1710 	/* if this is zone apex, write SOA first */  in auth_zone_write_domain()
1880 	struct auth_data* apex;  in auth_zone_zonemd_check_hash()  local
1896 	apex = az_find_name(z, z->name, z->namelen);  in auth_zone_zonemd_check_hash()
1897 	if(!apex) {  in auth_zone_zonemd_check_hash()
1898 		*reason = "zone has no apex";  in auth_zone_zonemd_check_hash()
1901 	zonemd_rrset = az_domain_rrset(apex, LDNS_RR_TYPE_ZONEMD);  in auth_zone_zonemd_check_hash()
1983 /** find the apex SOA RRset, if it exists */
1986 	struct auth_data* apex;  in auth_zone_get_soa_rrset()  local
1988 	apex = az_find_name(z, z->name, z->namelen);  in auth_zone_get_soa_rrset()
1989 	if(!apex) return NULL;  in auth_zone_get_soa_rrset()
1990 	soa = az_domain_rrset(apex, LDNS_RR_TYPE_SOA);  in auth_zone_get_soa_rrset()
1998 	struct auth_data* apex;  in auth_zone_get_serial()  local
2001 	apex = az_find_name(z, z->name, z->namelen);  in auth_zone_get_serial()
2002 	if(!apex) return 0;  in auth_zone_get_serial()
2003 	soa = az_domain_rrset(apex, LDNS_RR_TYPE_SOA);  in auth_zone_get_serial()
2016 	struct auth_data* apex;  in xfr_find_soa()  local
2019 	apex = az_find_name(z, z->name, z->namelen);  in xfr_find_soa()
2020 	if(!apex) return 0;  in xfr_find_soa()
2021 	soa = az_domain_rrset(apex, LDNS_RR_TYPE_SOA);  in xfr_find_soa()
2470  *	not even with a zone apex.
2502 		/* not zone apex and has type NS */  in az_find_ce()
2578 	struct auth_data* apex = az_find_name(z, z->name, z->namelen);  in az_add_negative_soa()  local
2579 	if(!apex) return 0;  in az_add_negative_soa()
2580 	soa = az_domain_rrset(apex, LDNS_RR_TYPE_SOA);  in az_add_negative_soa()
2586 	if(!msg_add_rrset_ns(z, region, msg, apex, soa)) return 0;  in az_add_negative_soa()
2827 	struct auth_data* apex;  in az_nsec3_param()  local
2830 	apex = az_find_name(z, z->name, z->namelen);  in az_nsec3_param()
2831 	if(!apex) return 0;  in az_nsec3_param()
2832 	param = az_domain_rrset(apex, LDNS_RR_TYPE_NSEC3PARAM);  in az_nsec3_param()
7527 				/* omit RRSIGs over type ZONEMD at apex */  in zonemd_simple_count_rrsig()
7536 			/* omit RRSIGs over type ZONEMD at apex */  in zonemd_simple_count_rrsig()
7575 			/* omit RRSIGs over type ZONEMD at apex */  in add_rrlist_rrsigs_into_data()
7601 				/* omit RRSIGs over type ZONEMD at apex */  in add_rrset_into_data()
7631 	/* if this is the apex, omit RRSIGs that cover type ZONEMD */  in zonemd_simple_rrsig()
7690 			/* omit type ZONEMD at apex */  in zonemd_simple_domain()
7897 	struct ub_packed_rrset_key* dnskey, struct auth_data* apex,  in zonemd_check_dnssec_absence()  argument
7902 	if(!apex) {  in zonemd_check_dnssec_absence()
7903 		*reason = "zone has no apex domain but ZONEMD missing";  in zonemd_check_dnssec_absence()
7906 	nsec = az_domain_rrset(apex, LDNS_RR_TYPE_NSEC);  in zonemd_check_dnssec_absence()
7910 		if(!zonemd_dnssec_verify_rrset(z, env, mods, dnskey, apex,  in zonemd_check_dnssec_absence()
7928 		struct auth_rrset* nsec3param = az_domain_rrset(apex,  in zonemd_check_dnssec_absence()
7944 			*reason = "zone has no NSEC3 domain for the apex but ZONEMD missing";  in zonemd_check_dnssec_absence()
7949 			*reason = "zone has no NSEC3 RRset for the apex but ZONEMD missing";  in zonemd_check_dnssec_absence()
7974 	struct ub_packed_rrset_key* dnskey, struct auth_data* apex,  in zonemd_check_dnssec_soazonemd()  argument
7979 	if(!apex) {  in zonemd_check_dnssec_soazonemd()
7980 		*reason = "zone has no apex domain";  in zonemd_check_dnssec_soazonemd()
7983 	soa = az_domain_rrset(apex, LDNS_RR_TYPE_SOA);  in zonemd_check_dnssec_soazonemd()
7988 	if(!zonemd_dnssec_verify_rrset(z, env, mods, dnskey, apex, soa,  in zonemd_check_dnssec_soazonemd()
7993 	if(!zonemd_dnssec_verify_rrset(z, env, mods, dnskey, apex,  in zonemd_check_dnssec_soazonemd()
8064 	struct auth_data* apex = NULL;  in auth_zone_verify_zonemd_with_key()  local
8069 	apex = az_find_name(z, z->name, z->namelen);  in auth_zone_verify_zonemd_with_key()
8070 	if(!apex) {  in auth_zone_verify_zonemd_with_key()
8073 		zonemd_rrset = az_domain_rrset(apex, LDNS_RR_TYPE_ZONEMD);  in auth_zone_verify_zonemd_with_key()
8082 	 * zone apex.  Check ZONEMD bit is turned off or else fail */  in auth_zone_verify_zonemd_with_key()
8090 		if(!zonemd_check_dnssec_absence(z, env, mods, dnskey, apex,  in auth_zone_verify_zonemd_with_key()
8099 		if(!zonemd_check_dnssec_soazonemd(z, env, mods, dnskey, apex,  in auth_zone_verify_zonemd_with_key()
8170 	struct auth_data* apex;  in zonemd_get_dnskey_from_anchor()  local
8176 	apex = az_find_name(z, z->name, z->namelen);  in zonemd_get_dnskey_from_anchor()
8177 	if(!apex) {  in zonemd_get_dnskey_from_anchor()
8178 		*why_bogus = "have trust anchor, but zone has no apex domain for DNSKEY";  in zonemd_get_dnskey_from_anchor()
8181 	dnskey_rrset = az_domain_rrset(apex, LDNS_RR_TYPE_DNSKEY);  in zonemd_get_dnskey_from_anchor()
8197 	keystorage->rk.dname = apex->name;  in zonemd_get_dnskey_from_anchor()
8198 	keystorage->rk.dname_len = apex->namelen;  in zonemd_get_dnskey_from_anchor()
8231 	struct auth_data* apex;  in auth_zone_verify_zonemd_key_with_ds()  local
8238 	apex = az_find_name(z, z->name, z->namelen);  in auth_zone_verify_zonemd_key_with_ds()
8239 	if(!apex) {  in auth_zone_verify_zonemd_key_with_ds()
8240 		*why_bogus = "in verifywithDS, zone has no apex";  in auth_zone_verify_zonemd_key_with_ds()
8243 	dnskey_rrset = az_domain_rrset(apex, LDNS_RR_TYPE_DNSKEY);  in auth_zone_verify_zonemd_key_with_ds()
8259 	keystorage->rk.dname = apex->name;  in auth_zone_verify_zonemd_key_with_ds()
8260 	keystorage->rk.dname_len = apex->namelen;  in auth_zone_verify_zonemd_key_with_ds()