NAME ldnsverify, ldnsverifyrrsig, ldnsverifyrrsigkeylist, ldnsver‐ ifyrrsigkeylistnotime, ldnsverifynotime SYNOPSIS
#include
#include
#include
ldnsstatus ldnsverify(ldnsrrlist *rrset, ldnsrrlist *rrsig, const ldnsrrlist *keys, ldnsrrlist *goodkeys); ldnsstatus ldnsverifyrrsig(ldnsrrlist *rrset, ldnsrr *rrsig, ldnsrr *key); ldnsstatus ldnsverifyrrsigkeylist(ldnsrrlist *rrset, ldnsrr *rrsig, const ldnsrrlist *keys, ldnsrrlist *goodkeys); ldnsstatus ldnsverifyrrsigkeylistnotime(ldnsrrlist *rrset, ldnsrr *rrsig, const ldnsrrlist *keys, ldnsrrlist *goodkeys); ldnsstatus ldnsverifynotime(ldnsrrlist *rrset, ldnsrrlist *rrsig, const ldnsrrlist *keys, ldnsrrlist *goodkeys); DESCRIPTION ldnsverify() Verifies a list of signatures for one rrset. rrset: the rrset to verify rrsig: a list of signatures to check keys: a list of keys to check with goodkeys: if this is a (initialized) list, the pointer to keys from keys that validate one of the signatures are added to it Returns status LDNSSTATUSOK if there is at least one correct key ldnsverifyrrsig() verify an rrsig with 1 key rrset: the rrset rrsig: the rrsig to verify key: the key to use Returns status message wether verification succeeded. ldnsverifyrrsigkeylist() Verifies an rrsig. All keys in the keyset are tried. rrset: the rrset to check rrsig: the signature of the rrset keys: the keys to try goodkeys: if this is a (initialized) list, the pointer to keys from keys that validate one of the signatures are added to it Returns a list of keys which validate the rrsig + rrset. Returns status LDNSSTATUSOK if at least one key matched. Else an error. ldnsverifyrrsigkeylistnotime() Verifies an rrsig. All keys in the keyset are tried. Time is not checked. rrset: the rrset to check rrsig: the signature of the rrset keys: the keys to try goodkeys: if this is a (initialized) list, the pointer to keys from keys that validate one of the signatures are added to it Returns a list of keys which validate the rrsig + rrset. Returns status LDNSSTATUSOK if at least one key matched. Else an error. ldnsverifynotime() Verifies a list of signatures for one rrset, but disregard the time. Inception and Expiration are not checked. rrset: the rrset to verify rrsig: a list of signatures to check keys: a list of keys to check with goodkeys: if this is a (initialized) list, the pointer to keys from keys that validate one of the signatures are added to it Returns status LDNSSTATUSOK if there is at least one correct key AUTHOR The ldns team at NLnet Labs. Which consists out of Jelte Jansen and Miek Gieben. REPORTING BUGS Please report bugs to ldns-team@nlnetlabs.nl or in our bugzilla at http://www.nlnetlabs.nl/bugs/index.html COPYRIGHT
Copyright (c) 2004 - 2006 NLnet Labs. Licensed under the BSD License. There is NO warranty; not even for MER‐ CHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. SEE ALSO ldnsverifyrrsigevp. And perldoc Net::DNS, RFC1034, RFC1035, RFC4033, RFC4034 and RFC4035. REMARKS This manpage was automaticly generated from the ldns source code by use of Doxygen and some perl. 30 May 2006 ldns(3)