1/*
2 * validator/autotrust.h - RFC5011 trust anchor management for unbound.
3 *
4 * Copyright (c) 2009, NLnet Labs. All rights reserved.
5 *
6 * This software is open source.
7 *
8 * Redistribution and use in source and binary forms, with or without

--- 7 unchanged lines hidden (view full) ---

16 * this list of conditions and the following disclaimer in the documentation
17 * and/or other materials provided with the distribution.
18 *
19 * Neither the name of the NLNET LABS nor the names of its contributors may
20 * be used to endorse or promote products derived from this software without
21 * specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
24 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
25 * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
26 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE
27 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
30 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
31 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
32 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
33 * POSSIBILITY OF SUCH DAMAGE.
34 */
35
36/**
37 * \file
38 *
39 * Contains autotrust definitions.
40 */
41
42#ifndef VALIDATOR_AUTOTRUST_H
43#define VALIDATOR_AUTOTRUST_H
44#include "util/rbtree.h"
45#include "util/data/packed_rrset.h"
46struct val_anchors;
47struct trust_anchor;
48struct ub_packed_rrset_key;
49struct module_env;
50struct val_env;
51
52/** Autotrust anchor states */
53typedef enum {
54 AUTR_STATE_START = 0,
55 AUTR_STATE_ADDPEND = 1,
56 AUTR_STATE_VALID = 2,
57 AUTR_STATE_MISSING = 3,
58 AUTR_STATE_REVOKED = 4,
59 AUTR_STATE_REMOVED = 5
60} autr_state_t;
61
62/**
63 * Autotrust metadata for one trust anchor key.
64 */
65struct autr_ta {
66 /** next key */
67 struct autr_ta* next;
68 /** the RR */
69 ldns_rr* rr;
70 /** last update of key state (new pending count keeps date the same) */
71 time_t last_change;
72 /** 5011 state */
73 autr_state_t s;
74 /** pending count */
75 uint8_t pending_count;
76 /** fresh TA was seen */
77 uint8_t fetched;

--- 21 unchanged lines hidden (view full) ---

99 */
100 time_t last_queried;
101 /** last successful DNSKEY set */
102 time_t last_success;
103 /** next probe time */
104 time_t next_probe_time;
105
106 /** when to query if !failed */
107 uint32_t query_interval;
108 /** when to retry if failed */
109 uint32_t retry_time;
110
111 /**
112 * How many times did it fail. diagnostic only (has no effect).
113 * Only updated if there was a dnskey rrset that failed to verify.
114 */
115 uint8_t query_failed;
116 /** true if the trust point has been revoked */
117 uint8_t revoked;

--- 28 unchanged lines hidden (view full) ---

146size_t autr_get_num_anchors(struct val_anchors* anchors);
147
148/**
149 * Process probe timer. Add new probes if needed.
150 * @param env: module environment with time, with anchors and with the mesh.
151 * @return time of next probe (in seconds from now).
152 * If 0, then there is no next probe anymore (trust points deleted).
153 */
154uint32_t autr_probe_timer(struct module_env* env);
155
156/** probe tree compare function */
157int probetree_cmp(const void* x, const void* y);
158
159/**
160 * Read autotrust file.
161 * @param anchors: the anchors structure.
162 * @param nm: name of the file (copied).

--- 31 unchanged lines hidden (view full) ---

194
195/**
196 * Debug printout of rfc5011 tracked anchors
197 * @param anchors: all the anchors.
198 */
199void autr_debug_print(struct val_anchors* anchors);
200
201/** callback for query answer to 5011 probe */
202void probe_answer_cb(void* arg, int rcode, ldns_buffer* buf,
203 enum sec_status sec, char* errinf);
204
205#endif /* VALIDATOR_AUTOTRUST_H */