tsig.h File Reference

#include <isc/lang.h>
#include <isc/refcount.h>
#include <isc/rwlock.h>
#include <isc/stdio.h>
#include <isc/stdtime.h>
#include <dns/types.h>
#include <dns/name.h>
#include <dst/dst.h>

Go to the source code of this file.

Data Structures
struct	dns_tsig_keyring
struct	dns_tsigkey
Defines
#define	DNS_TSIG_H   1
#define	DNS_TSIG_HMACMD5_NAME   dns_tsig_hmacmd5_name
#define	DNS_TSIG_GSSAPI_NAME   dns_tsig_gssapi_name
#define	DNS_TSIG_GSSAPIMS_NAME   dns_tsig_gssapims_name
#define	DNS_TSIG_HMACSHA1_NAME   dns_tsig_hmacsha1_name
#define	DNS_TSIG_HMACSHA224_NAME   dns_tsig_hmacsha224_name
#define	DNS_TSIG_HMACSHA256_NAME   dns_tsig_hmacsha256_name
#define	DNS_TSIG_HMACSHA384_NAME   dns_tsig_hmacsha384_name
#define	DNS_TSIG_HMACSHA512_NAME   dns_tsig_hmacsha512_name
#define	DNS_TSIG_FUDGE   300
	Default fudge value.
#define	dns_tsigkey_identity(tsigkey)
Functions
ISC_LANG_BEGINDECLS isc_result_t	dns_tsigkey_create (dns_name_t *name, dns_name_t *algorithm, unsigned char *secret, int length, isc_boolean_t generated, dns_name_t *creator, isc_stdtime_t inception, isc_stdtime_t expire, isc_mem_t *mctx, dns_tsig_keyring_t *ring, dns_tsigkey_t **key)
isc_result_t	dns_tsigkey_createfromkey (dns_name_t *name, dns_name_t *algorithm, dst_key_t *dstkey, isc_boolean_t generated, dns_name_t *creator, isc_stdtime_t inception, isc_stdtime_t expire, isc_mem_t *mctx, dns_tsig_keyring_t *ring, dns_tsigkey_t **key)
	Creates a tsig key structure and saves it in the keyring. If key is not NULL, *key will contain a copy of the key. The keys validity period is specified by (inception, expire), and will not expire if inception == expire. If the key was generated, the creating identity, if there is one, should be in the creator parameter. Specifying an unimplemented algorithm will cause failure only if dstkey != NULL; this allows a transient key with an invalid algorithm to exist long enough to generate a BADKEY response.
void	dns_tsigkey_attach (dns_tsigkey_t *source, dns_tsigkey_t **targetp)
	Attach '*targetp' to 'source'.
void	dns_tsigkey_detach (dns_tsigkey_t **keyp)
	Detaches from the tsig key structure pointed to by '*key'.
void	dns_tsigkey_setdeleted (dns_tsigkey_t *key)
	Prevents this key from being used again. It will be deleted when no references exist.
isc_result_t	dns_tsig_sign (dns_message_t *msg)
	Generates a TSIG record for this message.
isc_result_t	dns_tsig_verify (isc_buffer_t *source, dns_message_t *msg, dns_tsig_keyring_t *ring1, dns_tsig_keyring_t *ring2)
	Verifies the TSIG record in this message.
isc_result_t	dns_tsigkey_find (dns_tsigkey_t **tsigkey, dns_name_t *name, dns_name_t *algorithm, dns_tsig_keyring_t *ring)
	Returns the TSIG key corresponding to this name and (possibly) algorithm. Also increments the key's reference counter.
isc_result_t	dns_tsigkeyring_create (isc_mem_t *mctx, dns_tsig_keyring_t **ringp)
	Create an empty TSIG key ring.
isc_result_t	dns_tsigkeyring_add (dns_tsig_keyring_t *ring, dns_name_t *name, dns_tsigkey_t *tkey)
	Place a TSIG key onto a key ring.
void	dns_tsigkeyring_attach (dns_tsig_keyring_t *source, dns_tsig_keyring_t **target)
void	dns_tsigkeyring_detach (dns_tsig_keyring_t **ringp)
isc_result_t	dns_tsigkeyring_dumpanddetach (dns_tsig_keyring_t **ringp, FILE *fp)
	Destroy a TSIG key ring.
void	dns_keyring_restore (dns_tsig_keyring_t *ring, FILE *fp)
Variables
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_hmacmd5_name
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_gssapi_name
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_gssapims_name
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_hmacsha1_name
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_hmacsha224_name
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_hmacsha256_name
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_hmacsha384_name
LIBDNS_EXTERNAL_DATA dns_name_t *	dns_tsig_hmacsha512_name

---

Detailed Description

Definition in file tsig.h.

