1 /* SPDX-License-Identifier: LGPL-2.1+ */
4 #include <netinet/in.h>
9 #include "in-addr-util.h"
11 #include "string-util.h"
13 typedef struct DnsResourceKey DnsResourceKey
;
14 typedef struct DnsResourceRecord DnsResourceRecord
;
15 typedef struct DnsTxtItem DnsTxtItem
;
18 #define DNSKEY_FLAG_SEP (UINT16_C(1) << 0)
19 #define DNSKEY_FLAG_REVOKE (UINT16_C(1) << 7)
20 #define DNSKEY_FLAG_ZONE_KEY (UINT16_C(1) << 8)
23 #define MDNS_RR_CACHE_FLUSH (UINT16_C(1) << 15)
25 /* DNSSEC algorithm identifiers, see
26 * http://tools.ietf.org/html/rfc4034#appendix-A.1 and
27 * https://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xhtml */
29 DNSSEC_ALGORITHM_RSAMD5
= 1,
33 DNSSEC_ALGORITHM_RSASHA1
,
34 DNSSEC_ALGORITHM_DSA_NSEC3_SHA1
,
35 DNSSEC_ALGORITHM_RSASHA1_NSEC3_SHA1
,
36 DNSSEC_ALGORITHM_RSASHA256
= 8, /* RFC 5702 */
37 DNSSEC_ALGORITHM_RSASHA512
= 10, /* RFC 5702 */
38 DNSSEC_ALGORITHM_ECC_GOST
= 12, /* RFC 5933 */
39 DNSSEC_ALGORITHM_ECDSAP256SHA256
= 13, /* RFC 6605 */
40 DNSSEC_ALGORITHM_ECDSAP384SHA384
= 14, /* RFC 6605 */
41 DNSSEC_ALGORITHM_ED25519
= 15, /* RFC 8080 */
42 DNSSEC_ALGORITHM_ED448
= 16, /* RFC 8080 */
43 DNSSEC_ALGORITHM_INDIRECT
= 252,
44 DNSSEC_ALGORITHM_PRIVATEDNS
,
45 DNSSEC_ALGORITHM_PRIVATEOID
,
46 _DNSSEC_ALGORITHM_MAX_DEFINED
49 /* DNSSEC digest identifiers, see
50 * https://www.iana.org/assignments/ds-rr-types/ds-rr-types.xhtml */
52 DNSSEC_DIGEST_SHA1
= 1,
53 DNSSEC_DIGEST_SHA256
= 2, /* RFC 4509 */
54 DNSSEC_DIGEST_GOST_R_34_11_94
= 3, /* RFC 5933 */
55 DNSSEC_DIGEST_SHA384
= 4, /* RFC 6605 */
56 _DNSSEC_DIGEST_MAX_DEFINED
59 /* DNSSEC NSEC3 hash algorithms, see
60 * https://www.iana.org/assignments/dnssec-nsec3-parameters/dnssec-nsec3-parameters.xhtml */
62 NSEC3_ALGORITHM_SHA1
= 1,
63 _NSEC3_ALGORITHM_MAX_DEFINED
66 struct DnsResourceKey
{
67 unsigned n_ref
; /* (unsigned -1) for const keys, see below */
69 char *_name
; /* don't access directly, use dns_resource_key_name()! */
72 /* Creates a temporary resource key. This is only useful to quickly
73 * look up something, without allocating a full DnsResourceKey object
74 * for it. Note that it is not OK to take references to this kind of
75 * resource key object. */
76 #define DNS_RESOURCE_KEY_CONST(c, t, n) \
78 .n_ref = (unsigned) -1, \
86 LIST_FIELDS(DnsTxtItem
, items
);
90 struct DnsResourceRecord
{
97 usec_t expiry
; /* RRSIG signature expiry */
99 /* How many labels to strip to determine "signer" of the RRSIG (aka, the zone). -1 if not signed. */
100 unsigned n_skip_labels_signer
;
101 /* How many labels to strip to determine "synthesizing source" of this RR, i.e. the wildcard's immediate parent. -1 if not signed. */
102 unsigned n_skip_labels_source
;
106 bool wire_format_canonical
:1;
108 size_t wire_format_size
;
109 size_t wire_format_rdata_offset
;
126 } ptr
, ns
, cname
, dname
;
138 struct in_addr in_addr
;
142 struct in6_addr in6_addr
;
160 /* https://tools.ietf.org/html/rfc1876 */
171 /* https://tools.ietf.org/html/rfc4255#section-3.1 */
176 size_t fingerprint_size
;
179 /* http://tools.ietf.org/html/rfc4034#section-2.1 */
188 /* http://tools.ietf.org/html/rfc4034#section-3.1 */
190 uint16_t type_covered
;
193 uint32_t original_ttl
;
199 size_t signature_size
;
202 /* https://tools.ietf.org/html/rfc4034#section-4.1 */
204 char *next_domain_name
;
208 /* https://tools.ietf.org/html/rfc4034#section-5.1 */
223 void *next_hashed_name
;
224 size_t next_hashed_name_size
;
228 /* https://tools.ietf.org/html/draft-ietf-dane-protocol-23 */
232 uint8_t matching_type
;
237 /* https://tools.ietf.org/html/rfc6844 */
247 static inline const void* DNS_RESOURCE_RECORD_RDATA(const DnsResourceRecord
*rr
) {
251 if (!rr
->wire_format
)
254 assert(rr
->wire_format_rdata_offset
<= rr
->wire_format_size
);
255 return (uint8_t*) rr
->wire_format
+ rr
->wire_format_rdata_offset
;
258 static inline size_t DNS_RESOURCE_RECORD_RDATA_SIZE(const DnsResourceRecord
*rr
) {
261 if (!rr
->wire_format
)
264 assert(rr
->wire_format_rdata_offset
<= rr
->wire_format_size
);
265 return rr
->wire_format_size
- rr
->wire_format_rdata_offset
;
