5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

0c310d16b05ee94743d33f6920907edee6084fc8Michael Graff

0c310d16b05ee94743d33f6920907edee6084fc8Michael Graff#include <config.h>

de153390f5a1f6d4fa86af91d4cae772d9846ca0Mark Andrews

0c310d16b05ee94743d33f6920907edee6084fc8Michael Graff#include <stdlib.h>

822f6cdabb1edd44472c7a758b5cae71376fa9beBrian Wellington

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews#include <isc/app.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/base64.h>

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence#include <isc/dir.h>

973a19342597823f111fce6a8cd5adfd0e2e7c0dMark Andrews#include <isc/entropy.h>

0c310d16b05ee94743d33f6920907edee6084fc8Michael Graff#include <isc/file.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/hash.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/lex.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/parseint.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/print.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/resource.h>

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews#include <isc/stdio.h>

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews#include <isc/string.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/task.h>

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews#include <isc/timer.h>

1a69a1a78cfaa86f3b68bbc965232b7876d4da2aDavid Lawrence#include <isc/util.h>

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson#include <isccfg/namedconf.h>

5fc7ba3e1ac5d72239e9971e0f469dd5796738f9Andreas Gustafsson

5fc7ba3e1ac5d72239e9971e0f469dd5796738f9Andreas Gustafsson#include <bind9/check.h>

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

eb6bd543c7d072efdca509eb17f8f301c1467b53Mark Andrews#include <dns/adb.h>

600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence#include <dns/cache.h>

600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence#include <dns/db.h>

600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence#include <dns/dispatch.h>

eb6bd543c7d072efdca509eb17f8f301c1467b53Mark Andrews#include <dns/forward.h>

deaaf94332abbfdb3aff53675546acfed16e5eb6Mark Andrews#include <dns/journal.h>

0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence#include <dns/keytable.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/master.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/masterdump.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/order.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/peer.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/portlist.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/rdataclass.h>

0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence#include <dns/rdataset.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/rdatastruct.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/resolver.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/rootns.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/secalg.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/stats.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/tkey.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/view.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dns/zone.h>

0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence#include <dns/zt.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dst/dst.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <dst/result.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <named/client.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <named/config.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <named/control.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <named/interfacemgr.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <named/log.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <named/logconf.h>

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence#include <named/lwresd.h>

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson#include <named/main.h>

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence#include <named/os.h>

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson#include <named/server.h>

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson#include <named/tkeyconf.h>

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson#include <named/tsigconf.h>

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson#include <named/zoneconf.h>

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson#define CHECK(op) \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence do { result = (op); \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (result != ISC_R_SUCCESS) goto cleanup; \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence } while (0)

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence#define CHECKM(op, msg) \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence do { result = (op); \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (result != ISC_R_SUCCESS) { \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_log_write(ns_g_lctx, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence NS_LOGCATEGORY_GENERAL, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence NS_LOGMODULE_SERVER, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence ISC_LOG_ERROR, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence "%s: %s", msg, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_result_totext(result)); \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence goto cleanup; \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence } \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence } while (0) \

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence#define CHECKMF(op, msg, file) \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence do { result = (op); \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (result != ISC_R_SUCCESS) { \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_log_write(ns_g_lctx, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence NS_LOGCATEGORY_GENERAL, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence NS_LOGMODULE_SERVER, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence ISC_LOG_ERROR, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence "%s '%s': %s", msg, file, \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_result_totext(result)); \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence goto cleanup; \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence } \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence } while (0) \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence#define CHECKFATAL(op, msg) \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence do { result = (op); \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (result != ISC_R_SUCCESS) \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence fatal(msg, result); \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence } while (0) \

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencestruct ns_dispatch {

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_sockaddr_t addr;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence unsigned int dispatchgen;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_dispatch_t *dispatch;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence ISC_LINK(struct ns_dispatch) link;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence};

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencestruct dumpcontext {

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_mem_t *mctx;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_boolean_t dumpcache;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_boolean_t dumpzones;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence FILE *fp;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence ISC_LIST(struct viewlistentry) viewlist;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence struct viewlistentry *view;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence struct zonelistentry *zone;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_dumpctx_t *mdctx;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_db_t *db;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_db_t *cache;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_task_t *task;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_dbversion_t *version;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence};

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencestruct viewlistentry {

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_view_t *view;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence ISC_LINK(struct viewlistentry) link;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence ISC_LIST(struct zonelistentry) zonelist;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence};

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencestruct zonelistentry {

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_zone_t *zone;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence ISC_LINK(struct zonelistentry) link;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence};

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencestatic void

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencefatal(const char *msg, isc_result_t result);

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrencestatic void

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrencens_server_reload(isc_task_t *task, isc_event_t *event);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

fd4810861c0c0ccb9aebde94e9d289442b2630dbMark Andrewsstatic isc_result_t

fd4810861c0c0ccb9aebde94e9d289442b2630dbMark Andrewsns_listenelt_fromconfig(cfg_obj_t *listener, cfg_obj_t *config,

fd4810861c0c0ccb9aebde94e9d289442b2630dbMark Andrews ns_aclconfctx_t *actx,

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_mem_t *mctx, ns_listenelt_t **target);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencestatic isc_result_t

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrencens_listenlist_fromconfig(cfg_obj_t *listenlist, cfg_obj_t *config,

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson ns_aclconfctx_t *actx,

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews isc_mem_t *mctx, ns_listenlist_t **target);

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsstatic isc_result_t

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsconfigure_forward(cfg_obj_t *config, dns_view_t *view, dns_name_t *origin,

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews cfg_obj_t *forwarders, cfg_obj_t *forwardtype);

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsstatic isc_result_t

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsconfigure_alternates(cfg_obj_t *config, dns_view_t *view,

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews cfg_obj_t *alternates);

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsstatic isc_result_t

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsconfigure_zone(cfg_obj_t *config, cfg_obj_t *zconfig, cfg_obj_t *vconfig,

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews isc_mem_t *mctx, dns_view_t *view,

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews ns_aclconfctx_t *aclconf);

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsstatic void

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrewsend_reserved_dispatches(ns_server_t *server, isc_boolean_t all);

2002be4f65776451676df6ee21a2e28f52bcad6dMark Andrews

ffe74cc719aa0f10c38fbc1f2f3ea7db0960cb8fMark Andrewsstatic isc_result_t

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrewsconfigure_view_acl(cfg_obj_t *vconfig, cfg_obj_t *config,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews const char *aclname, ns_aclconfctx_t *actx,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews isc_mem_t *mctx, dns_acl_t **aclp)

bed8e84810a80dad3d37870be927d1dfd015f480Mark Andrews{

bed8e84810a80dad3d37870be927d1dfd015f480Mark Andrews isc_result_t result;

bed8e84810a80dad3d37870be927d1dfd015f480Mark Andrews cfg_obj_t *maps[3];

