/macosx-10.9.5/bind9-45.100/bind9/lib/dns/rdata/generic/ |
H A D | nsec3_50.c | 330 dns_rdata_nsec3_t *nsec3 = source; local 336 REQUIRE(nsec3->common.rdtype == type); 337 REQUIRE(nsec3->common.rdclass == rdclass); 338 REQUIRE(nsec3->typebits != NULL || nsec3->len == 0); 339 REQUIRE(nsec3->hash == dns_hash_sha1); 344 RETERR(uint8_tobuffer(nsec3->hash, target)); 345 RETERR(uint8_tobuffer(nsec3->flags, target)); 346 RETERR(uint16_tobuffer(nsec3->iterations, target)); 347 RETERR(uint8_tobuffer(nsec3 373 dns_rdata_nsec3_t *nsec3 = target; local 418 dns_rdata_nsec3_t *nsec3 = source; local [all...] |
/macosx-10.9.5/bind9-45.100/bind9/bin/tests/system/dnssec/ |
H A D | clean.sh | 28 rm -f ns2/single-nsec3.db 33 rm -f ns3/multiple.example.db ns3/nsec3-unknown.example.db ns3/nsec3.example.db 35 rm -f ns3/expired.example.db ns3/update-nsec3.example.db 36 rm -f ns7/multiple.example.bk ns7/nsec3.example.bk ns7/optout.example.bk 38 rm -f ns3/nsec3.nsec3.example.db 39 rm -f ns3/nsec3.optout.example.db 40 rm -f ns3/optout.nsec3.example.db 42 rm -f ns3/secure.nsec3 [all...] |
H A D | tests.sh | 107 $DIG $DIGOPTS +noauth a.nsec3.example. \ 109 $DIG $DIGOPTS +noauth a.nsec3.example. \ 142 $DIG $DIGOPTS a.wild.nsec3.example. @10.53.0.3 a > dig.out.ns3.test$n || ret=1 151 $DIG $DIGOPTS a.wild.nsec3.example. @10.53.0.3 a > dig.out.ns3.test$n || ret=1 160 $DIG $DIGOPTS a.wild.nsec3.example. @10.53.0.3 a > dig.out.ns3.test$n || ret=1 161 $DIG $DIGOPTS a.wild.nsec3.example. @10.53.0.4 a > dig.out.ns4.test$n || ret=1 195 $DIG $DIGOPTS +noauth q.nsec3.example. \ 197 $DIG $DIGOPTS +noauth q.nsec3.example. \ 234 $DIG $DIGOPTS +noauth a.nsec3.example. \ 236 $DIG $DIGOPTS +noauth a.nsec3 [all...] |
/macosx-10.9.5/bind9-45.100/bind9/bin/tests/system/autosign/ |
H A D | clean.sh | 33 rm -f ns3/nsec3.example.db 34 rm -f ns3/nsec3.nsec3.example.db 35 rm -f ns3/nsec3.optout.example.db 36 rm -f ns3/nsec3-to-nsec.example.db 39 rm -f ns3/optout.nsec3.example.db 43 rm -f ns3/secure.nsec3.example.db
|
H A D | tests.sh | 100 $DIG $DIGOPTS +noall +answer nsec3.example. nsec3param @10.53.0.3 > dig.out.ns3.test$n || ret=1 108 $DIG $DIGOPTS +noall +answer nsec3-to-nsec.example. nsec3param @10.53.0.3 > dig.out.ns3.test$n || ret=1 114 echo "I:converting zones from nsec to nsec3" 117 zone nsec3.nsec3.example. 118 update add nsec3.nsec3.example. 3600 NSEC3PARAM 1 0 10 BEEF 120 zone optout.nsec3.example. 121 update add optout.nsec3.example. 3600 NSEC3PARAM 1 1 10 BEEF 123 zone nsec3 [all...] |
/macosx-10.9.5/bind9-45.100/bind9/bin/tests/system/dnssec/ns3/ |
H A D | sign.sh | 76 zone=secure.nsec3.example. 77 infile=secure.nsec3.example.db.in 78 zonefile=secure.nsec3.example.db 89 zone=nsec3.nsec3.example. 90 infile=nsec3.nsec3.example.db.in 91 zonefile=nsec3.nsec3.example.db 102 zone=optout.nsec3 [all...] |
H A D | named.conf | 73 zone "insecure.nsec3.example" { 75 file "insecure.nsec3.example.db"; 90 zone "nsec3.example" { 92 file "nsec3.example.db.signed"; 95 zone "optout.nsec3.example" { 97 file "optout.nsec3.example.db.signed"; 100 zone "nsec3.nsec3.example" { 102 file "nsec3.nsec3 [all...] |
