Lines Matching refs:nsec3
120 /** return if nsec3 RR has unknown flags */
143 /** return nsec3 RR algorithm */
155 /** return if nsec3 RR has known algorithm */
171 /** return nsec3 RR iteration count */
186 /** return nsec3 RR salt */
321 * @param filter: nsec3 filter structure.
397 * @param filter: nsec3 filter structure.
483 verbose(VERB_ALGO, "nsec3: keysize %d bits, max iterations %d",
507 if(nsec3_get_algo(h1->nsec3, h1->rr) !=
508 nsec3_get_algo(h2->nsec3, h2->rr)) {
509 if(nsec3_get_algo(h1->nsec3, h1->rr) <
510 nsec3_get_algo(h2->nsec3, h2->rr))
514 if(nsec3_get_iter(h1->nsec3, h1->rr) !=
515 nsec3_get_iter(h2->nsec3, h2->rr)) {
516 if(nsec3_get_iter(h1->nsec3, h1->rr) <
517 nsec3_get_iter(h2->nsec3, h2->rr))
521 (void)nsec3_get_salt(h1->nsec3, h1->rr, &s1, &s1len);
522 (void)nsec3_get_salt(h2->nsec3, h2->rr, &s2, &s2len);
548 log_err("nsec3 hash of unknown algo %d", algo);
574 int algo = nsec3_get_algo(c->nsec3, c->rr);
575 size_t iter = nsec3_get_iter(c->nsec3, c->rr);
578 if(!nsec3_get_salt(c->nsec3, c->rr, &salt, &saltlen))
588 log_err("nsec3 hash of unknown algo %d", algo);
631 struct ub_packed_rrset_key* nsec3, int rr, uint8_t* dname,
641 looki.nsec3 = nsec3;
655 c->nsec3 = nsec3;
731 * @param rrset: nsec3 that matches is returned here.
732 * @param rr: rr number in nsec3 rrset that matches.
753 log_err("nsec3: malloc failure");
846 log_err("nsec3: malloc failure");
926 * Given a List of nsec3 RRs, find and prove the closest encloser to qname.
952 verbose(VERB_ALGO, "nsec3 proveClosestEncloser: could "
960 verbose(VERB_ALGO, "nsec3 proveClosestEncloser: "
975 verbose(VERB_ALGO, "nsec3 proveClosestEncloser: "
979 verbose(VERB_ALGO, "nsec3 proveClosestEncloser: closest "
984 verbose(VERB_ALGO, "nsec3 proveClosestEncloser: closest "
993 verbose(VERB_ALGO, "nsec3: Could not find proof that the "
1010 log_err("nsec3 wildcard: out of memory");
1038 verbose(VERB_ALGO, "nsec3 nameerror proof: failed "
1040 else verbose(VERB_ALGO, "nsec3 nameerror proof: closest "
1041 "nsec3 is an insecure delegation");
1044 log_nametypeclass(VERB_ALGO, "nsec3 nameerror: proven ce=", ce.ce,0,0);
1052 verbose(VERB_ALGO, "nsec3 nameerror proof: could not prove "
1058 verbose(VERB_ALGO, "nsec3 nameerror proof: nc has optout");
1080 log_nametypeclass(VERB_ALGO, "start nsec3 nameerror proof, zone",
1117 * zone, so this nsec3 is from a parent zone.
1125 * If not type DS: matching nsec3 must not be a delegation.
1157 verbose(VERB_ALGO, "proveNodata: closest nsec3 is insecure "
1170 verbose(VERB_ALGO, "nsec3 nodata proof: matching "
1174 verbose(VERB_ALGO, "nsec3 nodata proof: matching "
1180 verbose(VERB_ALGO, "nsec3 nodata proof: matching "
1186 verbose(VERB_ALGO, "nsec3 nodata proof: matching "
1192 verbose(VERB_ALGO, "nsec3 nodata proof: matching "
1204 verbose(VERB_ALGO, "nsec3 nodata proof: no next closer nsec3");
1353 verbose(VERB_ALGO, "nsec3 provenods: NSEC3 is from"
1358 verbose(VERB_ALGO, "nsec3 provenods: NSEC3 has qtype"
1376 verbose(VERB_ALGO, "nsec3 provenods: did not match qname, "
1384 verbose(VERB_ALGO, "nsec3 nods proof: no next closer nsec3");
1395 verbose(VERB_ALGO, "nsec3 provenods: covering NSEC3 was not "