ldns  1.7.0
keys.h
Go to the documentation of this file.
1 /*
2  *
3  * keys.h
4  *
5  * priv key definitions
6  *
7  * a Net::DNS like library for C
8  *
9  * (c) NLnet Labs, 2005-2006
10  *
11  * See the file LICENSE for the license
12  */
13 
21 #ifndef LDNS_KEYS_H
22 #define LDNS_KEYS_H
23 
24 #include <ldns/common.h>
25 #if LDNS_BUILD_CONFIG_HAVE_SSL
26 #include <openssl/ssl.h>
27 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
28 #include <ldns/util.h>
29 #include <errno.h>
30 
31 #ifdef __cplusplus
32 extern "C" {
33 #endif
34 
35 extern ldns_lookup_table ldns_signing_algorithms[];
36 
37 #define LDNS_KEY_ZONE_KEY 0x0100 /* rfc 4034 */
38 #define LDNS_KEY_SEP_KEY 0x0001 /* rfc 4034 */
39 #define LDNS_KEY_REVOKE_KEY 0x0080 /* rfc 5011 */
40 
44 enum ldns_enum_algorithm
45 {
46  LDNS_RSAMD5 = 1, /* RFC 4034,4035 */
47  LDNS_DH = 2,
48  LDNS_DSA = 3,
49  LDNS_ECC = 4,
50  LDNS_RSASHA1 = 5,
51  LDNS_DSA_NSEC3 = 6,
52  LDNS_RSASHA1_NSEC3 = 7,
53  LDNS_RSASHA256 = 8, /* RFC 5702 */
54  LDNS_RSASHA512 = 10, /* RFC 5702 */
55  LDNS_ECC_GOST = 12, /* RFC 5933 */
56  LDNS_ECDSAP256SHA256 = 13, /* RFC 6605 */
57  LDNS_ECDSAP384SHA384 = 14, /* RFC 6605 */
58 #ifdef USE_ED25519
59  /* this ifdef is internal to ldns, because we do not want to export
60  * the symbol. Users can define it if they want access,
61  * the feature is not fully implemented at this time and openssl
62  * does not support it fully either (also for ED448). */
63  LDNS_ED25519 = 15, /* draft-ietf-curdle-dnskey-ed25519 */
64 #endif
65 #ifdef USE_ED448
66  LDNS_ED448 = 16, /* draft-ietf-curdle-dnskey-ed448 */
67 #endif
68  LDNS_INDIRECT = 252,
69  LDNS_PRIVATEDNS = 253,
70  LDNS_PRIVATEOID = 254
71 };
72 typedef enum ldns_enum_algorithm ldns_algorithm;
73 
77 enum ldns_enum_hash
78 {
79  LDNS_SHA1 = 1, /* RFC 4034 */
80  LDNS_SHA256 = 2, /* RFC 4509 */
81  LDNS_HASH_GOST = 3, /* RFC 5933 */
82  LDNS_SHA384 = 4 /* RFC 6605 */
83 };
84 typedef enum ldns_enum_hash ldns_hash;
85 
89 enum ldns_enum_signing_algorithm
90 {
91  LDNS_SIGN_RSAMD5 = LDNS_RSAMD5,
92  LDNS_SIGN_RSASHA1 = LDNS_RSASHA1,
93  LDNS_SIGN_DSA = LDNS_DSA,
94  LDNS_SIGN_RSASHA1_NSEC3 = LDNS_RSASHA1_NSEC3,
95  LDNS_SIGN_RSASHA256 = LDNS_RSASHA256,
96  LDNS_SIGN_RSASHA512 = LDNS_RSASHA512,
97  LDNS_SIGN_DSA_NSEC3 = LDNS_DSA_NSEC3,
98  LDNS_SIGN_ECC_GOST = LDNS_ECC_GOST,
99  LDNS_SIGN_ECDSAP256SHA256 = LDNS_ECDSAP256SHA256,
100  LDNS_SIGN_ECDSAP384SHA384 = LDNS_ECDSAP384SHA384,
101 #ifdef USE_ED25519
102  LDNS_SIGN_ED25519 = LDNS_ED25519,
103 #endif
104 #ifdef USE_ED448
105  LDNS_SIGN_ED448 = LDNS_ED448,
106 #endif
107  LDNS_SIGN_HMACMD5 = 157, /* not official! This type is for TSIG, not DNSSEC */
108  LDNS_SIGN_HMACSHA1 = 158, /* not official! This type is for TSIG, not DNSSEC */
109  LDNS_SIGN_HMACSHA256 = 159, /* ditto */
110  LDNS_SIGN_HMACSHA224 = 162, /* ditto */
111  LDNS_SIGN_HMACSHA384 = 164, /* ditto */
112  LDNS_SIGN_HMACSHA512 = 165 /* ditto */
113 };
114 typedef enum ldns_enum_signing_algorithm ldns_signing_algorithm;
115 
126 struct ldns_struct_key {
127  ldns_signing_algorithm _alg;
129  bool _use;
131  /* TODO remove unions? */
132  struct {
133 #if LDNS_BUILD_CONFIG_HAVE_SSL
134 #ifndef S_SPLINT_S
