From f449f278dd3c70e479a035f50a9bb817a9b433ba Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 17:24:08 +0200 Subject: Adding upstream version 3.2.6. Signed-off-by: Daniel Baumann --- src/knot/dnssec/key_records.h | 54 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) create mode 100644 src/knot/dnssec/key_records.h (limited to 'src/knot/dnssec/key_records.h') diff --git a/src/knot/dnssec/key_records.h b/src/knot/dnssec/key_records.h new file mode 100644 index 0000000..b53ed86 --- /dev/null +++ b/src/knot/dnssec/key_records.h @@ -0,0 +1,54 @@ +/* Copyright (C) 2022 CZ.NIC, z.s.p.o. + + This program is free software: you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation, either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see . + */ + +#pragma once + +#include "contrib/wire_ctx.h" +#include "knot/dnssec/zone-keys.h" +#include "knot/updates/changesets.h" + +void key_records_init(const kdnssec_ctx_t *ctx, key_records_t *r); + +void key_records_from_apex(const zone_node_t *apex, key_records_t *r); + +int key_records_add_rdata(key_records_t *r, uint16_t rrtype, uint8_t *rdata, uint16_t rdlen, uint32_t ttl); + +void key_records_clear(key_records_t *r); + +void key_records_clear_rdatasets(key_records_t *r); + +int key_records_to_changeset(const key_records_t *r, changeset_t *ch, + bool rem, changeset_flag_t chfl); + +int key_records_subtract(key_records_t *r, const key_records_t *against); + +int key_records_intersect(key_records_t *r, const key_records_t *against); + +int key_records_dump(char **buf, size_t *buf_size, const key_records_t *r, bool verbose); + +int key_records_sign(const zone_key_t *key, key_records_t *r, const kdnssec_ctx_t *kctx, knot_time_t *expires); + +// WARNING this modifies 'kctx' with updated timestamp and with zone_keys from r->dnskey +int key_records_verify(key_records_t *r, kdnssec_ctx_t *kctx, knot_time_t timestamp); + +size_t key_records_serialized_size(const key_records_t *r); + +int key_records_serialize(wire_ctx_t *wire, const key_records_t *r); + +int key_records_deserialize(wire_ctx_t *wire, key_records_t *r); + +// Returns now if no records available. +int key_records_last_timestamp(kdnssec_ctx_t *ctx, knot_time_t *last); -- cgit v1.2.3