42 #include <dns/rdataset.h>
53  * \li When called with rdataset and sigrdataset:
59  * \li When called with rdataset, sigrdataset and with DNS_VALIDATOR_DLV:
63  * \li When called with rdataset:
67  * \li When called with rdataset and with DNS_VALIDATOR_DLV:
71  * \li When called without a rdataset:
139 	    dns_rdataset_t *rdataset);
186 	if (val->event->rdataset != NULL)
187 		dns_rdataset_settrust(val->event->rdataset, dns_trust_answer);
195 	dns_rdataset_settrust(event->rdataset, dns_trust_secure);
273 isdelegation(dns_name_t *name, dns_rdataset_t *rdataset,
295 		dns_rdataset_clone(rdataset, &set);
297 		result = dns_ncache_getrdataset(rdataset, name,
326 	for (result = dns_rdataset_first(rdataset);
328 	     result = dns_rdataset_next(rdataset))
330 		dns_ncache_current(rdataset, &nsec3name, &set);
394 	dns_rdataset_t *rdataset;
405 	rdataset = &val->frdataset;
428 			      dns_trust_totext(rdataset->trust));
432 		if (rdataset->trust >= dns_trust_secure) {
433 			result = get_dst_key(val, val->siginfo, rdataset);
477 	dns_rdataset_t *rdataset;
487 	rdataset = &val->frdataset;
510 			       dns_trust_totext(rdataset->trust));
856 	dns_rdataset_t *rdataset;
865 	rdataset = devent->rdataset;
893 		if (rdataset->trust == dns_trust_secure)
896 		if (rdataset->type == dns_rdatatype_nsec &&
897 		    rdataset->trust == dns_trust_secure &&
901 					   devent->name, rdataset, &exists,
1094 	       dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset)
1108 		     rdataset == NULL || sigrdataset == NULL ||
1110 		     parent->event->rdataset != NULL ||
1152 		 dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset,
1157 	if (check_deadlock(val, name, type, rdataset, sigrdataset))
1162 				      rdataset, sigrdataset, NULL, 0,
1174  * in 'rdataset'.  If found, build a dst_key_t for it and point
1181 	    dns_rdataset_t *rdataset)
1196 	result = dns_rdataset_first(rdataset);
1200 		dns_rdataset_current(rdataset, &rdata);
1228 		result = dns_rdataset_next(rdataset);
1267 		if (val->event->rdataset->type == dns_rdatatype_dnskey)
1274 		if (dns_rdatatype_atparent(val->event->rdataset->type))
1281 		if (val->event->rdataset->type == dns_rdatatype_soa ||
1282 		    val->event->rdataset->type == dns_rdatatype_ns) {
1285 			if (val->event->rdataset->type == dns_rdatatype_soa)
1397 	dns_rdataset_t *rdataset, *sigrdataset;
1405 	rdataset = val->event->rdataset;
1408 	if (rdataset->type == dns_rdatatype_cname ||
1409 	    rdataset->type == dns_rdatatype_dname)
1412 	INSIST(rdataset->type == dns_rdatatype_dnskey);
1414 	for (result = dns_rdataset_first(rdataset);
1416 	     result = dns_rdataset_next(rdataset))
1419 		dns_rdataset_current(rdataset, &rdata);
1441  * Attempt to verify the rdataset using the given key and rdata (RRSIG).
1462 	result = dns_dnssec_verify2(val->event->name, val->event->rdataset,
1481 			      "verify rdataset (keyid=%u): %s",
1605 				      "failed to verify rdataset");
1611 			ttl = ISC_MIN(event->rdataset->ttl,
1616 			event->rdataset->ttl = ttl;
1745 		dns_rdataset_clone(val->event->rdataset, &trdataset);
2137 		dns_rdataset_clone(val->event->rdataset, &trdataset);
2249  * cache rdataset.
