dnssec: make a function static (unused outside)

diff --git a/lib/dnssec.c b/lib/dnssec.c
index 5fb56be700585c5175a446d260f2bb7502de387b..98a89d63ada279a979695f9201d1c1dc7ea57c25 100644 (file)
--- a/lib/dnssec.c
+++ b/lib/dnssec.c
@@ -36,6 +36,10 @@
 #include "lib/dnssec.h"
 #include "lib/resolve.h"
 
+/* forward */
+static int kr_rrset_validate_with_key(kr_rrset_validation_ctx_t *vctx,
+       const knot_rrset_t *covered, size_t key_pos, const struct dseckey *key);
+
 void kr_crypto_init(void)
 {
        dnssec_crypto_init();
@@ -147,7 +151,16 @@ int kr_rrset_validate(kr_rrset_validation_ctx_t *vctx, const knot_rrset_t *cover
        return kr_error(ENOENT);
 }
 
-int kr_rrset_validate_with_key(kr_rrset_validation_ctx_t *vctx,
+/**
+ * Validate RRSet using a specific key.
+ * @param vctx    Pointer to validation context.
+ * @param covered RRSet covered by a signature. It must be in canonical format.
+ * @param key_pos Position of the key to be validated with.
+ * @param key     Key to be used to validate.
+ *               If NULL, then key from DNSKEY RRSet is used.
+ * @return        0 or error code, same as vctx->result.
+ */
+static int kr_rrset_validate_with_key(kr_rrset_validation_ctx_t *vctx,
                                const knot_rrset_t *covered,
                                size_t key_pos, const struct dseckey *key)
 {

diff --git a/lib/dnssec.h b/lib/dnssec.h
index ff173f6920e95dcb31c5e2abf7192ba742c95389..7c6d2a52ab0948ff8c9ae8235026a0fcb6e55e19 100644 (file)
--- a/lib/dnssec.h
+++ b/lib/dnssec.h
@@ -71,18 +71,6 @@ typedef struct kr_rrset_validation_ctx kr_rrset_validation_ctx_t;
 int kr_rrset_validate(kr_rrset_validation_ctx_t *vctx,
                        const knot_rrset_t *covered);
 
-/**
- * Validate RRSet using a specific key.
- * @param vctx    Pointer to validation context.
- * @param covered RRSet covered by a signature. It must be in canonical format.
- * @param key_pos Position of the key to be validated with.
- * @param key     Key to be used to validate.
- *               If NULL, then key from DNSKEY RRSet is used.
- * @return        0 or error code, same as vctx->result.
- */
-int kr_rrset_validate_with_key(kr_rrset_validation_ctx_t *vctx,
-                               const knot_rrset_t *covered,
-                               size_t key_pos, const struct dseckey *key);
 /**
  * Check whether the DNSKEY rrset matches the supplied trust anchor RRSet.
  * @param vctx  Pointer to validation context.