---

Define Documentation

#define DNS_TSIG_H   1

Definition at line 21 of file tsig.h.

#define DNS_TSIG_HMACMD5_NAME   dns_tsig_hmacmd5_name

Definition at line 40 of file tsig.h.

Referenced by dash_option(), dns_tsigkey_create(), dns_tsigkey_createfromkey(), dst_alg_fromname(), evaluate_key(), parse_hmac(), process_dhtkey(), setup_file_key(), setup_keyfile(), and setup_keystr().

#define DNS_TSIG_GSSAPI_NAME   dns_tsig_gssapi_name

Definition at line 42 of file tsig.h.

Referenced by dns_tkey_buildgssquery(), dns_tkey_gssnegotiate(), dns_tkey_processgssresponse(), dns_tsigkey_createfromkey(), dst_alg_fromname(), and process_gsstkey().

#define DNS_TSIG_GSSAPIMS_NAME   dns_tsig_gssapims_name

Definition at line 44 of file tsig.h.

Referenced by dns_tkey_buildgssquery(), dns_tkey_gssnegotiate(), dns_tsigkey_createfromkey(), dst_alg_fromname(), and process_gsstkey().

#define DNS_TSIG_HMACSHA1_NAME   dns_tsig_hmacsha1_name

Definition at line 46 of file tsig.h.

Referenced by dns_tsigkey_create(), dns_tsigkey_createfromkey(), dst_alg_fromname(), parse_hmac(), setup_file_key(), and setup_keyfile().

#define DNS_TSIG_HMACSHA224_NAME   dns_tsig_hmacsha224_name

Definition at line 48 of file tsig.h.

Referenced by dns_tsigkey_create(), dns_tsigkey_createfromkey(), dst_alg_fromname(), parse_hmac(), setup_file_key(), and setup_keyfile().

#define DNS_TSIG_HMACSHA256_NAME   dns_tsig_hmacsha256_name

Definition at line 50 of file tsig.h.

Referenced by dns_tsigkey_create(), dns_tsigkey_createfromkey(), dst_alg_fromname(), parse_hmac(), setup_file_key(), and setup_keyfile().

#define DNS_TSIG_HMACSHA384_NAME   dns_tsig_hmacsha384_name

Definition at line 52 of file tsig.h.

Referenced by dns_tsigkey_create(), dns_tsigkey_createfromkey(), dst_alg_fromname(), parse_hmac(), setup_file_key(), and setup_keyfile().

#define DNS_TSIG_HMACSHA512_NAME   dns_tsig_hmacsha512_name

Definition at line 54 of file tsig.h.

Referenced by dns_tsigkey_create(), dns_tsigkey_createfromkey(), dst_alg_fromname(), parse_hmac(), setup_file_key(), and setup_keyfile().

#define DNS_TSIG_FUDGE   300

Default fudge value.

Definition at line 59 of file tsig.h.

Referenced by dns_dnssec_signmessage(), and dns_tsig_sign().

#define dns_tsigkey_identity

(

tsigkey

)

Value:

((tsigkey) == NULL ? NULL : \
         (tsigkey)->generated ? ((tsigkey)->creator) : \
         (&((tsigkey)->name)))

Definition at line 92 of file tsig.h.

Referenced by client_request(), dns_message_signer(), dns_zone_notifyreceive(), ns_client_isself(), and process_deletetkey().