/macosx-10.9.5/bind9-45.100/bind9/lib/dns/ |
H A D | nsec3.c | 36 #include <dns/nsec3.h> 226 dns_rdata_nsec3_t nsec3; local 235 result = dns_rdata_tostruct(rdata, &nsec3, NULL); 239 for (i = 0; i < nsec3.len; i += len) { 240 INSIST(i + 2 <= nsec3.len); 241 window = nsec3.typebits[i]; 242 len = nsec3.typebits[i + 1]; 245 INSIST(i + len <= nsec3.len); 251 present = ISC_TF(bit_isset(&nsec3.typebits[i], 255 dns_rdata_freestruct(&nsec3); 404 match_nsec3param(const dns_rdata_nsec3_t *nsec3, const dns_rdata_nsec3param_t *nsec3param) argument 425 dns_rdata_nsec3_t nsec3; local 521 find_nsec3(dns_rdata_nsec3_t *nsec3, dns_rdataset_t *rdataset, const dns_rdata_nsec3param_t *nsec3param) argument 556 dns_rdata_nsec3_t nsec3; local 1326 dns_rdata_nsec3_t nsec3; local [all...] |
H A D | validator.c | 40 #include <dns/nsec3.h> 286 dns_rdata_nsec3_t nsec3; local 356 (void)dns_rdata_tostruct(&rdata, &nsec3, NULL); 357 if (nsec3.hash != 1) 359 length = isc_iterated_hash(hash, nsec3.hash, 360 nsec3.iterations, nsec3.salt, 361 nsec3.salt_length, 372 if ((nsec3.flags & DNS_NSEC3FLAG_OPTOUT) == 0) 377 scope = memcmp(owner, nsec3 1017 dns_rdata_nsec3_t nsec3; local [all...] |
H A D | private.c | 26 #include <dns/nsec3.h>
|
H A D | rdatalist.c | 29 #include <dns/nsec3.h>
|
H A D | rbtdb.c | 54 #include <dns/nsec3.h> 453 dns_rbt_t * nsec3; member in struct:dns_rbtdb 890 treep = &rbtdb->nsec3; 1565 result = dns_rbt_deletenode(rbtdb->nsec3, node, ISC_FALSE); 2054 * Cache the nsec3 parameters. 2515 INSIST(tree == rbtdb->tree || tree == rbtdb->nsec3); 2566 if (tree == rbtdb->nsec3) 2574 if (tree == rbtdb->nsec3) 2604 return (findnodeintree(rbtdb, rbtdb->nsec3, name, create, nodep)); 3268 dns_rdata_nsec3_t nsec3; local [all...] |
/macosx-10.9.5/bind9-45.100/bind9/bin/tests/system/dnssec/ns2/ |
H A D | sign.sh | 33 for subdomain in secure bogus dynamic keyless nsec3 optout nsec3-unknown \ 34 optout-unknown multiple rsasha256 rsasha512 kskonly update-nsec3 \ 35 auto-nsec auto-nsec3 secure.below-cname ttlpatch expired 134 # Sign the single-nsec3 secure zone with optout 136 zone=single-nsec3. 137 infile=single-nsec3.db.in 138 zonefile=single-nsec3.db 167 # nsec3 chain.
|
/macosx-10.9.5/bind9-45.100/bind9/bin/tests/system/autosign/ns2/ |
H A D | keygen.sh | 27 for subdomain in secure nsec3 optout rsasha256 rsasha512 nsec3-to-nsec oldsigs
|
/macosx-10.9.5/bind9-45.100/bind9/lib/dns/tests/ |
H A D | nsec3_test.c | 28 #include <dns/nsec3.h> 71 iteration_test("testdata/nsec3/1024.db", 150); 72 iteration_test("testdata/nsec3/2048.db", 500); 73 iteration_test("testdata/nsec3/4096.db", 2500); 74 iteration_test("testdata/nsec3/min-1024.db", 150); 75 iteration_test("testdata/nsec3/min-2048.db", 500);
|
/macosx-10.9.5/mDNSResponder-522.92.1/mDNSCore/ |
H A D | anonymous.c | 33 rdataNSEC3 *nsec3 = (rdataNSEC3 *)rr->rdata->u.data; local 44 nsec3->alg = SHA1_DIGEST_TYPE; 45 nsec3->flags = 0; 46 nsec3->iterations = swap16(iter); 47 nsec3->saltLength = 4; 48 tmp = (mDNSu8 *)&nsec3->salt; 64 if (!NSEC3HashName(rr->name, nsec3, AnonData, len, hashName, &hlen)) 263 rdataNSEC3 *nsec3; local 384 nsec3 = (rdataNSEC3 *)nsec3RR->rdata->u.data; 386 if (!NSEC3HashName(nsec3RR->name, nsec3, AnonDat 420 FindMatchingNSEC3ForName(mDNS *const m, CacheRecord **nsec3, const domainname *name) argument [all...] |
