Skip Menu |
 

This queue is for tickets about the Net-DNS CPAN distribution.

Report information
The Basics
Id: 77327
Status: resolved
Priority: 0/
Queue: Net-DNS

People
Owner: Nobody in particular
Requestors: pause-zebaz [...] nederhost.nl
Cc:
AdminCc:

Bug Information
Severity: Unimportant
Broken in: (no value)
Fixed in: (no value)



Subject: DANE TLSA support
Download (untitled) / with headers
text/plain 463b
This patch adds support for DANE TLSA records conforming to the current draft, draft-ietf- dane-protocol-21. It adds the TLSA record with the IANA assigned qtype of 52 and a module Net::DNS::RR:TLSA. Adding this now may be a bit early and I can imagine limiting Net::DNS only to records which have an actual standard associated with them. Support was added to our local version for a customer who wants to test with DANE, thought it would be nice to share it.
Subject: Net-DNS-TLSA-support.diff
Index: lib/Net/DNS.pm =================================================================== --- lib/Net/DNS.pm (revision 5820) +++ lib/Net/DNS.pm (working copy) @@ -174,7 +174,8 @@ 'DHCID' => 49, # RFC4701 'NSEC3' => 50, # RFC5155 'NSEC3PARAM' => 51, # RFC5155 -# 52-54 are unassigned + 'TLSA' => 52, # draft-ietf-dane-protocol +# 53-54 are unassigned 'HIP' => 55, # RFC5205 'NINFO' => 56, # non-standard NOT IMPLEMENTED 'RKEY' => 57, # non-standard NOT IMPLEMENTED Index: lib/Net/DNS/RR/TLSA.pm =================================================================== --- lib/Net/DNS/RR/TLSA.pm (revision 0) +++ lib/Net/DNS/RR/TLSA.pm (revision 0) @@ -0,0 +1,117 @@ +package Net::DNS::RR::TLSA; +# +# $Id$ +# +use strict; +BEGIN { + eval { require bytes; } +} +use vars qw(@ISA $VERSION); + +@ISA = qw(Net::DNS::RR); +$VERSION = (qw$LastChangedRevision: 932 $)[1]; + +sub new { + my ($class, $self, $data, $offset) = @_; + + if ($self->{'rdlength'} > 0) { + @{$self}{qw(usage selector matchingtype certificate_data)} = unpack("\@$offset C3 H*", $$data); + } + + return bless $self, $class; +} + +sub new_from_string { + my ($class, $self, $string) = @_; + + if ($string && ($string =~ /^(\d+)\s+(\d+)\s+(\d+)\s+([0-9A-Fa-f]+)$/)) { + @{$self}{qw(usage selector matchingtype certificate_data)} = ($1, $2, $3, lc ( $4 )); + + $self->{'certificate_data'} =~ s/\s+//g; + } + + return bless $self, $class; +} + +sub rdatastr { + my $self = shift; + my $rdatastr; + + if (exists $self->{'certificate_data'}) { + $rdatastr = join(' ', @{$self}{qw(usage selector matchingtype certificate_data)}); + } else { + $rdatastr = ''; + } + + return $rdatastr; +} + +sub rr_rdata { + my ($self, $packet, $offset) = @_; + my $rdata = ''; + + if (exists $self->{'certificate_data'}) { + $rdata .= pack('C3 H*', @{$self}{qw(usage selector matchingtype certificate_data)}); + } + + return $rdata; +} + + +1; +__END__ + +=head1 NAME + +Net::DNS::RR::TLSA - DNS TLSA resource record + +=head1 SYNOPSIS + +C<use Net::DNS::RR>; + +=head1 DESCRIPTION + +Class for DNS DANE TLSA resource records. + +=head1 METHODS + +=head2 usage + + print "usage = ", $rr->usage, "\n"; + +Returns the numerical usage field of the record. + +=head2 selector + + print "selector = ", $rr->selector, "\n"; + +Returns the numerical selector field of the record. + +=head2 matchingtype + + print "matching type = ", $rr->matchingtype, "\n"; + +Returns the numerical matching type field of the record. + +=head2 certificate_data + + print "certificate data = ", $rr->certificate_data, "\n"; + +Returns the certificate data associated with the record, as a hexadecimal string. + +=head1 COPYRIGHT + +Copyright (c) 1997-2002 Michael Fuhr. + +Portions Copyright (c) 2002-2004 Chris Reinhardt. + +All rights reserved. This program is free software; you may redistribute +it and/or modify it under the same terms as Perl itself. + +=head1 SEE ALSO + +L<perl(1)>, L<Net::DNS>, L<Net::DNS::Resolver>, L<Net::DNS::Packet>, +L<Net::DNS::Header>, L<Net::DNS::Question>, L<Net::DNS::RR>, +draft-ietf-dane-protocol-21 + +=cut Index: lib/Net/DNS/RR.pm =================================================================== --- lib/Net/DNS/RR.pm (revision 5820) +++ lib/Net/DNS/RR.pm (working copy) @@ -76,6 +76,7 @@ SOA SRV TKEY + TLSA TSIG TXT X25
Download (untitled) / with headers
text/plain 144b
Thanks Zebaz, I'll apply when the TLSA has become RFC (and nothing changed in the structure of course :). Parking for now... Cheers, -- Willem
Hi Zebaz, Since the draft has now become RFC, I've applied your patch. Thanks! -- Willem


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.