---

Function Documentation

ISC_LANG_BEGINDECLS isc_result_t dns_tsigkey_create	(	dns_name_t *	name,
		dns_name_t *	algorithm,
		unsigned char *	secret,
		int	length,
		isc_boolean_t	generated,
		dns_name_t *	creator,
		isc_stdtime_t	inception,
		isc_stdtime_t	expire,
		isc_mem_t *	mctx,
		dns_tsig_keyring_t *	ring,
		dns_tsigkey_t **	key
	)

Definition at line 715 of file tsig.c.

References DNS_KEYOWNER_ENTITY, DNS_KEYPROTO_DNSSEC, dns_name_equal(), DNS_R_BADALG, DNS_TSIG_HMACMD5_NAME, DNS_TSIG_HMACSHA1_NAME, DNS_TSIG_HMACSHA224_NAME, DNS_TSIG_HMACSHA256_NAME, DNS_TSIG_HMACSHA384_NAME, DNS_TSIG_HMACSHA512_NAME, dns_tsigkey_createfromkey(), DST_ALG_HMACMD5, DST_ALG_HMACSHA1, DST_ALG_HMACSHA224, DST_ALG_HMACSHA256, DST_ALG_HMACSHA384, DST_ALG_HMACSHA512, dst_key_free(), dst_key_frombuffer(), isc_buffer_add, isc_buffer_init, ISC_R_SUCCESS, and REQUIRE.

Referenced by add_initial_keys(), dns_tkey_processdhresponse(), dns_tsig_verify(), evaluate_key(), process_dhtkey(), setup_keystr(), and setup_text_key().

isc_result_t dns_tsigkey_createfromkey	(	dns_name_t *	name,
		dns_name_t *	algorithm,
		dst_key_t *	dstkey,
		isc_boolean_t	generated,
		dns_name_t *	creator,
		isc_stdtime_t	inception,
		isc_stdtime_t	expire,
		isc_mem_t *	mctx,
		dns_tsig_keyring_t *	ring,
		dns_tsigkey_t **	key
	)

Creates a tsig key structure and saves it in the keyring. If key is not NULL, *key will contain a copy of the key. The keys validity period is specified by (inception, expire), and will not expire if inception == expire. If the key was generated, the creating identity, if there is one, should be in the creator parameter. Specifying an unimplemented algorithm will cause failure only if dstkey != NULL; this allows a transient key with an invalid algorithm to exist long enough to generate a BADKEY response.

If dns_tsigkey_createfromkey is successful a new reference to 'dstkey' will have been made.

Requires:

• 'name' is a valid dns_name_t
• 'algorithm' is a valid dns_name_t
• 'secret' is a valid pointer
• 'length' is an integer >= 0
• 'dstkey' is a valid dst key or NULL
• 'creator' points to a valid dns_name_t or is NULL
• 'mctx' is a valid memory context
• 'ring' is a valid TSIG keyring or NULL
• 'key' or '*key' must be NULL

Returns:

• ISC_R_SUCCESS
• ISC_R_EXISTS - a key with this name already exists
• ISC_R_NOTIMPLEMENTED - algorithm is not implemented
• ISC_R_NOMEMORY

Definition at line 293 of file tsig.c.

References algname_is_allocated, dns_tsigkey::algorithm, dns_tsigkey::creator, dns_lctx, DNS_LOGCATEGORY_DNSSEC, DNS_LOGMODULE_TSIG, dns_name_downcase(), dns_name_dup(), dns_name_dynamic(), dns_name_equal(), dns_name_format(), DNS_NAME_FORMATSIZE, dns_name_free(), dns_name_init(), DNS_R_BADALG, DNS_TSIG_GSSAPI_NAME, DNS_TSIG_GSSAPIMS_NAME, DNS_TSIG_HMACMD5_NAME, DNS_TSIG_HMACSHA1_NAME, DNS_TSIG_HMACSHA224_NAME, DNS_TSIG_HMACSHA256_NAME, DNS_TSIG_HMACSHA384_NAME, DNS_TSIG_HMACSHA512_NAME, DST_ALG_GSSAPI, DST_ALG_HMACMD5, DST_ALG_HMACSHA1, DST_ALG_HMACSHA224, DST_ALG_HMACSHA256, DST_ALG_HMACSHA384, DST_ALG_HMACSHA512, dst_key_alg(), dst_key_attach(), dst_key_free(), dst_key_size(), dns_tsigkey::expire, dns_tsigkey::generated, dns_tsigkey::inception, ISC_LINK_INIT, ISC_LOG_INFO, isc_log_write(), isc_mem_attach(), isc_mem_get, isc_mem_put, ISC_R_NOMEMORY, ISC_R_SUCCESS, isc_refcount_decrement, isc_refcount_destroy, isc_refcount_init(), dns_tsigkey::key, keyring_add(), dns_tsigkey::magic, dns_tsigkey::mctx, dns_tsigkey::name, dns_tsigkey::refs, REQUIRE, dns_tsigkey::ring, and TSIG_MAGIC.

