propellor-5.13: property-based host configuration management in haskell

Safe Haskell | None
Language | Haskell2010

Propellor.Property.DnsSec

Synopsis

- keysInstalled :: Domain -> RevertableProperty (HasInfo + UnixLike) UnixLike
- zoneSigned :: Domain -> FilePath -> RevertableProperty (HasInfo + UnixLike) UnixLike
- forceZoneSigned :: Domain -> FilePath -> Property UnixLike
- saltSha1 :: IO String
- keyFn :: Domain -> DnsSecKey -> FilePath
- keyExt :: DnsSecKey -> String
- isPublic :: DnsSecKey -> Bool
- isZoneSigningKey :: DnsSecKey -> Bool
- signedZoneFile :: FilePath -> FilePath

# Documentation

keysInstalled :: Domain -> RevertableProperty (HasInfo + UnixLike) UnixLike Source #

Puts the DNSSEC key files in place from PrivData.

signedPrimary uses this, so this property does not normally need to be used directly.

zoneSigned :: Domain -> FilePath -> RevertableProperty (HasInfo + UnixLike) UnixLike Source #

Uses dnssec-signzone to sign a domain's zone file.

signedPrimary uses this, so this property does not normally need to be used directly.

forceZoneSigned :: Domain -> FilePath -> Property UnixLike Source #

saltSha1 :: IO String Source #

keyFn :: Domain -> DnsSecKey -> FilePath Source #

The file used for a given key.

keyExt :: DnsSecKey -> String Source #

These are the extensions that dnssec-keygen looks for.

isPublic :: DnsSecKey -> Bool Source #

isZoneSigningKey :: DnsSecKey -> Bool Source #

signedZoneFile :: FilePath -> FilePath Source #

dnssec-signzone makes a .signed file