| /src/external/mpl/bind/dist/tests/dns/ |
| rdataset_test.c | 38 dns_rdata_rrsig_t rrsig; local
51 rrsig.timeexpire = ttltimeexpire;
52 rrsig.originalttl = 1000;
54 dns_rdataset_trimttl(&rdataset, &sigrdataset, &rrsig, ttltimenow, true);
60 rrsig.timeexpire = ttltimenow - 200;
61 rrsig.originalttl = 1000;
63 dns_rdataset_trimttl(&rdataset, &sigrdataset, &rrsig, ttltimenow, true);
69 rrsig.timeexpire = ttltimenow - 200;
70 rrsig.originalttl = 1000;
72 dns_rdataset_trimttl(&rdataset, &sigrdataset, &rrsig, ttltimenow
[all...] |
| sigs_test.c | 114 dns_rdata_rrsig_t rrsig; local
165 * Found tuple must be of type RRSIG.
174 result = dns_rdata_tostruct(&found->rdata, &rrsig, NULL);
177 result = dns_rdatatype_totext(rrsig.covered, &typebuf);
179 assert_int_equal(expected_type, rrsig.covered);
|
| skr_test.c | 142 dns_rdataset_t *rrset, char *target_mem, dns_rdata_t *rrsig) {
150 mctx, &target, rrsig);
153 print_rdata(fp, rrsig);
|
| /src/external/mpl/bind/dist/bin/tests/system/dnssec/ns7/ |
| sign.sh | 21 zone=split-rrsig
22 infile=split-rrsig.db.in
23 zonefile=split-rrsig.db
32 # - it puts one of the two RRSIG(SOA) records at the end of the zone file, so
34 # next to each other; the test then checks if RRSIG RRsets split this way are
37 # - it places a copy of one of the RRSIG(SOA) records somewhere else than at the
42 $4 == "RRSIG" && $5 == "SOA" && r == "" { r = $0; next; }
|
| /src/external/mpl/bind/dist/bin/tests/system/dnssec/ans10/ |
| ans.py | 32 rrsig = (
37 qctx.qname, 1, qctx.qclass, dns.rdatatype.RRSIG, rrsig
50 nsec = f"{qctx.qname.to_text()} A NS SOA RRSIG NSEC"
|
| /src/external/bsd/unbound/dist/testdata/ede.tdir/bogus/ |
| make-broken-zone.sh | 26 grep -v '^missingrrsigs\.dnssec-failures\.test\..*IN.*RRSIG.*TXT' | \
29 grep -v '^notyetincepted\.dnssec-failures\.test\..*IN.*RRSIG.*TXT' | \
31 grep -v '^expired\.dnssec-failures\.test\..*IN.*RRSIG.*TXT' > base
67 CSK=`ldns-keygen -a ECDSAP256SHA256 -k -r /dev/urandom rrsig-failures.test`
71 ldns-signzone -i $YESTERDAY -e $ONEMONTH -f tmp.signed bogus/rrsig-failures.test $CSK
72 grep -v ' RRSIG ' tmp.signed > bogus/rrsig-failures.test.signed
|
| /src/external/bsd/nsd/dist/ |
| packet.c | 123 rrset_type *rrsig; local
156 (rrsig = domain_find_rrset(owner, rrset->zone, TYPE_RRSIG)))
158 for (i = 0; i < rrsig->rr_count; ++i) {
159 if (rr_rrsig_type_covered(rrsig->rrs[i])
163 rrsig->rrs[i],
164 rrset_rrtype(rrset)==TYPE_SOA?rrset->rrs[0]->ttl:rrsig->rrs[i]->ttl))
|
| /src/external/mpl/bind/dist/bin/tests/system/nsupdate/ans11/ |
| ans.py | 18 rdata_covers() that only recognises RRSIG will file both rdatas under
48 """Produce a legacy SIG (24) rdata via RRSIG (46) round-trip."""
