ZskDnssecKeyVersion

class oci.dns.models.ZskDnssecKeyVersion(**kwargs)

Bases: object

A zone signing key (ZSK) version. The version information contains timing and configuration data for the ZSK that is used to apply DNSSEC on the zone.

Attributes

ALGORITHM_RSASHA256 A constant which can be used with the algorithm property of a ZskDnssecKeyVersion.
algorithm Gets the algorithm of this ZskDnssecKeyVersion.
key_tag Gets the key_tag of this ZskDnssecKeyVersion.
length_in_bytes Gets the length_in_bytes of this ZskDnssecKeyVersion.
predecessor_dnssec_key_version_uuid Gets the predecessor_dnssec_key_version_uuid of this ZskDnssecKeyVersion.
successor_dnssec_key_version_uuid Gets the successor_dnssec_key_version_uuid of this ZskDnssecKeyVersion.
time_activated Gets the time_activated of this ZskDnssecKeyVersion.
time_created Gets the time_created of this ZskDnssecKeyVersion.
time_expired Gets the time_expired of this ZskDnssecKeyVersion.
time_inactivated Gets the time_inactivated of this ZskDnssecKeyVersion.
time_promoted Gets the time_promoted of this ZskDnssecKeyVersion.
time_published Gets the time_published of this ZskDnssecKeyVersion.
time_unpublished Gets the time_unpublished of this ZskDnssecKeyVersion.
uuid Gets the uuid of this ZskDnssecKeyVersion.

Methods

__init__(**kwargs) Initializes a new ZskDnssecKeyVersion object with values from keyword arguments.
ALGORITHM_RSASHA256 = 'RSASHA256'

A constant which can be used with the algorithm property of a ZskDnssecKeyVersion. This constant has a value of “RSASHA256”

__init__(**kwargs)

Initializes a new ZskDnssecKeyVersion object with values from keyword arguments. The following keyword arguments are supported (corresponding to the getters/setters of this class):

Parameters:
  • uuid (str) – The value to assign to the uuid property of this ZskDnssecKeyVersion.
  • algorithm (str) – The value to assign to the algorithm property of this ZskDnssecKeyVersion. Allowed values for this property are: “RSASHA256”, ‘UNKNOWN_ENUM_VALUE’. Any unrecognized values returned by a service will be mapped to ‘UNKNOWN_ENUM_VALUE’.
  • length_in_bytes (int) – The value to assign to the length_in_bytes property of this ZskDnssecKeyVersion.
  • time_created (datetime) – The value to assign to the time_created property of this ZskDnssecKeyVersion.
  • time_published (datetime) – The value to assign to the time_published property of this ZskDnssecKeyVersion.
  • time_activated (datetime) – The value to assign to the time_activated property of this ZskDnssecKeyVersion.
  • time_inactivated (datetime) – The value to assign to the time_inactivated property of this ZskDnssecKeyVersion.
  • time_unpublished (datetime) – The value to assign to the time_unpublished property of this ZskDnssecKeyVersion.
  • time_expired (datetime) – The value to assign to the time_expired property of this ZskDnssecKeyVersion.
  • time_promoted (datetime) – The value to assign to the time_promoted property of this ZskDnssecKeyVersion.
  • predecessor_dnssec_key_version_uuid (str) – The value to assign to the predecessor_dnssec_key_version_uuid property of this ZskDnssecKeyVersion.
  • successor_dnssec_key_version_uuid (str) – The value to assign to the successor_dnssec_key_version_uuid property of this ZskDnssecKeyVersion.
  • key_tag (int) – The value to assign to the key_tag property of this ZskDnssecKeyVersion.
algorithm

Gets the algorithm of this ZskDnssecKeyVersion. The signing algorithm used for the key.

Allowed values for this property are: “RSASHA256”, ‘UNKNOWN_ENUM_VALUE’. Any unrecognized values returned by a service will be mapped to ‘UNKNOWN_ENUM_VALUE’.

Returns:The algorithm of this ZskDnssecKeyVersion.
Return type:str
key_tag

Gets the key_tag of this ZskDnssecKeyVersion. The key tag associated with the DnssecKeyVersion. This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.

Returns:The key_tag of this ZskDnssecKeyVersion.
Return type:int
length_in_bytes

Gets the length_in_bytes of this ZskDnssecKeyVersion. The length of the corresponding private key in bytes, expressed as an integer.

Returns:The length_in_bytes of this ZskDnssecKeyVersion.
Return type:int
predecessor_dnssec_key_version_uuid

Gets the predecessor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.

Returns:The predecessor_dnssec_key_version_uuid of this ZskDnssecKeyVersion.
Return type:str
successor_dnssec_key_version_uuid

Gets the successor_dnssec_key_version_uuid of this ZskDnssecKeyVersion. When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.

Returns:The successor_dnssec_key_version_uuid of this ZskDnssecKeyVersion.
Return type:str
time_activated

Gets the time_activated of this ZskDnssecKeyVersion. The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_activated of this ZskDnssecKeyVersion.
Return type:datetime
time_created

Gets the time_created of this ZskDnssecKeyVersion. The date and time the key version was created, expressed in RFC 3339 timestamp format.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_created of this ZskDnssecKeyVersion.
Return type:datetime
time_expired

Gets the time_expired of this ZskDnssecKeyVersion. The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion’s successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_expired of this ZskDnssecKeyVersion.
Return type:datetime
time_inactivated

Gets the time_inactivated of this ZskDnssecKeyVersion. The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format. This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_inactivated of this ZskDnssecKeyVersion.
Return type:datetime
time_promoted

Gets the time_promoted of this ZskDnssecKeyVersion. The date and time the key version was promoted expressed in RFC 3339 timestamp format.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_promoted of this ZskDnssecKeyVersion.
Return type:datetime
time_published

Gets the time_published of this ZskDnssecKeyVersion. The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_published of this ZskDnssecKeyVersion.
Return type:datetime
time_unpublished

Gets the time_unpublished of this ZskDnssecKeyVersion. The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

Example: 2016-07-22T17:23:59:00Z

Returns:The time_unpublished of this ZskDnssecKeyVersion.
Return type:datetime
uuid

Gets the uuid of this ZskDnssecKeyVersion. The UUID of the DnssecKeyVersion.

Returns:The uuid of this ZskDnssecKeyVersion.
Return type:str