.. module:: dns.dnssec .. _dnssec: DNSSEC ====== Dnspython can do simple DNSSEC signature validation, but currently has no facilities for signing. In order to use DNSSEC functions, you must have ``pycryptodome`` or ``pycryptodomex`` installed. If you want to do elliptic curves, you must also have ``ecdsa`` installed. DNSSEC Algorithms ----------------- .. autodata:: dns.dnssec.RSAMD5 .. autodata:: dns.dnssec.DH .. autodata:: dns.dnssec.DSA .. autodata:: dns.dnssec.ECC .. autodata:: dns.dnssec.RSASHA1 .. autodata:: dns.dnssec.DSANSEC3SHA1 .. autodata:: dns.dnssec.RSASHA1NSEC3SHA1 .. autodata:: dns.dnssec.RSASHA256 .. autodata:: dns.dnssec.RSASHA512 .. autodata:: dns.dnssec.ECDSAP256SHA256 .. autodata:: dns.dnssec.ECDSAP384SHA384 .. autodata:: dns.dnssec.INDIRECT .. autodata:: dns.dnssec.PRIVATEDNS .. autodata:: dns.dnssec.PRIVATEOID DNSSEC Functions ---------------- .. autofunction:: dns.dnssec.algorithm_from_text .. autofunction:: dns.dnssec.algorithm_to_text .. autofunction:: dns.dnssec.key_id .. autofunction:: dns.dnssec.make_ds .. autofunction:: dns.dnssec.validate .. autofunction:: dns.dnssec.validate_rrsig