dist/validator/val_utils.c

342 	uint8_t* sigalg, char** reason, sldns_ede_code *reason_bogus,
368 	sec = dnskeyset_verify_rrset(env, ve, rrset, keys, sigalg, reason,
402 	char** reason, sldns_ede_code *reason_bogus,
417 	sec = val_verify_rrset(env, ve, rrset, &dnskey, kd->algo, reason,
426         struct ub_packed_rrset_key* ds_rrset, size_t ds_idx, char** reason,
469 			i, reason, reason_bogus, LDNS_SECTION_ANSWER, qstate);
481 			reason, "no keys have a DS");
483 		*reason = "DS hash mismatches key";
484 	else if(!*reason)
485 		*reason = "keyset not secured by DNSKEY that matches DS";
509 	struct ub_packed_rrset_key* ds_rrset, uint8_t* sigalg, char** reason,
524 		*reason = "DNSKEY RRset did not match DS RRset by name";
547 			ds_rrset, i, reason, reason_bogus, qstate);
583 		algo_needs_reason(env, alg, reason, "missing verification of "
592 	struct ub_packed_rrset_key* ds_rrset, int downprot, char** reason,
597 		dnskey_rrset, ds_rrset, downprot?sigalg:NULL, reason,
610 			rrset_get_ttl(ds_rrset), *reason_bogus, *reason,
615 		BOGUS_KEY_TTL, *reason_bogus, *reason, *env->now);
622 	struct ub_packed_rrset_key* ta_dnskey, uint8_t* sigalg, char** reason,
637 		*reason = "DNSKEY RRset did not match DS RRset by name";
647 		*reason = "DNSKEY RRset did not match anchor RRset by name";
673 			ta_ds, i, reason, reason_bogus, qstate);
713 			ta_dnskey, i, reason, reason_bogus, LDNS_SECTION_ANSWER, qstate);
740 		algo_needs_reason(env, alg, reason, "missing verification of "
751 	char** reason, sldns_ede_code *reason_bogus, struct module_qstate* qstate)
756 		downprot?sigalg:NULL, reason, reason_bogus, qstate);
767 			rrset_get_ttl(dnskey_rrset), *reason_bogus, *reason,
772 		BOGUS_KEY_TTL, *reason_bogus, *reason, *env->now);
1164 int val_has_signed_nsecs(struct reply_info* rep, char** reason)
1180 		*reason = "no DNSSEC records";
1182 		*reason = "no signatures over NSECs";
1183 	else	*reason = "no signatures over NSEC3s";