222 lines
5.3 KiB
Perl
222 lines
5.3 KiB
Perl
package Net::DNS::RR::TLSA;
|
|
|
|
use strict;
|
|
use warnings;
|
|
our $VERSION = (qw$Id: TLSA.pm 1896 2023-01-30 12:59:25Z willem $)[2];
|
|
|
|
use base qw(Net::DNS::RR);
|
|
|
|
|
|
=head1 NAME
|
|
|
|
Net::DNS::RR::TLSA - DNS TLSA resource record
|
|
|
|
=cut
|
|
|
|
use integer;
|
|
|
|
use Carp;
|
|
use constant BABBLE => defined eval { require Digest::BubbleBabble };
|
|
|
|
|
|
sub _decode_rdata { ## decode rdata from wire-format octet string
|
|
my ( $self, $data, $offset ) = @_;
|
|
|
|
my $next = $offset + $self->{rdlength};
|
|
|
|
@{$self}{qw(usage selector matchingtype)} = unpack "\@$offset C3", $$data;
|
|
$offset += 3;
|
|
$self->{certbin} = substr $$data, $offset, $next - $offset;
|
|
return;
|
|
}
|
|
|
|
|
|
sub _encode_rdata { ## encode rdata as wire-format octet string
|
|
my $self = shift;
|
|
|
|
return pack 'C3 a*', @{$self}{qw(usage selector matchingtype certbin)};
|
|
}
|
|
|
|
|
|
sub _format_rdata { ## format rdata portion of RR string.
|
|
my $self = shift;
|
|
|
|
$self->_annotation( $self->babble ) if BABBLE;
|
|
my @cert = split /(\S{64})/, $self->cert;
|
|
my @rdata = ( $self->usage, $self->selector, $self->matchingtype, @cert );
|
|
return @rdata;
|
|
}
|
|
|
|
|
|
sub _parse_rdata { ## populate RR from rdata in argument list
|
|
my ( $self, @argument ) = @_;
|
|
|
|
for (qw(usage selector matchingtype)) { $self->$_( shift @argument ) }
|
|
$self->cert(@argument);
|
|
return;
|
|
}
|
|
|
|
|
|
sub usage {
|
|
my ( $self, @value ) = @_;
|
|
for (@value) { $self->{usage} = 0 + $_ }
|
|
return $self->{usage} || 0;
|
|
}
|
|
|
|
|
|
sub selector {
|
|
my ( $self, @value ) = @_;
|
|
for (@value) { $self->{selector} = 0 + $_ }
|
|
return $self->{selector} || 0;
|
|
}
|
|
|
|
|
|
sub matchingtype {
|
|
my ( $self, @value ) = @_;
|
|
for (@value) { $self->{matchingtype} = 0 + $_ }
|
|
return $self->{matchingtype} || 0;
|
|
}
|
|
|
|
|
|
sub cert {
|
|
my ( $self, @value ) = @_;
|
|
return unpack "H*", $self->certbin() unless scalar @value;
|
|
my @hex = map { /^"*([\dA-Fa-f]*)"*$/ || croak("corrupt hex"); $1 } @value;
|
|
return $self->certbin( pack "H*", join "", @hex );
|
|
}
|
|
|
|
|
|
sub certbin {
|
|
my ( $self, @value ) = @_;
|
|
for (@value) { $self->{certbin} = $_ }
|
|
return $self->{certbin} || "";
|
|
}
|
|
|
|
|
|
sub certificate { return &cert; }
|
|
|
|
|
|
sub babble {
|
|
return BABBLE ? Digest::BubbleBabble::bubblebabble( Digest => shift->certbin ) : '';
|
|
}
|
|
|
|
|
|
1;
|
|
__END__
|
|
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
use Net::DNS;
|
|
$rr = Net::DNS::RR->new('name TLSA usage selector matchingtype certificate');
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
The Transport Layer Security Authentication (TLSA) DNS resource record
|
|
is used to associate a TLS server certificate or public key with the
|
|
domain name where the record is found, forming a "TLSA certificate
|
|
association". The semantics of how the TLSA RR is interpreted are
|
|
described in RFC6698.
|
|
|
|
=head1 METHODS
|
|
|
|
The available methods are those inherited from the base class augmented
|
|
by the type-specific methods defined in this package.
|
|
|
|
Use of undocumented package features or direct access to internal data
|
|
structures is discouraged and could result in program termination or
|
|
other unpredictable behaviour.
|
|
|
|
|
|
=head2 usage
|
|
|
|
$usage = $rr->usage;
|
|
$rr->usage( $usage );
|
|
|
|
8-bit integer value which specifies the provided association that
|
|
will be used to match the certificate presented in the TLS handshake.
|
|
|
|
=head2 selector
|
|
|
|
$selector = $rr->selector;
|
|
$rr->selector( $selector );
|
|
|
|
8-bit integer value which specifies which part of the TLS certificate
|
|
presented by the server will be matched against the association data.
|
|
|
|
=head2 matchingtype
|
|
|
|
$matchingtype = $rr->matchingtype;
|
|
$rr->matchingtype( $matchingtype );
|
|
|
|
8-bit integer value which specifies how the certificate association
|
|
is presented.
|
|
|
|
=head2 certificate
|
|
|
|
=head2 cert
|
|
|
|
$cert = $rr->cert;
|
|
$rr->cert( $cert );
|
|
|
|
Hexadecimal representation of the certificate data.
|
|
|
|
=head2 certbin
|
|
|
|
$certbin = $rr->certbin;
|
|
$rr->certbin( $certbin );
|
|
|
|
Binary representation of the certificate data.
|
|
|
|
=head2 babble
|
|
|
|
print $rr->babble;
|
|
|
|
The babble() method returns the 'BubbleBabble' representation of the
|
|
digest if the Digest::BubbleBabble package is available, otherwise
|
|
an empty string is returned.
|
|
|
|
BubbleBabble represents a message digest as a string of plausible
|
|
words, to make the digest easier to verify. The "words" are not
|
|
necessarily real words, but they look more like words than a string
|
|
of hex characters.
|
|
|
|
The 'BubbleBabble' string is appended as a comment when the string
|
|
method is called.
|
|
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
Copyright (c)2012 Willem Toorop, NLnet Labs.
|
|
|
|
All rights reserved.
|
|
|
|
Package template (c)2009,2012 O.M.Kolkman and R.W.Franks.
|
|
|
|
|
|
=head1 LICENSE
|
|
|
|
Permission to use, copy, modify, and distribute this software and its
|
|
documentation for any purpose and without fee is hereby granted, provided
|
|
that the original copyright notices appear in all copies and that both
|
|
copyright notice and this permission notice appear in supporting
|
|
documentation, and that the name of the author not be used in advertising
|
|
or publicity pertaining to distribution of the software without specific
|
|
prior written permission.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
|
|
THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
|
|
FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
|
|
DEALINGS IN THE SOFTWARE.
|
|
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<perl> L<Net::DNS> L<Net::DNS::RR>
|
|
L<RFC6698|https://tools.ietf.org/html/rfc6698>
|
|
|
|
=cut
|