1 /* SPDX-License-Identifier: LGPL-2.1-or-later */
4 #include <netinet/in.h>
10 #include "in-addr-util.h"
12 #include "string-util.h"
13 #include "time-util.h"
15 typedef struct DnsResourceKey DnsResourceKey
;
16 typedef struct DnsResourceRecord DnsResourceRecord
;
17 typedef struct DnsTxtItem DnsTxtItem
;
20 #define DNSKEY_FLAG_SEP (UINT16_C(1) << 0)
21 #define DNSKEY_FLAG_REVOKE (UINT16_C(1) << 7)
22 #define DNSKEY_FLAG_ZONE_KEY (UINT16_C(1) << 8)
25 #define MDNS_RR_CACHE_FLUSH_OR_QU (UINT16_C(1) << 15)
27 /* DNSSEC algorithm identifiers, see
28 * http://tools.ietf.org/html/rfc4034#appendix-A.1 and
29 * https://www.iana.org/assignments/dns-sec-alg-numbers/dns-sec-alg-numbers.xhtml */
31 DNSSEC_ALGORITHM_RSAMD5
= 1,
35 DNSSEC_ALGORITHM_RSASHA1
,
36 DNSSEC_ALGORITHM_DSA_NSEC3_SHA1
,
37 DNSSEC_ALGORITHM_RSASHA1_NSEC3_SHA1
,
38 DNSSEC_ALGORITHM_RSASHA256
= 8, /* RFC 5702 */
39 DNSSEC_ALGORITHM_RSASHA512
= 10, /* RFC 5702 */
40 DNSSEC_ALGORITHM_ECC_GOST
= 12, /* RFC 5933 */
41 DNSSEC_ALGORITHM_ECDSAP256SHA256
= 13, /* RFC 6605 */
42 DNSSEC_ALGORITHM_ECDSAP384SHA384
= 14, /* RFC 6605 */
43 DNSSEC_ALGORITHM_ED25519
= 15, /* RFC 8080 */
44 DNSSEC_ALGORITHM_ED448
= 16, /* RFC 8080 */
45 DNSSEC_ALGORITHM_INDIRECT
= 252,
46 DNSSEC_ALGORITHM_PRIVATEDNS
,
47 DNSSEC_ALGORITHM_PRIVATEOID
,
48 _DNSSEC_ALGORITHM_MAX_DEFINED
51 /* DNSSEC digest identifiers, see
52 * https://www.iana.org/assignments/ds-rr-types/ds-rr-types.xhtml */
54 DNSSEC_DIGEST_SHA1
= 1,
55 DNSSEC_DIGEST_SHA256
= 2, /* RFC 4509 */
56 DNSSEC_DIGEST_GOST_R_34_11_94
= 3, /* RFC 5933 */
57 DNSSEC_DIGEST_SHA384
= 4, /* RFC 6605 */
58 _DNSSEC_DIGEST_MAX_DEFINED
61 /* DNSSEC NSEC3 hash algorithms, see
62 * https://www.iana.org/assignments/dnssec-nsec3-parameters/dnssec-nsec3-parameters.xhtml */
64 NSEC3_ALGORITHM_SHA1
= 1,
65 _NSEC3_ALGORITHM_MAX_DEFINED
68 struct DnsResourceKey
{
69 unsigned n_ref
; /* (unsigned -1) for const keys, see below */
71 char *_name
; /* don't access directly, use dns_resource_key_name()! */
74 /* Creates a temporary resource key. This is only useful to quickly
75 * look up something, without allocating a full DnsResourceKey object
76 * for it. Note that it is not OK to take references to this kind of
77 * resource key object. */
78 #define DNS_RESOURCE_KEY_CONST(c, t, n) \
88 LIST_FIELDS(DnsTxtItem
, items
);
92 struct DnsResourceRecord
{
95 usec_t expiry
; /* RRSIG signature expiry */
101 /* How many labels to strip to determine "signer" of the RRSIG (aka, the zone). -1 if not signed. */
102 uint8_t n_skip_labels_signer
;
103 /* How many labels to strip to determine "synthesizing source" of this RR, i.e. the wildcard's immediate parent. -1 if not signed. */
104 uint8_t n_skip_labels_source
;
107 bool wire_format_canonical
;
110 size_t wire_format_size
;
111 size_t wire_format_rdata_offset
;
128 } ptr
, ns
, cname
, dname
;
140 struct in_addr in_addr
;
