Lines Matching refs:dnskey
342 rr->dnskey.flags = f; in dns_trust_anchor_load_positive()
343 rr->dnskey.protocol = 3; in dns_trust_anchor_load_positive()
344 rr->dnskey.algorithm = a; in dns_trust_anchor_load_positive()
345 rr->dnskey.key_size = l; in dns_trust_anchor_load_positive()
346 rr->dnskey.key = TAKE_PTR(k); in dns_trust_anchor_load_positive()
652 assert(revoked_dnskey->dnskey.flags & DNSKEY_FLAG_REVOKE); in dns_trust_anchor_check_revoked_one()
662 if (anchor->dnskey.protocol != revoked_dnskey->dnskey.protocol) in dns_trust_anchor_check_revoked_one()
665 if (anchor->dnskey.algorithm != revoked_dnskey->dnskey.algorithm) in dns_trust_anchor_check_revoked_one()
668 if (anchor->dnskey.key_size != revoked_dnskey->dnskey.key_size) in dns_trust_anchor_check_revoked_one()
674 …if (((anchor->dnskey.flags ^ revoked_dnskey->dnskey.flags) | DNSKEY_FLAG_REVOKE) != DNSKEY_FLAG_RE… in dns_trust_anchor_check_revoked_one()
677 … if (memcmp(anchor->dnskey.key, revoked_dnskey->dnskey.key, anchor->dnskey.key_size) != 0) in dns_trust_anchor_check_revoked_one()
711 int dns_trust_anchor_check_revoked(DnsTrustAnchor *d, DnsResourceRecord *dnskey, DnsAnswer *rrs) { in dns_trust_anchor_check_revoked() argument
716 assert(dnskey); in dns_trust_anchor_check_revoked()
722 if (dnskey->key->type != DNS_TYPE_DNSKEY) in dns_trust_anchor_check_revoked()
726 if ((dnskey->dnskey.flags & DNSKEY_FLAG_REVOKE) == 0) in dns_trust_anchor_check_revoked()
732 if (!dns_trust_anchor_knows_domain_positive(d, dns_resource_key_name(dnskey->key))) in dns_trust_anchor_check_revoked()
742 r = dnssec_rrsig_match_dnskey(rrsig, dnskey, true); in dns_trust_anchor_check_revoked()
748 r = dnssec_verify_rrset(rrs, dnskey->key, rrsig, dnskey, USEC_INFINITY, &result); in dns_trust_anchor_check_revoked()
757 r = dns_trust_anchor_check_revoked_one(d, dnskey); in dns_trust_anchor_check_revoked()