Gecko [ www.plinplanplanner.net ]

Name	Size	Permission
acl.h	6.33 KB	-rw-r--r--
adb.h	21.75 KB	-rw-r--r--
badcache.h	3.31 KB	-rw-r--r--
bit.h	798 B	-rw-r--r--
byaddr.h	3.51 KB	-rw-r--r--
cache.h	8.53 KB	-rw-r--r--
callbacks.h	2.23 KB	-rw-r--r--
catz.h	11.6 KB	-rw-r--r--
cert.h	1.43 KB	-rw-r--r--
client.h	14.19 KB	-rw-r--r--
clientinfo.h	1.97 KB	-rw-r--r--
compress.h	6.88 KB	-rw-r--r--
db.h	49.26 KB	-rw-r--r--
dbiterator.h	7.21 KB	-rw-r--r--
dbtable.h	3.09 KB	-rw-r--r--
diff.h	6.87 KB	-rw-r--r--
dispatch.h	15.17 KB	-rw-r--r--
dlz.h	10.62 KB	-rw-r--r--
dlz_dlopen.h	4.29 KB	-rw-r--r--
dns64.h	5.59 KB	-rw-r--r--
dnsrps.h	2.51 KB	-rw-r--r--
dnssec.h	12.29 KB	-rw-r--r--
dnstap.h	9.95 KB	-rw-r--r--
ds.h	1.63 KB	-rw-r--r--
dsdigest.h	1.67 KB	-rw-r--r--
dyndb.h	4.75 KB	-rw-r--r--
ecdb.h	806 B	-rw-r--r--
ecs.h	1.22 KB	-rw-r--r--
edns.h	783 B	-rw-r--r--
enumclass.h	1.19 KB	-rw-r--r--
enumtype.h	8.29 KB	-rw-r--r--
events.h	4.35 KB	-rw-r--r--
fixedname.h	1.61 KB	-rw-r--r--
forward.h	2.99 KB	-rw-r--r--
geoip.h	2.29 KB	-rw-r--r--
ipkeylist.h	2.17 KB	-rw-r--r--
iptable.h	1.49 KB	-rw-r--r--
journal.h	9.48 KB	-rw-r--r--
kasp.h	11.84 KB	-rw-r--r--
keydata.h	1.02 KB	-rw-r--r--
keyflags.h	1.25 KB	-rw-r--r--
keymgr.h	4.01 KB	-rw-r--r--
keytable.h	7.69 KB	-rw-r--r--
keyvalues.h	3.99 KB	-rw-r--r--
lib.h	993 B	-rw-r--r--
librpz.h	30.67 KB	-rw-r--r--
lmdb.h	779 B	-rw-r--r--
log.h	3.93 KB	-rw-r--r--
lookup.h	2.85 KB	-rw-r--r--
master.h	8.58 KB	-rw-r--r--
masterdump.h	9.9 KB	-rw-r--r--
message.h	38.64 KB	-rw-r--r--
name.h	36.9 KB	-rw-r--r--
ncache.h	4.84 KB	-rw-r--r--
nsec.h	2.99 KB	-rw-r--r--
nsec3.h	8.06 KB	-rw-r--r--
nta.h	4.73 KB	-rw-r--r--
opcode.h	1006 B	-rw-r--r--
order.h	1.96 KB	-rw-r--r--
peer.h	6.32 KB	-rw-r--r--
portlist.h	2.05 KB	-rw-r--r--
private.h	1.92 KB	-rw-r--r--
rbt.h	36.61 KB	-rw-r--r--
rcode.h	2.41 KB	-rw-r--r--
rdata.h	22.04 KB	-rw-r--r--
rdataclass.h	2.2 KB	-rw-r--r--
rdatalist.h	2.5 KB	-rw-r--r--
rdataset.h	18.28 KB	-rw-r--r--
rdatasetiter.h	3.82 KB	-rw-r--r--
rdataslab.h	4.14 KB	-rw-r--r--
rdatastruct.h	61.23 KB	-rw-r--r--
rdatatype.h	2.24 KB	-rw-r--r--
request.h	8.97 KB	-rw-r--r--
resolver.h	19.68 KB	-rw-r--r--
result.h	8.98 KB	-rw-r--r--
rootns.h	891 B	-rw-r--r--
rpz.h	11.87 KB	-rw-r--r--
rriterator.h	4.12 KB	-rw-r--r--
rrl.h	6.8 KB	-rw-r--r--
sdb.h	7.18 KB	-rw-r--r--
sdlz.h	13.76 KB	-rw-r--r--
secalg.h	1.67 KB	-rw-r--r--
secproto.h	1.52 KB	-rw-r--r--
soa.h	2.13 KB	-rw-r--r--
ssu.h	7.01 KB	-rw-r--r--
stats.h	24.11 KB	-rw-r--r--
tcpmsg.h	3.05 KB	-rw-r--r--
time.h	1.65 KB	-rw-r--r--
timer.h	1.03 KB	-rw-r--r--
tkey.h	7.48 KB	-rw-r--r--
tsec.h	2.88 KB	-rw-r--r--
tsig.h	8.3 KB	-rw-r--r--
ttl.h	1.83 KB	-rw-r--r--
types.h	14.19 KB	-rw-r--r--
update.h	1.96 KB	-rw-r--r--
validator.h	6.52 KB	-rw-r--r--
version.h	679 B	-rw-r--r--
view.h	34.51 KB	-rw-r--r--
xfrin.h	2.26 KB	-rw-r--r--
zone.h	64.01 KB	-rw-r--r--
zonekey.h	776 B	-rw-r--r--
zoneverify.h	1.36 KB	-rw-r--r--
zt.h	5.12 KB	-rw-r--r--

