/* * Copied from the DnsJava project * * Copyright (c) 1998-2011, Brian Wellington. * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions are met: * * * Redistributions of source code must retain the above copyright notice, * this list of conditions and the following disclaimer. * * * Redistributions in binary form must reproduce the above copyright notice, * this list of conditions and the following disclaimer in the documentation * and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE * POSSIBILITY OF SUCH DAMAGE. */ package io.milton.dns.record; import io.milton.dns.Name; import io.milton.dns.utils.base64; import java.io.*; import java.util.*; /** * The base class for SIG/RRSIG records, which have identical formats * * @author Brian Wellington */ public abstract class SIGBase extends Record { private static final long serialVersionUID = -3738444391533812369L; protected int covered; protected int alg, labels; protected long origttl; protected Date expire, timeSigned; protected int footprint; protected Name signer; protected byte [] signature; protected SIGBase() {} public SIGBase(Name name, int type, int dclass, long ttl, int covered, int alg, long origttl, Date expire, Date timeSigned, int footprint, Name signer, byte [] signature) { super(name, type, dclass, ttl); Type.check(covered); TTL.check(origttl); this.covered = covered; this.alg = checkU8("alg", alg); this.labels = name.labels() - 1; if (name.isWild()) this.labels--; this.origttl = origttl; this.expire = expire; this.timeSigned = timeSigned; this.footprint = checkU16("footprint", footprint); this.signer = checkName("signer", signer); this.signature = signature; } void rrFromWire(DNSInput in) throws IOException { covered = in.readU16(); alg = in.readU8(); labels = in.readU8(); origttl = in.readU32(); expire = new Date(1000 * in.readU32()); timeSigned = new Date(1000 * in.readU32()); footprint = in.readU16(); signer = new Name(in); signature = in.readByteArray(); } void rdataFromString(Tokenizer st, Name origin) throws IOException { String typeString = st.getString(); covered = Type.value(typeString); if (covered < 0) throw st.exception("Invalid type: " + typeString); String algString = st.getString(); alg = DNSSEC.Algorithm.value(algString); if (alg < 0) throw st.exception("Invalid algorithm: " + algString); labels = st.getUInt8(); origttl = st.getTTL(); expire = FormattedTime.parse(st.getString()); timeSigned = FormattedTime.parse(st.getString()); footprint = st.getUInt16(); signer = st.getName(origin); signature = st.getBase64(); } /** Converts the RRSIG/SIG Record to a String */ String rrToString() { StringBuilder sb = new StringBuilder(); sb.append (Type.string(covered)); sb.append (" "); sb.append (alg); sb.append (" "); sb.append (labels); sb.append (" "); sb.append (origttl); sb.append (" "); if (Options.check("multiline")) sb.append ("(\n\t"); sb.append (FormattedTime.format(expire)); sb.append (" "); sb.append (FormattedTime.format(timeSigned)); sb.append (" "); sb.append (footprint); sb.append (" "); sb.append (signer); if (Options.check("multiline")) { sb.append("\n"); sb.append(base64.formatString(signature, 64, "\t", true)); } else { sb.append (" "); sb.append(base64.toString(signature)); } return sb.toString(); } /** Returns the RRset type covered by this signature */ public int getTypeCovered() { return covered; } /** * Returns the cryptographic algorithm of the key that generated the signature */ public int getAlgorithm() { return alg; } /** * Returns the number of labels in the signed domain name. This may be * different than the record's domain name if the record is a wildcard * record. */ public int getLabels() { return labels; } /** Returns the original TTL of the RRset */ public long getOrigTTL() { return origttl; } /** Returns the time at which the signature expires */ public Date getExpire() { return expire; } /** Returns the time at which this signature was generated */ public Date getTimeSigned() { return timeSigned; } /** Returns The footprint/key id of the signing key. */ public int getFootprint() { return footprint; } /** Returns the owner of the signing key */ public Name getSigner() { return signer; } /** Returns the binary data representing the signature */ public byte [] getSignature() { return signature; } public void setSignature(byte [] signature) { this.signature = signature; } void rrToWire(DNSOutput out, Compression c, boolean canonical) { out.writeU16(covered); out.writeU8(alg); out.writeU8(labels); out.writeU32(origttl); out.writeU32(expire.getTime() / 1000); out.writeU32(timeSigned.getTime() / 1000); out.writeU16(footprint); signer.toWire(out, null, canonical); out.writeByteArray(signature); } }