135  /* The key can be an OpenSSL EVP Key
136  */
137  EVP_PKEY *key;
138 #endif
139 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
140 
143  struct {
144  unsigned char *key;
145  size_t size;
146  } hmac;
150  void *external_key;
151  } _key;
153  union {
155  struct {
157  uint32_t orig_ttl;
159  uint32_t inception;
161  uint32_t expiration;
163  uint16_t keytag;
165  uint16_t flags;
166  } dnssec;
167  } _extra;
169  ldns_rdf *_pubkey_owner;
170 };
171 typedef struct ldns_struct_key ldns_key;
172 
176 struct ldns_struct_key_list
177 {
178  size_t _key_count;
179  ldns_key **_keys;
180 };
181 typedef struct ldns_struct_key_list ldns_key_list;
182 
183 
188 ldns_key_list *ldns_key_list_new(void);
189 
194 ldns_key *ldns_key_new(void);
195 
203 ldns_key *ldns_key_new_frm_algorithm(ldns_signing_algorithm a, uint16_t size);
204 
215 ldns_status ldns_key_new_frm_fp(ldns_key **k, FILE *fp);
216 
228 ldns_status ldns_key_new_frm_fp_l(ldns_key **k, FILE *fp, int *line_nr);
229 
230 #if LDNS_BUILD_CONFIG_HAVE_SSL
231 
235 ldns_status ldns_key_new_frm_engine(ldns_key **key, ENGINE *e, char *key_id, ldns_algorithm);
236 
237 
244 RSA *ldns_key_new_frm_fp_rsa(FILE *fp);
245 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
246 
247 #if LDNS_BUILD_CONFIG_HAVE_SSL
248 
255 RSA *ldns_key_new_frm_fp_rsa_l(FILE *fp, int *line_nr);
256 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
257 
258 #if LDNS_BUILD_CONFIG_HAVE_SSL
259 
265 DSA *ldns_key_new_frm_fp_dsa(FILE *fp);
266 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
267 
268 #if LDNS_BUILD_CONFIG_HAVE_SSL
269 
276 DSA *ldns_key_new_frm_fp_dsa_l(FILE *fp, int *line_nr);
277 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
278 
279 #if LDNS_BUILD_CONFIG_HAVE_SSL
280 
288 unsigned char *ldns_key_new_frm_fp_hmac(FILE *fp, size_t *hmac_size);
289 #endif
290 
291 #if LDNS_BUILD_CONFIG_HAVE_SSL
292 
301 unsigned char *ldns_key_new_frm_fp_hmac_l(FILE *fp, int *line_nr, size_t *hmac_size);
302 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
303 
304 /* acces write functions */
310 void ldns_key_set_algorithm(ldns_key *k, ldns_signing_algorithm l);
311 #if LDNS_BUILD_CONFIG_HAVE_SSL
312 
317 void ldns_key_set_evp_key(ldns_key *k, EVP_PKEY *e);
318 
325 void ldns_key_set_rsa_key(ldns_key *k, RSA *r);
326 
333 void ldns_key_set_dsa_key(ldns_key *k, DSA *d);
334 
341 void ldns_key_assign_rsa_key(ldns_key *k, RSA *r);
342 
349 void ldns_key_assign_dsa_key(ldns_key *k, DSA *d);
350 
356 int ldns_key_EVP_load_gost_id(void);
357 
359 void ldns_key_EVP_unload_gost(void);
360 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
361 
367 void ldns_key_set_hmac_key(ldns_key *k, unsigned char *hmac);
368 
379 void ldns_key_set_external_key(ldns_key *key, void *external_key);
380 
386 void ldns_key_set_hmac_size(ldns_key *k, size_t hmac_size);
392 void ldns_key_set_origttl(ldns_key *k, uint32_t t);
398 void ldns_key_set_inception(ldns_key *k, uint32_t i);
404 void ldns_key_set_expiration(ldns_key *k, uint32_t e);
410 void ldns_key_set_pubkey_owner(ldns_key *k, ldns_rdf *r);
416 void ldns_key_set_keytag(ldns_key *k, uint16_t tag);
422 void ldns_key_set_flags(ldns_key *k, uint16_t flags);