H A D | nsec3.c | 19 // nsec3.c: This file contains support functions to validate NSEC3 records for 26 #include "nsec3.h" 57 rdataNSEC3 *nsec3 = (rdataNSEC3 *)rdb->data; local 58 return (nsec3->flags & NSEC3_FLAGS_OPTOUT); 168 // i.e., in both cases the nsec3 records are iterated to find the best match and returned. 186 rdataNSEC3 *nsec3; local 195 nsec3 = (rdataNSEC3 *)rdb->data; 239 if (!NSEC3HashName(name, nsec3, mDNSNULL, 0, hashName, &hlen)) 480 // *.closestEncloser should be covered by some nsec3 which would then prove 704 rdataNSEC3 *nsec3; local [all...] |
H A D | DNSCommon.c | 337 rdataNSEC3 *nsec3 = (rdataNSEC3 *)rdb->data; local 338 mDNSu8 *p = (mDNSu8 *)&nsec3->salt; 343 if (nsec3->saltLength) 348 p += nsec3->saltLength; 458 rdataNSEC3 *nsec3 = (rdataNSEC3 *)rd->data; local 459 const mDNSu8 *p = (mDNSu8 *)&nsec3->salt; 463 DNSSECDigestName(nsec3->alg), nsec3->flags, swap16(nsec3->iterations)); 465 if (!nsec3 1161 NSEC3HashName(const domainname *name, rdataNSEC3 *nsec3, const mDNSu8 *AnonData, int AnonDataLen, const mDNSu8 hash[NSEC3_MAX_HASH_LEN], int *dlen) argument 3270 rdataNSEC3 *nsec3 = (rdataNSEC3 *)ptr; local [all...] |
H A D | nsec.c | 26 #include "nsec3.h" 522 CacheRecord **nsec3 = mDNSNULL; local 564 nsec3 = rp; 571 if (nsec3) 580 rp = nsec3;
|
/macosx-10.9.5/bind9-45.100/bind9/bin/tests/system/autosign/ns3/ |
H A D | keygen.sh | 35 zone=secure.nsec3.example 46 zone=nsec3.nsec3.example 57 zone=optout.nsec3.example 66 # A nsec3 zone (non-optout). 68 zone=nsec3.example 90 zone=nsec3.optout.example 110 # A optout nsec3 zone. 168 zone=nsec3-to-nsec.example
|
/macosx-10.9.5/bind9-45.100/bind9/bin/tools/ |
H A D | nsec3hash.c | 35 #include <dns/nsec3.h>
|
/macosx-10.9.5/bind9-45.100/bind9/contrib/zkt/ |
H A D | zconf.h | 82 # define NSEC3 0 /* by default nsec3 is off */ 166 nsec3_t nsec3; /* 0 == off; 1 == on; 2 == on with optout */ member in struct:zconf
|
H A D | zconf.c | 181 { "NSEC3", 100, last, CONF_NSEC3, &def.nsec3 }, 271 set_varptr ("nsec3", &cp->nsec3, cp2 ? &cp2->nsec3: NULL);
|
/macosx-10.9.5/bind9-45.100/bind9/bin/dnssec/ |
H A D | dnssec-signzone.c | 74 #include <dns/nsec3.h> 2321 dns_rdata_nsec3_t nsec3; local 2374 result = dns_rdata_tostruct(&rdata, &nsec3, NULL); 2376 if (exists && nsec3.hash == hashalg && 2377 nsec3.iterations == iterations && 2378 nsec3.salt_length == salt_length && 2379 !memcmp(nsec3.salt, salt, salt_length)) 2640 * Generate the nsec3 records. 3011 dns_rdata_nsec3_t nsec3; local 3073 result = dns_rdata_tostruct(&rdata, &nsec3, NUL [all...] |
/macosx-10.9.5/bind9-45.100/bind9/lib/dns/win32/ |
H A D | libdns.mak | 162 -@erase "$(INTDIR)\nsec3.obj"
290 "$(INTDIR)\nsec3.obj" \
454 -@erase "$(INTDIR)\nsec3.obj"
455 -@erase "$(INTDIR)\nsec3.sbr"
626 "$(INTDIR)\nsec3.sbr" \
721 "$(INTDIR)\nsec3.obj" \
1355 SOURCE=..\nsec3.c
1360 "$(INTDIR)\nsec3.obj" : $(SOURCE) "$(INTDIR)"
1367 "$(INTDIR)\nsec3.obj" "$(INTDIR)\nsec3 [all...] |