88  * Closest encloser (ce) proof results
92 	/** the closest encloser name */
924  * Given a name and a list of NSEC3s, find the candidate closest encloser.
931  * @param ce: closest encloser information is returned in here.
933  * @return true if a closest encloser candidate is found, false if not.
969  * Given a qname and its proven closest encloser, calculate the "next
970  * closest" name. Basically, this is the name that is one label longer than
971  * the closest encloser that is still a subdomain of qname.
975  * @param ce: closest encloser
992  * Given a List of nsec3 RRs, find and prove the closest encloser to qname.
997  * @param prove_does_not_exist: If true, then if the closest encloser 
1001  * @param ce: closest encloser information is returned in here.
1003  * @return bogus if no closest encloser could be proven.
1004  * 	secure if a closest encloser could be proven, ce is set.
1005  * 	insecure if the closest-encloser candidate turns out to prove
1022 				"not find a candidate for the closest "  in nsec3_prove_closest_encloser()
1028 				"not find a candidate for the closest "  in nsec3_prove_closest_encloser()
1035 			"not find a candidate for the closest encloser.");  in nsec3_prove_closest_encloser()
1047 		 * is its own closest encloser. */  in nsec3_prove_closest_encloser()
1051 	/* If the closest encloser is actually a delegation, then the   in nsec3_prove_closest_encloser()
1058 				"closest encloser is insecure delegation");  in nsec3_prove_closest_encloser()
1061 		verbose(VERB_ALGO, "nsec3 proveClosestEncloser: closest "  in nsec3_prove_closest_encloser()
1066 		verbose(VERB_ALGO, "nsec3 proveClosestEncloser: closest "  in nsec3_prove_closest_encloser()
1077 				"candidate encloser was the closest encloser; "  in nsec3_prove_closest_encloser()
1083 				"candidate encloser was the closest encloser; "  in nsec3_prove_closest_encloser()
1090 			"candidate encloser was the closest encloser");  in nsec3_prove_closest_encloser()
1096 /** allocate a wildcard for the closest encloser */
1128 	/* First locate and prove the closest encloser to qname. We will   in nsec3_do_prove_nameerror()
1129 	 * use the variant that fails if the closest encloser turns out   in nsec3_do_prove_nameerror()
1135 				"to prove a closest encloser");  in nsec3_do_prove_nameerror()
1138 				"continue proving closest encloser after "  in nsec3_do_prove_nameerror()
1140 		else 	verbose(VERB_ALGO, "nsec3 nameerror proof: closest "  in nsec3_do_prove_nameerror()
1278 	/* For cases 3 - 5, we need the proven closest encloser, and it   in nsec3_do_prove_nodata()
1284 		          "nor found a proven closest encloser.");  in nsec3_do_prove_nodata()
1287 		verbose(VERB_ALGO, "proveNodata: closest nsec3 is insecure "  in nsec3_do_prove_nodata()
1407 	/* We know what the (purported) closest encloser is by just   in nsec3_prove_wildcard()
1556 		          "nor found a proven closest encloser.");  in nsec3_prove_nods()
1557 		*reason = "no NSEC3 closest encloser";  in nsec3_prove_nods()
1568 	/* we had the closest encloser proof, then we need to check that the  in nsec3_prove_nods()
1570 	 * checked to see if the closest encloser was a delegation or DNAME.  in nsec3_prove_nods()