49 rrsig = dns.rdata.from_text(dns.rdataclass.IN, dns.rdatatype.RRSIG, covered_text)
50 wire = rrsig.to_digestable()
|
| /src/external/mpl/bind/dist/bin/tests/system/nsupdate/ |
| tests_update_sig.py | 15 SIG (24) and NXT (30) are obsolete DNSSEC record types, superseded by RRSIG
19 * dns__db_findrdataset() asserted `covers == 0 || type == RRSIG`, which
70 but the wire format is identical to RRSIG (46). Parse as RRSIG,
73 rrsig = dns.rdata.from_text(dns.rdataclass.IN, dns.rdatatype.RRSIG, text)
74 wire = rrsig.to_digestable()
96 adopted policy outright refuses SIG (obsolete; use RRSIG) so the
|
| /src/external/apache2/mDNSResponder/dist/mDNSShared/dns_objects/objs/ |
| dns_obj_rr.h | 48 DNS_OBJECT_DECLARE_SUPPORTED_OBJECT_SUBKIND(rr, rrsig);
202 * Note that <code>dns_obj_rr_set_comparison_attributes()</code> has to be called before calling this function since the signed data needs the RRSIG
244 * Set the Original TTL and RRSIG labels value for the resource record object so that it can be comparable. <code>dns_obj_rr_get_signed_data</code>
251 * The original TTL value of the RRSIG that covers this resource record.
254 * The labels value of the RRSIG that covers this resource record.
272 * Set the Original TTL and RRSIG labels value for the resource record objects so that they can be comparable. <code>dns_obj_rr_get_signed_data</code>
279 * The original TTL value of the RRSIG that covers this resource record.
282 * The labels value of the RRSIG that covers this resource record.
|
| /src/external/mpl/dhcp/bind/dist/lib/dns/ |
| rdataset.c | 714 dns_rdata_rrsig_t *rrsig, isc_stdtime_t now,
720 REQUIRE(rrsig != NULL);
726 (isc_serial_le(rrsig->timeexpire, ((now + 120) & 0xffffffff)) ||
727 isc_serial_le(rrsig->timeexpire, now)))
730 } else if (isc_serial_ge(rrsig->timeexpire, now)) {
731 ttl = rrsig->timeexpire - now;
735 ISC_MIN(rrsig->originalttl, ttl));
|
| ncache.c | 611 dns_rdata_rrsig_t rrsig; local
669 (void)dns_rdata_tostruct(&rdata, &rrsig, NULL);
670 if (rrsig.covered == covers) {
718 dns_rdata_rrsig_t rrsig; local
749 * Extract covers from RRSIG.
761 (void)dns_rdata_tostruct(&rdata, &rrsig, NULL);
762 rdataset->covers = rrsig.covered;
|
| /src/external/mpl/bind/dist/lib/dns/ |
| rdataset.c | 658 dns_rdata_rrsig_t *rrsig, isc_stdtime_t now,
664 REQUIRE(rrsig != NULL);
670 (isc_serial_le(rrsig->timeexpire, (now + 120) & 0xffffffff) ||
671 isc_serial_le(rrsig->timeexpire, now)))
674 } else if (isc_serial_ge(rrsig->timeexpire, now)) {
675 ttl = rrsig->timeexpire - now;
679 ISC_MIN(rrsig->originalttl, ttl));
|
| skr.c | 161 dns_rdata_rrsig_t rrsig; local
169 result = dns_rdata_tostruct(&tuple->rdata, &rrsig, NULL);
178 if (rrsig.covered == covering_type &&
179 rrsig.keyid == dst_key_id(key))
|
| ncache.c | 596 dns_rdata_rrsig_t rrsig; local
654 (void)dns_rdata_tostruct(&rdata, &rrsig, NULL);
655 if (rrsig.covered == covers) {
696 dns_rdata_rrsig_t rrsig; local
725 * Extract covers from RRSIG.
737 (void)dns_rdata_tostruct(&rdata, &rrsig, NULL);
738 covers = rrsig.covered;
|
| /src/external/apache2/mDNSResponder/dist/mDNSShared/dns_objects/base/ |
| dns_obj.h | 75 DNS_OBJECT_DECLARE_SUPPORTED_OBJECT_SUBKIND(rr, rrsig); // Declare dns_obj_rr_rrsig_t as a subkind of dns_obj_rr_t.
