Lines Matching defs:cds
5177 "CDS/CDNSKEY consistency checks "
7127 * CDS and CDNSKEY RRsets too (RFC 7344, 4.1).
7163 * CDS and CDNSKEY are signed with KSK (RFC
7591 * CDS and CDNSKEY are signed with KSK like DNSKEY.
7800 * CDS and CDNSKEY are signed with KSK like DNSKEY.
16527 dns_rdata_ds_t cds;
16529 result = dns_rdata_tostruct(rdata, &cds, NULL);
16532 "dns_rdata_tostruct(cds) failed: %s",
16545 if (dst_key_id(k->key) != cds.key_tag ||
16546 dst_key_alg(k->key) != cds.algorithm)
16559 cds.digest_type, cdsbuf, &cdsrdata);
16564 cds.key_tag, cds.algorithm,
16565 cds.digest_type,
16708 * Allow DNSKEY, CDNSKEY, CDS because users should be able to
16845 * If kasp is in effect honour the existing DNSKEY, CDNSKEY and CDS
16915 * Apex DNSKEY, CDNSKEY and CDS need special processing so
17595 * Allow DNSKEY, CDNSKEY, CDS because users should be able to
20863 * See if dns__zone_updatesigs() will update DNSKEY/CDS/CDNSKEY
22363 /* Remove existing DNSKEY, CDS, and CDNSKEY records. */
22498 /* Get the current CDS rdataset */
22509 "Updating CDS TTL from %u to %u failed: %s",
22513 dnssec_log(zone, ISC_LOG_INFO, "Updating CDS TTL from %u to %u",
22698 * Update CDS, CDNSKEY and DNSKEY record sets if the keymgr ran
22731 * Publish CDS/CDNSKEY DELETE records if the zone is
22742 /* Check if there is a CDS DELETE record. */
22751 * CDS deletion record has this form
22796 * Update CDS / CDNSKEY records.
22803 "zone_rekey:couldn't update CDS/CDNSKEY: %s",
22810 * Only publish CDS/CDNSKEY DELETE records if there is
22841 "zone_rekey:couldn't update CDS/CDNSKEY "
23280 dns_rdataset_t dnskey, cds, cdnskey;
23294 dns_rdataset_init(&cds);
23299 dns_rdatatype_none, 0, &cds, NULL);
23310 if (!dns_rdataset_isassociated(&cds) &&
23326 * For each DNSSEC algorithm in the CDS RRset there must be
23327 * a matching DNSKEY record with the exception of a CDS deletion
23330 if (dns_rdataset_isassociated(&cds)) {
23334 for (result = dns_rdataset_first(&cds); result == ISC_R_SUCCESS;
23335 result = dns_rdataset_next(&cds))
23340 dns_rdataset_current(&cds, &crdata);
23342 * CDS deletion record has this form "0 0 0 00" which
23360 * Log deprecated CDS digest types.
23372 "deprecated CDS digest type "
23490 if (dns_rdataset_isassociated(&cds)) {
23491 dns_rdataset_disassociate(&cds);
Indexes created Sun Mar 01 05:31:48 UTC 2026