Net::DNS::RR::TLSA(3)
π Net::DNS::RR::TLSA β¨
okok so this is the manual page for Net::DNS::RR::TLSA(3) β a User Contributed Perl Documentation page, and yes bestie it's about the DNS TLSA resource record, which is genuinely one of the more iconic RR types out there. Let's get into it π
πΈ NAME πΈ
Net::DNS::RR::TLSA β DNS TLSA resource record. That's the whole vibe. It's a Perl module for making and poking at TLSA records π
β¨ SYNOPSIS β¨
like, here's how you actually use it:
use Net::DNS;
$rr = Net::DNS::RR->new('name TLSA usage selector matchingtype certificate');
that's it, that's the whole thing π«Ά
π¦ DESCRIPTION π¦
okay so listen. The Transport Layer Security Authentication (TLSA) DNS resource record is used to associate a TLS server certificate or public key with the domain name where the record is found β which forms what they call a "TLSA certificate association" β¨. Basically it's DANE's whole thing, and it's lowkey iconic.
The semantics of how the TLSA RR is interpreted are described in RFC6698, so if you want the deep lore, go read that π
π METHODS π
The available methods are those inherited from the base class, augmented by the type-specific methods defined in this package. So you get the base-class goodies plus the TLSA-specific ones. Free real estate π
β οΈ heads up bestie: use of undocumented package features or direct access to internal data structures is discouraged and could result in program termination or other unpredictable behaviour. So like... don't. For real. No cap π
π₯ usage
$usage = $rr->usage;
$rr->usage( $usage );
An 8-bit integer value which specifies the provided association that will be used to match the certificate presented in the TLS handshake. Eight bits!! Small but mighty πͺ
π selector
$selector = $rr->selector;
$rr->selector( $selector );
An 8-bit integer value which specifies which part of the TLS certificate presented by the server will be matched against the association data. Pick your fighter βοΈ
π matchingtype
$matchingtype = $rr->matchingtype;
$rr->matchingtype( $matchingtype );
An 8-bit integer value which specifies how the certificate association is presented. Also 8 bits. We love consistency β¨
π certificate
π cert
$cert = $rr->cert;
$rr->cert( $cert );
Hexadecimal representation of the certificate data. Both certificate and cert get you here β same method, two names, we stan an accessible queen π
π§ certbin
$certbin = $rr->certbin;
$rr->certbin( $certbin );
Binary representation of the certificate data. For when hex just isn't raw enough for you π
π«Ά babble
print $rr->babble;
The babble() method returns the 'BubbleBabble' representation of the digest if the Digest::BubbleBabble package is available β otherwise an empty string is returned. No package, no babble. Sad but true π
BubbleBabble represents a message digest as a string of plausible words, to make the digest easier to verify. The "words" are not necessarily real words, but they look more like words than a string of hex characters. Honestly? It's giving word-shaped nonsense and we love that for it πΈ
Also! The 'BubbleBabble' string is appended as a comment when the string method is called. Cute little bonus detail π
π COPYRIGHT π
Copyright (c)2012 Willem Toorop, NLnet Labs.
All rights reserved.
Package template (c)2009,2012 O.M.Kolkman and R.W.Franks.
π LICENSE π
Permission to use, copy, modify, and distribute this software and its documentation for any purpose and without fee is hereby granted, provided that the original copyright notices appear in all copies and that both copyright notice and this permission notice appear in supporting documentation, and that the name of the author not be used in advertising or publicity pertaining to distribution of the software without specific prior written permission.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
that's the legal bit verbatim, don't come for me, I don't make the rules π
π SEE ALSO π
perlNet::DNSNet::DNS::RRRFC6698https://iana.org/go/rfc6698β the RFC6698 link, go read it, it's giving main character energy π
okay that's the page!! this one's perl v5.42.0, dated 2026-09-02, and it's Net::DNS::RR::TLSA(3) β go forth and TLSA responsibly, bestie πβ¨π¦
π¦ where this page comes from
- opensuse-leap 16.0: perl-Net-DNS 1.570.0-bp160.1.1 Β· MIT
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms