| 发明名称 |
Using Domain Name System Security Extensions In A Mixed-Mode Environment |
| 摘要 |
A method relates to generating, by a processing device executing a DNS resolver, a first domain name system (DNS) query comprising a DNS request generated from an application executing on the processing device to query a first DNS server serving a first DNS zone connected to the processing device via a public network, receiving, from the first DNS server, a first resource record comprising a DNS answer to the DNS query, a second resource record comprising a digital signature generated by signing the DNS answer with a first private key of the first DNS zone, a third resource record comprising a first public key for verifying the digital signature, and one or more files for validating a chain of trust of the first public key, determining, by the processing device in view of the one or more files, that the chain of trust of the first public key misses at least one of a trust anchor or a link in the chain of trust, and generating a second DNS query comprising the DNS request to query a second DNS server residing in a private network of the processing device. |
| 申请公布号 |
US2016197898(A1) |
申请公布日期 |
2016.07.07 |
| 申请号 |
US201514591121 |
申请日期 |
2015.01.07 |
| 申请人 |
Red Hat, Inc. |
发明人 |
Hozza Tomas;Spacek Petr;Trmac Miloslav;Pandit Prasad J.;Simerda Pavel;Weimer Florian |
| 分类号 |
H04L29/06;H04L29/12 |
主分类号 |
H04L29/06 |
| 代理机构 |
|
代理人 |
|
| 主权项 |
1. A method comprising:
generating, by a processing device executing a DNS resolver, a first domain name system (DNS) query comprising a DNS request generated from an application executing on the processing device to query a first DNS server serving a first DNS zone connected to the processing device via a public network; receiving, from the first DNS server, a first resource record comprising a DNS answer to the DNS query, a second resource record comprising a digital signature generated by signing the DNS answer with a first private key of the first DNS zone, a third resource record comprising a first public key for verifying the digital signature, and one or more files for validating a chain of trust of the first public key; determining, by the processing device in view of the one or more files, that the chain of trust of the first public key misses at least one of a trust anchor or a link in the chain of trust; and generating a second DNS query comprising the DNS request to query a second DNS server residing in a private network of the processing device. |
| 地址 |
Raleigh NC US |
