Package com.oracle.bmc.dns.model

Class KskDnssecKeyVersion.Builder

    • Constructor Detail

      • Builder

        public Builder()

    • Method Detail

      • lengthInBytes

        public KskDnssecKeyVersion.Builder lengthInBytes​(Integer lengthInBytes)
        The length of the corresponding private key in bytes, expressed as an integer.
        Parameters:
        lengthInBytes - the value to set
        Returns:
        this builder

      • timeCreated

        public KskDnssecKeyVersion.Builder timeCreated​(Date timeCreated)
        The date and time the key version was created, expressed in RFC 3339 timestamp format.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeCreated - the value to set
        Returns:
        this builder

      • timePublished

        public KskDnssecKeyVersion.Builder timePublished​(Date timePublished)
        The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format.

        This is when the zone contents will include a DNSKEY record corresponding to the key material.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timePublished - the value to set
        Returns:
        this builder

      • timeActivated

        public KskDnssecKeyVersion.Builder timeActivated​(Date timeActivated)
        The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format.

        This is when the key material will be used to generate RRSIGs.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeActivated - the value to set
        Returns:
        this builder

      • timeInactivated

        public KskDnssecKeyVersion.Builder timeInactivated​(Date timeInactivated)
        The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format.

        This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeInactivated - the value to set
        Returns:
        this builder

      • timeUnpublished

        public KskDnssecKeyVersion.Builder timeUnpublished​(Date timeUnpublished)
        The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format.

        This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeUnpublished - the value to set
        Returns:
        this builder

      • timeExpired

        public KskDnssecKeyVersion.Builder timeExpired​(Date timeExpired)
        The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format.

        This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion’s successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeExpired - the value to set
        Returns:
        this builder

      • timePromoted

        public KskDnssecKeyVersion.Builder timePromoted​(Date timePromoted)
        The date and time the key version was promoted expressed in RFC 3339 timestamp format.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timePromoted - the value to set
        Returns:
        this builder

      • predecessorDnssecKeyVersionUuid

        public KskDnssecKeyVersion.Builder predecessorDnssecKeyVersionUuid​(String predecessorDnssecKeyVersionUuid)
        When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
        Parameters:
        predecessorDnssecKeyVersionUuid - the value to set
        Returns:
        this builder

      • successorDnssecKeyVersionUuid

        public KskDnssecKeyVersion.Builder successorDnssecKeyVersionUuid​(String successorDnssecKeyVersionUuid)
        When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
        Parameters:
        successorDnssecKeyVersionUuid - the value to set
        Returns:
        this builder

      • keyTag

        public KskDnssecKeyVersion.Builder keyTag​(Integer keyTag)
        The key tag associated with the DnssecKeyVersion.

        This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.

        Parameters:
        keyTag - the value to set
        Returns:
        this builder

      • dsData

        public KskDnssecKeyVersion.Builder dsData​(List<DnssecKeyVersionDsData> dsData)
        An array of data for DS records corresponding with this key version.

        An entry will exist for each supported DS digest algorithm.

        Parameters:
        dsData - the value to set
        Returns:
        this builder