]>
Commit | Line | Data |
---|---|---|
1 | /* | |
2 | * This file is part of PowerDNS or dnsdist. | |
3 | * Copyright -- PowerDNS.COM B.V. and its contributors | |
4 | * | |
5 | * This program is free software; you can redistribute it and/or modify | |
6 | * it under the terms of version 2 of the GNU General Public License as | |
7 | * published by the Free Software Foundation. | |
8 | * | |
9 | * In addition, for the avoidance of any doubt, permission is granted to | |
10 | * link this program with OpenSSL and to (re)distribute the binaries | |
11 | * produced as the result of such linking. | |
12 | * | |
13 | * This program is distributed in the hope that it will be useful, | |
14 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
15 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
16 | * GNU General Public License for more details. | |
17 | * | |
18 | * You should have received a copy of the GNU General Public License | |
19 | * along with this program; if not, write to the Free Software | |
20 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. | |
21 | */ | |
22 | #pragma once | |
23 | #include "namespaces.hh" | |
24 | #include "validate.hh" | |
25 | #include "logger.hh" | |
26 | ||
27 | /* Off: 3.x behaviour, we do no DNSSEC, no EDNS | |
28 | ProcessNoValidate: we gather DNSSEC records on all queries, but we will never validate | |
29 | Process: we gather DNSSEC records on all queries, if you do ad=1, we'll validate for you (unless you set cd=1) | |
30 | ValidateForLog: Process + validate all answers, but only log failures | |
31 | ValidateAll: DNSSEC issue -> servfail | |
32 | */ | |
33 | ||
34 | enum class DNSSECMode { Off, Process, ProcessNoValidate, ValidateForLog, ValidateAll }; | |
35 | extern DNSSECMode g_dnssecmode; | |
36 | extern bool g_dnssecLogBogus; | |
37 | ||
38 | bool checkDNSSECDisabled(); | |
39 | bool warnIfDNSSECDisabled(const string& msg); | |
40 | vState increaseDNSSECStateCounter(const vState& state); | |
41 | bool updateTrustAnchorsFromFile(const std::string &fname, map<DNSName, dsmap_t> &dsAnchors); |