ldns(3) Library Functions Manual ldns(3)

NAME
       ldnsdnssecdatachain,                  ldnsdnssecdatachainstruct,
       ldnsdnssectrusttree


SYNOPSIS
       #include 
       #include 

       #include 

        ldnsdnssecdatachainstruct();

DESCRIPTION
       ldnsdnssecdatachain
              Chain structure that contains all DNSSEC data needed to
              verify an rrset
              struct ldnsdnssecdatachainstruct
              {
                   ldnsrrlist *rrset;
                   ldnsrrlist *signatures;
                   ldnsrrtype parenttype;
                   ldnsdnssecdatachain *parent;
                   ldnspktrcode packetrcode;
                   ldnsrrtype packetqtype;
                   bool packetnodata;
              };

              typedef           struct           ldnsdnssecdatachainstruct
              ldnsdnssecdatachain;

       ldnsdnssecdatachainstruct()

       ldnsdnssectrusttree
              Tree structure that contains the relation of DNSSEC data,
              and their cryptographic status.

              This tree is derived from a datachain, and can be used
              to look whether there is a connection between an RRSET
              and a trusted key. The tree only contains pointers to the
              datachain, and therefore one should *never* free() the
              datachain when there is still a trust tree derived from
              that chain.

              Example tree:
                  key   key    key
                    \    |    /
                     \   |   /
                      \  |  /
                         ds
                         |
                        key
                         |
                        key
                         |
                         rr

              For each signature there is a parent; if the parent
              pointer is null, it couldn't be found and there was no
              denial; otherwise is a tree which contains either a
              DNSKEY, a DS, or a NSEC rr
              struct ldnsdnssectrusttreestruct
              {
                   ldnsrr *rr;
                   /* the complete rrset this rr was in */
                   ldnsrrlist *rrset;
                   ldnsdnssectrusttree                                *par‐
              ents[LDNSDNSSECTRUSTTREEMAXPARENTS];
                   ldnsstatus   parentstatus[LDNSDNSSECTRUSTTREEMAXPAR‐
              ENTS];
                   /** for debugging, add signatures too (you might want
                       those if they contain errors) */
                   ldnsrr   *parentsignature[LDNSDNSSECTRUSTTREEMAXPAR‐
              ENTS];
                   sizet parentcount;
              };

              typedef           struct           ldnsdnssectrusttreestruct
              ldnsdnssectrusttree;

AUTHOR
       The  ldns  team  at  NLnet Labs. Which consists out of Jelte Jansen and
       Miek Gieben.


REPORTING BUGS
       Please report bugs to ldns-team@nlnetlabs.nl  or  in  our  bugzilla  at
       http://www.nlnetlabs.nl/bugs/index.html


COPYRIGHT
       Copyright (c) 2004 - 2006 NLnet Labs.

       Licensed under the BSD License. There is NO warranty; not even for MER‐
       CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.


SEE ALSO
       ldnsdnssecdatachainnew,                 ldnsdnssectrusttreenew,
       ldnsdnssecverifydenial.   And  perldoc  Net::DNS,  RFC1034, RFC1035,
       RFC4033, RFC4034  and RFC4035.

REMARKS
       This manpage was automaticly generated from the ldns source code by use
       of Doxygen and some perl.



                                  30 May 2006                          ldns(3)