| /src/external/bsd/nsd/dist/ |
| tsig.c | 2 * tsig.c -- TSIG implementation (RFC 2845).
15 #include "tsig.h"
16 #include "tsig-openssl.h"
97 tsig_digest_variables(tsig_record_type *tsig, int tsig_timers_only)
101 uint16_t signed_time_high = htons(tsig->signed_time_high);
102 uint32_t signed_time_low = htonl(tsig->signed_time_low);
103 uint16_t signed_time_fudge = htons(tsig->signed_time_fudge);
104 uint16_t error_code = htons(tsig->error_code);
105 uint16_t other_size = htons(tsig->other_size)
291 tsig_record_type *tsig = (tsig_record_type *) data; local
[all...] |
| tsig.h | 2 * tsig.h -- TSIG definitions (RFC 2845).
45 * A TSIG HMAC algorithm, such as hmac-md5.
96 * A TSIG key used to sign and verify packets.
117 /* TSIG RR data is allocated in the rr_region. */
134 * Initialize the TSIG module (including TSIG implementation modules
135 * such as tsig-openssl).
140 * Add the specified key to the TSIG key table.
146 * Add the specified algorithm to the TSIG algorithm table
[all...] |
| query.c | 38 #include "tsig.h"
200 tsig_create_record(&query->tsig, region);
222 tsig_create_record(&query->tsig, region);
257 tsig_init_record(&q->tsig, NULL, NULL);
412 * Processes TSIG.
413 * Sets error when tsig does not verify on the query.
418 if(q->tsig.status == TSIG_ERROR)
420 if(q->tsig.status == TSIG_OK) {
421 if(!tsig_from_query(&q->tsig)) {
424 log_msg(LOG_ERR, "query: bad tsig (%s) for key %s from %s"
[all...] |
| Makefile.in | 98 COMMON_OBJ=answer.o axfr.o ixfr.o ixfrcreate.o buffer.o configlexer.o configparser.o dname.o dns.o edns.o iterated_hash.o lookup3.o namedb.o nsec3.o options.o packet.o query.o rbtree.o radtree.o rdata.o region-allocator.o rrl.o siphash.o tsig.o tsig-openssl.o udb.o util.o bitset.o popen3.o proxy_protocol.o
504 $(srcdir)/packet.h $(srcdir)/query.h $(srcdir)/nsd.h $(srcdir)/edns.h $(srcdir)/tsig.h
507 $(srcdir)/radtree.h $(srcdir)/rbtree.h $(srcdir)/packet.h $(srcdir)/tsig.h $(srcdir)/options.h $(srcdir)/ixfr.h
515 $(srcdir)/tsig.h $(srcdir)/rrl.h $(srcdir)/query.h $(srcdir)/namedb.h $(srcdir)/radtree.h $(srcdir)/nsd.h $(srcdir)/edns.h $(srcdir)/packet.h \
520 $(srcdir)/packet.h $(srcdir)/tsig.h $(srcdir)/ixfrcreate.h
523 $(srcdir)/options.h $(srcdir)/nsd.h $(srcdir)/edns.h $(srcdir)/ixfr.h $(srcdir)/query.h $(srcdir)/packet.h $(srcdir)/tsig.h
527 $(srcdir)/edns.h $(srcdir)/rrl.h $(srcdir)/query.h $(srcdir)/tsig.h $(srcdir)/ixfr.h $(srcdir)/zonec.h $(srcdir)/xfrd-catalog-zones.h $(srcdir)/xfrd.h
530 $(srcdir)/nsd.h $(srcdir)/edns.h $(srcdir)/packet.h $(srcdir)/tsig.h
535 $(srcdir)/radtree.h $(srcdir)/rbtree.h $(srcdir)/packet.h $(srcdir)/tsig.
