Check TSIG signature on IXFR

[thirdparty/pdns.git] / pdns / resolver.hh

diff --git a/pdns/resolver.hh b/pdns/resolver.hh
index 352636593693115b2bc115fd8570331cac3f1f60..196831b4bec504808be3ad49b934fccb4c96f625 100644 (file)
--- a/pdns/resolver.hh
+++ b/pdns/resolver.hh
@@ -41,6 +41,7 @@
 #include "namespaces.hh"
 #include "dnsrecords.hh"
 #include "dnssecinfra.hh"
+#include "tsigverifier.hh"
 
 class ResolverException : public PDNSException
 {
@@ -101,14 +102,10 @@ class AXFRRetriever : public boost::noncopyable
     int d_sock;
     int d_soacount;
     ComboAddress d_remote;
-    
-    TSIGTriplet d_tt;
-    string d_prevMac; // RFC2845 4.4
-    string d_signData;
+    TSIGTCPVerifier d_tsigVerifier;
+
     size_t d_receivedBytes;
     size_t d_maxReceivedBytes;
-    uint32_t d_tsigPos;
-    uint d_nonSignedMessages; // RFC2845 4.4
     TSIGRecordContent d_trc;
 };