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews cfg_obj_t *aclobj = NULL;

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews int i = 0;

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews if (*aclp != NULL)

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews dns_acl_detach(aclp);

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews if (vconfig != NULL)

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews maps[i++] = cfg_tuple_get(vconfig, "options");

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews if (config != NULL) {

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews cfg_obj_t *options = NULL;

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews (void)cfg_map_get(config, "options", &options);

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews if (options != NULL)

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews maps[i++] = options;

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington }

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington maps[i] = NULL;

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews result = ns_config_get(maps, aclname, &aclobj);

613991eef6bb79b9703382aff26cddd0281da915Bob Halley if (aclobj == NULL)

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews /*

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington return (ISC_R_SUCCESS);

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington result = ns_acl_fromconfig(aclobj, config, actx, mctx, aclp);

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington return (result);

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington}

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellingtonstatic isc_result_t

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellingtonconfigure_view_dnsseckey(cfg_obj_t *vconfig, cfg_obj_t *key,

87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson dns_keytable_t *keytable, isc_mem_t *mctx)

87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson{

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews dns_rdataclass_t viewclass;

87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson dns_rdata_dnskey_t keystruct;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews isc_uint32_t flags, proto, alg;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews char *keystr, *keynamestr;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews unsigned char keydata[4096];

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews isc_buffer_t keydatabuf;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews unsigned char rrdata[4096];

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews isc_buffer_t rrdatabuf;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson isc_region_t r;

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews dns_fixedname_t fkeyname;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews dns_name_t *keyname;

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews isc_buffer_t namebuf;

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews isc_result_t result;

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews dst_key_t *dstkey = NULL;

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews flags = cfg_obj_asuint32(cfg_tuple_get(key, "flags"));

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews proto = cfg_obj_asuint32(cfg_tuple_get(key, "protocol"));

bcd7fdf06ca76eb2f6eb157f56b612c503e062a7Mark Andrews alg = cfg_obj_asuint32(cfg_tuple_get(key, "algorithm"));

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews keyname = dns_fixedname_name(&fkeyname);

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews keynamestr = cfg_obj_asstring(cfg_tuple_get(key, "name"));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (vconfig == NULL)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson viewclass = dns_rdataclass_in;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson else {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson cfg_obj_t *classobj = cfg_tuple_get(vconfig, "class");

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(ns_config_getclass(classobj, dns_rdataclass_in,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson &viewclass));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson }

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.common.rdclass = viewclass;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.common.rdtype = dns_rdatatype_dnskey;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews /*

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence keystruct.mctx = NULL;

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff ISC_LINK_INIT(&keystruct.common, link);

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington if (flags > 0xffff)

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington CHECKM(ISC_R_RANGE, "key flags");

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff if (proto > 0xff)

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff CHECKM(ISC_R_RANGE, "key protocol");

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff if (alg > 0xff)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECKM(ISC_R_RANGE, "key algorithm");

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.flags = (isc_uint16_t)flags;

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence keystruct.protocol = (isc_uint8_t)proto;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.algorithm = (isc_uint8_t)alg;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson isc_buffer_init(&keydatabuf, keydata, sizeof(keydata));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson isc_buffer_init(&rrdatabuf, rrdata, sizeof(rrdata));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystr = cfg_obj_asstring(cfg_tuple_get(key, "key"));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(isc_base64_decodestring(keystr, &keydatabuf));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson isc_buffer_usedregion(&keydatabuf, &r);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.datalen = r.length;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.data = r.base;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(dns_rdata_fromstruct(NULL,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.common.rdclass,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keystruct.common.rdtype,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson &keystruct, &rrdatabuf));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson dns_fixedname_init(&fkeyname);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson isc_buffer_init(&namebuf, keynamestr, strlen(keynamestr));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson isc_buffer_add(&namebuf, strlen(keynamestr));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(dns_name_fromtext(keyname, &namebuf,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson dns_rootname, ISC_FALSE,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson NULL));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(dst_key_fromdns(keyname, viewclass, &rrdatabuf,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson mctx, &dstkey));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(dns_keytable_add(keytable, &dstkey));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(dstkey == NULL);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson return (ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson cleanup:

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (result == DST_R_NOCRYPTO) {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson cfg_obj_log(key, ns_g_lctx, ISC_LOG_ERROR,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson "ignoring trusted key for '%s': no crypto support",

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson keynamestr);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ISC_R_SUCCESS;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence } else {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson cfg_obj_log(key, ns_g_lctx, ISC_LOG_ERROR,

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews "configuring trusted key for '%s': %s",

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews keynamestr, isc_result_totext(result));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = ISC_R_FAILURE;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews }

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (dstkey != NULL)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews dst_key_free(&dstkey);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews return (result);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews}

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrewsstatic isc_result_t

29c818c7d40fc8898b062903ec703851328a4deaMark Andrewsconfigure_view_dnsseckeys(cfg_obj_t *vconfig, cfg_obj_t *config,

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews isc_mem_t *mctx, dns_keytable_t **target)

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews{

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews isc_result_t result;

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews cfg_obj_t *keys = NULL;

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews cfg_obj_t *voptions = NULL;

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews cfg_listelt_t *element, *element2;

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews cfg_obj_t *keylist;

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews cfg_obj_t *key;

29c818c7d40fc8898b062903ec703851328a4deaMark Andrews dns_keytable_t *keytable = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews CHECK(dns_keytable_create(mctx, &keytable));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (vconfig != NULL)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews voptions = cfg_tuple_get(vconfig, "options");

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews keys = NULL;

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews if (voptions != NULL)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews (void)cfg_map_get(voptions, "trusted-keys", &keys);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (keys == NULL)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews (void)cfg_map_get(config, "trusted-keys", &keys);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews for (element = cfg_list_first(keys);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews element != NULL;

d981ca645597116d227a48bf37cc5edc061c854dBob Halley element = cfg_list_next(element))

d981ca645597116d227a48bf37cc5edc061c854dBob Halley {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews keylist = cfg_listelt_value(element);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews for (element2 = cfg_list_first(keylist);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews element2 != NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews element2 = cfg_list_next(element2))

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews key = cfg_listelt_value(element2);

