Ascio Web Service v2

Python CreateDnsSecKey

Always get the right IP-address

DNSSEC is an extension to DNS that enables clients (like a web browser) to make sure that it is accessing the domain that wants to access.

DNSSEC was designed to protect clients from forged DNS data.

When a DNSSEC-enabled name server is responding to a query for a domain that is DNSSEC-enabled, it digitally signs the response, allowing the client to verify the authenticity of the response. AWS allows you to register domains that are DNSSEC-enabled with the NIC. Note that the relevant NIC needs to support DNSSEC for this to happen.

You do this by creating DNSSEC Key Objects (handles), and you then specify up to five of these on your orders.

At the time of writing, AWS only supports DNSSEC for .SE, .FI, .EU, .NL.

Refer to the relevant TLD Kits for additional information. Also see the documentation for the DnsSecKey object in this document.

Additional reading: http://en.wikipedia.org/wiki/Dnssec

Response CreateDnsSecKey(string sessionId,DnsSecKey dnsSecKey)

Response codes

ResultCodeMessageValue
200OK
401Authorization failed
501Syntax error in parameters or arguments
506Required attribute missing in request

CreateDnsSecKey Request

PropertyDescription
sessionIdExample: o58t9fjgw9bjarp6q7byv13e
dnsSecKey

CreateDnsSecKeyResponse

Property
CreateDnsSecKeyResult
dnsSecKey

Python example

import zeep
import base64
from zeep import xsd, Client, Settings

# This is the test-environment. Please remove "demo." for the live-environment 

wsdl = "https://aws.demo.ascio.com/2012/01/01/AscioService.wsdl"
settings = Settings(strict=False)
client = zeep.Client(wsdl=wsdl, settings=settings)


# DnsSecKey
dnsSecKey =  {
	"DigestAlgorithm" : "RSA-SHA256",
	"DigestType" : "SHA-256",
	"Digest" : "846E5ED4AB6788032B89393619752F662CF2B7B2046A8EC0804DF88F1469AC1E",
	"KeyTag" : "2224",
	"PublicKey" : "PublicKeyTest"
}
result = client.service.CreateDnsSecKey(sessionId = "sessionId", dnsSecKey = dnsSecKey)
print(result)
WSDL for AWS v2
https://aws.demo.ascio.com/2012/01/01/AscioService.wsdl (OTE)
https://aws.ascio.com/2012/01/01/AscioService.wsdl (Live)
Please configure the IP-Whitelisting in the portal/demo-portal.