From: W.C.A. Wijngaards <wouter@nlnetlabs.nl>
Date: Mon, 16 Jun 2025 14:59:53 +0000 (+0200)
Subject: - xfr-tsig, tsig_verify return failure comment improved.
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=497161f72f628a279dfbc521c94e66e5bdb6f551;p=thirdparty%2Funbound.git

- xfr-tsig, tsig_verify return failure comment improved.
---

diff --git a/util/tsig.h b/util/tsig.h
index b6ac605dd..d0d4226ca 100644
--- a/util/tsig.h
+++ b/util/tsig.h
@@ -178,7 +178,9 @@ struct tsig_algorithm* tsig_algo_find_name(const char* algo_name);
 
 /**
  * Verify pkt with the name (domain name), algorithm and key.
- * out 0 on success, an error code otherwise.
+ * out 0 on success, on failure:
+ * -1 for malformed, no tsig RR, or too large for buffer.
+ * >0 rcode with a TSIG error code otherwise.
  */
 int tsig_verify(struct sldns_buffer* pkt, const uint8_t* name,
 	const uint8_t* alg, const uint8_t* secret, size_t secret_len,