NAME ldnsdnsseczonesign, ldnsdnsseczonesignnsec3, ldnsdnsseczonemarkglue, ldnsdnssecnamenodenextnonglue, ldnsdnsseczonecreatensecs, ldnsdnssecremovesignatures, ldnsdnsseczonecreaterrsigs SYNOPSIS
#include
#include
#include
ldnsstatus ldnsdnsseczonesign(ldnsdnsseczone *zone, ldnsrrlist *newrrs, ldnskeylist *keylist, int (*func)(ldnsrr *, void *), void *arg); ldnsstatus ldnsdnsseczonesignnsec3(ldnsdnsseczone *zone, ldnsrrlist *newrrs, ldnskeylist *keylist, int (*func)(ldnsrr *, void *), void *arg, uint8t algorithm, uint8t flags, uint16t itera‐ tions, uint8t saltlength, uint8t *salt); ldnsdnsseczonemarkglue(); ldnsrbnodet* ldnsdnssecnamenodenextnonglue(ldnsrbnodet *node); ldnsstatus ldnsdnsseczonecreatensecs(ldnsdnsseczone *zone, ldnsrrlist *newrrs); ldnsdnssecrrs* ldnsdnssecremovesignatures(ldnsdnssecrrs *signa‐ tures, ldnskeylist *keylist, int (*func)(ldnsrr *, void *), void *arg); ldnsstatus ldnsdnsseczonecreaterrsigs(ldnsdnsseczone *zone, ldnsrrlist *newrrs, ldnskeylist *keylist, int (*func)(ldnsrr *, void*), void *arg); DESCRIPTION ldnsdnsseczonesign() signs the given zone with the given keys zone: the zone to sign keylist: the list of keys to sign the zone with newrrs: newly created resource records are added to this list, to free them later func: callback function that decides what to do with old signa‐ tures This function takes an ldnsrr* and an optional void *arg argument, and returns one of four values: LDNSSIGNATURELEAVEADDNEW: leave the signature and add a new one for the corresponding key LDNSSIGNATUREREMOVEADDNEW: remove the signature and replace is with a new one from the same key LDNSSIGNATURELEAVENOADD: leave the signature and do not add a new one with the corresponding key LDNSSIGNATUREREMOVENOADD: remove the signature and do not replace arg: optional argument for the callback function Returns LDNSSTATUSOK on success, an error code otherwise ldnsdnsseczonesignnsec3() signs the given zone with the given new zone, with NSEC3 zone: the zone to sign keylist: the list of keys to sign the zone with newrrs: newly created resource records are added to this list, to free them later func: callback function that decides what to do with old signa‐ tures arg: optional argument for the callback function algorithm: the NSEC3 hashing algorithm to use flags: NSEC3 flags iterations: the number of NSEC3 hash iterations to use saltlength: the length (in octets) of the NSEC3 salt salt: the NSEC3 salt data Returns LDNSSTATUSOK on success, an error code otherwise ldnsdnsseczonemarkglue() ldnsdnssecnamenodenextnonglue() Finds the first dnssecname node in the rbtree that is not occluded. It *does* return names that are partially occluded. node: the first node to check Returns the first node that has not been marked as glue, or NULL if not found (TODO: make that LDNSRBTREENULL?) ldnsdnsseczonecreatensecs() Adds NSEC records to the given dnsseczone zone: the zone to add the records to newrrs: ldnsrr's created by this function are added to this rr list, so the caller can free them later Returns LDNSSTATUSOK on success, an error code otherwise ldnsdnssecremovesignatures() remove signatures if callback function tells to signatures: list of signatures to check, and possibly remove, depending on the value of the callback keylist: these are marked to be used or not, on the return value of the callback func: this function is called to specify what to do with each signature (and corresponding key) arg: Optional argument for the callback function Returns s pointer to the new signatures rrs (the original passed to this function may have been removed) ldnsdnsseczonecreaterrsigs() Adds signatures to the zone zone: the zone to add RRSIG Resource Records to newrrs: the RRSIG RRs that are created are also added to this list, so the caller can free them later keylist: list of keys to sign with. func: Callback function to decide what keys to use and what to do with old signatures arg: Optional argument for the callback function Returns LDNSSTATUSOK on success, error otherwise AUTHOR The ldns team at NLnet Labs. Which consists out of Jelte Jansen and Miek Gieben. REPORTING BUGS Please report bugs to ldns-team@nlnetlabs.nl or in our bugzilla at http://www.nlnetlabs.nl/bugs/index.html COPYRIGHT
Copyright (c) 2004 - 2006 NLnet Labs. Licensed under the BSD License. There is NO warranty; not even for MER‐ CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. SEE ALSO ldnsdnsseczone. And perldoc Net::DNS, RFC1034, RFC1035, RFC4033, RFC4034 and RFC4035. REMARKS This manpage was automaticly generated from the ldns source code by use of Doxygen and some perl. 30 May 2006 ldns(3)