From: Vladimír Čunát <vladimir.cunat@nic.cz>
Date: Fri, 24 Oct 2025 15:18:07 +0000 (+0200)
Subject: treewide: centralize inclusion of libdnssec headers
X-Git-Tag: v5.7.7~5^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=45ffc8f97caa847a91de46128af3060af3060410;p=thirdparty%2Fknot-resolver.git

treewide: centralize inclusion of libdnssec headers

(cherry picked from commit d0375933dd0805e77ebe53765c51c8c8afa4a29e)
---

diff --git a/daemon/zimport.c b/daemon/zimport.c
index 197224b9b..424d833fd 100644
--- a/daemon/zimport.c
+++ b/daemon/zimport.c
@@ -32,12 +32,10 @@
 #include <libknot/rrset.h>
 #include <libzscanner/scanner.h>
 
-#include <libdnssec/digest.h>
 #if KNOT_VERSION_HEX < 0x030200
 	#define KNOT_ZONEMD_ALGORITHM_SHA384 KNOT_ZONEMD_ALORITHM_SHA384
 	#define KNOT_ZONEMD_ALGORITHM_SHA512 KNOT_ZONEMD_ALORITHM_SHA512
 #endif
-
 #include "daemon/worker.h"
 #include "lib/dnssec/ta.h"
 #include "lib/dnssec.h"
diff --git a/lib/cache/impl.h b/lib/cache/impl.h
index 305f36eb9..ebc4b64a7 100644
--- a/lib/cache/impl.h
+++ b/lib/cache/impl.h
@@ -11,8 +11,7 @@
 #include <stdbool.h>
 #include <stdint.h>
 
-#include <libdnssec/error.h>
-#include <libdnssec/nsec.h>
+#include "lib/dnssec.h"
 #include <libknot/consts.h>
 #include <libknot/db/db.h>
 #include <libknot/dname.h>
diff --git a/lib/dnssec.c b/lib/dnssec.c
index eb4b33b1a..2a19c8fa9 100644
--- a/lib/dnssec.c
+++ b/lib/dnssec.c
@@ -2,11 +2,6 @@
  *  SPDX-License-Identifier: GPL-3.0-or-later
  */
 
-#include <libdnssec/binary.h>
-#include <libdnssec/crypto.h>
-#include <libdnssec/error.h>
-#include <libdnssec/key.h>
-#include <libdnssec/sign.h>
 #include <libknot/descriptor.h>
 #include <libknot/packet/wire.h>
 #include <libknot/rdataset.h>
diff --git a/lib/dnssec.h b/lib/dnssec.h
index ca737cfe1..107fe3477 100644
--- a/lib/dnssec.h
+++ b/lib/dnssec.h
@@ -8,6 +8,10 @@
 #include "lib/utils.h"
 #include <libknot/packet/pkt.h>
 
+// This is the central place in Knot Resolver which includes the (former) libdnssec.
+#include <libdnssec/dnssec.h>
+#include <libdnssec/digest.h>
+
 /**
  * Initialise cryptographic back-end.
  */
diff --git a/lib/dnssec/nsec.c b/lib/dnssec/nsec.c
index 07672cc8c..0f1c11f7f 100644
--- a/lib/dnssec/nsec.c
+++ b/lib/dnssec/nsec.c
@@ -10,10 +10,9 @@
 #include <libknot/rrset.h>
 #include <libknot/rrtype/nsec.h>
 #include <libknot/rrtype/rrsig.h>
-#include <libdnssec/error.h>
-#include <libdnssec/nsec.h>
 
 #include "lib/defines.h"
+#include "lib/dnssec.h"
 #include "lib/dnssec/nsec.h"
 #include "lib/utils.h"
 #include "lib/resolve.h"
diff --git a/lib/dnssec/nsec3.c b/lib/dnssec/nsec3.c
index 7db93dc58..2e9363d10 100644
--- a/lib/dnssec/nsec3.c
+++ b/lib/dnssec/nsec3.c
@@ -4,15 +4,13 @@
 
 #include <string.h>
 
-#include <libdnssec/binary.h>
-#include <libdnssec/error.h>
-#include <libdnssec/nsec.h>
 #include <libknot/descriptor.h>
 #include <contrib/base32hex.h>
 #include <libknot/rrset.h>
 #include <libknot/rrtype/nsec3.h>
 
 #include "lib/defines.h"
+#include "lib/dnssec.h"
 #include "lib/dnssec/nsec.h"
 #include "lib/dnssec/nsec3.h"
 #include "lib/utils.h"
diff --git a/lib/dnssec/nsec3.h b/lib/dnssec/nsec3.h
index 1a3a6d60b..3ecac8bc4 100644
--- a/lib/dnssec/nsec3.h
+++ b/lib/dnssec/nsec3.h
@@ -6,7 +6,7 @@
 
 #include <libknot/packet/pkt.h>
 #include <libknot/rrtype/nsec3.h>
-#include <libdnssec/nsec.h>
+#include "lib/dnssec.h"
 
 
 static inline unsigned int kr_nsec3_price(unsigned int iterations, unsigned int salt_len)
diff --git a/lib/dnssec/signature.c b/lib/dnssec/signature.c
index 12ed09ed1..3dfc78a90 100644
--- a/lib/dnssec/signature.c
+++ b/lib/dnssec/signature.c
@@ -5,9 +5,6 @@
 #include <arpa/inet.h>
 #include <string.h>
 
-#include <libdnssec/error.h>
-#include <libdnssec/key.h>
-#include <libdnssec/sign.h>
 #include <libknot/descriptor.h>
 #include <libknot/packet/rrset-wire.h>
 #include <libknot/packet/wire.h>
@@ -18,6 +15,7 @@
 
 #include "lib/defines.h"
 #include "lib/utils.h"
+#include "lib/dnssec.h"
 #include "lib/dnssec/signature.h"
 
 static int authenticate_ds(const dnssec_key_t *key, dnssec_binary_t *ds_rdata, uint8_t digest_type)
diff --git a/lib/dnssec/signature.h b/lib/dnssec/signature.h
index 1cc6c8f61..4d193efbf 100644
--- a/lib/dnssec/signature.h
+++ b/lib/dnssec/signature.h
@@ -4,7 +4,7 @@
 
 #pragma once
 
-#include <libdnssec/key.h>
+#include "lib/dnssec.h"
 #include <libknot/rrset.h>
 
 /**
diff --git a/lib/dnssec/ta.c b/lib/dnssec/ta.c
index 13659c1b9..8dea8b60f 100644
--- a/lib/dnssec/ta.c
+++ b/lib/dnssec/ta.c
@@ -7,8 +7,6 @@
 #include <libknot/rdataset.h>
 #include <libknot/rrset.h>
 #include <libknot/packet/wire.h>
-#include <libdnssec/key.h>
-#include <libdnssec/error.h>
 
 #include "lib/defines.h"
 #include "lib/dnssec.h"
diff --git a/lib/layer/validate.c b/lib/layer/validate.c
index ea613afcf..3dc29d796 100644
--- a/lib/layer/validate.c
+++ b/lib/layer/validate.c
@@ -11,7 +11,6 @@
 #include <libknot/packet/wire.h>
 #include <libknot/rrtype/rdname.h>
 #include <libknot/rrtype/rrsig.h>
-#include <libdnssec/error.h>
 
 #include "lib/dnssec/nsec.h"
 #include "lib/dnssec/nsec3.h"