Referenced by dns_tkey_gssnegotiate(), dns_tkey_processgssresponse(), dns_tsec_create(), dns_tsigkey_create(), generate_session_key(), process_gsstkey(), restore_key(), setup_file_key(), and setup_keyfile().

void dns_tsigkey_attach	(	dns_tsigkey_t *	source,
		dns_tsigkey_t **	targetp
	)

Attach '*targetp' to 'source'.

Requires:

• 'key' is a valid TSIG key

Ensures:

• *targetp is attached to source.

Definition at line 824 of file tsig.c.

References isc_refcount_increment, dns_tsigkey::refs, REQUIRE, and VALID_TSIG_KEY.

Referenced by dns_message_settsigkey(), dns_request_createvia4(), dns_tsec_getkey(), resquery_send(), and xfrin_create().

void dns_tsigkey_detach

(

dns_tsigkey_t **

keyp

)

Detaches from the tsig key structure pointed to by '*key'.

Requires:

• 'keyp' is not NULL and '*keyp' is a valid TSIG key

Ensures:

• 'keyp' points to NULL

Definition at line 853 of file tsig.c.

References isc_refcount_decrement, key, dns_tsigkey::refs, REQUIRE, tsigkey_free(), and VALID_TSIG_KEY.

Referenced by add_initial_keys(), cleanup(), cleanup_session_key(), destroy_libs(), dns_client_startupdate(), dns_message_resetsig(), dns_message_settsigkey(), dns_tkey_processdeleteresponse(), dns_tkey_processquery(), dns_tsec_destroy(), doshutdown(), evaluate_key(), fctx_cancelquery(), free_tsignode(), generate_session_key(), maybe_free(), msgreset(), notify_destroy(), notify_isself(), notify_send_toaddr(), ns_client_isself(), ns_query(), process_deletetkey(), process_gsstkey(), req_destroy(), request_done(), reset_system(), resquery_send(), shutdown_server(), soa_query(), update_sendevent(), xfrin_create(), zone_notify(), and zone_xfrdone().

void dns_tsigkey_setdeleted

(

dns_tsigkey_t *

key

)

Prevents this key from being used again. It will be deleted when no references exist.

Requires:

• 'key' is a valid TSIG key on a keyring

Definition at line 870 of file tsig.c.

References isc_rwlocktype_write, dns_tsig_keyring::lock, remove_fromring(), REQUIRE, dns_tsigkey::ring, RWLOCK, RWUNLOCK, and VALID_TSIG_KEY.

Referenced by dns_tkey_processdeleteresponse(), and process_deletetkey().

isc_result_t dns_tsig_sign

(

dns_message_t *

msg

)

Generates a TSIG record for this message.

Requires:

• 'msg' is a valid message
• 'msg->tsigkey' is a valid TSIG key
• 'msg->tsig' is NULL

Returns:

• ISC_R_SUCCESS
• ISC_R_NOMEMORY
• ISC_R_NOSPACE
• DNS_R_EXPECTEDTSIG
  • this is a response & msg->querytsig is NULL

Definition at line 880 of file tsig.c.

