALUE’. Any unrecognized values returned by a service will be mapped to ‘UNKNOWN_ENUM_VALUE’.
- length_in_bytes (int) – The value to assign to the length_in_bytes property of this ZskDnssecKeyVersion.
- time_created (datetime) – The value to assign to the time_created property of this ZskDnssecKeyVersion.
- time_published (datetime) – The value to assign to the time_published property of this ZskDnssecKeyVersion.
- time_activated (datetime) – The value to assign to the time_activated property of this ZskDnssecKeyVersion.
- time_inactivated (datetime) – The value to assign to the time_inactivated property of this ZskDnssecKeyVersion.
- time_unpublished (datetime) – The value to assign to the time_unpublished property of this ZskDnssecKeyVersion.
- time_expired (datetime) – The value to assign to the time_expired property of this ZskDnssecKeyVersion.
- time_promoted (datetime) – The value to assign to the time_promoted property of this ZskDnssecKeyVersion.
- predecessor_dnssec_key_version_uuid (str) – The value to assign to the predecessor_dnssec_key_version_uuid property of this ZskDnssecKeyVersion.
- successor_dnssec_key_version_uuid (str) – The value to assign to the successor_dnssec_key_version_uuid property of this ZskDnssecKeyVersion.
- key_tag (int) – The value to assign to the key_tag property of this ZskDnssecKeyVersion.
-
algorithm
¶ Gets the algorithm of this ZskDnssecKeyVersion. The signing algorithm used for the key.
Allowed values for this property are: “RSASHA256”, ‘UNKNOWN_ENUM_VALUE’. Any unrecognized values returned by a service will be mapped to ‘UNKNOWN_ENUM_VALUE’.
Returns: The algorithm of this ZskDnssecKeyVersion. Return type: str
-
key_tag
¶ Gets the key_tag of this ZskDnssecKeyVersion. The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.
Returns: The key_tag of this ZskDnssecKeyVersion. Return type: int
-
length_in_bytes
¶ Gets the length_in_bytes of this ZskDnssecKeyVersion. The length of the corresponding private key in bytes, expressed as an integer.
Returns: The length_in_bytes of this ZskDnssecKeyVersion. Return type: int
-
predecessor_dnssec_key_version_uuid
¶ Gets the predecessor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
Returns: The predecessor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. Return type: str
-
successor_dnssec_key_version_uuid
¶ Gets the successor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
Returns: The successor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. Return type: str
-
time_activated
¶ Gets the time_activated of this ZskDnssecKeyVersion. The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
Example: 2016-07-22T17:23:59:00Z
Returns: The time_activated of this ZskDnssecKeyVersion. Return type: datetime
-
time_created
¶ Gets the time_created of this ZskDnssecKeyVersion. The date and time the key version was created, expressed in RFC 3339 timestamp format.
Example: 2016-07-22T17:23:59:00Z
Returns: The time_created of this ZskDnssecKeyVersion. Return type: datetime
-
time_expired
¶ Gets the time_expired of this ZskDnssecKeyVersion. The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion’s successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.
Example: 2016-07-22T17:23:59:00Z
Returns: The time_expired of this ZskDnssecKeyVersion. Return type: datetime
-
time_inactivated
¶ Gets the time_inactivated of this ZskDnssecKeyVersion. The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
Example: 2016-07-22T17:23:59:00Z
Returns: The time_inactivated of this ZskDnssecKeyVersion. Return type: datetime
-
time_promoted
¶ Gets the time_promoted of this ZskDnssecKeyVersion. The date and time the key version was promoted expressed in RFC 3339 timestamp format.
Example: 2016-07-22T17:23:59:00Z
Returns: The time_promoted of this ZskDnssecKeyVersion. Return type: datetime
-
time_published
¶ Gets the time_published of this ZskDnssecKeyVersion. The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
Example: 2016-07-22T17:23:59:00Z
Returns: The time_published of this ZskDnssecKeyVersion. Return type: datetime
-
time_unpublished
¶ Gets the time_unpublished of this ZskDnssecKeyVersion. The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.
Example: 2016-07-22T17:23:59:00Z
Returns: The time_unpublished of this ZskDnssecKeyVersion. Return type: datetime
-
uuid
¶ Gets the uuid of this ZskDnssecKeyVersion. The UUID of the DnssecKeyVersion.
Returns: The uuid of this ZskDnssecKeyVersion. Return type: str
-