lib/dns/zone.c

439 	uint32_t signatures;
1136 			 .signatures = 10,
6949 						     "retaining signatures.",
7097 		/* Don't add signatures for offline or inactive keys */
7391 	 * Spread out signatures over time if they happen to be
7440 		    i++ > zone->signatures || resign > stop)
7521 	 * Generate maximum life time signatures so that the above loop
7764 	    int32_t *signatures, isc_mem_t *mctx) {
7817 		(*signatures)--;
7831 			(*signatures)--;
7902 		(*signatures)--;
8007 		 * the signatures (signing->deleteit), so any record indicating
8427  * Add/remove DNSSEC signatures for the list of "raw" zone changes supplied in
8506 	int32_t signatures;
8592 	 * Spread out signatures over time if they happen to be
8616 	signatures = zone->signatures;
8643 	 * Note that the "signatures" variable is only used here to limit the
8644 	 * amount of work performed.  Actual DNSSEC signatures are only
8647 	while (nsec3chain != NULL && nodes-- > 0 && signatures > 0) {
8774 		 * two signatures.  Additionally there will, in general, be
8780 		signatures -= 4;
8876 	while (nsec3chain != NULL && nodes-- > 0 && signatures > 0) {
9026 			signatures--;
9157 	 * Add / update signatures for the NSEC3 records.
9174 	 * above so we need to update the signatures.
9508 	int32_t signatures;
9583 	 * Spread out signatures over time if they happen to be
9604 	signatures = zone->signatures;
9633 	while (signing != NULL && nodes-- > 0 && signatures > 0) {
9845 			 * If deleting signatures, we need to ensure that
9862 				zonediff.diff, &signatures, zone->mctx));
9895 					 * there is a full set of signatures
9991 	 * Generate maximum life time signatures so that the above loop
10354 	/* See if that key generated any of the signatures */
16661 	 * to it as that would break existing DNSSEC signatures.  However, if
20126 dns_zone_setsignatures(dns_zone_t *zone, uint32_t signatures) {
20130 	 * We treat signatures as a signed value so explicitly
20133 	if (signatures > INT32_MAX) {
20134 		signatures = INT32_MAX;
20135 	} else if (signatures == 0) {
20136 		signatures = 1;
20138 	zone->signatures = signatures;
20144 	return (zone->signatures);
20596  * are any signatures using that algorithm.
21764 		/* Remove any signatures from removed keys.  */