lib/dns/zone.c

434 	uint32_t signatures;
1141 			 .signatures = 10,
6842 						     "retaining signatures.",
6991 		/* Don't add signatures for offline or inactive keys */
7285 	 * Spread out signatures over time if they happen to be
7334 		    i++ > zone->signatures || resign > stop)
7415 	 * Generate maximum life time signatures so that the above loop
7658 	    bool is_bottom_of_zone, dns_diff_t *diff, int32_t *signatures,
7712 		(*signatures)--;
7726 			(*signatures)--;
7797 		(*signatures)--;
7902 		 * the signatures (signing->deleteit), so any record indicating
8322  * Add/remove DNSSEC signatures for the list of "raw" zone changes supplied in
8401 	int32_t signatures;
8487 	 * Spread out signatures over time if they happen to be
8511 	signatures = zone->signatures;
8538 	 * Note that the "signatures" variable is only used here to limit the
8539 	 * amount of work performed.  Actual DNSSEC signatures are only
8542 	while (nsec3chain != NULL && nodes-- > 0 && signatures > 0) {
8669 		 * two signatures.  Additionally there will, in general, be
8675 		signatures -= 4;
8771 	while (nsec3chain != NULL && nodes-- > 0 && signatures > 0) {
8921 			signatures--;
9052 	 * Add / update signatures for the NSEC3 records.
9069 	 * above so we need to update the signatures.
9502 	int32_t signatures;
9577 	 * Spread out signatures over time if they happen to be
9598 	signatures = zone->signatures;
9636 	while (signing != NULL && nodes-- > 0 && signatures > 0) {
9839 			 * If deleting signatures, we need to ensure that
9856 				zonediff.diff, &signatures, zone->mctx));
9889 					 * there is a full set of signatures
9985 	 * Generate maximum life time signatures so that the above loop
10348 	/* See if that key generated any of the signatures */
16701 	 * to it as that would break existing DNSSEC signatures.  However, if
20206 dns_zone_setsignatures(dns_zone_t *zone, uint32_t signatures) {
20210 	 * We treat signatures as a signed value so explicitly
20213 	if (signatures > INT32_MAX) {
20214 		signatures = INT32_MAX;
20215 	} else if (signatures == 0) {
20216 		signatures = 1;
20218 	zone->signatures = signatures;
20224 	return (zone->signatures);
20618  * are any signatures using that algorithm.
21826 		/* Remove any signatures from removed keys.  */