lib/dns/tkey.c

1 /*	$NetBSD: tkey.c,v 1.1 2024/02/18 20:57:34 christos Exp $	*/
43 #include <dns/tkey.h>
369 		tkey_log("process_dhtkey: tkey-dhkey not defined");
520 	 * accept with tkey-gssapi-credential, or you have to
521 	 * configure a specific keytab (with tkey-gssapi-keytab) in
525 		tkey_log("process_gsstkey(): no tkey-gssapi-credential "
526 			 "or tkey-gssapi-keytab configured");
817 			tkey_log("dns_tkey_processquery: tkey-domain not set");
954 buildquery(dns_message_t *msg, const dns_name_t *name, dns_rdata_tkey_t *tkey,
966 	REQUIRE(tkey != NULL);
975 	len = 16 + tkey->algorithm.length + tkey->keylen + tkey->otherlen;
980 				    dns_rdatatype_tkey, tkey, dynbuf));
1044 	dns_rdata_tkey_t tkey;
1061 	tkey.common.rdclass = dns_rdataclass_any;
1062 	tkey.common.rdtype = dns_rdatatype_tkey;
1063 	ISC_LINK_INIT(&tkey.common, link);
1064 	tkey.mctx = msg->mctx;
1065 	dns_name_init(&tkey.algorithm, NULL);
1066 	dns_name_clone(algorithm, &tkey.algorithm);
1068 	tkey.inception = now;
1069 	tkey.expire = now + lifetime;
1070 	tkey.mode = DNS_TKEYMODE_DIFFIEHELLMAN;
1077 	tkey.error = 0;
1078 	tkey.key = r.base;
1079 	tkey.keylen = r.length;
1080 	tkey.other = NULL;
1081 	tkey.otherlen = 0;
1083 	RETERR(buildquery(msg, name, &tkey, false));
1120 	dns_rdata_tkey_t tkey;
1141 	tkey.common.rdclass = dns_rdataclass_any;
1142 	tkey.common.rdtype = dns_rdatatype_tkey;
1143 	ISC_LINK_INIT(&tkey.common, link);
1144 	tkey.mctx = NULL;
1145 	dns_name_init(&tkey.algorithm, NULL);
1148 		dns_name_clone(DNS_TSIG_GSSAPIMS_NAME, &tkey.algorithm);
1150 		dns_name_clone(DNS_TSIG_GSSAPI_NAME, &tkey.algorithm);
1154 	tkey.inception = now;
1155 	tkey.expire = now + lifetime;
1156 	tkey.mode = DNS_TKEYMODE_GSSAPI;
1157 	tkey.error = 0;
1158 	tkey.key = isc_buffer_base(&token);
1159 	tkey.keylen = isc_buffer_usedlength(&token);
1160 	tkey.other = NULL;
1161 	tkey.otherlen = 0;
1163 	return (buildquery(msg, name, &tkey, win2k));
1168 	dns_rdata_tkey_t tkey;
1173 	tkey.common.rdclass = dns_rdataclass_any;
1174 	tkey.common.rdtype = dns_rdatatype_tkey;
1175 	ISC_LINK_INIT(&tkey.common, link);
1176 	tkey.mctx = msg->mctx;
1177 	dns_name_init(&tkey.algorithm, NULL);
1178 	dns_name_clone(key->algorithm, &tkey.algorithm);
1179 	tkey.inception = tkey.expire = 0;
1180 	tkey.mode = DNS_TKEYMODE_DELETE;
1181 	tkey.error = 0;
1182 	tkey.keylen = tkey.otherlen = 0;
1183 	tkey.key = tkey.other = NULL;
1185 	return (buildquery(msg, &key->name, &tkey, false));
1259 		tkey_log("dns_tkey_processdhresponse: tkey mode invalid "
1398 		tkey_log("dns_tkey_processgssresponse: tkey mode invalid "
1459 		tkey_log("dns_tkey_processdeleteresponse: tkey mode invalid "
1493 	dns_rdata_tkey_t rtkey, qtkey, tkey;
1529 		tkey_log("dns_tkey_processdhresponse: tkey mode invalid "
1551 		tkey.common.rdclass = dns_rdataclass_any;
1552 		tkey.common.rdtype = dns_rdatatype_tkey;
1553 		ISC_LINK_INIT(&tkey.common, link);
1554 		tkey.mctx = NULL;
1555 		dns_name_init(&tkey.algorithm, NULL);
1558 			dns_name_clone(DNS_TSIG_GSSAPIMS_NAME, &tkey.algorithm);
1560 			dns_name_clone(DNS_TSIG_GSSAPI_NAME, &tkey.algorithm);
1563 		tkey.inception = qtkey.inception;
1564 		tkey.expire = qtkey.expire;
1565 		tkey.mode = DNS_TKEYMODE_GSSAPI;
1566 		tkey.error = 0;
1567 		tkey.key = isc_buffer_base(&outtoken);
1568 		tkey.keylen = isc_buffer_usedlength(&outtoken);
1569 		tkey.other = NULL;
1570 		tkey.otherlen = 0;
1573 		RETERR(buildquery(qmsg, tkeyname, &tkey, win2k));