[all...] |
| axfr.c | 19 #define AXFR_TSIG_SIGN_EVERY_NTH 0 /* tsig sign every N packets. */
76 if(query->tsig.status == TSIG_OK) {
171 /* check if it needs tsig signatures */
172 if(query->tsig.status == TSIG_OK) {
174 if(query->tsig.updates_since_last_prepare >= AXFR_TSIG_SIGN_EVERY_NTH) {
|
| query.h | 19 #include "tsig.h"
72 /* TSIG record information and running hash for query-response */
73 tsig_record_type tsig; member in struct:query
74 /* tsig actions can be overridden, for axfr transfer. */
|
| /src/external/mpl/bind/bin/confgen/tsig-keygen/ |
| Makefile | 5 LINKS= ${BINDIR}/tsig-keygen ${BINDIR}/ddns-confgen
6 MLINKS= tsig-keygen.8 ddns-confgen.8
|
| /src/external/mpl/bind/bin/confgen/ |
| Makefile | 3 SUBDIR= rndc-confgen tsig-keygen
|
| /src/external/mpl/dhcp/bind/dist/lib/dns/rdata/any_255/ |
| tsig_250.c | 377 dns_rdata_any_tsig_t *tsig = source; local
382 REQUIRE(tsig != NULL);
383 REQUIRE(tsig->common.rdclass == rdclass);
384 REQUIRE(tsig->common.rdtype == type);
392 RETERR(name_tobuffer(&tsig->algorithm, target));
402 RETERR(uint16_tobuffer((uint16_t)(tsig->timesigned >> 32), target));
403 RETERR(uint32_tobuffer((uint32_t)(tsig->timesigned & 0xffffffffU),
409 RETERR(uint16_tobuffer(tsig->fudge, target));
414 RETERR(uint16_tobuffer(tsig->siglen, target));
419 RETERR(mem_tobuffer(target, tsig->signature, tsig->siglen))
449 dns_rdata_any_tsig_t *tsig; local
549 dns_rdata_any_tsig_t *tsig = (dns_rdata_any_tsig_t *)source; local
[all...] |
| /src/external/mpl/bind/dist/lib/dns/rdata/any_255/ |
| tsig_250.c | 378 dns_rdata_any_tsig_t *tsig = source; local
383 REQUIRE(tsig != NULL);
384 REQUIRE(tsig->common.rdclass == rdclass);
385 REQUIRE(tsig->common.rdtype == type);
393 RETERR(name_tobuffer(&tsig->algorithm, target));
403 RETERR(uint16_tobuffer((uint16_t)(tsig->timesigned >> 32), target));
404 RETERR(uint32_tobuffer((uint32_t)(tsig->timesigned & 0xffffffffU),
410 RETERR(uint16_tobuffer(tsig->fudge, target));
415 RETERR(uint16_tobuffer(tsig->siglen, target));
420 RETERR(mem_tobuffer(target, tsig->signature, tsig->siglen))
450 dns_rdata_any_tsig_t *tsig; local
533 dns_rdata_any_tsig_t *tsig = (dns_rdata_any_tsig_t *)source; local
[all...] |
| /src/external/mpl/dhcp/bind/dist/lib/dns/ |
| tsig.c | 1 /* $NetBSD: tsig.c,v 1.1 2024/02/18 20:57:34 christos Exp $ */
43 #include <dns/tsig.h>
67 static unsigned char gsstsig_ndata[] = "\010gss-tsig";
172 "tsig key '%s' (%s): %s", namestr, creatorstr,
176 DNS_LOGMODULE_TSIG, level, "tsig key '%s': %s",
422 tsig_log(tkey, 2, "tsig expire: deleting");
764 dns_rdata_any_tsig_t tsig, querytsig; local
786 * If this is a response, there should be a TSIG in the query with the
798 tsig.mctx = mctx;
799 tsig.common.rdclass = dns_rdataclass_any
1076 dns_rdata_any_tsig_t tsig, querytsig; local
1428 dns_rdata_any_tsig_t tsig, querytsig; local
[all...] |
| tsec.c | 23 #include <dns/tsig.h>
|
| /src/external/mpl/bind/dist/lib/dns/ |
| tsig.c | 1 /* $NetBSD: tsig.c,v 1.16 2026/06/19 20:10:00 christos Exp $ */
40 #include <dns/tsig.h>
61 static unsigned char gsstsig_ndata[] = "\010gss-tsig";
150 "tsig key '%s' (%s): %s", namestr, creatorstr,
154 DNS_LOGMODULE_TSIG, level, "tsig key '%s': %s",
554 dns_rdata_any_tsig_t tsig, querytsig; local
576 * If this is a response, there should be a TSIG in the query with the
589 tsig = (dns_rdata_any_tsig_t){
600 dns_name_init(&tsig.algorithm, NULL);
601 dns_name_clone(dns_tsigkey_algorithm(key), &tsig.algorithm)
840 dns_rdata_any_tsig_t tsig, querytsig; local
1201 dns_rdata_any_tsig_t tsig, querytsig; local
[all...] |
| /src/external/mpl/bind/dist/tests/dns/ |
| tsig_test.c | 35 #include <dns/tsig.h>
69 dns_rdata_any_tsig_t tsig; local
80 CHECK(dns_rdata_tostruct(&rdata, &tsig, NULL));
81 isc_buffer_putuint16(&databuf, tsig.siglen);
82 isc_buffer_putmem(&databuf, tsig.signature, tsig.siglen);
85 dns_rdata_freestruct(&tsig);
94 dns_rdata_any_tsig_t tsig; local
107 memset(&tsig, 0, sizeof(tsig));
[all...] |
| /src/external/bsd/nsd/lib/libnsd/ |
| Makefile | 40 tsig-openssl.c \
