| /systemd-251/src/resolve/ |
| D | test-dnssec.c | 112 *rrsig = NULL; in TEST()
149 rrsig = dns_resource_record_new_full(DNS_CLASS_IN, DNS_TYPE_RRSIG, "example.com."); in TEST()
150 assert_se(rrsig); in TEST()
152 rrsig->rrsig.type_covered = DNS_TYPE_MX; in TEST()
153 rrsig->rrsig.algorithm = DNSSEC_ALGORITHM_ED25519; in TEST()
154 rrsig->rrsig.labels = 2; in TEST()
155 rrsig->rrsig.original_ttl = 3600; in TEST()
156 rrsig->rrsig.expiration = 1440021600; in TEST()
157 rrsig->rrsig.inception = 1438207200; in TEST()
158 rrsig->rrsig.key_tag = 3613; in TEST()
[all …]
|
| D | resolved-dns-dnssec.c | 241 DnsResourceRecord *rrsig, in dnssec_rsa_verify() argument
250 assert(rrsig); in dnssec_rsa_verify()
288 rrsig->rrsig.signature, rrsig->rrsig.signature_size, in dnssec_rsa_verify()
453 DnsResourceRecord *rrsig, in dnssec_ecdsa_verify() argument
462 assert(rrsig); in dnssec_ecdsa_verify()
477 if (rrsig->rrsig.signature_size != key_size * 2) in dnssec_ecdsa_verify()
487 rrsig->rrsig.signature, key_size, in dnssec_ecdsa_verify()
488 (uint8_t*) rrsig->rrsig.signature + key_size, key_size, in dnssec_ecdsa_verify()
604 DnsResourceRecord *rrsig, in dnssec_eddsa_verify() argument
618 if (rrsig->rrsig.signature_size != key_size * 2) in dnssec_eddsa_verify()
[all …]
|
| D | resolved-dns-rr.c | 448 free(rr->rrsig.signer); in dns_resource_record_free()
449 free(rr->rrsig.signature); in dns_resource_record_free()
651 return a->rrsig.type_covered == b->rrsig.type_covered && in dns_resource_record_payload_equal()
652 a->rrsig.algorithm == b->rrsig.algorithm && in dns_resource_record_payload_equal()
653 a->rrsig.labels == b->rrsig.labels && in dns_resource_record_payload_equal()
654 a->rrsig.original_ttl == b->rrsig.original_ttl && in dns_resource_record_payload_equal()
655 a->rrsig.expiration == b->rrsig.expiration && in dns_resource_record_payload_equal()
656 a->rrsig.inception == b->rrsig.inception && in dns_resource_record_payload_equal()
657 a->rrsig.key_tag == b->rrsig.key_tag && in dns_resource_record_payload_equal()
658 FIELD_EQUAL(a->rrsig, b->rrsig, signature) && in dns_resource_record_payload_equal()
[all …]
|
| D | resolved-dns-answer.c | 17 dns_resource_record_unref(item->rrsig); in dns_answer_item_free()
110 DnsResourceRecord *rrsig) { in dns_answer_add_raw() argument
132 .rrsig = dns_resource_record_ref(rrsig), in dns_answer_add_raw()
153 item->rrsig); in dns_answer_add_raw_all()
166 DnsResourceRecord *rrsig) { in dns_answer_add() argument
195 if (rrsig) in dns_answer_add()
196 DNS_RR_REPLACE(exist->rrsig, dns_resource_record_ref(rrsig)); in dns_answer_add()
209 return dns_answer_add_raw(a, rr, ifindex, flags, rrsig); in dns_answer_add()
217 r = dns_answer_add(a, item->rr, item->ifindex, item->flags, item->rrsig); in dns_answer_add_all()
230 DnsResourceRecord *rrsig) { in dns_answer_add_extend() argument
[all …]
|
| D | resolved-dns-dnssec.h | 48 int dnssec_rrsig_match_dnskey(DnsResourceRecord *rrsig, DnsResourceRecord *dnskey, bool revoked_ok);
49 int dnssec_key_match_rrsig(const DnsResourceKey *key, DnsResourceRecord *rrsig);
51 int dnssec_verify_rrset(DnsAnswer *answer, const DnsResourceKey *key, DnsResourceRecord *rrsig, Dns…
52 …y, DnsAnswer *validated_dnskeys, usec_t realtime, DnssecResult *result, DnsResourceRecord **rrsig);
|
| D | resolved-dns-answer.h | 34 …DnsResourceRecord *rrsig; /* Optionally, also store RRSIG RR that successfully validates this item… member
56 …(DnsAnswer *a, DnsResourceRecord *rr, int ifindex, DnsAnswerFlags flags, DnsResourceRecord *rrsig);
57 …DnsAnswer **a, DnsResourceRecord *rr, int ifindex, DnsAnswerFlags flags, DnsResourceRecord *rrsig);
80 …, DnsAnswer *source, const DnsResourceKey *key, DnsAnswerFlags or_flags, DnsResourceRecord *rrsig);
