Class ZskDnssecKeyVersion.Builder

    • Constructor Detail

      • Builder

        public Builder()
    • Method Detail

      • lengthInBytes

        public ZskDnssecKeyVersion.Builder lengthInBytes​(Integer lengthInBytes)
        The length of the corresponding private key in bytes, expressed as an integer.
        Parameters:
        lengthInBytes - the value to set
        Returns:
        this builder
      • timeCreated

        public ZskDnssecKeyVersion.Builder timeCreated​(Date timeCreated)
        The date and time the key version was created, expressed in RFC 3339 timestamp format.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeCreated - the value to set
        Returns:
        this builder
      • timePublished

        public ZskDnssecKeyVersion.Builder timePublished​(Date timePublished)
        The date and time the key version was, or will be, published, expressed in RFC 3339 timestamp format.

        This is when the zone contents will include a DNSKEY record corresponding to the key material.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timePublished - the value to set
        Returns:
        this builder
      • timeActivated

        public ZskDnssecKeyVersion.Builder timeActivated​(Date timeActivated)
        The date and time the key version went, or will go, active, expressed in RFC 3339 timestamp format.

        This is when the key material will be used to generate RRSIGs.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeActivated - the value to set
        Returns:
        this builder
      • timeInactivated

        public ZskDnssecKeyVersion.Builder timeInactivated​(Date timeInactivated)
        The date and time the key version went, or will go, inactive, expressed in RFC 3339 timestamp format.

        This is when the key material will no longer be used to generate RRSIGs. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeInactivated - the value to set
        Returns:
        this builder
      • timeUnpublished

        public ZskDnssecKeyVersion.Builder timeUnpublished​(Date timeUnpublished)
        The date and time the key version was, or will be, unpublished, expressed in RFC 3339 timestamp format.

        This is when the corresponding DNSKEY will be removed from zone contents. For a key signing key (KSK) DnssecKeyVersion, this is populated after PromoteZoneDnssecKeyVersion has been called on its successor DnssecKeyVersion.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeUnpublished - the value to set
        Returns:
        this builder
      • timeExpired

        public ZskDnssecKeyVersion.Builder timeExpired​(Date timeExpired)
        The date and time at which the recommended key version publication/activation lifetime ends, expressed in RFC 3339 timestamp format.

        This is when the corresponding DNSKEY should no longer exist in zone contents and no longer be used to generate RRSIGs. For a key sigining key (KSK), if PromoteZoneDnssecKeyVersion has not been called on this DnssecKeyVersion’s successor then it will remain active for arbitrarily long past its recommended lifetime. This prevents service disruption at the potential increased risk of key compromise.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timeExpired - the value to set
        Returns:
        this builder
      • timePromoted

        public ZskDnssecKeyVersion.Builder timePromoted​(Date timePromoted)
        The date and time the key version was promoted expressed in RFC 3339 timestamp format.

        *Example:** 2016-07-22T17:23:59:00Z

        Parameters:
        timePromoted - the value to set
        Returns:
        this builder
      • predecessorDnssecKeyVersionUuid

        public ZskDnssecKeyVersion.Builder predecessorDnssecKeyVersionUuid​(String predecessorDnssecKeyVersionUuid)
        When populated, this is the UUID of the DnssecKeyVersion that this DnssecKeyVersion will replace or has replaced.
        Parameters:
        predecessorDnssecKeyVersionUuid - the value to set
        Returns:
        this builder
      • successorDnssecKeyVersionUuid

        public ZskDnssecKeyVersion.Builder successorDnssecKeyVersionUuid​(String successorDnssecKeyVersionUuid)
        When populated, this is the UUID of the DnssecKeyVersion that will replace, or has replaced, this DnssecKeyVersion.
        Parameters:
        successorDnssecKeyVersionUuid - the value to set
        Returns:
        this builder
      • keyTag

        public ZskDnssecKeyVersion.Builder keyTag​(Integer keyTag)
        The key tag associated with the DnssecKeyVersion.

        This key tag will be present in the RRSIG and DS records associated with the key material for this DnssecKeyVersion. For more information about key tags, see RFC 4034.

        Parameters:
        keyTag - the value to set
        Returns:
        this builder