NAME ldnspkttsigverify, ldnspkttsigsign SYNOPSIS
#include
#include
#include
bool ldnspkttsigverify(ldnspkt *pkt, uint8t *wire, sizet wiresize, const char *keyname, const char *keydata, ldnsrdf *mac); ldnsstatus ldnspkttsigsign(ldnspkt *pkt, const char *keyname, const char *keydata, uint16t fudge, const char *algorithmname, ldnsrdf *querymac); DESCRIPTION ldnspkttsigverify() verifies the tsig rr for the given packet and key. The wire must be given too because tsig does not sign nor‐ malized packets. pkt: the packet to verify wire: needed to verify the mac wiresize: size of wire keyname: the name of the shared key keydata: the key in base 64 format mac: original mac Returns true if tsig is correct, false if not, or if tsig is not set ldnspkttsigsign() creates a tsig rr for the given packet and key. pkt: the packet to sign keyname: the name of the shared key keydata: the key in base 64 format fudge: seconds of error permitted in time signed algorithmname: the name of the algorithm used querymac: is added to the digest if not NULL (so NULL is for signing queries, not NULL is for signing answers) Returns status (OK if success) AUTHOR The ldns team at NLnet Labs. Which consists out of Jelte Jansen and Miek Gieben. REPORTING BUGS Please report bugs to ldns-team@nlnetlabs.nl or in our bugzilla at http://www.nlnetlabs.nl/bugs/index.html COPYRIGHT
Copyright (c) 2004 - 2006 NLnet Labs. Licensed under the BSD License. There is NO warranty; not even for MER‐ CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. SEE ALSO ldnskey. And perldoc Net::DNS, RFC1034, RFC1035, RFC4033, RFC4034 and RFC4035. REMARKS This manpage was automaticly generated from the ldns source code by use of Doxygen and some perl. 30 May 2006 ldns(3)