]>
Commit | Line | Data |
---|---|---|
12471842 PL |
1 | /* |
2 | * This file is part of PowerDNS or dnsdist. | |
3 | * Copyright -- PowerDNS.COM B.V. and its contributors | |
4 | * | |
5 | * This program is free software; you can redistribute it and/or modify | |
6 | * it under the terms of version 2 of the GNU General Public License as | |
7 | * published by the Free Software Foundation. | |
8 | * | |
9 | * In addition, for the avoidance of any doubt, permission is granted to | |
10 | * link this program with OpenSSL and to (re)distribute the binaries | |
11 | * produced as the result of such linking. | |
12 | * | |
13 | * This program is distributed in the hope that it will be useful, | |
14 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
15 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
16 | * GNU General Public License for more details. | |
17 | * | |
18 | * You should have received a copy of the GNU General Public License | |
19 | * along with this program; if not, write to the Free Software | |
20 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. | |
21 | */ | |
b3f0ed10 | 22 | #pragma once |
b3f0ed10 | 23 | #include "namespaces.hh" |
e2fec75a | 24 | #include "validate.hh" |
e48c6b8a | 25 | #include "logger.hh" |
12ce523e | 26 | |
27 | /* Off: 3.x behaviour, we do no DNSSEC, no EDNS | |
a6415142 PL |
28 | ProcessNoValidate: we gather DNSSEC records on all queries, but we will never validate |
29 | Process: we gather DNSSEC records on all queries, if you do ad=1, we'll validate for you (unless you set cd=1) | |
12ce523e | 30 | ValidateForLog: Process + validate all answers, but only log failures |
31 | ValidateAll: DNSSEC issue -> servfail | |
32 | */ | |
33 | ||
a6415142 | 34 | enum class DNSSECMode { Off, Process, ProcessNoValidate, ValidateForLog, ValidateAll }; |
12ce523e | 35 | extern DNSSECMode g_dnssecmode; |
c87e1876 | 36 | extern bool g_dnssecLogBogus; |
e48c6b8a | 37 | |
4865b6cb PL |
38 | bool checkDNSSECDisabled(); |
39 | bool warnIfDNSSECDisabled(const string& msg); | |
0c43f455 | 40 | vState increaseDNSSECStateCounter(const vState& state); |
e4ae55e5 | 41 | bool updateTrustAnchorsFromFile(const std::string &fname, map<DNSName, dsmap_t> &dsAnchors); |