nsec3_50.h revision 3398334b3acda24b086957286288ca9852662b12
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews/*
9191b6c9e89ac14c922bbedfcc6c703c0f47e694Tinderbox User * Copyright (C) 2008 Internet Systems Consortium, Inc. ("ISC")
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews *
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * Permission to use, copy, modify, and/or distribute this software for any
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * purpose with or without fee is hereby granted, provided that the above
9191b6c9e89ac14c922bbedfcc6c703c0f47e694Tinderbox User * copyright notice and this permission notice appear in all copies.
024cf50d122a16a3ce190692d3669ecee47c23aaTinderbox User *
024cf50d122a16a3ce190692d3669ecee47c23aaTinderbox User * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews * AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews * PERFORMANCE OF THIS SOFTWARE.
*/
#ifndef GENERIC_NSEC3_50_H
#define GENERIC_NSEC3_50_H 1
/* $Id: nsec3_50.h,v 1.4 2008/09/25 04:02:39 tbox Exp $ */
/*!
* \brief Per RFC 5155 */
#include <isc/iterated_hash.h>
typedef struct dns_rdata_nsec3 {
dns_rdatacommon_t common;
isc_mem_t *mctx;
dns_hash_t hash;
unsigned char flags;
dns_iterations_t iterations;
unsigned char salt_length;
unsigned char next_length;
isc_uint16_t len;
unsigned char *salt;
unsigned char *next;
unsigned char *typebits;
} dns_rdata_nsec3_t;
/*
* The corresponding NSEC3 interval is OPTOUT indicating possible
* insecure delegations.
*/
#define DNS_NSEC3FLAG_OPTOUT 0x01U
/*%
* Non-standard, NSEC3PARAM only.
*
* Create a corresponding NSEC3 chain.
* Once the NSEC3 chain is complete this flag will be removed to signal
* that there is a complete chain.
*
* This flag is automatically set when a NSEC3PARAM record is added to
* the zone via UPDATE.
*
* NSEC3PARAM records with this flag set are supposed to be ignored by
* RFC 5155 compliant nameservers.
*/
#define DNS_NSEC3FLAG_CREATE 0x80U
/*%
* Non-standard, NSEC3PARAM only.
*
* The corresponding NSEC3 set is to be removed once the NSEC chain
* has been generated.
*
* This flag is automatically set when the last active NSEC3PARAM record
* is removed from the zone via UPDATE.
*
* NSEC3PARAM records with this flag set are supposed to be ignored by
* RFC 5155 compliant nameservers.
*/
#define DNS_NSEC3FLAG_REMOVE 0x40U
/*%
* Non-standard, NSEC3PARAM only.
*
* Used to identify NSEC3PARAM records added in this UPDATE request.
*/
#define DNS_NSEC3FLAG_UPDATE 0x20U
/*%
* Non-standard, NSEC3PARAM only.
*
* Prevent the creation of a NSEC chain before the last NSEC3 chain
* is removed. This will normally only be set when the zone is
* transitioning from secure with NSEC3 chains to insecure.
*/
#define DNS_NSEC3FLAG_NONSEC 0x10U
#endif /* GENERIC_NSEC3_50_H */