| /systemd/src/resolve/ |
| H A D | resolved-dns-dnssec.h | 66 int dnssec_rrsig_match_dnskey(DnsResourceRecord *rrsig, DnsResourceRecord *dnskey, bool revoked_ok);
69 int dnssec_verify_rrset(DnsAnswer *answer, const DnsResourceKey *key, DnsResourceRecord *rrsig, DnsResourceRecord *dnskey, usec_t realtime, DnssecResult *result);
72 int dnssec_verify_dnskey_by_ds(DnsResourceRecord *dnskey, DnsResourceRecord *ds, bool mask_revoke);
73 int dnssec_verify_dnskey_by_ds_search(DnsResourceRecord *dnskey, DnsAnswer *validated_ds);
77 uint16_t dnssec_keytag(DnsResourceRecord *dnskey, bool mask_revoke);
|
| H A D | resolved-dns-dnssec.c | 51 uint16_t dnssec_keytag(DnsResourceRecord *dnskey, bool mask_revoke) { argument
58 assert(dnskey);
59 assert(dnskey->key->type == DNS_TYPE_DNSKEY);
61 f = (uint32_t) dnskey->dnskey.flags;
66 sum = f + ((((uint32_t) dnskey->dnskey.protocol) << 8) + (uint32_t) dnskey->dnskey.algorithm);
68 p = dnskey
260 dnssec_rsa_verify( const char *hash_algorithm, const void *hash, size_t hash_size, DnsResourceRecord *rrsig, DnsResourceRecord *dnskey) argument
406 dnssec_ecdsa_verify( const char *hash_algorithm, int algorithm, const void *hash, size_t hash_size, DnsResourceRecord *rrsig, DnsResourceRecord *dnskey) argument
613 dnssec_verify_rrset( DnsAnswer *a, const DnsResourceKey *key, DnsResourceRecord *rrsig, DnsResourceRecord *dnskey, usec_t realtime, DnssecResult *result) argument
839 dnssec_rrsig_match_dnskey(DnsResourceRecord *rrsig, DnsResourceRecord *dnskey, bool revoked_ok) argument
907 DnsResourceRecord *dnskey; local
1045 dnssec_verify_dnskey_by_ds(DnsResourceRecord *dnskey, DnsResourceRecord *ds, bool mask_revoke) argument
1115 dnssec_verify_dnskey_by_ds_search(DnsResourceRecord *dnskey, DnsAnswer *validated_ds) argument
2121 dnssec_verify_rrset( DnsAnswer *a, const DnsResourceKey *key, DnsResourceRecord *rrsig, DnsResourceRecord *dnskey, usec_t realtime, DnssecResult *result) argument
2132 dnssec_rrsig_match_dnskey(DnsResourceRecord *rrsig, DnsResourceRecord *dnskey, bool revoked_ok) argument
2158 dnssec_verify_dnskey_by_ds(DnsResourceRecord *dnskey, DnsResourceRecord *ds, bool mask_revoke) argument
2163 dnssec_verify_dnskey_by_ds_search(DnsResourceRecord *dnskey, DnsAnswer *validated_ds) argument
[all...] |
| H A D | test-dnssec.c | 55 _cleanup_(dns_resource_record_unrefp) DnsResourceRecord *nsec = NULL, *rrsig = NULL, *dnskey = NULL;
97 dnskey = dns_resource_record_new_full(DNS_CLASS_IN, DNS_TYPE_DNSKEY, "nASA.gOV");
98 assert_se(dnskey);
100 dnskey->dnskey.flags = 256;
101 dnskey->dnskey.protocol = 3;
102 dnskey->dnskey.algorithm = DNSSEC_ALGORITHM_RSASHA256;
103 dnskey
[all...] |
| H A D | resolved-dns-trust-anchor.h | 42 int dns_trust_anchor_check_revoked(DnsTrustAnchor *d, DnsResourceRecord *dnskey, DnsAnswer *rrs);
|
| H A D | resolved-dns-trust-anchor.c | 319 rr->dnskey.flags = f;
320 rr->dnskey.protocol = 3;
321 rr->dnskey.algorithm = a;
322 rr->dnskey.key_size = l;
323 rr->dnskey.key = k;
621 assert(revoked_dnskey->dnskey.flags & DNSKEY_FLAG_REVOKE);
631 if (anchor->dnskey.protocol != revoked_dnskey->dnskey.protocol)
634 if (anchor->dnskey.algorithm != revoked_dnskey->dnskey
680 dns_trust_anchor_check_revoked(DnsTrustAnchor *d, DnsResourceRecord *dnskey, DnsAnswer *rrs) argument
[all...] |
| H A D | resolved-dns-rr.c | 465 free(rr->dnskey.key);
665 return a->dnskey.flags == b->dnskey.flags &&
666 a->dnskey.protocol == b->dnskey.protocol &&
667 a->dnskey.algorithm == b->dnskey.algorithm &&
668 FIELD_EQUAL(a->dnskey, b->dnskey, key);
974 r = dnssec_algorithm_to_string_alloc(rr->dnskey
[all...] |
| H A D | resolved-dns-packet.c | 962 r = dns_packet_append_uint16(p, rr->dnskey.flags, NULL);
966 r = dns_packet_append_uint8(p, rr->dnskey.protocol, NULL);
970 r = dns_packet_append_uint8(p, rr->dnskey.algorithm, NULL);
974 r = dns_packet_append_blob(p, rr->dnskey.key, rr->dnskey.key_size, NULL);
1854 r = dns_packet_read_uint16(p, &rr->dnskey.flags, NULL);
1858 r = dns_packet_read_uint8(p, &rr->dnskey.protocol, NULL);
1862 r = dns_packet_read_uint8(p, &rr->dnskey.algorithm, NULL);
1867 &rr->dnskey.key, &rr->dnskey
[all...] |
| H A D | resolved-dns-rr.h | 202 } dnskey; member in union:DnsResourceRecord::__anon231
|
| H A D | resolved-dns-transaction.c | 1829 _cleanup_(dns_resource_key_unrefp) DnsResourceKey *dnskey = NULL;
1860 dnskey = dns_resource_key_new(rr->key->class, DNS_TYPE_DNSKEY, rr->rrsig.signer);
1861 if (!dnskey)
1865 r = dns_transaction_request_dnssec_rr(t, dnskey);
|