利用DNS安全扩展进行公钥发布

Public key distributing by using DNS (domain name system) security extension

介绍了在虚拟专用网中利用RFC2535DNS安全扩展进行公钥认证的原理.详细介绍了利用DNS安全扩展协议中定义的两种新的资源记录类型进行公钥发布的机制,以及如何利用解析器C语言编程接口获取公钥的方法.

The principle of using DNS security extension for public key distribution in virtual private network is introduced. First, KEY resource record and SIG resource record defined in RFC2535 DNS security extensions are described, and then the method of using the two resource records in public key distributing is presented. Last, it is discussed how to get a public key by using relevant programming interface with C language resolver.