Cross Reference: /bind-9.11.3/lib/dns/zone.c

Lines Matching refs:chain
670  * a NSEC3 chain only the non-NSEC3 nodes will be iterated.  If we are
671  * removing a NSEC3 chain then both NSEC3 and non-NSEC3 nodes will be
674  * 'nsec3param' contains the parameters of the NSEC3 chain being created
680  * NSEC3 chain, a NSEC record is seen.
683  * of a NSEC3 chain, 'seen_nsec' is true.  If 'delete_nsec' is true then we
684  * are in the process of deleting the NSEC chain.
3313  * Initiate adding/removing NSEC3 records belonging to the chain defined by the
3342 	 * chain from it is pointless as it would not be possible for the
3356 	 * adding/removing records belonging to this NSEC3 chain between
3424 	 * If the NSEC3 chain defined by the supplied NSEC3PARAM RDATA is
3426 	 * simultaneously adding and removing records for the same NSEC3 chain.
3456 		 * NSEC3 chain.  Append the structure initialized above to the
3488  * Find private-type records at the zone apex which signal that an NSEC3 chain
7011  * processing status of given NSEC3 chain:
7016  *       - remove all NSEC3PARAM records matching the relevant NSEC3 chain,
7019  *         the relevant NSEC3 chain.
7023  *     NSEC3PARAM record which matches the relevant NSEC3 chain and has the
7026  *   - If given NSEC3 chain is being added, add an NSEC3PARAM record contained
7028  *     0, indicating that this NSEC3 chain is now complete for this zone.
7031  * chain additions vs. removals and needs to handle all cases properly.
7034 fixup_nsec3param(dns_db_t *db, dns_dbversion_t *ver, dns_nsec3chain_t *chain,
7075 		if (nsec3param.hash != chain->nsec3param.hash ||
7077 		    nsec3param.iterations != chain->nsec3param.iterations ||
7078 		    nsec3param.salt_length != chain->nsec3param.salt_length ||
7079 		    memcmp(nsec3param.salt, chain->nsec3param.salt,
7126 		    nsec3param.hash != chain->nsec3param.hash ||
7127 		    nsec3param.iterations != chain->nsec3param.iterations ||
7128 		    nsec3param.salt_length != chain->nsec3param.salt_length ||
7129 		    memcmp(nsec3param.salt, chain->nsec3param.salt,
7143 	if ((chain->nsec3param.flags & DNS_NSEC3FLAG_REMOVE) != 0) {
7152 	 * Note: we do not clear chain->nsec3param.flags as this change
7158 				   &chain->nsec3param, &buffer));
7293 		 * Ignore the chain that we are in the process of deleting.
7301 		 * Found an active NSEC3 chain.
7366  * Incrementally build and sign a new NSEC3 chain using the parameters
7496 	 * updating the NSEC3 chain by calling dns_nsec3_addnsec3() for each of
7506 	 * The above is repeated until all requested NSEC3 chain changes are
7604 		 * Is there a NSEC chain than needs to be cleaned up?
7634 		 * that of the cost of generating a completely new chain.
7716 	 * removing an NSEC3 chain.  It starts with determining whether the
7718 	 * NSEC chain by iterating over all nodes in the zone database and only
7742 		 * Work out if we need to build a NSEC chain as a consequence
7743 		 * of removing this NSEC3 chain.
7769 			 * Delete the NSEC3PARAM record matching this chain.
7876 				 * The NSEC chain should now be built.
7877 				 * We can now remove the NSEC3 chain.
8269  * Builds the NSEC chain if required.
8373 	/* Determine which type of chain to build */
8377 	/* If neither chain is found, default to NSEC */
8563 					 * The NSEC chain is now complete and
14514 		 * chain gets created.
18040 		 * Activate any NSEC3 chain updates that may have
18706  * Check whether NSEC3 chain addition or removal specified by the private-type
18762 	 * Does a private-type record already exist for this chain?
18785 	 * Does the chain already exist?
18822 		 * We're creating an NSEC3 chain.  Add the private-type record
18826 		 * chain (due to the DNSKEY RRset at the zone apex not existing