NAME ldnsdnssectrusttreenew, ldnsdnssectrusttreefree, ldnsdnssectrusttreedepth, ldnsdnssecderivetrusttree, ldnsdnssectrusttreecontainskeys, ldnsdnssectrusttreeprint, ldnsdnssectrusttreeprintsm, ldnsdnssectrusttreeaddparent, ldnsdnssecderivetrusttreenormalrrset, ldnsdnssecderivetrusttreednskeyrrset, ldnsdnssecderivetrusttreedsrrset, ldnsdnssecderivetrusttreenosig SYNOPSIS
#include
#include
#include
ldnsdnssectrusttree* ldnsdnssectrusttreenew(); void ldnsdnssectrusttreefree(ldnsdnssectrusttree *tree); sizet ldnsdnssectrusttreedepth(ldnsdnssectrusttree *tree); ldnsdnssectrusttree* ldnsdnssecderivetrusttree( ldnsdnssecdatachain *datachain, ldnsrr *rr); ldnsstatus ldnsdnssectrusttreecontainskeys( ldnsdnssectrusttree *tree, ldnsrrlist *keys); void ldnsdnssectrusttreeprint(FILE *out, ldnsdnssectrusttree *tree, sizet tabs, bool extended); ldnsdnssectrusttreeprintsm(); ldnsstatus ldnsdnssectrusttreeaddparent(ldnsdnssectrusttree *tree, const ldnsdnssectrusttree *parent, const ldnsrr *parentsig‐ nature, const ldnsstatus parentstatus); void ldnsdnssecderivetrusttreenormalrrset( ldnsdnssectrusttree *newtree, ldnsdnssecdatachain *datachain, ldnsrr *cursigrr); void ldnsdnssecderivetrusttreednskeyrrset( ldnsdnssectrusttree *newtree, ldnsdnssecdatachain *datachain, ldnsrr *currr, ldnsrr *cursigrr); void ldnsdnssecderivetrusttreedsrrset( ldnsdnssectrusttree *newtree, ldnsdnssecdatachain *datachain, ldnsrr *currr); void ldnsdnssecderivetrusttreenosig( ldnsdnssectrusttree *newtree, ldnsdnssecdatachain *datachain); DESCRIPTION ldnsdnssectrusttreenew() Creates a new (empty) dnssectrusttree structure Returns ldnsdnssectrusttree * ldnsdnssectrusttreefree() Frees the dnssectrusttree recursively There is no deep free; all data in the trust tree consists of pointers to a datachain tree: The tree to free ldnsdnssectrusttreedepth() returns the depth of the trust tree tree: tree to calculate the depth of Returns The depth of the tree ldnsdnssecderivetrusttree() Generates a dnssectrusttree for the given rr from the given datachain This does not clone the actual data; Don't free the datachain before you are done with this tree *datachain: The chain to derive the trust tree from *rr: The RR this tree will be about Returns ldnsdnssectrusttree * ldnsdnssectrusttreecontainskeys() Returns OK if there is a trusted path in the tree to one of the DNSKEY or DS RRs in the given list \param *tree The trust tree so search \param *keys A ldnsrrlist of DNSKEY and DS rrs to look for Returns LDNSSTATUSOK if there is a trusted path to one of the keys, or the *first* error encountered if there were no paths ldnsdnssectrusttreeprint() Prints the dnssectrusttree structure to the given file stream. If a link status is not LDNSSTATUSOK; the status and relevant signatures are printed too *out: The file stream to print to tree: The trust tree to print tabs: Prepend each line with tabs*2 spaces extended: If true, add little explanation lines to the output ldnsdnssectrusttreeprintsm() ldnsdnssectrusttreeaddparent() Adds a trust tree as a parent for the given trust tree *tree: The tree to add the parent to *parent: The parent tree to add *parentsignature: The RRSIG relevant to this parent/child con‐ nection parentstatus: The DNSSEC status for this parent, child and RRSIG Returns LDNSSTATUSOK if the addition succeeds, error otherwise ldnsdnssecderivetrusttreenormalrrset() Sub function for derivetrusttree that is used for a 'normal' rrset newtree: The trust tree that we are building datachain: The data chain containing the data for the trust tree cursigrr: The currently relevant signature ldnsdnssecderivetrusttreednskeyrrset() Sub function for derivetrusttree that is used for DNSKEY rrsets newtree: The trust tree that we are building datachain: The data chain containing the data for the trust tree currr: The currently relevant DNSKEY RR cursigrr: The currently relevant signature ldnsdnssecderivetrusttreedsrrset() Sub function for derivetrusttree that is used for DS rrsets newtree: The trust tree that we are building datachain: The data chain containing the data for the trust tree currr: The currently relevant DS RR ldnsdnssecderivetrusttreenosig() Sub function for derivetrusttree that is used when there are no signatures newtree: The trust tree that we are building datachain: The data chain containing the data for the trust tree AUTHOR The ldns team at NLnet Labs. Which consists out of Jelte Jansen and Miek Gieben. REPORTING BUGS Please report bugs to ldns-team@nlnetlabs.nl or in our bugzilla at http://www.nlnetlabs.nl/bugs/index.html COPYRIGHT
Copyright (c) 2004 - 2006 NLnet Labs. Licensed under the BSD License. There is NO warranty; not even for MER‐ CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. SEE ALSO ldnsdnssecdatachain, ldnsdnssectrusttree. And perldoc Net::DNS, RFC1034, RFC1035, RFC4033, RFC4034 and RFC4035. REMARKS This manpage was automaticly generated from the ldns source code by use of Doxygen and some perl. 30 May 2006 ldns(3)