Package org.jitsi.dnssec.validator

Class ValidatingResolver

java.lang.Object
org.jitsi.dnssec.validator.ValidatingResolver
All Implemented Interfaces:
org.xbill.DNS.Resolver
public class ValidatingResolver extends Object implements org.xbill.DNS.Resolver
This resolver validates responses with DNSSEC.

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final int
    VALIDATION_REASON_QCLASS
    The QCLASS being used for the injection of the reason why the validator came to the returned result.

  • Constructor Summary

    Constructors
    Constructor
    Description
    ValidatingResolver(org.xbill.DNS.Resolver headResolver)
    Creates a new instance of this class.

  • Method Summary

    Modifier and Type
    Method
    Description
    TrustAnchorStore
    getTrustAnchors()
    Gets the store with the loaded trust anchors.
    void
    init(Properties config)
    Initialize the module.
    void
    loadTrustAnchors(InputStream data)
    Load the trust anchor file into the trust anchor store.
    org.xbill.DNS.Message
    send(org.xbill.DNS.Message query)
    Sends a message and validates the response with DNSSEC before returning it.
    Object
    sendAsync(org.xbill.DNS.Message query, org.xbill.DNS.ResolverListener listener)
    Not implemented.
    void
    setEDNS(int level)
    This is a no-op, EDNS is always set to level 0.
    void
    setEDNS(int level, int payloadSize, int flags, List options)
    The method is forwarded to the resolver, but always ensure that the level is 0 and the flags contains DO.
    void
    setIgnoreTruncation(boolean flag)
    This is a no-op, truncation is never ignored.
    void
    setPort(int port)
    Forwards the data to the head resolver passed at construction time.
    void
    setTCP(boolean flag)
    Forwards the data to the head resolver passed at construction time.
    void
    setTimeout(int secs)
    Sets the amount of time to wait for a response before giving up.
    void
    setTimeout(int secs, int msecs)
    Sets the amount of time to wait for a response before giving up.
    void
    setTSIGKey(org.xbill.DNS.TSIG key)
    Forwards the data to the head resolver passed at construction time.

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

    • VALIDATION_REASON_QCLASS

      public static final int VALIDATION_REASON_QCLASS
      The QCLASS being used for the injection of the reason why the validator came to the returned result.
      See Also:

  • Constructor Details

    • ValidatingResolver

      public ValidatingResolver(org.xbill.DNS.Resolver headResolver)
      Creates a new instance of this class.
      Parameters:
      headResolver - The resolver to which queries for DS, DNSKEY and referring CNAME records are sent.

  • Method Details

    • init

      public void init(Properties config) throws IOException
      Initialize the module. The only recognized configuration value is org.jitsi.dnssec.trust_anchor_file.
      Parameters:
      config - The configuration data for this module.
      Throws:
      IOException - When the file specified in the config does not exist or cannot be read.

    • loadTrustAnchors

      public void loadTrustAnchors(InputStream data) throws IOException
      Load the trust anchor file into the trust anchor store. The trust anchors are currently stored in a zone file format list of DNSKEY or DS records.
      Parameters:
      data - The trust anchor data.
      Throws:
      IOException - when the trust anchor data could not be read.

    • getTrustAnchors

      public TrustAnchorStore getTrustAnchors()
      Gets the store with the loaded trust anchors.
      Returns:
      The store with the loaded trust anchors.

    • setPort

      public void setPort(int port)
      Forwards the data to the head resolver passed at construction time.
      Specified by:
      setPort in interface org.xbill.DNS.Resolver
      Parameters:
      port - The IP destination port for the queries sent.
      See Also:
      • Resolver.setPort(int)

    • setTCP

      public void setTCP(boolean flag)
      Forwards the data to the head resolver passed at construction time.
      Specified by:
      setTCP in interface org.xbill.DNS.Resolver
      Parameters:
      flag - true to enable TCP, false to disable it.
      See Also:
      • Resolver.setTCP(boolean)

    • setIgnoreTruncation

      public void setIgnoreTruncation(boolean flag)
      This is a no-op, truncation is never ignored.
      Specified by:
      setIgnoreTruncation in interface org.xbill.DNS.Resolver
      Parameters:
      flag - unused

    • setEDNS

      public void setEDNS(int level)
      This is a no-op, EDNS is always set to level 0.
      Specified by:
      setEDNS in interface org.xbill.DNS.Resolver
      Parameters:
      level - unused

    • setEDNS

      public void setEDNS(int level, int payloadSize, int flags, List options)
      The method is forwarded to the resolver, but always ensure that the level is 0 and the flags contains DO.
      Specified by:
      setEDNS in interface org.xbill.DNS.Resolver
      Parameters:
      level - unused, always set to 0.
      payloadSize - The maximum DNS packet size that this host is capable of receiving over UDP. If 0 is specified, the default (1280) is used.
      flags - EDNS extended flags to be set in the OPT record, ExtendedFlags.DO is always appended.
      options - EDNS options to be set in the OPT record, specified as a List of OPTRecord.Option elements.
      See Also:
      • Resolver.setEDNS(int, int, int, java.util.List)

    • setTSIGKey

      public void setTSIGKey(org.xbill.DNS.TSIG key)
      Forwards the data to the head resolver passed at construction time.
      Specified by:
      setTSIGKey in interface org.xbill.DNS.Resolver
      Parameters:
      key - The key.
      See Also:
      • Resolver.setTSIGKey(org.xbill.DNS.TSIG)

    • setTimeout

      public void setTimeout(int secs, int msecs)
      Sets the amount of time to wait for a response before giving up. This applies only to the head resolver, the time for an actual query to the validating resolver IS higher.
      Specified by:
      setTimeout in interface org.xbill.DNS.Resolver
      Parameters:
      secs - The number of seconds to wait.
      msecs - The number of milliseconds to wait.

    • setTimeout

      public void setTimeout(int secs)
      Sets the amount of time to wait for a response before giving up. This applies only to the head resolver, the time for an actual query to the validating resolver IS higher.
      Specified by:
      setTimeout in interface org.xbill.DNS.Resolver
      Parameters:
      secs - The number of seconds to wait.

    • send

      public org.xbill.DNS.Message send(org.xbill.DNS.Message query) throws IOException
      Sends a message and validates the response with DNSSEC before returning it.
      Specified by:
      send in interface org.xbill.DNS.Resolver
      Parameters:
      query - The query to send.
      Returns:
      The validated response message.
      Throws:
      IOException - An error occurred while sending or receiving.

    • sendAsync

      public Object sendAsync(org.xbill.DNS.Message query, org.xbill.DNS.ResolverListener listener)
      Not implemented.
      Specified by:
      sendAsync in interface org.xbill.DNS.Resolver
      Parameters:
      query - The query to send
      listener - The object containing the callbacks.
      Returns:
      An identifier, which is also a parameter in the callback
      Throws:
      UnsupportedOperationException - Always