References dns_tsigkey::algorithm, dns_name::attributes, BADTIMELEN, isc_region::base, dns_message::buffer, databuf, digestbits, DNS_LOGCATEGORY_DNSSEC, dns_message_gettempname(), dns_message_gettemprdata(), dns_message_gettemprdatalist(), dns_message_gettemprdataset(), dns_message_gettsigkey(), DNS_MESSAGE_HEADERLEN, dns_message_puttempname(), dns_message_puttemprdata(), dns_message_puttemprdatalist(), dns_message_renderheader(), dns_message_takebuffer(), dns_name_clone(), dns_name_dup(), dns_name_init(), dns_name_toregion(), DNS_NAMEATTR_NOCOMPRESS, DNS_R_EXPECTEDTSIG, dns_rcode_noerror, dns_rdata_fromstruct(), DNS_RDATA_INIT, dns_rdata_tostruct(), dns_rdatalist_tordataset(), dns_rdataset_current(), dns_rdataset_first(), dns_rdataset_init(), DNS_TSIG_FUDGE, dns_tsigerror_badsig, dns_tsigerror_badtime, dst_context_adddata(), dst_context_create3(), dst_context_destroy(), dst_context_sign(), dst_key_getbits(), dst_key_sigsize(), header, dns_message::id, INSIST, is_response, isc_buffer_allocate(), isc_buffer_availablelength, isc_buffer_clear, isc_buffer_free(), isc_buffer_init, isc_buffer_putmem, isc_buffer_putuint16, isc_buffer_putuint32, isc_buffer_putuint48, isc_buffer_usedlength, isc_buffer_usedregion, ISC_LINK_INIT, ISC_LIST_APPEND, isc_mem_get, isc_mem_put, ISC_R_NOMEMORY, ISC_R_NOSPACE, ISC_R_SUCCESS, isc_region_consume, isc_stdtime_get(), ISC_TRUE, dns_tsigkey::key, key, isc_region::length, dns_message::mctx, mctx, dns_tsigkey::name, now, dns_message::querytsig, dns_message::querytsigstatus, r, dns_rdatalist::rdclass, REQUIRE, RUNTIME_CHECK, dns_message::tcp_continuation, dns_message::timeadjust, dns_message::tsig, dns_message::tsigname, dns_rdatalist::type, and VALID_TSIG_KEY.

Referenced by dns_message_renderend().

isc_result_t dns_tsig_verify	(	isc_buffer_t *	source,
		dns_message_t *	msg,
		dns_tsig_keyring_t *	ring1,
		dns_tsig_keyring_t *	ring2
	)

Verifies the TSIG record in this message.

Requires:

• 'source' is a valid buffer containing the unparsed message
• 'msg' is a valid message
• 'msg->tsigkey' is a valid TSIG key if this is a response
• 'msg->tsig' is NULL
• 'msg->querytsig' is not NULL if this is a response
• 'ring1' and 'ring2' are each either a valid keyring or NULL

Returns:

• ISC_R_SUCCESS
• ISC_R_NOMEMORY
• DNS_R_EXPECTEDTSIG - A TSIG was expected but not seen
• DNS_R_UNEXPECTEDTSIG - A TSIG was seen but not expected
• DNS_R_TSIGERRORSET - the TSIG verified but ->error was set and this is a query
• DNS_R_CLOCKSKEW - the TSIG failed to verify because of the time was out of the allowed range.
• DNS_R_TSIGVERIFYFAILURE - the TSIG failed to verify
• DNS_R_EXPECTEDRESPONSE - the message was set over TCP and should have been a response, but was not.

Definition at line 1168 of file tsig.c.