428 void ldns_key_list_set_key_count(ldns_key_list *key, size_t count);
429 
436 bool ldns_key_list_push_key(ldns_key_list *key_list, ldns_key *key);
437 
443 size_t ldns_key_list_key_count(const ldns_key_list *key_list);
444 
451 ldns_key *ldns_key_list_key(const ldns_key_list *key, size_t nr);
452 
453 #if LDNS_BUILD_CONFIG_HAVE_SSL
454 
459 RSA *ldns_key_rsa_key(const ldns_key *k);
465 EVP_PKEY *ldns_key_evp_key(const ldns_key *k);
466 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
467 
471 #if LDNS_BUILD_CONFIG_HAVE_SSL
472 DSA *ldns_key_dsa_key(const ldns_key *k);
473 #endif /* LDNS_BUILD_CONFIG_HAVE_SSL */
474 
480 ldns_signing_algorithm ldns_key_algorithm(const ldns_key *k);
486 void ldns_key_set_use(ldns_key *k, bool v);
492 bool ldns_key_use(const ldns_key *k);
498 unsigned char *ldns_key_hmac_key(const ldns_key *k);
504 void *ldns_key_external_key(const ldns_key *k);
510 size_t ldns_key_hmac_size(const ldns_key *k);
516 uint32_t ldns_key_origttl(const ldns_key *k);
522 uint32_t ldns_key_inception(const ldns_key *k);
528 uint32_t ldns_key_expiration(const ldns_key *k);
534 uint16_t ldns_key_keytag(const ldns_key *k);
540 ldns_rdf *ldns_key_pubkey_owner(const ldns_key *k);
546 void
547 ldns_key_list_set_use(ldns_key_list *keys, bool v);
548 
554 uint16_t ldns_key_flags(const ldns_key *k);
555 
561 ldns_key *ldns_key_list_pop_key(ldns_key_list *key_list);
562 
572 ldns_rr *ldns_key2rr(const ldns_key *k);
573 
580 void ldns_key_print(FILE *output, const ldns_key *k);
581 
587 void ldns_key_free(ldns_key *key);
588 
595 void ldns_key_deep_free(ldns_key *key);
596 
601 void ldns_key_list_free(ldns_key_list *key_list);
602 
608 ldns_rr * ldns_read_anchor_file(const char *filename);
609 
620 char *ldns_key_get_file_base_name(const ldns_key *key);
621 
627 int ldns_key_algo_supported(int algo);
628 
634 ldns_signing_algorithm ldns_get_signing_algorithm_by_name(const char* name);
635 
636 #ifdef __cplusplus
637 }
638 #endif
639 
640 #endif /* LDNS_KEYS_H */
ldns_key_set_dsa_key
void ldns_key_set_dsa_key(ldns_key *k, DSA *d)
Set the key's dsa data The dsa data should be freed by the user.
Definition: keys.c:1417
ldns_key_list_key
ldns_key * ldns_key_list_key(const ldns_key_list *key, size_t nr)
returns a pointer to the key in the list at the given position
Definition: keys.c:1506
ldns_key_set_external_key
void ldns_key_set_external_key(ldns_key *key, void *external_key)
Set the key id data.
Definition: keys.c:1463
ldns_hash
enum ldns_enum_hash ldns_hash
Definition: keys.h:84
LDNS_SIGN_HMACMD5
@ LDNS_SIGN_HMACMD5
Definition: keys.h:107
ldns_key_set_rsa_key
void ldns_key_set_rsa_key(ldns_key *k, RSA *r)
Set the key's rsa data.
Definition: keys.c:1409
ldns_key_new_frm_fp_dsa
DSA * ldns_key_new_frm_fp_dsa(FILE *fp)
frm_fp helper function.
Definition: keys.c:946
ldns_key_deep_free
void ldns_key_deep_free(ldns_key *key)
frees a key structure and all its internal data structures, except the data set by ldns_key_set_exter...
Definition: keys.c:2071
ldns_key_list_key_count
size_t ldns_key_list_key_count(const ldns_key_list *key_list)
returns the number of keys in the key list
Definition: keys.c:1500
ldns_key_new
ldns_key * ldns_key_new(void)
Creates a new empty key structure.
