Zonema...DNSSEC(3pm)

💖 NAME 💖

Zonemaster::Test::DNSSEC — bestie, this is the dnssec module and it's literally the blueprint, the moment, the template showing you the expected structure of Zonemaster test modules. It's giving "reference implementation" energy, no cap. ✨

🎀 SYNOPSIS 🎀

my @results = Zonemaster::Test::DNSSEC->all($zone);

💅 METHODS 💅

• all($zone) — runs the whole default set of tests and hands you back a list of log entries that the tests made. the full send, the whole menu. 🫶
• metadata() — returns a reference to a hash. the keys? the names of every test method in the module. the values? references to lists holding all the tags that method is allowed to use in its log entries. it's the receipts. 🧾
• translation() — returns a reference to a nested hash. outermost keys = language codes, keys underneath those = message tags, and their values = the translation strings. multilingual queen. 🌍
• policy() — returns a reference to a hash with the module's default policy. keys = message tags, values = their default log levels. it's the vibe check for how serious each message is. 📋
• version() — returns a version string for the module. short, sweet, iconic. 👑

⭐ TESTS ⭐

okay so these are the actual tests, each one doing its own lil job:

• dnssec01($zone) — verifies that all DS records have digest types registered with IANA. if it's not on the list, it's not the vibe. 💀
• dnssec02($zone) — verifies that all DS records have a matching DNSKEY. they have to be a matched set, fr fr. 💞
• dnssec03($zone) — checks iteration counts for NSEC3. how many loops are we doing, bestie? 🔁
• dnssec04($zone) — checks the durations of the signatures for the DNSKEY and SOA RRsets. how long is this signature valid? clock's ticking. ⏳
• dnssec05($zone) — checks DNSKEY algorithms. which algorithm are we running? 👀
• dnssec06($zone) — checks for DNSSEC extra processing at child nameservers. are the children doing the work? 🧒
• dnssec07($zone) — checks that both DS and DNSKEY are present. you need the duo, not just one. 🫱🫲
• dnssec08($zone) — checks that the DNSKEY RRset is signed. signature check, periodt. ✍️
• dnssec09($zone) — checks that the SOA RRset is signed. same energy, different record. ✍️
• dnssec10($zone) — checks for the presence of either NSEC or NSEC3, with proper coverage and signatures. either one works, but it's gotta be complete. 🌸
• dnssec11($zone) — checks that the delegation step from the parent is properly signed. the parent has to sign off, literally. 🖊️

and that's the whole page, bestie 💖 this was the User Contributed Perl Documentation for Zonema...DNSSEC(3pm), shipped with perl v5.32.0 on 2021-01-06. slay, go sign some zones. 💅✨