]> git.ipfire.org Git - thirdparty/systemd.git/commit - src/resolve/resolved-dns-dnssec.c
resolved: when validating an RRset, store information about the synthesizing source...
authorLennart Poettering <lennart@poettering.net>
Thu, 14 Jan 2016 17:03:03 +0000 (18:03 +0100)
committerLennart Poettering <lennart@poettering.net>
Sun, 17 Jan 2016 19:47:45 +0000 (20:47 +0100)
commit97c67192eadaffe67b803ec5b991a92bb1137d0b
treefe221f5cc846004d462e8b4e2694041f0d840ba2
parent1827a1582cbd9dcd1ce337b2404ec4425cb0dfd0
resolved: when validating an RRset, store information about the synthesizing source and zone in each RR

Having this information available is useful when we need to check whether various RRs are suitable for proofs. This
information is stored in the RRs as number of labels to skip from the beginning of the owner name to reach the
synthesizing source/signer. Simple accessor calls are then added to retrieve the signer/source from the RR using this
information.

This also moves validation of a a number of RRSIG parameters into a new call dnssec_rrsig_prepare() that as side-effect
initializes the two numeric values.
src/resolve/resolved-dns-dnssec.c
src/resolve/resolved-dns-rr.c
src/resolve/resolved-dns-rr.h
src/resolve/resolved-dns-transaction.c
src/shared/dns-domain.c
src/shared/dns-domain.h