community
/
dns
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

documentation

This commit is contained in:
Miek Gieben 2012-09-14 17:11:14 +02:00
parent 895f5e7527
commit 2ae6a170a5
1 changed files with 3 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
tlsa.go
View File

@ -10,8 +10,6 @@ import (
"strconv" "strconv"
) )
// TLSA support functions
// CertificateToDANE converts a certificate to a hex string as used in the TLSA record. // CertificateToDANE converts a certificate to a hex string as used in the TLSA record.
func CertificateToDANE(selector, matchingType uint8, cert *x509.Certificate) string { func CertificateToDANE(selector, matchingType uint8, cert *x509.Certificate) string {
switch matchingType { switch matchingType {
@ -44,7 +42,7 @@ func CertificateToDANE(selector, matchingType uint8, cert *x509.Certificate) str
return "" return ""
} }
// Sign creates a TLSA record from a SSL certificate. // Sign creates a TLSA record from an SSL certificate.
func (r *RR_TLSA) Sign(usage, selector, matchingType int, cert *x509.Certificate) error { func (r *RR_TLSA) Sign(usage, selector, matchingType int, cert *x509.Certificate) error {
r.Hdr.Rrtype = TypeTLSA r.Hdr.Rrtype = TypeTLSA
r.Usage = uint8(usage) r.Usage = uint8(usage)
@ -55,7 +53,7 @@ func (r *RR_TLSA) Sign(usage, selector, matchingType int, cert *x509.Certificate
return nil return nil
} }
// Verify verifies a TLSA record against a SSL certificate. If it is OK // Verify verifies a TLSA record against an SSL certificate. If it is OK
// a nil error is returned. // a nil error is returned.
func (r *RR_TLSA) Verify(cert *x509.Certificate) error { func (r *RR_TLSA) Verify(cert *x509.Certificate) error {
if r.Certificate == CertificateToDANE(r.Selector, r.MatchingType, cert) { if r.Certificate == CertificateToDANE(r.Selector, r.MatchingType, cert) {
@ -65,7 +63,7 @@ func (r *RR_TLSA) Verify(cert *x509.Certificate) error {
} }
// TLSAName returns the ownername of a TLSA resource record as per the // TLSAName returns the ownername of a TLSA resource record as per the
// rules specified in RFC 6698, Section 3. When an erros occurs the // rules specified in RFC 6698, Section 3. When an error occurs the
// empty string is returned. // empty string is returned.
func TLSAName(name, service, network string) string { func TLSAName(name, service, network string) string {
if !IsFqdn(name) { if !IsFqdn(name) {