41 tsig.c \
55 COPTS.tsig-openssl.c+= -Wno-error=deprecated-declarations
|
| /src/external/mpl/bind/dist/bin/tests/system/tsig/ |
| tests_tsig_hypothesis.py | 28 import dns.rdtypes.ANY.TSIG
30 import dns.tsig namespace
47 candidates = tuple(dns.tsig.mac_sizes.items())
55 candidates = tuple(dns.tsig.mac_sizes.items())
110 msg.keyring = False # don't validate received TSIG
116 tsig = dns.rdtypes.ANY.TSIG.TSIG(
118 dns.rdatatype.TSIG,
127 rrs = dns.rrset.from_rdata(keyname, 0, tsig)
[all...] |
| tests_badtime.py | 19 import dns.tsig namespace
66 with pytest.raises(dns.tsig.PeerBadTime):
|
| /src/external/mpl/bind/dist/bin/tests/system/migrate2kasp/ |
| tests_migrate2kasp.py | 283 "tsig": "external:YPfMoAk6h+3iN8MDRQC004iSNHY=",
300 "tsig": "internal:4xILSZQnuO1UKubXHkYUsvBRPu8=",
313 tsig = None
314 if "tsig" in params:
315 secret = params["tsig"]
316 tsig = f"{os.environ['DEFAULT_HMAC']}:{secret}"
329 isctest.kasp.check_dnssec_verify(server, zone, tsig=tsig)
350 isctest.kasp.check_apex(server, zone, ksks, zsks, tsig=tsig)
[all...] |
| /src/external/mpl/bind/dist/bin/tests/system/xfer/ans5/ |
| ans.py | 23 import dns.tsig namespace
38 DEFAULT_KEY = dns.tsig.Key("tsig_key", GOOD_KEY_DATA, ALG_VARS["DEFAULT_HMAC"])
39 BAD_KEY = dns.tsig.Key("bad_key", GOOD_KEY_DATA, ALG_VARS["DEFAULT_HMAC"])
40 UNUSED_KEY = dns.tsig.Key("unused_key", GOOD_KEY_DATA, ALG_VARS["DEFAULT_HMAC"])
43 KEY_WITH_BAD_DATA = dns.tsig.Key("tsig_key", "abcd1234ffff", ALG_VARS["DEFAULT_HMAC"])
78 with TSIG using the specified key.
80 If the query is over TCP, it maintains the TSIG context across multiple
83 Ideally, TSIG context would be handled in isctest.asyncserver, but that would
88 def __init__(self, inner: ResponseHandler, key: dns.tsig.Key = DEFAULT_KEY) -> None:
91 self._tsig_ctx: dns.tsig.GSSTSig | dns.tsig.HMACTSig | None = Non
[all...] |
| /src/external/mpl/bind/dist/bin/tests/system/isctest/ |
| kasp.py | 27 import dns.tsig namespace
43 def _query(server, qname, qtype, tsig=None):
46 if tsig is not None:
47 tsigkey = tsig.split(":")
48 keyring = dns.tsig.Key(tsigkey[1], tsigkey[2], tsigkey[0])
789 def check_dnssec_verify(server, zone, tsig=None):
794 transfer = _query(server, fqdn, dns.rdatatype.AXFR, tsig=tsig)
1075 def _query_rrset(server, fqdn, qtype, tsig=None):
1076 response = _query(server, fqdn, qtype, tsig=tsig
[all...] |
| /src/external/mpl/bind/dist/lib/dns/include/dns/ |
| client.h | 48 #include <dns/tsig.h>
|
| /src/bin/sh/ |
| trap.c | 508 char *t, tsig; local
558 tsig = *t;
559 if (tsig == 0) {
591 tsig = S_IGN;
593 tsig = S_HARD_IGN;
595 tsig = S_RESET; /* force to be set */
598 VTRACE(DBG_TRAP, (" tsig=%d\n", tsig));
600 if (tsig == S_HARD_IGN || tsig == action
[all...] |
| /src/external/mpl/bind/dist/bin/tests/system/kasp/ |
| tests_kasp.py | 24 import dns.tsig namespace
186 tsig=None,
197 tsig=tsig, variable
199 isctest.kasp.check_subdomain(server, zone, ksks, zsks, tsig=tsig)
746 tsig = (
755 isctest.kasp.check_apex(server, zone, [], [], tsig=tsig)
756 isctest.kasp.check_subdomain(server, zone, [], [], tsig=tsig
[all...] |
| /src/external/mpl/bind/dist/bin/tests/system/ssumaxtype/ |
| tests_ssumaxtype.py | 30 import dns.tsig namespace
46 KEYALGO = dns.tsig.HMAC_SHA256
50 """Create a TSIG-signed UpdateMessage for the example zone."""
|
| /src/external/apache2/mDNSResponder/dist/mDNSCore/ |
| DNSDigest.c | 1315 // TSIG HMAC names from <https://datatracker.ietf.org/doc/html/rfc8945#section-6>
1527 AuthRecord tsig; local
1564 // Construct TSIG RR, digesting variables as apporpriate
1565 mDNS_SetupResourceRecord(&tsig, mDNSNULL, 0, kDNSType_TSIG, 0, kDNSRecordTypeKnownUnique, AuthRecordAny, mDNSNULL, mDNSNULL);
1568 AssignDomainName(&tsig.namestorage, &info->keyname);
1576 tsig.resrec.rrclass = kDNSQClass_ANY;
1585 tsig.resrec.rroriginalttl = 0;
1587 CCHmacUpdate(&hmacContext, (mDNSu8 *)&tsig.resrec.rroriginalttl, sizeof(tsig.resrec.rroriginalttl));
1589 MD5_Update(&c, (mDNSu8 *)&tsig.resrec.rroriginalttl, sizeof(tsig.resrec.rroriginalttl))
[all...] |
