Files
coredns/plugin/sign/dnssec.go

21 lines
438 B
Go
Raw Normal View History

package sign
import (
"github.com/miekg/dns"
)
func (p Pair) signRRs(rrs []dns.RR, signerName string, ttl, incep, expir uint32) (*dns.RRSIG, error) {
rrsig := &dns.RRSIG{
Hdr: dns.RR_Header{Rrtype: dns.TypeRRSIG, Ttl: ttl},
Algorithm: p.Public.Algorithm,
SignerName: signerName,
KeyTag: p.KeyTag,
OrigTtl: ttl,
Inception: incep,
Expiration: expir,
}
e := rrsig.Sign(p.Private, rrs)
return rrsig, e
}