Lines Matching defs:ksk
139 #define KSK(x) ((dst_key_flags(x) & DNS_KEYFLAG_KSK) != 0)
518 * Offline KSK signed key responses.
6747 bool ksk, zsk;
6757 ret = dst_key_getbool(keys[i], DST_BOOL_KSK, &ksk);
6759 ksk = KSK(keys[i]);
6763 zsk = !KSK(keys[i]);
6766 if (ksk) {
6940 * KSK RRSIGs requires special processing.
7089 bool ksk = false;
7093 kresult = dst_key_getbool(keys[i], DST_BOOL_KSK, &ksk);
7095 if (KSK(keys[i])) {
7096 ksk = true;
7101 if (!KSK(keys[i])) {
7120 true, ksk, zsk,
7126 * DNSKEY RRset is signed with KSK.
7129 if (!ksk) {
7154 * Don't consider inactive keys, however the KSK may be
7159 keys, nkeys, i, false, KSK(keys[i]),
7160 !KSK(keys[i]), NULL, NULL);
7163 * CDS and CDNSKEY are signed with KSK (RFC
7167 if (!KSK(keys[i])) {
7170 } else if (KSK(keys[i])) {
7591 * CDS and CDNSKEY are signed with KSK like DNSKEY.
7594 * which would only include KSK's.)
7800 * CDS and CDNSKEY are signed with KSK like DNSKEY.
7803 * which would only include KSK's.)
9764 * We do KSK processing.
9776 if (KSK(zone_keys[i])) {
9785 if (!KSK(zone_keys[i])) {
9791 is_ksk = KSK(zone_keys[i]);
9803 is_ksk = KSK(zone_keys[i]);
9804 is_zsk = !KSK(zone_keys[i]);
9814 * KSK and a ZSK.
21250 bool checkdspub = false, checkdsdel = false, ksk = false;
21255 /* Is this key have the KSK role? */
21256 (void)dst_key_role(key->key, &ksk, NULL);
21257 if (!ksk) {
22162 bool ksk = false;
22165 /* Is this key have the KSK role? */
22166 (void)dst_key_role(key->key, &ksk, NULL);
22167 if (!ksk) {
22679 * With offline-ksk enabled we don't run the keymgr.
22811 * a KSK that can be used to verify the RRset. This
22812 * means there must be a key with the KSK role that is
Indexes created Sun Mar 01 05:31:48 UTC 2026