src/shared/resolve-util.h

   1 /*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
   2
   3 #pragma once
   4
   5 /***
   6   This file is part of systemd.
   7
   8   Copyright 2016 Lennart Poettering
   9
  10   systemd is free software; you can redistribute it and/or modify it
  11   under the terms of the GNU Lesser General Public License as published by
  12   the Free Software Foundation; either version 2.1 of the License, or
  13   (at your option) any later version.
  14
  15   systemd is distributed in the hope that it will be useful, but
  16   WITHOUT ANY WARRANTY; without even the implied warranty of
  17   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  18   Lesser General Public License for more details.
  19
  20   You should have received a copy of the GNU Lesser General Public License
  21   along with systemd; If not, see <http://www.gnu.org/licenses/>.
  22 ***/
  23
  24 #include "macro.h"
  25
  26 typedef enum ResolveSupport ResolveSupport;
  27 typedef enum DnssecMode DnssecMode;
  28
  29 enum ResolveSupport {
  30         RESOLVE_SUPPORT_NO,
  31         RESOLVE_SUPPORT_YES,
  32         RESOLVE_SUPPORT_RESOLVE,
  33         _RESOLVE_SUPPORT_MAX,
  34         _RESOLVE_SUPPORT_INVALID = -1
  35 };
  36
  37 enum DnssecMode {
  38         /* No DNSSEC validation is done */
  39         DNSSEC_NO,
  40
  41         /* Validate locally, if the server knows DO, but if not,
  42          * don't. Don't trust the AD bit. If the server doesn't do
  43          * DNSSEC properly, downgrade to non-DNSSEC operation. Of
  44          * course, we then are vulnerable to a downgrade attack, but
  45          * that's life and what is configured. */
  46         DNSSEC_ALLOW_DOWNGRADE,
  47
  48         /* Insist on DNSSEC server support, and rather fail than downgrading. */
  49         DNSSEC_YES,
  50
  51         _DNSSEC_MODE_MAX,
  52         _DNSSEC_MODE_INVALID = -1
  53 };
  54
  55 int config_parse_resolve_support(const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata);
  56 int config_parse_dnssec_mode(const char *unit, const char *filename, unsigned line, const char *section, unsigned section_line, const char *lvalue, int ltype, const char *rvalue, void *data, void *userdata);
  57
  58 const char* resolve_support_to_string(ResolveSupport p) _const_;
  59 ResolveSupport resolve_support_from_string(const char *s) _pure_;
  60
  61 const char* dnssec_mode_to_string(DnssecMode p) _const_;
  62 DnssecMode dnssec_mode_from_string(const char *s) _pure_;