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews CHECK(configure_view_dnsseckey(vconfig, key,

44a966dff66061ac3f266c6b451a70733eb78e82Mark Andrews keytable, mctx));

44a966dff66061ac3f266c6b451a70733eb78e82Mark Andrews }

44a966dff66061ac3f266c6b451a70733eb78e82Mark Andrews }

44a966dff66061ac3f266c6b451a70733eb78e82Mark Andrews

44a966dff66061ac3f266c6b451a70733eb78e82Mark Andrews dns_keytable_detach(target);

44a966dff66061ac3f266c6b451a70733eb78e82Mark Andrews *target = keytable; /* Transfer ownership. */

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews keytable = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = ISC_R_SUCCESS;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews cleanup:

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews return (result);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews}

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrewsstatic isc_result_t

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrewsmustbesecure(cfg_obj_t *mbs, dns_resolver_t *resolver)

d981ca645597116d227a48bf37cc5edc061c854dBob Halley{

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews cfg_listelt_t *element;

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews cfg_obj_t *obj;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence const char *str;

19d365e4448f1782611280b020987988b7ac3210Mark Andrews dns_fixedname_t fixed;

19d365e4448f1782611280b020987988b7ac3210Mark Andrews dns_name_t *name;

19d365e4448f1782611280b020987988b7ac3210Mark Andrews isc_boolean_t value;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews isc_result_t result;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews isc_buffer_t b;

d981ca645597116d227a48bf37cc5edc061c854dBob Halley

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews dns_fixedname_init(&fixed);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews name = dns_fixedname_name(&fixed);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews for (element = cfg_list_first(mbs);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews element != NULL;

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence element = cfg_list_next(element))

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews {

19d365e4448f1782611280b020987988b7ac3210Mark Andrews obj = cfg_listelt_value(element);

19d365e4448f1782611280b020987988b7ac3210Mark Andrews str = cfg_obj_asstring(cfg_tuple_get(obj, "name"));

19d365e4448f1782611280b020987988b7ac3210Mark Andrews isc_buffer_init(&b, str, strlen(str));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews isc_buffer_add(&b, strlen(str));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews CHECK(dns_name_fromtext(name, &b, dns_rootname,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews ISC_FALSE, NULL));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews value = cfg_obj_asboolean(cfg_tuple_get(obj, "value"));

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff CHECK(dns_resolver_setmustbesecure(resolver, name, value));

d981ca645597116d227a48bf37cc5edc061c854dBob Halley }

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews result = ISC_R_SUCCESS;

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews cleanup:

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff return (result);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews}

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrewsstatic isc_result_t

19d365e4448f1782611280b020987988b7ac3210Mark Andrewsget_view_querysource_dispatch(cfg_obj_t **maps,

19d365e4448f1782611280b020987988b7ac3210Mark Andrews int af, dns_dispatch_t **dispatchp)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews{

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews isc_result_t result;

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews dns_dispatch_t *disp;

0c310d16b05ee94743d33f6920907edee6084fc8Michael Graff isc_sockaddr_t sa;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews unsigned int attrs, attrmask;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews cfg_obj_t *obj = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews /*

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews result = ISC_R_FAILURE;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews switch (af) {

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews case AF_INET:

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews result = ns_config_get(maps, "query-source", &obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews INSIST(result == ISC_R_SUCCESS);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews break;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews case AF_INET6:

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews result = ns_config_get(maps, "query-source-v6", &obj);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews INSIST(result == ISC_R_SUCCESS);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence break;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence default:

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence INSIST(0);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff }

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews sa = *(cfg_obj_assockaddr(obj));

ad7209ea70d346527ffdcda335153831341d9dcfAndreas Gustafsson INSIST(isc_sockaddr_pf(&sa) == af);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

d981ca645597116d227a48bf37cc5edc061c854dBob Halley /*

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff switch (af) {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews case AF_INET:

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = isc_net_probeipv4();

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews break;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews case AF_INET6:

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = isc_net_probeipv6();

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews break;

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff default:

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews INSIST(0);

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews }

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews if (result != ISC_R_SUCCESS)

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff return (ISC_R_SUCCESS);

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews

f0a5bb8f86631ce638cb2b6c65bbb9bcf9b0cdc0Bob Halley /*

19d365e4448f1782611280b020987988b7ac3210Mark Andrews attrs = 0;

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence attrs |= DNS_DISPATCHATTR_UDP;

693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson switch (af) {

693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson case AF_INET:

693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson attrs |= DNS_DISPATCHATTR_IPV4;

693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson break;

693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson case AF_INET6:

693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson attrs |= DNS_DISPATCHATTR_IPV6;

52637f592f705ca93fadc218e403fd55e8ce4aeaMark Andrews break;

19d365e4448f1782611280b020987988b7ac3210Mark Andrews }

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews attrmask = 0;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence attrmask |= DNS_DISPATCHATTR_UDP;

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews attrmask |= DNS_DISPATCHATTR_TCP;

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence attrmask |= DNS_DISPATCHATTR_IPV4;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence attrmask |= DNS_DISPATCHATTR_IPV6;

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

f0a5bb8f86631ce638cb2b6c65bbb9bcf9b0cdc0Bob Halley disp = NULL;

f0a5bb8f86631ce638cb2b6c65bbb9bcf9b0cdc0Bob Halley result = dns_dispatch_getudp(ns_g_dispatchmgr, ns_g_socketmgr,

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff ns_g_taskmgr, &sa, 4096,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews 1000, 32768, 16411, 16433,

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff attrs, attrmask, &disp);

52637f592f705ca93fadc218e403fd55e8ce4aeaMark Andrews if (result != ISC_R_SUCCESS) {

7c0378745269fe49a05904935afc42b85528f53aDavid Lawrence isc_sockaddr_t any;

7c0378745269fe49a05904935afc42b85528f53aDavid Lawrence char buf[ISC_SOCKADDR_FORMATSIZE];

52637f592f705ca93fadc218e403fd55e8ce4aeaMark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews switch (af) {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews case AF_INET:

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews isc_sockaddr_any(&any);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews break;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews case AF_INET6:

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_sockaddr_any6(&any);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews break;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews }

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (isc_sockaddr_equal(&sa, &any))

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (ISC_R_SUCCESS);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_sockaddr_format(&sa, buf, sizeof(buf));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews NS_LOGMODULE_SERVER, ISC_LOG_ERROR,

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews "could not get query source dispatcher (%s)",

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews buf);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (result);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews }

