public static class KskDnssecKeyVersion.Builder extends Object
Constructor and Description |
---|
Builder() |
Modifier and Type | Method and Description |
---|---|
KskDnssecKeyVersion.Builder |
algorithm(DnssecSigningAlgorithm algorithm)
The signing algorithm used for the key.
|
KskDnssecKeyVersion |
build() |
KskDnssecKeyVersion.Builder |
copy(KskDnssecKeyVersion model) |
KskDnssecKeyVersion.Builder |
dsData(List<DnssecKeyVersionDsData> dsData)
An array of data for DS records corresponding with this key version.
|
KskDnssecKeyVersion.Builder |
keyTag(Integer keyTag)
The key tag associated with the
DnssecKeyVersion . |
KskDnssecKeyVersion.Builder |
lengthInBytes(Integer lengthInBytes)
The length of the corresponding private key in bytes, expressed as an integer.
|
KskDnssecKeyVersion.Builder |
predecessorDnssecKeyVersionUuid(String predecessorDnssecKeyVersionUuid)
When populated, this is the UUID of the
DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced. |
KskDnssecKeyVersion.Builder |
successorDnssecKeyVersionUuid(String successorDnssecKeyVersionUuid)
When populated, this is the UUID of the
DnssecKeyVersion that will replace, or
has replaced, this DnssecKeyVersion . |
KskDnssecKeyVersion.Builder |
timeActivated(Date timeActivated)
The date and time the key version went, or will go, active, expressed in RFC 3339
timestamp format.
|
KskDnssecKeyVersion.Builder |
timeCreated(Date timeCreated)
The date and time the key version was created, expressed in RFC 3339 timestamp format.
|
KskDnssecKeyVersion.Builder |
timeExpired(Date timeExpired)
The date and time at which the recommended key version publication/activation lifetime
ends, expressed in RFC 3339 timestamp format.
|
KskDnssecKeyVersion.Builder |
timeInactivated(Date timeInactivated)
The date and time the key version went, or will go, inactive, expressed in RFC 3339
timestamp format.
|
KskDnssecKeyVersion.Builder |
timePromoted(Date timePromoted)
The date and time the key version was promoted expressed in RFC 3339 timestamp format.
|
KskDnssecKeyVersion.Builder |
timePublished(Date timePublished)
The date and time the key version was, or will be, published, expressed in RFC 3339
timestamp format.
|
KskDnssecKeyVersion.Builder |
timeUnpublished(Date timeUnpublished)
The date and time the key version was, or will be, unpublished, expressed in RFC 3339
timestamp format.
|
KskDnssecKeyVersion.Builder |
uuid(String uuid)
The UUID of the
DnssecKeyVersion . |
public KskDnssecKeyVersion.Builder uuid(String uuid)
The UUID of the DnssecKeyVersion
.
uuid
- the value to setpublic KskDnssecKeyVersion.Builder algorithm(DnssecSigningAlgorithm algorithm)
The signing algorithm used for the key.
algorithm
- the value to setpublic KskDnssecKeyVersion.Builder lengthInBytes(Integer lengthInBytes)
The length of the corresponding private key in bytes, expressed as an integer.
lengthInBytes
- the value to setpublic KskDnssecKeyVersion.Builder timeCreated(Date timeCreated)
The date and time the key version was created, expressed in RFC 3339 timestamp format.
*Example:** 2016-07-22T17:23:59:00Z
timeCreated
- the value to setpublic KskDnssecKeyVersion.Builder timePublished(Date timePublished)
The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format. This is when the zone contents will include a DNSKEY record corresponding to the key material.
*Example:** 2016-07-22T17:23:59:00Z
timePublished
- the value to setpublic KskDnssecKeyVersion.Builder timeActivated(Date timeActivated)
The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format. This is when the key material will be used to generate RRSIGs.
*Example:** 2016-07-22T17:23:59:00Z
timeActivated
- the value to setpublic KskDnssecKeyVersion.Builder timeInactivated(Date timeInactivated)
The date and time the key version went, or will go, inactive, expressed in RFC 3339
timestamp format. This is when the key material will no longer be used to generate
RRSIGs. For a key signing key (KSK) DnssecKeyVersion
, this is populated after
PromoteZoneDnssecKeyVersion
has been called on its successor DnssecKeyVersion
.
*Example:** 2016-07-22T17:23:59:00Z
timeInactivated
- the value to setpublic KskDnssecKeyVersion.Builder timeUnpublished(Date timeUnpublished)
The date and time the key version was, or will be, unpublished, expressed in RFC 3339
timestamp format. This is when the corresponding DNSKEY will be removed from zone
contents. For a key signing key (KSK) DnssecKeyVersion
, this is populated after
PromoteZoneDnssecKeyVersion
has been called on its successor DnssecKeyVersion
.
*Example:** 2016-07-22T17:23:59:00Z
timeUnpublished
- the value to setpublic KskDnssecKeyVersion.Builder timeExpired(Date timeExpired)
The date and time at which the recommended key version publication/activation lifetime
ends, expressed in RFC 3339 timestamp format. This is when the corresponding DNSKEY
should no longer exist in zone contents and no longer be used to generate RRSIGs. For a
key sigining key (KSK), if PromoteZoneDnssecKeyVersion
has not been called on
this DnssecKeyVersion
’s successor then it will remain active for arbitrarily long
past its recommended lifetime. This prevents service disruption at the potential
increased risk of key compromise.
*Example:** 2016-07-22T17:23:59:00Z
timeExpired
- the value to setpublic KskDnssecKeyVersion.Builder timePromoted(Date timePromoted)
The date and time the key version was promoted expressed in RFC 3339 timestamp format.
*Example:** 2016-07-22T17:23:59:00Z
timePromoted
- the value to setpublic KskDnssecKeyVersion.Builder predecessorDnssecKeyVersionUuid(String predecessorDnssecKeyVersionUuid)
When populated, this is the UUID of the DnssecKeyVersion
that this DnssecKeyVersion
will replace or has replaced.
predecessorDnssecKeyVersionUuid
- the value to setpublic KskDnssecKeyVersion.Builder successorDnssecKeyVersionUuid(String successorDnssecKeyVersionUuid)
When populated, this is the UUID of the DnssecKeyVersion
that will replace, or
has replaced, this DnssecKeyVersion
.
successorDnssecKeyVersionUuid
- the value to setpublic KskDnssecKeyVersion.Builder keyTag(Integer keyTag)
The key tag associated with the DnssecKeyVersion
. This key tag will be present in
the RRSIG and DS records associated with the key material for this DnssecKeyVersion
. For more information about key tags, see RFC
4034.
keyTag
- the value to setpublic KskDnssecKeyVersion.Builder dsData(List<DnssecKeyVersionDsData> dsData)
An array of data for DS records corresponding with this key version. An entry will exist for each supported DS digest algorithm.
dsData
- the value to setpublic KskDnssecKeyVersion build()
public KskDnssecKeyVersion.Builder copy(KskDnssecKeyVersion model)
Copyright © 2016–2024. All rights reserved.