NAME ldnsdnssecverifydenial, ldnsdnssecverifydenialnsec3 SYNOPSIS
#include
#include
#include
ldnsstatus ldnsdnssecverifydenial(ldnsrr *rr, ldnsrrlist *nsecs, ldnsrrlist *rrsigs); ldnsstatus ldnsdnssecverifydenialnsec3(ldnsrr *rr, ldnsrrlist *nsecs, ldnsrrlist *rrsigs, ldnspktrcode packetrcode, ldnsrrtype packetqtype, bool packetnodata); DESCRIPTION ldnsdnssecverifydenial() denial is not just a river in egypt rr: The (query) RR to check the denial of existence for nsecs: The list of NSEC RRs that are supposed to deny the exis‐ tence of the RR rrsigs: The RRSIG RR covering the NSEC RRs Returns LDNSSTATUSOK if the NSEC RRs deny the existence, error code containing the reason they do not otherwise ldnsdnssecverifydenialnsec3() Denial of existence using NSEC3 records Since NSEC3 is a bit more complicated than normal denial, some context arguments are needed rr: The (query) RR to check the denial of existence for nsecs: The list of NSEC3 RRs that are supposed to deny the exis‐ tence of the RR rrsigs: The RRSIG rr covering the NSEC RRs packetrcode: The RCODE value of the packet that provided the NSEC3 RRs packetqtype: The original query RR type packetnodata: True if the providing packet had an empty ANSWER section Returns LDNSSTATUSOK if the NSEC3 RRs deny the existence, error code containing the reason they do not otherwise AUTHOR The ldns team at NLnet Labs. Which consists out of Jelte Jansen and Miek Gieben. REPORTING BUGS Please report bugs to ldns-team@nlnetlabs.nl or in our bugzilla at http://www.nlnetlabs.nl/bugs/index.html COPYRIGHT
Copyright (c) 2004 - 2006 NLnet Labs. Licensed under the BSD License. There is NO warranty; not even for MER‐ CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. SEE ALSO ldnsdnssectrusttree, ldnsdnssecdatachain. And perldoc Net::DNS, RFC1034, RFC1035, RFC4033, RFC4034 and RFC4035. REMARKS This manpage was automaticly generated from the ldns source code by use of Doxygen and some perl. 30 May 2006 ldns(3)