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews *dispatchp = disp;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (ISC_R_SUCCESS);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews}

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrewsstatic isc_result_t

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrewsconfigure_order(dns_order_t *order, cfg_obj_t *ent) {

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_rdataclass_t rdclass;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_rdatatype_t rdtype;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews cfg_obj_t *obj;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_fixedname_t fixed;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews unsigned int mode = 0;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews const char *str;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_buffer_t b;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_result_t result;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews result = ns_config_getclass(cfg_tuple_get(ent, "class"),

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_rdataclass_any, &rdclass);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (result != ISC_R_SUCCESS)

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (result);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews result = ns_config_gettype(cfg_tuple_get(ent, "type"),

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_rdatatype_any, &rdtype);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (result != ISC_R_SUCCESS)

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (result);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews obj = cfg_tuple_get(ent, "name");

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (cfg_obj_isstring(obj))

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews str = cfg_obj_asstring(obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews else

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews str = "*";

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_buffer_init(&b, str, strlen(str));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_buffer_add(&b, strlen(str));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_fixedname_init(&fixed);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews result = dns_name_fromtext(dns_fixedname_name(&fixed), &b,

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_rootname, ISC_FALSE, NULL);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (result != ISC_R_SUCCESS)

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (result);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews obj = cfg_tuple_get(ent, "ordering");

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews INSIST(cfg_obj_isstring(obj));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews str = cfg_obj_asstring(obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (!strcasecmp(str, "fixed"))

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews mode = DNS_RDATASETATTR_FIXEDORDER;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews else if (!strcasecmp(str, "random"))

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews mode = DNS_RDATASETATTR_RANDOMIZE;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews else if (!strcasecmp(str, "cyclic"))

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews mode = 0;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews else

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews INSIST(0);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (dns_order_add(order, dns_fixedname_name(&fixed),

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews rdtype, rdclass, mode));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews}

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrewsstatic isc_result_t

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrewsconfigure_peer(cfg_obj_t *cpeer, isc_mem_t *mctx, dns_peer_t **peerp) {

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_sockaddr_t *sa;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_netaddr_t na;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_peer_t *peer;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews cfg_obj_t *obj;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews char *str;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_result_t result;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews sa = cfg_obj_assockaddr(cfg_map_getname(cpeer));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_netaddr_fromsockaddr(&na, sa);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews peer = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews result = dns_peer_new(mctx, &na, &peer);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (result != ISC_R_SUCCESS)

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews return (result);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews obj = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews (void)cfg_map_get(cpeer, "bogus", &obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (obj != NULL)

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews CHECK(dns_peer_setbogus(peer, cfg_obj_asboolean(obj)));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews obj = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews (void)cfg_map_get(cpeer, "provide-ixfr", &obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (obj != NULL)

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff CHECK(dns_peer_setprovideixfr(peer, cfg_obj_asboolean(obj)));

d981ca645597116d227a48bf37cc5edc061c854dBob Halley

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews obj = NULL;

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews (void)cfg_map_get(cpeer, "request-ixfr", &obj);

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews if (obj != NULL)

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews CHECK(dns_peer_setrequestixfr(peer, cfg_obj_asboolean(obj)));

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews obj = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews (void)cfg_map_get(cpeer, "edns", &obj);

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews if (obj != NULL)

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews CHECK(dns_peer_setsupportedns(peer, cfg_obj_asboolean(obj)));

f305d86668bfd4d4727c3e0f70e7e97a2fa1b772Bob Halley

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson obj = NULL;

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews (void)cfg_map_get(cpeer, "transfers", &obj);

20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence if (obj != NULL)

6d12fdf96621801e80f3f4c2a8a569fe48766a20David Lawrence CHECK(dns_peer_settransfers(peer, cfg_obj_asuint32(obj)));

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews obj = NULL;

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence (void)cfg_map_get(cpeer, "transfer-format", &obj);

19d365e4448f1782611280b020987988b7ac3210Mark Andrews if (obj != NULL) {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews str = cfg_obj_asstring(obj);

0c310d16b05ee94743d33f6920907edee6084fc8Michael Graff if (strcasecmp(str, "many-answers") == 0)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews CHECK(dns_peer_settransferformat(peer,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews dns_many_answers));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews else if (strcasecmp(str, "one-answer") == 0)

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews CHECK(dns_peer_settransferformat(peer,

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_one_answer));

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews else

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews INSIST(0);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews }

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews obj = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews (void)cfg_map_get(cpeer, "keys", &obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (obj != NULL) {

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews result = dns_peer_setkeybycharp(peer, cfg_obj_asstring(obj));

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews if (result != ISC_R_SUCCESS)

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews goto cleanup;

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews }

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews obj = NULL;

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews if (isc_sockaddr_pf(sa) == AF_INET)

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews (void)cfg_map_get(cpeer, "transfer-source", &obj);

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews else

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews (void)cfg_map_get(cpeer, "transfer-source-v6", &obj);

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews if (obj != NULL) {

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews result = dns_peer_settransfersource(peer,

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews cfg_obj_assockaddr(obj));

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews if (result != ISC_R_SUCCESS)

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews goto cleanup;

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews }

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews *peerp = peer;

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews return (ISC_R_SUCCESS);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews cleanup:

035504dbd8ca5949e8380b860873b3385a4e61e5Mark Andrews dns_peer_detach(&peer);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff return (result);

035504dbd8ca5949e8380b860873b3385a4e61e5Mark Andrews}

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graffstatic isc_result_t

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrewsdisable_algorithms(cfg_obj_t *disabled, dns_resolver_t *resolver) {

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews isc_result_t result;

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews cfg_obj_t *algorithms;

c0d0a59d1b665423b8a0d1829d0f0da121cb3473Andreas Gustafsson cfg_listelt_t *element;

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews const char *str;

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff dns_fixedname_t fixed;

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews dns_name_t *name;

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews isc_buffer_t b;

fdd04623a6a36aad8449ef0877d8801a558873b8Mark Andrews

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews dns_fixedname_init(&fixed);

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews name = dns_fixedname_name(&fixed);

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews str = cfg_obj_asstring(cfg_tuple_get(disabled, "name"));

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews isc_buffer_init(&b, str, strlen(str));

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews isc_buffer_add(&b, strlen(str));

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews CHECK(dns_name_fromtext(name, &b, dns_rootname, ISC_FALSE, NULL));

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews algorithms = cfg_tuple_get(disabled, "algorithms");

