DnssecTrustAnchor Class

Represents a DNSSEC trust anchor as a DS-style key digest.

public sealed class DnssecTrustAnchor

Constructors

NameDescription
DnssecTrustAnchor(string, ushort, byte, byte, byte[])Initializes a new instance of the DnssecTrustAnchor class.

DnssecTrustAnchor(string, ushort, byte, byte, byte[])

DnssecTrustAnchor.cs

Initializes a new instance of the DnssecTrustAnchor class.

public DnssecTrustAnchor(string name, ushort keyTag, byte algorithm, byte digestType, byte[] digest)

Parameters

name string
The DNS name the trust anchor applies to.
keyTag ushort
The DNSKEY key tag.
algorithm byte
The DNSSEC algorithm number.
digestType byte
The DS digest type.
digest byte[]
The DS digest bytes.

Properties

NameDescription
AlgorithmGets the DNSSEC algorithm number.
DigestGets the DS digest bytes.
DigestTypeGets the DS digest type.
KeyTagGets the DNSKEY key tag.
NameGets the DNS name the trust anchor applies to.

Gets the DNSSEC algorithm number.

public byte Algorithm { get; }

Property value

byte

Gets the DS digest bytes.

public ReadOnlyMemory<byte> Digest { get; }

Property value

ReadOnlyMemory<byte>

Remarks

Exposed as ReadOnlyMemory<T> rather than an array: DnssecTrustAnchors.Root is a process-wide singleton and is the root of trust for every client, so handing out a writable reference to it would let any code in the process silently break — or redirect — DNSSEC validation everywhere.

Gets the DS digest type.

public byte DigestType { get; }

Property value

byte

Gets the DNSKEY key tag.

public ushort KeyTag { get; }

Property value

ushort

Gets the DNS name the trust anchor applies to.

public string Name { get; }

Property value

string