144 struct in6_addr in6_addr
;
162 /* https://tools.ietf.org/html/rfc1876 */
173 /* https://tools.ietf.org/html/rfc4255#section-3.1 */
176 size_t fingerprint_size
;
182 /* http://tools.ietf.org/html/rfc4034#section-2.1 */
192 /* http://tools.ietf.org/html/rfc4034#section-3.1 */
196 size_t signature_size
;
198 uint16_t type_covered
;
201 uint32_t original_ttl
;
207 /* https://tools.ietf.org/html/rfc4034#section-4.1 */
209 char *next_domain_name
;
213 /* https://tools.ietf.org/html/rfc4034#section-5.1 */
227 void *next_hashed_name
;
228 size_t next_hashed_name_size
;
235 /* https://tools.ietf.org/html/draft-ietf-dane-protocol-23 */
242 uint8_t matching_type
;
245 /* https://tools.ietf.org/html/rfc6844 */
255 /* Note: fields should be ordered to minimize alignment gaps. Use pahole! */
258 /* We use uint8_t for label counts above, and UINT8_MAX/-1 has special meaning. */
259 assert_cc(DNS_N_LABELS_MAX
< UINT8_MAX
);
261 static inline const void* DNS_RESOURCE_RECORD_RDATA(const DnsResourceRecord
*rr
) {
265 if (!rr
->wire_format
)
268 assert(rr
->wire_format_rdata_offset
<= rr
->wire_format_size
);
269 return (uint8_t*) rr
->wire_format
+ rr
->wire_format_rdata_offset
;
272 static inline size_t DNS_RESOURCE_RECORD_RDATA_SIZE(const DnsResourceRecord
*rr
) {
275 if (!rr
->wire_format
)
278 assert(rr
->wire_format_rdata_offset
<= rr
->wire_format_size
);
279 return rr
->wire_format_size
- rr
->wire_format_rdata_offset
;
282 static inline uint8_t DNS_RESOURCE_RECORD_OPT_VERSION_SUPPORTED(const DnsResourceRecord
*rr
) {
284 assert(rr
->key
->type
== DNS_TYPE_OPT
);
286 return ((rr
->ttl
>> 16) & 0xFF) == 0;
289 DnsResourceKey
* dns_resource_key_new(uint16_t class, uint16_t type
, const char *name
);
290 DnsResourceKey
* dns_resource_key_new_redirect(const DnsResourceKey
*key
, const DnsResourceRecord
*cname
);
291 int dns_resource_key_new_append_suffix(DnsResourceKey
**ret
, DnsResourceKey
*key
, char *name
);
292 DnsResourceKey
* dns_resource_key_new_consume(uint16_t class, uint16_t type
, char *name
);
293 DnsResourceKey
* dns_resource_key_ref(DnsResourceKey
*key
);
294 DnsResourceKey
* dns_resource_key_unref(DnsResourceKey
*key
);
295 const char* dns_resource_key_name(const DnsResourceKey
*key
);
296 bool dns_resource_key_is_address(const DnsResourceKey
*key
);
297 bool dns_resource_key_is_dnssd_ptr(const DnsResourceKey
*key
);
298 int dns_resource_key_equal(const DnsResourceKey
*a
, const DnsResourceKey
*b
);
299 int dns_resource_key_match_rr(const DnsResourceKey
*key
, DnsResourceRecord
*rr
, const char *search_domain
);
300 int dns_resource_key_match_cname_or_dname(const DnsResourceKey
*key
, const DnsResourceKey
*cname
, const char *search_domain
);
301 int dns_resource_key_match_soa(const DnsResourceKey
*key
, const DnsResourceKey
*soa
);
303 /* _DNS_{CLASS,TYPE}_STRING_MAX include one byte for NUL, which we use for space instead below.