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews for (element = cfg_list_first(algorithms);

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews element != NULL;

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews element = cfg_list_next(element))

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews {

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews isc_textregion_t r;

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff dns_secalg_t alg;

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews r.base = cfg_obj_asstring(cfg_listelt_value(element));

82d05588933a3c765aa8518fe455d6477d640b99Mark Andrews r.length = strlen(r.base);

fd4810861c0c0ccb9aebde94e9d289442b2630dbMark Andrews

fd4810861c0c0ccb9aebde94e9d289442b2630dbMark Andrews result = dns_secalg_fromtext(&alg, &r);

fd4810861c0c0ccb9aebde94e9d289442b2630dbMark Andrews if (result != ISC_R_SUCCESS) {

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews isc_uint8_t ui;

fd4810861c0c0ccb9aebde94e9d289442b2630dbMark Andrews result = isc_parse_uint8(&ui, r.base, 10);

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews alg = ui;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews }

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff if (result != ISC_R_SUCCESS) {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews cfg_obj_log(cfg_listelt_value(element),

d981ca645597116d227a48bf37cc5edc061c854dBob Halley ns_g_lctx, ISC_LOG_ERROR,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews "invalid algorithm");

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff CHECK(result);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews }

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews CHECK(dns_resolver_disable_algorithm(resolver, name, alg));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews }

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews cleanup:

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews return (result);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff}

ae70d32b67cf30e06553c01479e71c87b21d984cBob Halley

19d365e4448f1782611280b020987988b7ac3210Mark Andrewsstatic isc_result_t

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrenceconfigure_view(dns_view_t *view, cfg_obj_t *config, cfg_obj_t *vconfig,

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence isc_mem_t *mctx, ns_aclconfctx_t *actx,

19d365e4448f1782611280b020987988b7ac3210Mark Andrews isc_boolean_t need_hints)

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence{

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence cfg_obj_t *maps[4];

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence cfg_obj_t *cfgmaps[3];

f8aae502686e2448c48f56697c212a50e2a1cbaeAndreas Gustafsson cfg_obj_t *options = NULL;

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff cfg_obj_t *voptions = NULL;

f8aae502686e2448c48f56697c212a50e2a1cbaeAndreas Gustafsson cfg_obj_t *forwardtype;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews cfg_obj_t *forwarders;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews cfg_obj_t *alternates;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews cfg_obj_t *zonelist;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews cfg_obj_t *disabled;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews cfg_obj_t *obj;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews cfg_listelt_t *element;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews in_port_t port;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_cache_t *cache = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_result_t result;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_uint32_t max_adb_size;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_uint32_t max_cache_size;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_uint32_t lame_ttl;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_tsig_keyring_t *ring;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_view_t *pview = NULL; /* Production view */

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_mem_t *cmctx;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_dispatch_t *dispatch4 = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_dispatch_t *dispatch6 = NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_boolean_t reused_cache = ISC_FALSE;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews int i;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews const char *str;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews dns_order_t *order = NULL;

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews isc_uint32_t udpsize;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews unsigned int check = 0;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews REQUIRE(DNS_VIEW_VALID(view));

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence cmctx = NULL;

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (config != NULL)

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence (void)cfg_map_get(config, "options", &options);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson i = 0;

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson if (vconfig != NULL) {

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson voptions = cfg_tuple_get(vconfig, "options");

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson maps[i++] = voptions;

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson }

ae70d32b67cf30e06553c01479e71c87b21d984cBob Halley if (options != NULL)

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson maps[i++] = options;

7ab0e69f61e61e81d489c95c7ebd981e74e7ef16Andreas Gustafsson maps[i++] = ns_g_defaults;

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff maps[i] = NULL;

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson i = 0;

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson if (voptions != NULL)

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson cfgmaps[i++] = voptions;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (config != NULL)

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence cfgmaps[i++] = config;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence cfgmaps[i] = NULL;

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson /*

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson CHECKM(ns_config_getport(config, &port), "port");

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson dns_view_setdstport(view, port);

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson /*

ae70d32b67cf30e06553c01479e71c87b21d984cBob Halley zonelist = NULL;

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson if (voptions != NULL)

0c8649cea98afc061dd2938fd315df53b8fc35caAndreas Gustafsson (void)cfg_map_get(voptions, "zone", &zonelist);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff else

d981ca645597116d227a48bf37cc5edc061c854dBob Halley (void)cfg_map_get(config, "zone", &zonelist);

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews for (element = cfg_list_first(zonelist);

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews element != NULL;

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews element = cfg_list_next(element))

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews cfg_obj_t *zconfig = cfg_listelt_value(element);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews CHECK(configure_zone(config, zconfig, vconfig, mctx, view,

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews actx));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews }

19d365e4448f1782611280b020987988b7ac3210Mark Andrews

19d365e4448f1782611280b020987988b7ac3210Mark Andrews /*

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff result = dns_viewlist_find(&ns_g_server->viewlist,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->name, view->rdclass,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews &pview);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (result != ISC_R_NOTFOUND && result != ISC_R_SUCCESS)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews goto cleanup;

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff if (pview != NULL) {

94a3bcd132e515b4baa0884ba9dd0f361d2e17bcMark Andrews INSIST(pview->cache != NULL);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews NS_LOGMODULE_SERVER, ISC_LOG_DEBUG(3),

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews "reusing existing cache");

19d365e4448f1782611280b020987988b7ac3210Mark Andrews reused_cache = ISC_TRUE;

19d365e4448f1782611280b020987988b7ac3210Mark Andrews dns_cache_attach(pview->cache, &cache);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews dns_view_detach(&pview);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews } else {

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews CHECK(isc_mem_create(0, 0, &cmctx));

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews CHECK(dns_cache_create(cmctx, ns_g_taskmgr, ns_g_timermgr,

3d5cad69ec20157912e95cf3b79316dfb0a314f3Mark Andrews view->rdclass, "rbt", 0, NULL, &cache));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews }

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews dns_view_setcache(view, cache);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

94a3bcd132e515b4baa0884ba9dd0f361d2e17bcMark Andrews /*

94a3bcd132e515b4baa0884ba9dd0f361d2e17bcMark Andrews obj = NULL;

94a3bcd132e515b4baa0884ba9dd0f361d2e17bcMark Andrews result = ns_config_get(maps, "cache-file", &obj);

94a3bcd132e515b4baa0884ba9dd0f361d2e17bcMark Andrews if (result == ISC_R_SUCCESS && strcmp(view->name, "_bind") != 0) {