2276 		result = dns_rdataset_first(val->event->rdataset);
2278 			dns_ncache_current(val->event->rdataset, *namep,
2295 		dns_rdataset_t *rdataset = *rdatasetp;
2296 		rdataset = ISC_LIST_NEXT(rdataset, link);
2297 		if (rdataset == NULL) {
2305 				rdataset = ISC_LIST_HEAD((*namep)->list);
2306 				INSIST(rdataset != NULL);
2309 		*rdatasetp = rdataset;
2312 		result = dns_rdataset_next(val->event->rdataset);
2314 			dns_ncache_current(val->event->rdataset, *namep,
2335 	dns_rdataset_t *rdataset, trdataset;
2352 		rdataset = &trdataset;
2355 		rdataset = NULL;
2358 	for (result = val_rdataset_first(val, &name, &rdataset);
2360 	     result = val_rdataset_next(val, &name, &rdataset))
2362 		if (rdataset->type != type ||
2363 		    rdataset->trust != dns_trust_secure)
2366 		if (rdataset->type == dns_rdatatype_nsec &&
2370 					   rdataset, &exists, &data, NULL,
2391 		if (rdataset->type == dns_rdatatype_nsec3 &&
2395 					    rdataset, zonename, &exists, &data,
2433 	dns_rdataset_t *rdataset, trdataset;
2446 		rdataset = &trdataset;
2449 		rdataset = NULL;
2452 	for (result = val_rdataset_first(val, &name, &rdataset);
2454 	     result = val_rdataset_next(val, &name, &rdataset))
2456 		if (rdataset->type != dns_rdatatype_nsec3 ||
2457 		    rdataset->trust != dns_trust_secure)
2462 						 rdataset, zonename, NULL,
2498 	for (result = val_rdataset_first(val, &name, &rdataset);
2500 	     result = val_rdataset_next(val, &name, &rdataset))
2502 		if (rdataset->type != dns_rdatatype_nsec3 ||
2503 		    rdataset->trust != dns_trust_secure)
2515 						 name, rdataset, zonename,
2591 		dns_rdataset_t *rdataset = NULL, *sigrdataset = NULL;
2596 			rdataset = ISC_LIST_NEXT(val->currentset, link);
2600 			rdataset = ISC_LIST_HEAD(name->list);
2603 		     rdataset != NULL;
2604 		     rdataset = ISC_LIST_NEXT(rdataset, link))
2606 			if (rdataset->type == dns_rdatatype_rrsig)
2615 				    sigrdataset->covers == rdataset->type)
2633 				if (rdataset->type != dns_rdatatype_nsec)
2636 				result = dns_rdataset_first(rdataset);
2639 				dns_rdataset_current(rdataset, &nsec);
2644 			val->currentset = rdataset;
2645 			result = create_validator(val, name, rdataset->type,
2646 						  rdataset, sigrdataset,
2669 		result = dns_rdataset_first(val->event->rdataset);
2671 		result = dns_rdataset_next(val->event->rdataset);
2675 	     result = dns_rdataset_next(val->event->rdataset))
2677 		dns_rdataset_t *rdataset, *sigrdataset = NULL;
2686 		rdataset = &val->frdataset;
2687 		dns_ncache_current(val->event->rdataset, name, rdataset);
2692 		result = dns_ncache_getsigrdataset(val->event->rdataset, name,
2693 						   rdataset->type,
2713 			if (rdataset->type != dns_rdatatype_nsec)
2716 			result = dns_rdataset_first(rdataset);
2719 			dns_rdataset_current(rdataset, &nsec);
2724 		val->currentset = rdataset;
2725 		result = create_validator(val, name, rdataset->type,
2726 					  rdataset, sigrdataset,
2837 check_ds(dns_validator_t *val, dns_name_t *name, dns_rdataset_t *rdataset) {
2842 	for (result = dns_rdataset_first(rdataset);
2844 	     result = dns_rdataset_next(rdataset)) {
2845 		dns_rdataset_current(rdataset, &dsrdata);
3262 		 * If we have a DS rdataset and it is secure then check if
3263 		 * the DS rdataset has a supported algorithm combination.
3554 	     val->event->rdataset != NULL) {
3557 	} else if (val->event->rdataset != NULL &&
3568 		INSIST(dns_rdataset_isassociated(val->event->rdataset));
3582 	} else if (val->event->rdataset != NULL &&
3583 		   val->event->rdataset->type != 0) {
3588 		INSIST(dns_rdataset_isassociated(val->event->rdataset));
3594 	} else if (val->event->rdataset == NULL &&
3609 	} else if (val->event->rdataset != NULL &&
3610 		    NEGATIVE(val->event->rdataset))
3618 		if (val->event->rdataset->covers == dns_rdatatype_any) {
3643 		     dns_rdataset_t *rdataset, dns_rdataset_t *sigrdataset,
3654 	REQUIRE(rdataset != NULL ||
3655 		(rdataset == NULL && sigrdataset == NULL && message != NULL));
3678 	event->rdataset = rdataset;

Indexes created Tue Jul 24 14:28:13 CEST 2018