304 * DNS_HOSTNAME_MAX does not include the NUL byte, so we need to add 1. */
305 #define DNS_RESOURCE_KEY_STRING_MAX (_DNS_CLASS_STRING_MAX + _DNS_TYPE_STRING_MAX + DNS_HOSTNAME_MAX + 1)
307 char* dns_resource_key_to_string(const DnsResourceKey
*key
, char *buf
, size_t buf_size
);
308 ssize_t
dns_resource_record_payload(DnsResourceRecord
*rr
, void **out
);
310 DEFINE_TRIVIAL_CLEANUP_FUNC(DnsResourceKey
*, dns_resource_key_unref
);
312 static inline bool dns_key_is_shared(const DnsResourceKey
*key
) {
313 return IN_SET(key
->type
, DNS_TYPE_PTR
);
316 bool dns_resource_key_reduce(DnsResourceKey
**a
, DnsResourceKey
**b
);
318 DnsResourceRecord
* dns_resource_record_new(DnsResourceKey
*key
);
319 DnsResourceRecord
* dns_resource_record_new_full(uint16_t class, uint16_t type
, const char *name
);
320 DnsResourceRecord
* dns_resource_record_ref(DnsResourceRecord
*rr
);
321 DnsResourceRecord
* dns_resource_record_unref(DnsResourceRecord
*rr
);
323 #define DNS_RR_REPLACE(a, b) \
325 typeof(a)* _a = &(a); \
326 typeof(b) _b = (b); \
327 dns_resource_record_unref(*_a); \
331 int dns_resource_record_new_reverse(DnsResourceRecord
**ret
, int family
, const union in_addr_union
*address
, const char *name
);
332 int dns_resource_record_new_address(DnsResourceRecord
**ret
, int family
, const union in_addr_union
*address
, const char *name
);
333 int dns_resource_record_equal(const DnsResourceRecord
*a
, const DnsResourceRecord
*b
);
334 int dns_resource_record_payload_equal(const DnsResourceRecord
*a
, const DnsResourceRecord
*b
);
336 const char* dns_resource_record_to_string(DnsResourceRecord
*rr
);
337 DnsResourceRecord
*dns_resource_record_copy(DnsResourceRecord
*rr
);
338 DEFINE_TRIVIAL_CLEANUP_FUNC(DnsResourceRecord
*, dns_resource_record_unref
);
340 int dns_resource_record_to_wire_format(DnsResourceRecord
*rr
, bool canonical
);
342 int dns_resource_record_signer(DnsResourceRecord
*rr
, const char **ret
);
343 int dns_resource_record_source(DnsResourceRecord
*rr
, const char **ret
);
344 int dns_resource_record_is_signer(DnsResourceRecord
*rr
, const char *zone
);
345 int dns_resource_record_is_synthetic(DnsResourceRecord
*rr
);
347 int dns_resource_record_clamp_ttl(DnsResourceRecord
**rr
, uint32_t max_ttl
);
349 bool dns_resource_record_is_link_local_address(DnsResourceRecord
*rr
);
351 int dns_resource_record_get_cname_target(DnsResourceKey
*key
, DnsResourceRecord
*cname
, char **ret
);
353 DnsTxtItem
*dns_txt_item_free_all(DnsTxtItem
*i
);
354 bool dns_txt_item_equal(DnsTxtItem
*a
, DnsTxtItem
*b
);
355 DnsTxtItem
*dns_txt_item_copy(DnsTxtItem
*i
);
356 int dns_txt_item_new_empty(DnsTxtItem
**ret
);
358 void dns_resource_record_hash_func(const DnsResourceRecord
*i
, struct siphash
*state
);
359 int dns_resource_record_compare_func(const DnsResourceRecord
*x
, const DnsResourceRecord
*y
);
361 extern const struct hash_ops dns_resource_key_hash_ops
;
362 extern const struct hash_ops dns_resource_record_hash_ops
;
364 int dnssec_algorithm_to_string_alloc(int i
, char **ret
);
365 int dnssec_algorithm_from_string(const char *s
) _pure_
;
367 int dnssec_digest_to_string_alloc(int i
, char **ret
);
368 int dnssec_digest_from_string(const char *s
) _pure_
;