References dns_tsigkey::algorithm, isc_region::base, databuf, digestbits, DNS_LOGCATEGORY_DNSSEC, dns_message_gettsigkey(), DNS_MESSAGE_HEADERLEN, DNS_MESSAGE_VALID, dns_name_equal(), dns_name_toregion(), DNS_R_CLOCKSKEW, DNS_R_EXPECTEDTSIG, DNS_R_FORMERR, DNS_R_TSIGERRORSET, DNS_R_TSIGVERIFYFAILURE, DNS_R_UNEXPECTEDTSIG, dns_rcode_noerror, DNS_RDATA_INIT, dns_rdata_reset(), dns_rdata_tostruct(), dns_rdataset_current(), dns_rdataset_first(), dns_tsigerror_badkey, dns_tsigerror_badsig, dns_tsigerror_badtime, dns_tsigerror_badtrunc, dns_tsigkey_create(), dns_tsigkey_find(), DST_ALG_HMACMD5, DST_ALG_HMACSHA1, DST_ALG_HMACSHA224, DST_ALG_HMACSHA256, DST_ALG_HMACSHA384, DST_ALG_HMACSHA512, dst_context_adddata(), dst_context_create3(), dst_context_destroy(), dst_context_verify(), dst_key_alg(), dst_key_getbits(), dst_key_sigsize(), DST_R_VERIFYFAILURE, header, is_response, isc_buffer_clear, isc_buffer_init, isc_buffer_putuint16, isc_buffer_putuint32, isc_buffer_putuint48, isc_buffer_usedregion, ISC_FALSE, ISC_R_NOTFOUND, ISC_R_SUCCESS, isc_region_consume, isc_stdtime_get(), dns_tsigkey::key, key, isc_region::length, dns_message::mctx, mctx, dns_tsigkey::name, now, dns_message::querytsig, r, REQUIRE, dns_message::sigstart, dns_message::tcp_continuation, dns_message::timeadjust, dns_message::tsig, tsig_log(), tsig_verify_tcp(), dns_message::tsigkey, tsigkey, dns_message::tsigname, dns_message::tsigstatus, dns_rdataset::ttl, VALID_TSIG_KEY, dns_message::verified_sig, and dns_message::verify_attempted.

Referenced by client_request(), dns_message_checksig(), dns_request_getresponse(), dns_view_checksig(), and recv_done().

isc_result_t dns_tsigkey_find	(	dns_tsigkey_t **	tsigkey,
		dns_name_t *	name,
		dns_name_t *	algorithm,
		dns_tsig_keyring_t *	ring
	)

Returns the TSIG key corresponding to this name and (possibly) algorithm. Also increments the key's reference counter.

Requires:

• 'tsigkey' is not NULL
• '*tsigkey' is NULL
• 'name' is a valid dns_name_t
• 'algorithm' is a valid dns_name_t or NULL
• 'ring' is a valid keyring

Returns:

• ISC_R_SUCCESS
• ISC_R_NOTFOUND

Definition at line 1717 of file tsig.c.

References adjust_lru(), cleanup_ring(), dns_name_equal(), DNS_R_PARTIALMATCH, dns_rbt_findname(), ISC_R_NOTFOUND, ISC_R_SUCCESS, isc_refcount_increment, isc_rwlocktype_read, isc_rwlocktype_write, isc_serial_lt(), isc_stdtime_get(), key, dns_tsig_keyring::keys, dns_tsig_keyring::lock, now, remove_fromring(), REQUIRE, RWLOCK, and RWUNLOCK.

Referenced by dns_tkey_processdeleteresponse(), dns_tkey_processquery(), dns_tsig_verify(), dns_view_gettsig(), process_deletetkey(), and process_gsstkey().

isc_result_t dns_tsigkeyring_create	(	isc_mem_t *	mctx,
		dns_tsig_keyring_t **	ringp
	)

Create an empty TSIG key ring.

Requires:

• 'mctx' is not NULL
• 'ringp' is not NULL, and '*ringp' is NULL

Returns:

• ISC_R_SUCCESS
• ISC_R_NOMEMORY

Definition at line 1790 of file tsig.c.

References dns_rbt_create(), DNS_TSIG_MAXGENERATEDKEYS, free_tsignode(), dns_tsig_keyring::generated, ISC_LIST_INIT, isc_mem_attach(), isc_mem_get, isc_mem_put, ISC_R_NOMEMORY, ISC_R_SUCCESS, isc_rwlock_destroy(), isc_rwlock_init(), dns_tsig_keyring::keys, dns_tsig_keyring::lock, dns_tsig_keyring::maxgenerated, dns_tsig_keyring::mctx, dns_tsig_keyring::references, REQUIRE, and dns_tsig_keyring::writecount.

Referenced by dns_view_create(), and ns_tsigkeyring_fromconfig().

isc_result_t dns_tsigkeyring_add	(	dns_tsig_keyring_t *	ring,
		dns_name_t *	name,
		dns_tsigkey_t *	tkey
	)

Place a TSIG key onto a key ring.