81 …o, DnsAnswer **from, const DnsResourceKey *key, DnsAnswerFlags or_flags, DnsResourceRecord *rrsig);
|
| D | resolved-dns-packet.c | 1071 r = dns_packet_append_uint16(p, rr->rrsig.type_covered, NULL); in dns_packet_append_rr()
1075 r = dns_packet_append_uint8(p, rr->rrsig.algorithm, NULL); in dns_packet_append_rr()
1079 r = dns_packet_append_uint8(p, rr->rrsig.labels, NULL); in dns_packet_append_rr()
1083 r = dns_packet_append_uint32(p, rr->rrsig.original_ttl, NULL); in dns_packet_append_rr()
1087 r = dns_packet_append_uint32(p, rr->rrsig.expiration, NULL); in dns_packet_append_rr()
1091 r = dns_packet_append_uint32(p, rr->rrsig.inception, NULL); in dns_packet_append_rr()
1095 r = dns_packet_append_uint16(p, rr->rrsig.key_tag, NULL); in dns_packet_append_rr()
1099 r = dns_packet_append_name(p, rr->rrsig.signer, false, true, NULL); in dns_packet_append_rr()
1103 r = dns_packet_append_blob(p, rr->rrsig.signature, rr->rrsig.signature_size, NULL); in dns_packet_append_rr()
1960 r = dns_packet_read_uint16(p, &rr->rrsig.type_covered, NULL); in dns_packet_read_rr()
[all …]
|
| D | resolved-dns-transaction.c | 2343 if (rr->rrsig.type_covered == DNS_TYPE_DNSKEY) { in dns_transaction_request_dnssec_keys()
2344 … r = dns_name_equal(rr->rrsig.signer, dns_resource_key_name(rr->key)); in dns_transaction_request_dnssec_keys()
2362 … r = dns_name_endswith(dns_resource_key_name(dns_transaction_key(t)), rr->rrsig.signer); in dns_transaction_request_dnssec_keys()
2368 … dnskey = dns_resource_key_new(rr->key->class, DNS_TYPE_DNSKEY, rr->rrsig.signer); in dns_transaction_request_dnssec_keys()
2373 t->id, dns_resource_key_name(rr->key), rr->rrsig.key_tag); in dns_transaction_request_dnssec_keys()
2642 …nd(&t->validated_keys, item->rr, item->ifindex, item->flags|DNS_ANSWER_AUTHENTICATED, item->rrsig); in dns_transaction_validate_dnskey_by_ds()
2928 DnsResourceRecord *rrsig; in dns_transaction_dnskey_authenticated() local
2942 DNS_ANSWER_FOREACH(rrsig, t->answer) { in dns_transaction_dnskey_authenticated()
2945 r = dnssec_key_match_rrsig(rr->key, rrsig); in dns_transaction_dnskey_authenticated()
2958 … r = dns_name_equal(dns_resource_key_name(dns_transaction_key(dt)), rrsig->rrsig.signer); in dns_transaction_dnskey_authenticated()
[all …]
|
| D | resolved-dns-trust-anchor.c | 712 DnsResourceRecord *rrsig; in dns_trust_anchor_check_revoked() local
736 DNS_ANSWER_FOREACH(rrsig, rrs) { in dns_trust_anchor_check_revoked()
739 if (rrsig->key->type != DNS_TYPE_RRSIG) in dns_trust_anchor_check_revoked()
742 r = dnssec_rrsig_match_dnskey(rrsig, dnskey, true); in dns_trust_anchor_check_revoked()
748 r = dnssec_verify_rrset(rrs, dnskey->key, rrsig, dnskey, USEC_INFINITY, &result); in dns_trust_anchor_check_revoked()
|
| D | resolved-dns-cache.c | 917 DnsResourceRecord *rrsig, in answer_add_clamp_ttl() argument
948 if (rrsig) { in answer_add_clamp_ttl()
949 patched_rrsig = dns_resource_record_ref(rrsig); in answer_add_clamp_ttl()
954 rrsig = patched_rrsig; in answer_add_clamp_ttl()
958 r = dns_answer_add_extend(answer, rr, ifindex, answer_flags, rrsig); in answer_add_clamp_ttl()
1077 item->rrsig, in dns_cache_lookup()
|
| D | resolved-dns-stub.c | 139 DnsResourceRecord *rrsig, in reply_add_with_rrsig() argument
146 r = dns_answer_add_extend(reply, rr, ifindex, flags, rrsig); in reply_add_with_rrsig()
150 if (with_rrsig && rrsig) { in reply_add_with_rrsig()
151 r = dns_answer_add_extend(reply, rrsig, ifindex, flags, NULL); in reply_add_with_rrsig()
195 item->rrsig, in dns_stub_collect_answer_by_question()
238 item->rrsig, in dns_stub_collect_answer_by_section()
|
| D | resolved-dns-rr.h | 205 } rrsig; member
|
| D | resolved-mdns.c | 323 … r = dns_answer_add(full_answer, item->rr, item->ifindex, flags, item->rrsig); in mdns_scope_process_query()
|