Home | History | Annotate | Download | only in validator

Lines Matching defs:dnskey

471 	/* temporary dnskey rrset-key */
472 struct ub_packed_rrset_key dnskey;
475 dnskey.rk.type = htons(kd->rrset_type);
476 dnskey.rk.rrset_class = htons(kkey->key_class);
477 dnskey.rk.flags = 0;
478 dnskey.rk.dname = kkey->name;
479 dnskey.rk.dname_len = kkey->namelen;
480 dnskey.entry.key = &dnskey;
481 dnskey.entry.data = kd->rrset_data;
482 sec = val_verify_rrset(env, ve, rrset, &dnskey, kd->algo, reason,
512 /* Convert the candidate DNSKEY into a hash using the
527 verbose(VERB_ALGO, "DS okay but that DNSKEY size is not supported");
533 /* Otherwise, we have a match! Make sure that the DNSKEY
540 /* If it didn't validate with the DNSKEY, try the next one! */
543 /* there is a working DS, but that DNSKEY is not supported */
553 *reason = "keyset not secured by DNSKEY that matches DS";
593 verbose(VERB_QUERY, "DNSKEY RRset did not match DS RRset "
595 *reason = "DNSKEY RRset did not match DS RRset by name";
621 /* DNSKEY too large unsupported or algo refused by
637 verbose(VERB_ALGO, "DS matched DNSKEY.");
668 verbose(VERB_QUERY, "Failed to match any usable DS to a DNSKEY.");
671 "DNSKEY signature", reasonbuf, reasonlen);
725 verbose(VERB_QUERY, "DNSKEY RRset did not match DS RRset "
727 *reason = "DNSKEY RRset did not match DS RRset by name";
735 verbose(VERB_QUERY, "DNSKEY RRset did not match anchor RRset "
737 *reason = "DNSKEY RRset did not match anchor RRset by name";
780 verbose(VERB_ALGO, "DS matched DNSKEY.");
798 /* Check to see if we can understand this DNSKEY */
812 verbose(VERB_ALGO, "anchor matched DNSKEY.");
842 verbose(VERB_QUERY, "Failed to match any usable anchor to a DNSKEY.");
845 "DNSKEY signature", reasonbuf, reasonlen);