94a3bcd132e515b4baa0884ba9dd0f361d2e17bcMark Andrews CHECK(dns_cache_setfilename(cache, cfg_obj_asstring(obj)));

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff if (!reused_cache)

d981ca645597116d227a48bf37cc5edc061c854dBob Halley CHECK(dns_cache_load(cache));

d981ca645597116d227a48bf37cc5edc061c854dBob Halley }

d981ca645597116d227a48bf37cc5edc061c854dBob Halley

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff obj = NULL;

d981ca645597116d227a48bf37cc5edc061c854dBob Halley result = ns_config_get(maps, "cleaning-interval", &obj);

d981ca645597116d227a48bf37cc5edc061c854dBob Halley INSIST(result == ISC_R_SUCCESS);

d981ca645597116d227a48bf37cc5edc061c854dBob Halley dns_cache_setcleaninginterval(cache, cfg_obj_asuint32(obj) * 60);

d981ca645597116d227a48bf37cc5edc061c854dBob Halley

d981ca645597116d227a48bf37cc5edc061c854dBob Halley obj = NULL;

d981ca645597116d227a48bf37cc5edc061c854dBob Halley result = ns_config_get(maps, "max-cache-size", &obj);

d981ca645597116d227a48bf37cc5edc061c854dBob Halley INSIST(result == ISC_R_SUCCESS);

d981ca645597116d227a48bf37cc5edc061c854dBob Halley if (cfg_obj_isstring(obj)) {

d981ca645597116d227a48bf37cc5edc061c854dBob Halley str = cfg_obj_asstring(obj);

d981ca645597116d227a48bf37cc5edc061c854dBob Halley INSIST(strcasecmp(str, "unlimited") == 0);

d981ca645597116d227a48bf37cc5edc061c854dBob Halley max_cache_size = ISC_UINT32_MAX;

d981ca645597116d227a48bf37cc5edc061c854dBob Halley } else {

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews isc_resourcevalue_t value;

d981ca645597116d227a48bf37cc5edc061c854dBob Halley value = cfg_obj_asuint64(obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews if (value > ISC_UINT32_MAX) {

d981ca645597116d227a48bf37cc5edc061c854dBob Halley cfg_obj_log(obj, ns_g_lctx, ISC_LOG_ERROR,

d981ca645597116d227a48bf37cc5edc061c854dBob Halley "'max-cache-size "

d981ca645597116d227a48bf37cc5edc061c854dBob Halley "%" ISC_PRINT_QUADFORMAT "d' is too large",

d981ca645597116d227a48bf37cc5edc061c854dBob Halley value);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff result = ISC_R_RANGE;

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley goto cleanup;

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff }

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley max_cache_size = (isc_uint32_t)value;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews }

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley dns_cache_setcachesize(cache, max_cache_size);

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley dns_cache_detach(&cache);

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley /*

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley obj = NULL;

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley str = "";

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley result = ns_config_get(maps, "check-names", &obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews INSIST(result == ISC_R_SUCCESS);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews for (element = cfg_list_first(obj);

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews element != NULL;

9916239908343b3eb17f0578de4c3cd6a313d85fMark Andrews element = cfg_list_next(element)) {

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley cfg_obj_t *value, *type;

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley value = cfg_listelt_value(element);

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley type = cfg_tuple_get(value, "type");

0513f89e68f82f9ec54e7af9c979a7c43babbe31Bob Halley if (strcasecmp(cfg_obj_asstring(type), "response") == 0) {

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff str = cfg_obj_asstring(cfg_tuple_get(value, "mode"));

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff break;

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff }

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff }

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff if (strcasecmp(str, "fail") == 0) {

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff check = DNS_RESOLVER_CHECKNAMES |

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff DNS_RESOLVER_CHECKNAMESFAIL;

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff view->checknames = ISC_TRUE;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence } else if (strcasecmp(str, "warn") == 0) {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson check = DNS_RESOLVER_CHECKNAMES;

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff view->checknames = ISC_FALSE;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson } else if (strcasecmp(str, "ignore") == 0) {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson check = 0;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->checknames = ISC_FALSE;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson } else

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(0);

88ba491496daf4463a2c898be8a6c47775a6d048Mark Andrews

88ba491496daf4463a2c898be8a6c47775a6d048Mark Andrews /*

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(get_view_querysource_dispatch(maps, AF_INET, &dispatch4));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(get_view_querysource_dispatch(maps, AF_INET6, &dispatch6));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (dispatch4 == NULL && dispatch6 == NULL) {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson UNEXPECTED_ERROR(__FILE__, __LINE__,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson "unable to obtain neither an IPv4 nor"

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson " an IPv6 dispatch");

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence result = ISC_R_UNEXPECTED;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson goto cleanup;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson }

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(dns_view_createresolver(view, ns_g_taskmgr, 31,

34b394b43e2207e8f8f3703f0402422121455638David Lawrence ns_g_socketmgr, ns_g_timermgr,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson check, ns_g_dispatchmgr,

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff dispatch4, dispatch6));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence /*

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson max_adb_size = 0;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence if (max_cache_size != 0) {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson max_adb_size = max_cache_size / 8;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence if (max_adb_size == 0)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson max_adb_size = 1; /* Force minimum. */

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson }

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson dns_adb_setadbsize(view->adb, max_adb_size);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff /*

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson obj = NULL;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ns_config_get(maps, "lame-ttl", &obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(result == ISC_R_SUCCESS);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff lame_ttl = cfg_obj_asuint32(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (lame_ttl > 1800)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson lame_ttl = 1800;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson dns_resolver_setlamettl(view->resolver, lame_ttl);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson /*

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson obj = NULL;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ns_config_get(maps, "edns-udp-size", &obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson udpsize = cfg_obj_asuint32(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (udpsize < 512)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson udpsize = 512;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (udpsize > 4096)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson udpsize = 4096;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff dns_resolver_setudpsize(view->resolver, (isc_uint16_t)udpsize);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff /*

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff dns_resolver_reset_algorithms(view->resolver);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence disabled = NULL;

16996a04884731d647f43a5eb54f678581f09f68David Lawrence (void)ns_config_get(maps, "disable-algorithms", &disabled);

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews if (disabled != NULL) {

16996a04884731d647f43a5eb54f678581f09f68David Lawrence for (element = cfg_list_first(disabled);

16996a04884731d647f43a5eb54f678581f09f68David Lawrence element != NULL;

