secDNS-1.1.xsd

<?xml version="1.0" encoding="UTF-8"?>
<schema xmlns:secDNS="urn:ietf:params:xml:ns:secDNS-1.1"
    xmlns="http://www.w3.org/2001/XMLSchema" targetNamespace="urn:ietf:params:xml:ns:secDNS-1.1" elementFormDefault="qualified">
    <annotation>
        <documentation>
         Extensible Provisioning Protocol v1.0
         domain name extension schema
         for provisioning DNS security (DNSSEC) extensions.
        </documentation>
    </annotation>
    <!--
        Child elements found in EPP commands.
    -->
    <element name="create" type="secDNS:dsOrKeyType"/>
    <element name="update" type="secDNS:updateType"/>
    <!--
        Child elements supporting either the
        dsData or the keyData interface.
    -->
    <complexType name="dsOrKeyType">
        <sequence>
            <element name="maxSigLife" type="secDNS:maxSigLifeType" minOccurs="0"/>
            <choice>
                <element name="dsData" type="secDNS:dsDataType" maxOccurs="unbounded"/>
                <element name="keyData" type="secDNS:keyDataType" maxOccurs="unbounded"/>
            </choice>
        </sequence>
    </complexType>
    <!--
        Definition for the maximum signature lifetime (maxSigLife)
    -->
    <simpleType name="maxSigLifeType">
        <restriction base="int">
            <minInclusive value="1"/>
        </restriction>
    </simpleType>
    <!--
        Child elements of dsData used for dsData interface
    -->
    <complexType name="dsDataType">
        <sequence>
            <element name="keyTag" type="unsignedShort"/>
            <element name="alg" type="unsignedByte"/>
            <element name="digestType" type="unsignedByte"/>
            <element name="digest" type="hexBinary"/>
            <element name="keyData" type="secDNS:keyDataType" minOccurs="0"/>
        </sequence>
    </complexType>
    <!--
        Child elements of keyData used for keyData interface
        and optionally with dsData interface
    -->
    <complexType name="keyDataType">
        <sequence>
            <element name="flags" type="unsignedShort"/>
            <element name="protocol" type="unsignedByte"/>
            <element name="alg" type="unsignedByte"/>
            <element name="pubKey" type="secDNS:keyType"/>
        </sequence>
    </complexType>
    <!--
        Definition for the public key
    -->
    <simpleType name="keyType">
        <restriction base="base64Binary">
            <minLength value="1"/>
        </restriction>
    </simpleType>
    <!--
		Child elements of the <update> element.
    -->
    <complexType name="updateType">
        <sequence>
            <element name="rem" type="secDNS:remType" minOccurs="0"/>
            <element name="add" type="secDNS:dsOrKeyType" minOccurs="0"/>
            <element name="chg" type="secDNS:chgType" minOccurs="0"/>
        </sequence>
        <attribute name="urgent" type="boolean" default="false"/>
    </complexType>
    <!--
		Child elements of the <rem> command.
    -->
    <complexType name="remType">
        <choice>
            <element name="all" type="boolean"/>
            <element name="dsData" type="secDNS:dsDataType" maxOccurs="unbounded"/>
            <element name="keyData" type="secDNS:keyDataType" maxOccurs="unbounded"/>
        </choice>
    </complexType>
    <!--
		Child elements supporting the <chg> element.
    -->
    <complexType name="chgType">
        <sequence>
            <element name="maxSigLife" type="secDNS:maxSigLifeType" minOccurs="0"/>
        </sequence>
    </complexType>
    <!--
		Child response elements.
    -->
    <element name="infData" type="secDNS:dsOrKeyType"/>
</schema>