unbound/validator/val_utils.c

49 #include "services/cache/rrset.h"
157 val_find_rrset_signer(struct ub_packed_rrset_key* rrset, uint8_t** sname,
161 		rrset->entry.data;
175  * @param rrset: which rrsigs to look through.
183 val_find_best_signer(struct ub_packed_rrset_key* rrset,
188 		rrset->entry.data;
221 		/* check for the answer rrset */
233 		/* check for the first signed cname/dname rrset */
289 /** return number of rrs in an rrset */
291 rrset_get_count(struct ub_packed_rrset_key* rrset)
294 		rrset->entry.data;
299 /** return TTL of rrset */
301 rrset_get_ttl(struct ub_packed_rrset_key* rrset)
304 		rrset->entry.data;
311         struct ub_packed_rrset_key* rrset, struct ub_packed_rrset_key* keys,
315 	struct packed_rrset_data* d = (struct packed_rrset_data*)rrset->
319 		log_nametypeclass(VERB_ALGO, "verify rrset cached",
320 			rrset->rk.dname, ntohs(rrset->rk.type),
321 			ntohs(rrset->rk.rrset_class));
325 	rrset_check_sec_status(env->rrset_cache, rrset, *env->now);
327 		log_nametypeclass(VERB_ALGO, "verify rrset from cache",
328 			rrset->rk.dname, ntohs(rrset->rk.type),
329 			ntohs(rrset->rk.rrset_class));
332 	log_nametypeclass(VERB_ALGO, "verify rrset", rrset->rk.dname,
333 		ntohs(rrset->rk.type), ntohs(rrset->rk.rrset_class));
334 	sec = dnskeyset_verify_rrset(env, ve, rrset, keys, sigalg, reason);
338 	/* update rrset security status
347 			/* update ttl for rrset to fixed value. */
358 		rrset_update_sec_status(env->rrset_cache, rrset, *env->now);
366         struct ub_packed_rrset_key* rrset, struct key_entry_key* kkey,
369 	/* temporary dnskey rrset-key */
380 	sec = val_verify_rrset(env, ve, rrset, &dnskey, kd->algo, reason);
457 	/* as long as this is false, we can consider this DS rrset to be
458 	 * equivalent to no DS rrset. */
707 val_rrset_wildcard(struct ub_packed_rrset_key* rrset, uint8_t** wc)
709 	struct packed_rrset_data* d = (struct packed_rrset_data*)rrset->
727 	 * labels, then this rrset was synthesized from a wildcard.
729 	wn = rrset->rk.dname;
730 	wl = rrset->rk.dname_len;
766 /** see if rrset has signer name as one of the rrsig signers */
768 rrset_has_signer(struct ub_packed_rrset_key* rrset, uint8_t* name, size_t len)
770 	struct packed_rrset_data* d = (struct packed_rrset_data*)rrset->
872 			 * However, this rrset is not signed or signed
874 			 * verify this rrset with the keysets of import.
875 			 * But this rrset did not verify.
894 				"non secure rrset",
916 			/* remove this unneeded additional rrset */
1068 	struct ub_packed_rrset_key *rrset = rrset_cache_lookup(
1071 	if(rrset) {
1072 		/* DS rrset exists. Return it to the validator immediately*/
1074 			rrset, region, *env->now);
1075 		lock_rw_unlock(&rrset->entry.lock);
1086 	/* lookup in rrset and negative cache for NSEC/NSEC3 */