268 static inline uint8_t DNS_RESOURCE_RECORD_OPT_VERSION_SUPPORTED(const DnsResourceRecord
*rr
) {
270 assert(rr
->key
->type
== DNS_TYPE_OPT
);
272 return ((rr
->ttl
>> 16) & 0xFF) == 0;
275 DnsResourceKey
* dns_resource_key_new(uint16_t class, uint16_t type
, const char *name
);
276 DnsResourceKey
* dns_resource_key_new_redirect(const DnsResourceKey
*key
, const DnsResourceRecord
*cname
);
277 int dns_resource_key_new_append_suffix(DnsResourceKey
**ret
, DnsResourceKey
*key
, char *name
);
278 DnsResourceKey
* dns_resource_key_new_consume(uint16_t class, uint16_t type
, char *name
);
279 DnsResourceKey
* dns_resource_key_ref(DnsResourceKey
*key
);
280 DnsResourceKey
* dns_resource_key_unref(DnsResourceKey
*key
);
281 const char* dns_resource_key_name(const DnsResourceKey
*key
);
282 bool dns_resource_key_is_address(const DnsResourceKey
*key
);
283 bool dns_resource_key_is_dnssd_ptr(const DnsResourceKey
*key
);
284 int dns_resource_key_equal(const DnsResourceKey
*a
, const DnsResourceKey
*b
);
285 int dns_resource_key_match_rr(const DnsResourceKey
*key
, DnsResourceRecord
*rr
, const char *search_domain
);
286 int dns_resource_key_match_cname_or_dname(const DnsResourceKey
*key
, const DnsResourceKey
*cname
, const char *search_domain
);
287 int dns_resource_key_match_soa(const DnsResourceKey
*key
, const DnsResourceKey
*soa
);
289 /* _DNS_{CLASS,TYPE}_STRING_MAX include one byte for NUL, which we use for space instead below.
290 * DNS_HOSTNAME_MAX does not include the NUL byte, so we need to add 1. */
291 #define DNS_RESOURCE_KEY_STRING_MAX (_DNS_CLASS_STRING_MAX + _DNS_TYPE_STRING_MAX + DNS_HOSTNAME_MAX + 1)
293 char* dns_resource_key_to_string(const DnsResourceKey
*key
, char *buf
, size_t buf_size
);
294 ssize_t
dns_resource_record_payload(DnsResourceRecord
*rr
, void **out
);
296 DEFINE_TRIVIAL_CLEANUP_FUNC(DnsResourceKey
*, dns_resource_key_unref
);
298 static inline bool dns_key_is_shared(const DnsResourceKey
*key
) {
299 return IN_SET(key
->type
, DNS_TYPE_PTR
);
302 bool dns_resource_key_reduce(DnsResourceKey
**a
, DnsResourceKey
**b
);
304 DnsResourceRecord
* dns_resource_record_new(DnsResourceKey
*key
);
305 DnsResourceRecord
* dns_resource_record_new_full(uint16_t class, uint16_t type
, const char *name
);
306 DnsResourceRecord
* dns_resource_record_ref(DnsResourceRecord
*rr
);
307 DnsResourceRecord
* dns_resource_record_unref(DnsResourceRecord
*rr
);
308 int dns_resource_record_new_reverse(DnsResourceRecord
**ret
, int family
, const union in_addr_union
*address
, const char *name
);
309 int dns_resource_record_new_address(DnsResourceRecord
**ret
, int family
, const union in_addr_union
*address
, const char *name
);
310 int dns_resource_record_equal(const DnsResourceRecord
*a
, const DnsResourceRecord
*b
);
311 const char* dns_resource_record_to_string(DnsResourceRecord
*rr
);
312 DnsResourceRecord
*dns_resource_record_copy(DnsResourceRecord
*rr
);
313 DEFINE_TRIVIAL_CLEANUP_FUNC(DnsResourceRecord
*, dns_resource_record_unref
);
315 int dns_resource_record_to_wire_format(DnsResourceRecord
*rr
, bool canonical
);
317 int dns_resource_record_signer(DnsResourceRecord
*rr
, const char **ret
);
318 int dns_resource_record_source(DnsResourceRecord
*rr
, const char **ret
);
319 int dns_resource_record_is_signer(DnsResourceRecord
*rr
, const char *zone
);
320 int dns_resource_record_is_synthetic(DnsResourceRecord
*rr
);
322 int dns_resource_record_clamp_ttl(DnsResourceRecord
**rr
, uint32_t max_ttl
);
324 DnsTxtItem
*dns_txt_item_free_all(DnsTxtItem
*i
);
325 bool dns_txt_item_equal(DnsTxtItem
*a
, DnsTxtItem
*b
);
326 DnsTxtItem
*dns_txt_item_copy(DnsTxtItem
*i
);
327 int dns_txt_item_new_empty(DnsTxtItem
**ret
);
329 void dns_resource_record_hash_func(const void *i
, struct siphash
*state
);
331 extern const struct hash_ops dns_resource_key_hash_ops
;
332 extern const struct hash_ops dns_resource_record_hash_ops
;
334 int dnssec_algorithm_to_string_alloc(int i
, char **ret
);
335 int dnssec_algorithm_from_string(const char *s
) _pure_
;
337 int dnssec_digest_to_string_alloc(int i
, char **ret
);
338 int dnssec_digest_from_string(const char *s
) _pure_
;