ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Add functions to set CDNSKEY publication

Browse Source 
Add kasp API functions to enable/disable publication of CDNSKEY records.
This commit is contained in:
Matthijs Mekking
2023-05-11 14:00:58 +02:00
parent b5f8c76811
commit 7960afcc0f
2 changed files with 43 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
lib/dns/include/dns/kasp.h
View File

@@ -86,6 +86,7 @@ struct dns_kasp {
uint32_t signatures_validity_dnskey;
/* Configuration: Keys */
bool cdnskey;
dns_kasp_digestlist_t digests;
dns_kasp_keylist_t keys;
dns_ttl_t dnskey_ttl;
@@ -718,10 +719,33 @@ dns_kasp_setnsec3param(dns_kasp_t *kasp, uint8_t iter, bool optout,
*
*/
bool
dns_kasp_cdnskey(dns_kasp_t *kasp);
/*%<
* Do we need to publish a CDNSKEY?
*
* Requires:
*
*\li 'kasp' is a valid, frozen kasp.
*
*/
void
dns_kasp_setcdnskey(dns_kasp_t *kasp, bool cdnskey);
/*%<
* Set to enable publication of CDNSKEY records.
*
* Requires:
*
*\li 'kasp' is a valid, unfrozen kasp.
*
*/
dns_kasp_digestlist_t
dns_kasp_digests(dns_kasp_t *kasp);
/*%<
* Get the list of kasp CDS digest types.
* Get the list of kasp CDS digest types. This determines which CDS records
* should be published.
*
* Requires:
*
@@ -738,7 +762,8 @@ dns_kasp_digests(dns_kasp_t *kasp);
void
dns_kasp_adddigest(dns_kasp_t *kasp, dns_dsdigest_t alg);
/*%<
* Add a digest type.
* Add a CDS digest type, this will enable publication of a CDS record with
* digest type 'alg'.
*
* Requires:
*

16
lib/dns/kasp.c
View File

@@ -519,6 +519,22 @@ dns_kasp_setnsec3param(dns_kasp_t *kasp, uint8_t iter, bool optout,
kasp->nsec3param.saltlen = saltlen;
}
bool
dns_kasp_cdnskey(dns_kasp_t *kasp) {
REQUIRE(kasp != NULL);
REQUIRE(kasp->frozen);
return kasp->cdnskey;
}
void
dns_kasp_setcdnskey(dns_kasp_t *kasp, bool cdnskey) {
REQUIRE(kasp != NULL);
REQUIRE(!kasp->frozen);
kasp->cdnskey = cdnskey;
}
dns_kasp_digestlist_t
dns_kasp_digests(dns_kasp_t *kasp) {
REQUIRE(DNS_KASP_VALID(kasp));