diff options
author | Luke Shumaker <lukeshu@sbcglobal.net> | 2016-10-27 00:45:48 -0400 |
---|---|---|
committer | Luke Shumaker <lukeshu@sbcglobal.net> | 2016-10-27 00:45:48 -0400 |
commit | b4cf43550eca1e6ba39ac9297a072130a70a6570 (patch) | |
tree | 51e666bbc7c48b94575e310540b8f485f0e56e0e /src/grp-resolve/systemd-resolved/resolved-dns-trust-anchor.h | |
parent | f5828cc5def25fa4121c2e432cdd2178400d3c38 (diff) |
./tools/notsd-move
Diffstat (limited to 'src/grp-resolve/systemd-resolved/resolved-dns-trust-anchor.h')
-rw-r--r-- | src/grp-resolve/systemd-resolved/resolved-dns-trust-anchor.h | 43 |
1 files changed, 43 insertions, 0 deletions
diff --git a/src/grp-resolve/systemd-resolved/resolved-dns-trust-anchor.h b/src/grp-resolve/systemd-resolved/resolved-dns-trust-anchor.h new file mode 100644 index 0000000000..9039bd7aa3 --- /dev/null +++ b/src/grp-resolve/systemd-resolved/resolved-dns-trust-anchor.h @@ -0,0 +1,43 @@ +#pragma once + +/*** + This file is part of systemd. + + Copyright 2015 Lennart Poettering + + systemd is free software; you can redistribute it and/or modify it + under the terms of the GNU Lesser General Public License as published by + the Free Software Foundation; either version 2.1 of the License, or + (at your option) any later version. + + systemd is distributed in the hope that it will be useful, but + WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public License + along with systemd; If not, see <http://www.gnu.org/licenses/>. +***/ + +#include "basic-dns/resolved-dns-answer.h" +#include "basic-dns/resolved-dns-rr.h" +#include "systemd-basic/hashmap.h" + +typedef struct DnsTrustAnchor DnsTrustAnchor; + +/* This contains a fixed database mapping domain names to DS or DNSKEY records. */ + +struct DnsTrustAnchor { + Hashmap *positive_by_key; + Set *negative_by_name; + Set *revoked_by_rr; +}; + +int dns_trust_anchor_load(DnsTrustAnchor *d); +void dns_trust_anchor_flush(DnsTrustAnchor *d); + +int dns_trust_anchor_lookup_positive(DnsTrustAnchor *d, const DnsResourceKey* key, DnsAnswer **answer); +int dns_trust_anchor_lookup_negative(DnsTrustAnchor *d, const char *name); + +int dns_trust_anchor_check_revoked(DnsTrustAnchor *d, DnsResourceRecord *dnskey, DnsAnswer *rrs); +int dns_trust_anchor_is_revoked(DnsTrustAnchor *d, DnsResourceRecord *rr); |