|
| ref_count.h | 323 REF_COUNT_OBJECT_DECLARE_SUPPORTED_OBJECT_SUBKIND(dns_obj, rr, rrsig); // RRSIG RR
352 REF_COUNT_OBJECT_DECLARE_SUPPORTED_OBJECT_SUBKIND(dnssec_obj, rr, rrsig); // RRSIG RR
|
| /src/external/mpl/bind/dist/bin/tests/system/cds/ |
| setup.sh | 123 $mangle '\s+IN\s+RRSIG\s+CDS .* '$idz' '$Z'\. ' \
124 <sig.cds.1 >brk.rrsig.cds.zsk
125 $mangle '\s+IN\s+RRSIG\s+CDS .* '$id1' '$Z'\. ' \
126 <sig.cds.1 >brk.rrsig.cds.ksk
|
| tests.sh | 101 err='skip RRSIG by key [0-9]+: too old'
105 err='found RRSIG by key'
119 err='missing RRSIG CDS records'
142 err='found RRSIG by key'
147 err='found RRSIG by key'
155 name='mangle RRSIG CDS by ZSK'
156 err='found RRSIG by key'
158 testcase 0 $CDS -v1 -a1 -a2 -s -7200 -f brk.rrsig.cds.zsk -d DS.1 $Z
160 name='mangle RRSIG CDS by KSK'
162 testcase 1 $CDS -v1 -s -7200 -f brk.rrsig.cds.ksk -d DS.1 $
[all...] |
| /src/external/mpl/bind/dist/bin/tests/system/isctest/ |
| kasp.py | 912 expect = rf"IN RRSIG {rtype} {alg} (\d) (\d+) (\d+) (\d+) {key.tag} {fqdn}"
916 for rrsig in signatures:
917 if re.search(expect, rrsig) is not None:
924 for rrsig in signatures:
925 assert re.search(expect, rrsig) is None
929 for rrsig in signatures:
930 if re.search(expect, rrsig) is not None:
937 for rrsig in signatures:
938 assert re.search(expect, rrsig) is None
956 rrsig = f"{rr.name} {rr.ttl} {rdclass} {rdtype} {rdata}
[all...] |
| /src/external/mpl/bind/dist/bin/dnssec/ |
| dnssec-signzone.c | 357 * Find the key that generated an RRSIG, if it is in the key list. If
363 keythatsigned_unlocked(dns_rdata_rrsig_t *rrsig) {
369 if (rrsig->keyid == dst_key_id(key->key) &&
370 rrsig->algorithm == dst_key_alg(key->key) &&
371 dns_name_equal(&rrsig->signer, dst_key_name(key->key)))
380 * Finds the key that generated a RRSIG, if possible. First look at the keys
384 keythatsigned(dns_rdata_rrsig_t *rrsig) {
390 key = keythatsigned_unlocked(rrsig);
404 key = keythatsigned_unlocked(rrsig);
410 result = dst_key_fromfile(&rrsig->signer, rrsig->keyid
494 dns_rdata_rrsig_t rrsig; local
[all...] |
| /src/external/apache2/mDNSResponder/dist/ServiceRegistration/ |
| srp-log.c | 100 CASE_TO_STR(rrsig);
|
| /src/external/mpl/bind/dist/bin/tests/system/nsec3_answer/ |
| tests_nsec3.py | 33 import dns.rdtypes.ANY.RRSIG
256 rdtype=dns.rdatatype.RRSIG,
261 rrsig = answer_sig[0]
262 assert isinstance(rrsig, dns.rdtypes.ANY.RRSIG.RRSIG)
263 # RRSIG labels field RFC 4034 section 3.1.3 does not count:
266 wildcard_parent_labels = rrsig.labels + 1 # add root but not leftmost *
269 # 1. We have RRSIG from the wildcard '*.something', which proves the node
280 # ce is proven to exist by the RRSIG
[all...] |
| /src/external/apache2/mDNSResponder/dist/mDNSShared/dns_objects/utilities/ |
| rdata_parser.c | 364 // MARK: - RRSIG Parser
367 uint16_t type_covered; // Indicates which DNS type RRSIG covers.
369 uint8_t labels; // The number of labels in the RRSIG owner name, is used to check wild matching.
370 uint32_t original_ttl; // The original TTL of the records that are covered by the RRSIG, it is used to
372 uint32_t signature_expiration; // The epoch time when the RRSIG expires.
373 uint32_t signature_inception; // The epoch time when the RRSIG should start to be valid to validate.
374 uint16_t key_tag; // The key tag that identifies which DNSKEY it uses to generate the current RRSIG.
458 const rdata_rrsig_t * const rrsig = (const rdata_rrsig_t *)rdata; local
459 const uint8_t * const signer_name = rrsig->signer_name;
472 // Minimal size of the RRSIG rdata: <all the fields before signer_name> + <1 byte root domain> + <1 byte signature
[all...] |
| /src/external/bsd/unbound/dist/testcode/ |
| unitmsgparse.c | 275 /** check that there is no data element that matches the RRSIG */
277 no_data_for_rrsig(struct reply_info* rep, struct ub_packed_rrset_key* rrsig)
284 rrsig->rk.dname) == 0)
295 /* every RRSIG must be matched to an RRset */
304 log_dns_msg("rrsig failed for packet", qinfo, rep);
|