Code Editor : keymgr.h

/*
 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
 *
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, you can obtain one at https://mozilla.org/MPL/2.0/.
 *
 * See the COPYRIGHT file distributed with this work for additional
 * information regarding copyright ownership.
 */

#ifndef DNS_KEYMGR_H
#define DNS_KEYMGR_H 1

/*! \file dns/keymgr.h */

#include <isc/lang.h>
#include <isc/stdtime.h>

#include <dns/types.h>

#include <dst/dst.h>

ISC_LANG_BEGINDECLS

isc_result_t
dns_keymgr_run(const dns_name_t *origin, dns_rdataclass_t rdclass,
	       const char *directory, isc_mem_t *mctx,
	       dns_dnsseckeylist_t *keyring, dns_dnsseckeylist_t *dnskeys,
	       dns_kasp_t *kasp, isc_stdtime_t now, isc_stdtime_t *nexttime);
/*%<
 * Manage keys in 'keyring' and update timing data according to 'kasp' policy.
 * Create new keys for 'origin' if necessary in 'directory'.  Append all such
 * keys, along with use hints gleaned from their metadata, onto 'keyring'.
 *
 * Update key states and store changes back to disk. Store when to run next
 * in 'nexttime'.
 *
 *	Requires:
 *\li		'origin' is a valid FQDN.
 *\li		'mctx' is a valid memory context.
 *\li		'keyring' is not NULL.
 *\li		'kasp' is not NULL.
 *
 *	Returns:
 *\li		#ISC_R_SUCCESS
 *\li		any error returned by dst_key_generate(), isc_dir_open(),
 *		dst_key_to_file(), or dns_dnsseckey_create().
 *
 *	Ensures:
 *\li		On error, keypool is unchanged
 */

isc_result_t
dns_keymgr_checkds(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		   const char *directory, isc_stdtime_t now, isc_stdtime_t when,
		   bool dspublish);
isc_result_t
dns_keymgr_checkds_id(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		      const char *directory, isc_stdtime_t now,
		      isc_stdtime_t when, bool dspublish, dns_keytag_t id,
		      unsigned int algorithm);
/*%<
 * Check DS for one key in 'keyring'. The key must have the KSK role.
 * If 'dspublish' is set to true, set the DS Publish time to 'now'.
 * If 'dspublish' is set to false, set the DS Removed time to 'now'.
 * If a specific key 'id' is given it must match the keytag.
 * If the 'algorithm' is non-zero, it must match the key's algorithm.
 * The result is stored in the key state file.
 *
 *	Requires:
 *\li		'kasp' is not NULL.
 *\li		'keyring' is not NULL.
 *
 *	Returns:
 *\li		#ISC_R_SUCCESS (No error).
 *\li		#DNS_R_NOKEYMATCH (No matching keys found).
 *\li		#DNS_R_TOOMANYKEYS (More than one matching keys found).
 *
 */

isc_result_t
dns_keymgr_rollover(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		    const char *directory, isc_stdtime_t now,
		    isc_stdtime_t when, dns_keytag_t id,
		    unsigned int algorithm);
/*%<
 * Rollover key with given 'id'. If the 'algorithm' is non-zero, it must
 * match the key's algorithm. The changes are stored in the key state file.
 *
 * A rollover means adjusting the key metadata so that keymgr will start the
 * actual rollover on the next run. Update the 'inactive' time and adjust
 * key lifetime to match the 'when' to rollover time.
 *
 * The 'when' time may be in the past. In that case keymgr will roll the
 * key as soon as possible.
 *
 * The 'when' time may be in the future. This may extend the lifetime,
 * overriding the default lifetime from the policy.
 *
 *	Requires:
 *\li		'kasp' is not NULL.
 *\li		'keyring' is not NULL.
 *
 *	Returns:
 *\li		#ISC_R_SUCCESS (No error).
 *\li		#DNS_R_NOKEYMATCH (No matching keys found).
 *\li		#DNS_R_TOOMANYKEYS (More than one matching keys found).
 *\li		#DNS_R_KEYNOTACTIVE (Key is not active).
 *
 */

void
dns_keymgr_status(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		  isc_stdtime_t now, char *out, size_t out_len);
/*%<
 * Retrieve the status of given 'kasp' policy and keys in the
 * 'keyring' and store the printable output in the 'out' buffer.
 *
 *	Requires:
 *\li		'kasp' is not NULL.
 *\li		'keyring' is not NULL.
 *\li		'out' is not NULL.
 *
 *	Returns:
 *\li		Printable status in 'out'.
 *
 */

ISC_LANG_ENDDECLS

#endif /* DNS_KEYMGR_H */

${this.title}

Code Editor : keymgr.h