16996a04884731d647f43a5eb54f678581f09f68David Lawrence element = cfg_list_next(element))

ed019cabc1cc75d4412010c331876e4ae5080a4dDavid Lawrence CHECK(disable_algorithms(cfg_listelt_value(element),

ed019cabc1cc75d4412010c331876e4ae5080a4dDavid Lawrence view->resolver));

16996a04884731d647f43a5eb54f678581f09f68David Lawrence }

600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence

600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence /*

16996a04884731d647f43a5eb54f678581f09f68David Lawrence forwardtype = NULL;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff forwarders = NULL;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff (void)ns_config_get(maps, "forward", &forwardtype);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff (void)ns_config_get(maps, "forwarders", &forwarders);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff if (forwarders != NULL)

fc024be774c7cdee938da018aa3994be746e36deDavid Lawrence CHECK(configure_forward(config, view, dns_rootname,

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff forwarders, forwardtype));

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff /*

6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson alternates = NULL;

6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson (void)ns_config_get(maps, "dual-stack-servers", &alternates);

6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson if (alternates != NULL)

6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson CHECK(configure_alternates(config, view, alternates));

6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff /*

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff if (view->rdclass == dns_rdataclass_in && view->hints == NULL)

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff dns_view_sethints(view, ns_g_server->in_roothints);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff /*

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff if (view->hints == NULL) {

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews dns_zone_t *rootzone = NULL;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff (void)dns_view_findzone(view, dns_rootname, &rootzone);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff if (rootzone != NULL) {

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff dns_zone_detach(&rootzone);

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews need_hints = ISC_FALSE;

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews }

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews if (need_hints)

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence NS_LOGMODULE_SERVER, ISC_LOG_WARNING,

16996a04884731d647f43a5eb54f678581f09f68David Lawrence "no root hints for view '%s'",

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff view->name);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff }

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff /*

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff ring = NULL;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff CHECK(ns_tsigkeyring_fromconfig(config, vconfig, view->mctx, &ring));

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff dns_view_setkeyring(view, ring);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff /*

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff {

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff cfg_obj_t *peers = NULL;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff cfg_listelt_t *element;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff dns_peerlist_t *newpeers = NULL;

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews (void)ns_config_get(cfgmaps, "server", &peers);

fa460c223a69449eaac67ddb6abafe74f5e1ff02Michael Graff CHECK(dns_peerlist_new(mctx, &newpeers));

79eec6934923f97a61edb8dbe2641ce56dc30085Bob Halley for (element = cfg_list_first(peers);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff element != NULL;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence element = cfg_list_next(element))

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff {

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews cfg_obj_t *cpeer = cfg_listelt_value(element);

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff dns_peer_t *peer;

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff CHECK(configure_peer(cpeer, mctx, &peer));

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff dns_peerlist_addpeer(newpeers, peer);

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff dns_peer_detach(&peer);

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff }

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff dns_peerlist_detach(&view->peers);

47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence view->peers = newpeers; /* Transfer ownership. */

47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence }

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff /*

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff {

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff cfg_obj_t *rrsetorder = NULL;

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff cfg_listelt_t *element;

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff

94a537e6ab3069f8d34e12e5ea722250be2b89c8Michael Graff (void)ns_config_get(maps, "rrset-order", &rrsetorder);

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews CHECK(dns_order_create(mctx, &order));

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews for (element = cfg_list_first(rrsetorder);

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews element != NULL;

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews element = cfg_list_next(element))

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff {

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence cfg_obj_t *ent = cfg_listelt_value(element);

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff CHECK(configure_order(order, ent));

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff }

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff if (view->order != NULL)

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff dns_order_detach(&view->order);

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff dns_order_attach(order, &view->order);

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff dns_order_detach(&order);

6324997211a5e2d82528dcde98e8981190a35faeMichael Graff }

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews /*

79eec6934923f97a61edb8dbe2641ce56dc30085Bob Halley dns_aclenv_copy(&view->aclenv, &ns_g_server->aclenv);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews /*

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington CHECK(configure_view_acl(vconfig, config, "match-clients", actx,

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington ns_g_mctx, &view->matchclients));

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews CHECK(configure_view_acl(vconfig, config, "match-destinations", actx,

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews ns_g_mctx, &view->matchdestinations));

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews /*

8d3e74b1683f714a484bbcf73249e8ee470e36d7Mark Andrews obj = NULL;

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington (void) ns_config_get(maps, "match-recursive-only", &obj);

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington if (obj != NULL && cfg_obj_asboolean(obj))

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington view->matchrecursiveonly = ISC_TRUE;

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington else

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington view->matchrecursiveonly = ISC_FALSE;

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington /*

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington obj = NULL;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence result = ns_config_get(maps, "recursion", &obj);

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington INSIST(result == ISC_R_SUCCESS);

5d83b561ad7eb84885a8ec63dee4c51b335f067aBrian Wellington view->recursion = cfg_obj_asboolean(obj);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews obj = NULL;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ns_config_get(maps, "auth-nxdomain", &obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->auth_nxdomain = cfg_obj_asboolean(obj);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence obj = NULL;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews result = ns_config_get(maps, "minimal-responses", &obj);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->minimalresponses = cfg_obj_asboolean(obj);

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews obj = NULL;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews result = ns_config_get(maps, "transfer-format", &obj);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson str = cfg_obj_asstring(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (strcasecmp(str, "many-answers") == 0)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->transfer_format = dns_many_answers;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson else if (strcasecmp(str, "one-answer") == 0)

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff view->transfer_format = dns_one_answer;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson else

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews INSIST(0);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson /*

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff obj = NULL;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ns_config_get(maps, "additional-from-auth", &obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->additionalfromauth = cfg_obj_asboolean(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (view->recursion && ! view->additionalfromauth) {

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff cfg_obj_log(obj, ns_g_lctx, ISC_LOG_WARNING,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson "'additional-from-auth no' is only supported "

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews "with 'recursion no'");

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff view->additionalfromauth = ISC_TRUE;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson }

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews obj = NULL;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews result = ns_config_get(maps, "additional-from-cache", &obj);

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->additionalfromcache = cfg_obj_asboolean(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (view->recursion && ! view->additionalfromcache) {

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson cfg_obj_log(obj, ns_g_lctx, ISC_LOG_WARNING,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson "'additional-from-cache no' is only supported "

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson "with 'recursion no'");

88ba491496daf4463a2c898be8a6c47775a6d048Mark Andrews view->additionalfromcache = ISC_TRUE;

