| /freebsd/contrib/unbound/validator/ |
| H A D | val_utils.c | 491 struct ub_packed_rrset_key* ds_rrset, size_t ds_idx, char** reason, in verify_dnskeys_with_ds_rr() argument
501 if(ds_get_key_algo(ds_rrset, ds_idx) in verify_dnskeys_with_ds_rr()
504 != ds_get_keytag(ds_rrset, ds_idx)) { in verify_dnskeys_with_ds_rr()
509 ds_get_key_algo(ds_rrset, ds_idx), in verify_dnskeys_with_ds_rr()
510 ds_get_keytag(ds_rrset, ds_idx)); in verify_dnskeys_with_ds_rr()
514 if(!ds_digest_match_dnskey(env, dnskey_rrset, i, ds_rrset, in verify_dnskeys_with_ds_rr()
547 algo_needs_reason(ds_get_key_algo(ds_rrset, ds_idx), in verify_dnskeys_with_ds_rr()
558 int val_favorite_ds_algo(struct ub_packed_rrset_key* ds_rrset) in val_favorite_ds_algo() argument
560 size_t i, num = rrset_get_count(ds_rrset); in val_favorite_ds_algo()
564 if(!ds_digest_algo_is_supported(ds_rrset, i) || in val_favorite_ds_algo()
[all …]
|
| H A D | val_sigcrypt.h | 158 struct ub_packed_rrset_key* ds_rrset, size_t ds_idx);
175 uint16_t ds_get_keytag(struct ub_packed_rrset_key* ds_rrset, size_t ds_idx);
209 int ds_digest_algo_is_supported(struct ub_packed_rrset_key* ds_rrset,
218 int ds_get_digest_algo(struct ub_packed_rrset_key* ds_rrset, size_t ds_idx);
226 int ds_key_algo_is_supported(struct ub_packed_rrset_key* ds_rrset,
|
| H A D | val_utils.h | 159 struct ub_packed_rrset_key* ds_rrset, uint8_t* sigalg, char** reason,
220 struct ub_packed_rrset_key* ds_rrset, int downprot, char** reason,
266 int val_dsset_isusable(struct ub_packed_rrset_key* ds_rrset);
408 int val_favorite_ds_algo(struct ub_packed_rrset_key* ds_rrset);
|
| H A D | val_sigcrypt.c | 233 ds_get_keytag(struct ub_packed_rrset_key* ds_rrset, size_t ds_idx) in ds_get_keytag() argument
238 rrset_get_rdata(ds_rrset, ds_idx, &rdata, &len); in ds_get_keytag()
296 struct ub_packed_rrset_key* ds_rrset, size_t ds_idx, in ds_create_dnskey_digest() argument
314 return secalgo_ds_digest(ds_get_digest_algo(ds_rrset, ds_idx), in ds_create_dnskey_digest()
321 struct ub_packed_rrset_key* ds_rrset, size_t ds_idx) in ds_digest_match_dnskey() argument
326 size_t digestlen = ds_digest_size_algo(ds_rrset, ds_idx); in ds_digest_match_dnskey()
334 if(fake_sha1 && ds_get_digest_algo(ds_rrset, ds_idx)==LDNS_SHA1) in ds_digest_match_dnskey()
339 ds_get_sigdata(ds_rrset, ds_idx, &ds, &dslen); in ds_digest_match_dnskey()
351 if(!ds_create_dnskey_digest(env, dnskey_rrset, dnskey_idx, ds_rrset, in ds_digest_match_dnskey()
364 ds_digest_algo_is_supported(struct ub_packed_rrset_key* ds_rrset, in ds_digest_algo_is_supported() argument
[all …]
|
| H A D | autotrust.c | 401 autr_rrset_delete(tp->ds_rrset); in autr_point_delete()
785 autr_rrset_delete(tp->ds_rrset); in autr_assemble()
789 tp->ds_rrset = ubds; in autr_assemble()
1270 tp->ds_rrset, tp->dnskey_rrset, downprot?sigalg:NULL, &reason, in verify_dnskey()
1583 struct ub_packed_rrset_key* ds_rrset) in key_matches_a_ds() argument
1586 ds_rrset->entry.data; in key_matches_a_ds()
1588 int d = val_favorite_ds_algo(ds_rrset); in key_matches_a_ds()
1591 if(!ds_digest_algo_is_supported(ds_rrset, ds_idx) || in key_matches_a_ds()
1592 !ds_key_algo_is_supported(ds_rrset, ds_idx) || in key_matches_a_ds()
1594 ds_get_digest_algo(ds_rrset, ds_id in key_matches_a_ds()
[all...] |
| H A D | val_anchor.c | 133 assembled_rrset_delete(ta->ds_rrset); in anchors_delfunc()
937 ta->ds_rrset = assemble_it(ta, ta->numDS, LDNS_RR_TYPE_DS); in anchors_assemble()
938 if(!ta->ds_rrset) in anchors_assemble()
960 if(!ds_digest_algo_is_supported(ta->ds_rrset, i) || in anchors_ds_unsupported()
961 !ds_key_algo_is_supported(ta->ds_rrset, i)) in anchors_ds_unsupported()
1209 s += assembled_rrset_get_mem(ta->ds_rrset); in anchors_add_insecure()
1304 if(ta->numDS != 0 && ta->ds_rrset) { in anchor_has_keytag()
1306 ta->ds_rrset->entry.data; in anchor_has_keytag()
1309 list[ret++] = ds_get_keytag(ta->ds_rrset, i); in anchor_has_keytag()
|
| H A D | validator.c | 1850 vq->ds_rrset = 0; in processInit()
2010 if(!generate_request(qstate, id, vq->ds_rrset->rk.dname, in processFindKey()
2011 vq->ds_rrset->rk.dname_len, LDNS_RR_TYPE_DNSKEY, in processFindKey()
2077 if(vq->ds_rrset) in processFindKey()
2078 …log_nametypeclass(VERB_ALGO, "DS RRset", vq->ds_rrset->rk.dname, LDNS_RR_TYPE_DS, LDNS_RR_CLASS_IN… in processFindKey()
2081 if(vq->ds_rrset && query_dname_compare(vq->ds_rrset->rk.dname, in processFindKey()
2083 if(!generate_request(qstate, id, vq->ds_rrset->rk.dname, in processFindKey()
2084 vq->ds_rrset->rk.dname_len, LDNS_RR_TYPE_DNSKEY, in processFindKey()
2092 if(!vq->ds_rrset || query_dname_compare(vq->ds_rrset->rk.dname, in processFindKey()
2146 if(!generate_request(qstate, id, vq->ds_rrset->rk.dname, in processFindKey()
[all …]
|
| H A D | validator.h | 201 struct ub_packed_rrset_key* ds_rrset;
200 struct ub_packed_rrset_key* ds_rrset; global() member
|
| H A D | val_anchor.h | 116 struct ub_packed_rrset_key* ds_rrset; member
|
| /freebsd/contrib/unbound/services/ |
| H A D | authzone.c | 8203 sec = val_verify_DNSKEY_with_TA(env, ve, keystorage, anchor->ds_rrset, in zonemd_get_dnskey_from_anchor()
|