Requires:

• 'ring', 'name' and 'tkey' are not NULL

Returns:

• ISC_R_SUCCESS
• Any other value indicates failure.

Definition at line 1829 of file tsig.c.

References ISC_R_SUCCESS, isc_refcount_increment, keyring_add(), and dns_tsigkey::refs.

Referenced by configure_view().

void dns_tsigkeyring_attach	(	dns_tsig_keyring_t *	source,
		dns_tsig_keyring_t **	target
	)

Definition at line 1842 of file tsig.c.

References INSIST, isc_rwlocktype_write, dns_tsig_keyring::lock, dns_tsig_keyring::references, REQUIRE, RWLOCK, and RWUNLOCK.

Referenced by dns_view_getdynamickeyring(), dns_view_setdynamickeyring(), and dns_view_setkeyring().

void dns_tsigkeyring_detach

(

dns_tsig_keyring_t **

ringp

)

Definition at line 1856 of file tsig.c.

References destroyring(), INSIST, isc_rwlocktype_write, dns_tsig_keyring::lock, dns_tsig_keyring::references, references, REQUIRE, RWLOCK, and RWUNLOCK.

Referenced by cleanup(), configure_view(), destroy(), dns_view_create(), dns_view_setdynamickeyring(), dns_view_setkeyring(), ns_tsigkeyring_fromconfig(), and reset_system().

isc_result_t dns_tsigkeyring_dumpanddetach	(	dns_tsig_keyring_t **	ringp,
		FILE *	fp
	)

Destroy a TSIG key ring.

Requires:

• 'ringp' is not NULL

Definition at line 655 of file tsig.c.

References dns_rbtnode::data, destroy(), destroyring(), dns_fixedname_init, dns_fixedname_name, dns_name_init(), DNS_R_CONTINUE, DNS_R_NEWORIGIN, dns_rbtnodechain_current(), dns_rbtnodechain_first(), dns_rbtnodechain_init(), dns_rbtnodechain_invalidate(), dns_rbtnodechain_next(), dump_key(), dns_tsigkey::expire, dns_tsigkey::generated, INSIST, ISC_R_NOMORE, ISC_R_SUCCESS, isc_rwlocktype_write, isc_stdtime_get(), dns_tsig_keyring::keys, dns_tsig_keyring::lock, dns_tsig_keyring::mctx, now, origin, dns_tsig_keyring::references, references, REQUIRE, RWLOCK, and RWUNLOCK.

Referenced by destroy().

void dns_keyring_restore	(	dns_tsig_keyring_t *	ring,
		FILE *	fp
	)

Definition at line 1877 of file tsig.c.

References DNS_R_BADALG, DNS_R_EXPIRED, ISC_R_NOMORE, ISC_R_SUCCESS, isc_stdtime_get(), now, and restore_key().

Referenced by dns_view_restorekeyring().

---

Variable Documentation

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_hmacmd5_name

Definition at line 80 of file tsig.c.

Referenced by dns_tsec_create(), and ns_config_getkeyalgorithm2().

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_gssapi_name

Definition at line 92 of file tsig.c.

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_gssapims_name

Definition at line 108 of file tsig.c.

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_hmacsha1_name

Definition at line 122 of file tsig.c.

Referenced by dns_tsec_create(), and ns_config_getkeyalgorithm2().

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_hmacsha224_name

Definition at line 136 of file tsig.c.

Referenced by dns_tsec_create(), and ns_config_getkeyalgorithm2().

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_hmacsha256_name

Definition at line 150 of file tsig.c.

Referenced by dns_tsec_create(), and ns_config_getkeyalgorithm2().

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_hmacsha384_name

Definition at line 164 of file tsig.c.

Referenced by dns_tsec_create(), and ns_config_getkeyalgorithm2().

LIBDNS_EXTERNAL_DATA dns_name_t* dns_tsig_hmacsha512_name

Definition at line 178 of file tsig.c.

Referenced by dns_tsec_create(), and ns_config_getkeyalgorithm2().

---