88ba491496daf4463a2c898be8a6c47775a6d048Mark Andrews }

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(configure_view_acl(vconfig, config, "allow-query",

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson actx, ns_g_mctx, &view->queryacl));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (strcmp(view->name, "_bind") != 0)

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(configure_view_acl(vconfig, config, "allow-recursion",

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson actx, ns_g_mctx, &view->recursionacl));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson /*

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (!view->recursion && view->recursionacl != NULL &&

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson (view->recursionacl->length != 1 ||

34b394b43e2207e8f8f3703f0402422121455638David Lawrence view->recursionacl->elements[0].type != dns_aclelementtype_any ||

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->recursionacl->elements[0].negative != ISC_TRUE)) {

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff const char *forview = " for view ";

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson const char *viewname = view->name;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson if (!strcmp(view->name, "_bind") ||

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews !strcmp(view->name, "_default")) {

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence forview = "";

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson viewname = "";

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson }

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence isc_log_write(ns_g_lctx, NS_LOGCATEGORY_GENERAL,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson NS_LOGMODULE_SERVER, ISC_LOG_WARNING,

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson "both \"recursion no;\" and \"allow-recursion\" "

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson "active%s%s", forview, viewname);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson }

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson CHECK(configure_view_acl(vconfig, config, "sortlist",

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson actx, ns_g_mctx, &view->sortlist));

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson obj = NULL;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ns_config_get(maps, "request-ixfr", &obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(result == ISC_R_SUCCESS);

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews view->requestixfr = cfg_obj_asboolean(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson obj = NULL;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ns_config_get(maps, "provide-ixfr", &obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->provideixfr = cfg_obj_asboolean(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson obj = NULL;

40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence result = ns_config_get(maps, "dnssec-enable", &obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson INSIST(result == ISC_R_SUCCESS);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson view->enablednssec = cfg_obj_asboolean(obj);

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews obj = NULL;

3ddd92da6651bc72aa79a04195ad389d86fd1a66Andreas Gustafsson result = ns_config_get(maps, "dnssec-lookaside", &obj);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff if (result == ISC_R_SUCCESS) {

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews const char *dlv;

54c26ab21c61c6d6b1e484bb88dc3ac263845d17Mark Andrews isc_buffer_t b;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dlv = cfg_obj_asstring(obj);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_buffer_init(&b, dlv, strlen(dlv));

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence isc_buffer_add(&b, strlen(dlv));

a98551ef592e9be6008e0141ceeb32efd586c5efMark Andrews CHECK(dns_name_fromtext(dns_fixedname_name(&view->dlv_fixed),

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews &b, dns_rootname, ISC_TRUE, NULL));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->dlv = dns_fixedname_name(&view->dlv_fixed);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews } else

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->dlv = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff /*

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (view->enablednssec) {

fe47f41b13620bfafc4f8cf65d5df24f1e568764Bob Halley CHECK(configure_view_dnsseckeys(vconfig, config, mctx,

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews &view->secroots));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews dns_resolver_resetmustbesecure(view->resolver);

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence obj = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = ns_config_get(maps, "dnssec-must-be-secure", &obj);

fe47f41b13620bfafc4f8cf65d5df24f1e568764Bob Halley if (result == ISC_R_SUCCESS)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews CHECK(mustbesecure(obj, view->resolver));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews }

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews obj = NULL;

0e8cf9a887c70f96ac448b06c069d90b830215ccMark Andrews result = ns_config_get(maps, "max-cache-ttl", &obj);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews INSIST(result == ISC_R_SUCCESS);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->maxcachettl = cfg_obj_asuint32(obj);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews obj = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = ns_config_get(maps, "max-ncache-ttl", &obj);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews INSIST(result == ISC_R_SUCCESS);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->maxncachettl = cfg_obj_asuint32(obj);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (view->maxncachettl > 7 * 24 * 3600)

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff view->maxncachettl = 7 * 24 * 3600;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews obj = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = ns_config_get(maps, "preferred-glue", &obj);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (result == ISC_R_SUCCESS) {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews str = cfg_obj_asstring(obj);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (strcasecmp(str, "a") == 0)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->preferred_glue = dns_rdatatype_a;

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff else if (strcasecmp(str, "aaaa") == 0)

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->preferred_glue = dns_rdatatype_aaaa;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews else

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews view->preferred_glue = 0;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews } else

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff view->preferred_glue = 0;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews obj = NULL;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews result = ns_config_get(maps, "root-delegation-only", &obj);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (result == ISC_R_SUCCESS) {

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff dns_view_setrootdelonly(view, ISC_TRUE);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews if (!cfg_obj_isvoid(obj)) {

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews dns_fixedname_t fixed;

fe47f41b13620bfafc4f8cf65d5df24f1e568764Bob Halley dns_name_t *name;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews isc_buffer_t b;

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff char *str;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews cfg_obj_t *exclude;

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews

3ddd814a97de1d152ba0913c592d6e6dc83d38a6Michael Graff dns_fixedname_init(&fixed);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews name = dns_fixedname_name(&fixed);

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews for (element = cfg_list_first(obj);

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews element != NULL;

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews element = cfg_list_next(element)) {

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews exclude = cfg_listelt_value(element);

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews str = cfg_obj_asstring(exclude);

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews isc_buffer_init(&b, str, strlen(str));

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews isc_buffer_add(&b, strlen(str));

5d51e67c3b4f35c1be742574aacc1d88fe6ed444Mark Andrews CHECK(dns_name_fromtext(name, &b, dns_rootname,

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence ISC_FALSE, NULL));

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews CHECK(dns_view_excludedelegationonly(view,

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews name));

f0ff273b530afa730025e1c5ad311950f7ff4328Mark Andrews }

f0ff273b530afa730025e1c5ad311950f7ff4328Mark Andrews }

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews } else

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews dns_view_setrootdelonly(view, ISC_FALSE);

419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence result = ISC_R_SUCCESS;

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence cleanup:

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews if (dispatch4 != NULL)

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews dns_dispatch_detach(&dispatch4);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (dispatch6 != NULL)

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence dns_dispatch_detach(&dispatch6);

8abddcd3f24476b945419659e7cb73bcb970886bDavid Lawrence if (order != NULL)

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews dns_order_detach(&order);

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews if (cmctx != NULL)

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews isc_mem_detach(&cmctx);

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews

7c0378745269fe49a05904935afc42b85528f53aDavid Lawrence if (cache != NULL)

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews dns_cache_detach(&cache);

7d62ddffbb4d1cc97b8d80b7ee4944554a57523eMark Andrews