allow rr_list *signature paramater

diff --git a/dnssec.c b/dnssec.c
index b6e7db4f6f56e146f7ac48cc182b52818f41ca53..02793820958250e2bf001a005d0dfc4ab74ae8da 100644 (file)
--- a/dnssec.c
+++ b/dnssec.c
@@ -69,6 +69,29 @@ ldns_keytag(ldns_rr *key)
        }
 }
 
+/**
+ * verify an rrsig rrset
+ */
+
+bool
+ldns_verify(ldns_rr_list *rrset, ldns_rr_list *rrsig, ldns_rr_list *keys)
+{
+       uint16_t i;
+       bool result;
+
+       result = false;
+       for (i = 0; i < ldns_rr_list_rr_count(rrsig); i++) {
+               result = ldns_verify_rrsig(rrset, 
+                               ldns_rr_list_rr(rrsig, i),
+                               keys);
+               if (result) {
+                       break;
+               }
+       }
+       return result;
+}
+
+
 /**
  * verify an rrsig 
  * \param[in] rrset the rrset to check

diff --git a/ldns/dnssec.h b/ldns/dnssec.h
index d3cd31bbe1442e057d04c4c357e286e523cf18fb..f0dea47954916adad6589cb8f214d2b474ec1d33 100644 (file)
--- a/ldns/dnssec.h
+++ b/ldns/dnssec.h
@@ -29,6 +29,7 @@ bool ldns_verify_rrsig_dsa(ldns_buffer *, ldns_buffer *, ldns_buffer *);
 bool ldns_verify_rrsig_rsasha1(ldns_buffer *, ldns_buffer *, ldns_buffer *);
 bool ldns_verify_rrsig_rsamd5(ldns_buffer *, ldns_buffer *, ldns_buffer *);
 bool ldns_verify_rrsig(ldns_rr_list *, ldns_rr *, ldns_rr_list *);
+bool ldns_verify(ldns_rr_list *, ldns_rr_list *, ldns_rr_list *);      
 uint16_t ldns_keytag(ldns_rr *);
 DSA *ldns_key_buf2dsa(ldns_buffer *);
 RSA *ldns_key_buf2rsa(ldns_buffer *);