Definition: keys.c:71
LDNS_ECC_GOST
@ LDNS_ECC_GOST
Definition: keys.h:55
ldns_struct_key::external_key
void * external_key
the key structure can also just point to some external key data
Definition: keys.h:150
ldns_key_set_hmac_key
void ldns_key_set_hmac_key(ldns_key *k, unsigned char *hmac)
Set the key's hmac data.
Definition: keys.c:1451
ldns_key_EVP_unload_gost
void ldns_key_EVP_unload_gost(void)
Release the engine reference held for the GOST engine.
Definition: keys.c:180
ldns_struct_rr
Resource Record.
Definition: rr.h:302
ldns_key_set_inception
void ldns_key_set_inception(ldns_key *k, uint32_t i)
Set the key's inception date (seconds after epoch)
Definition: keys.c:1475
ldns_struct_key::expiration
uint32_t expiration
The expiration date of signatures made with this key.
Definition: keys.h:161
ldns_key_new_frm_algorithm
ldns_key * ldns_key_new_frm_algorithm(ldns_signing_algorithm a, uint16_t size)
Creates a new key based on the algorithm.
Definition: keys.c:1124
ldns_key_EVP_load_gost_id
int ldns_key_EVP_load_gost_id(void)
Get the PKEY id for GOST, loads GOST into openssl as a side effect.
Definition: keys.c:132
ldns_key_set_keytag
void ldns_key_set_keytag(ldns_key *k, uint16_t tag)
Set the key's key tag.
Definition: keys.c:1493
ldns_key_list_free
void ldns_key_list_free(ldns_key_list *key_list)
Frees a key list structure.
Definition: keys.c:2090
ldns_struct_key::_alg
ldns_signing_algorithm _alg
Definition: keys.h:127
ldns_key_evp_key
EVP_PKEY * ldns_key_evp_key(const ldns_key *k)
returns the (openssl) EVP struct contained in the key
Definition: keys.c:1541
LDNS_RSASHA1_NSEC3
@ LDNS_RSASHA1_NSEC3
Definition: keys.h:52
ldns_key_assign_dsa_key
void ldns_key_assign_dsa_key(ldns_key *k, DSA *d)
Assign the key's dsa data The dsa data will be freed automatically when the key is freed.
Definition: keys.c:1437
ldns_struct_key_list
Same as rr_list, but now for keys.
Definition: keys.h:176
LDNS_SIGN_HMACSHA256
@ LDNS_SIGN_HMACSHA256
Definition: keys.h:109
ldns_key_list_pop_key
ldns_key * ldns_key_list_pop_key(ldns_key_list *key_list)
pops the last rr from a keylist
Definition: keys.c:1676
LDNS_SIGN_ECDSAP256SHA256
@ LDNS_SIGN_ECDSAP256SHA256
Definition: keys.h:99
ldns_struct_key::dnssec
struct ldns_struct_key::@1::@3 dnssec
Some values that influence generated signatures.
ldns_key_origttl
uint32_t ldns_key_origttl(const ldns_key *k)
return the original ttl of the key
Definition: keys.c:1600
LDNS_SIGN_HMACSHA224
@ LDNS_SIGN_HMACSHA224
Definition: keys.h:110
ldns_struct_key_list::_keys
ldns_key ** _keys
Definition: keys.h:179
ldns_key_set_expiration
void ldns_key_set_expiration(ldns_key *k, uint32_t e)
Set the key's expiration date (seconds after epoch)
Definition: keys.c:1481
ldns_struct_key::_extra
union ldns_struct_key::@1 _extra
Depending on the key we can have extra data.
ldns_key_external_key
void * ldns_key_external_key(const ldns_key *k)
return the key id key data
Definition: keys.c:1594
ldns_key_inception
uint32_t ldns_key_inception(const ldns_key *k)
return the key's inception date
Definition: keys.c:1612
ldns_key_set_pubkey_owner
void ldns_key_set_pubkey_owner(ldns_key *k, ldns_rdf *r)
Set the key's pubkey owner.
Definition: keys.c:1487
LDNS_SIGN_HMACSHA1
@ LDNS_SIGN_HMACSHA1
Definition: keys.h:108
ldns_struct_key::_use
signed char _use
Whether to use this key when signing.
Definition: keys.h:129
LDNS_SIGN_HMACSHA512
@ LDNS_SIGN_HMACSHA512
Definition: keys.h:112
ldns_key_list_push_key
signed char ldns_key_list_push_key(ldns_key_list *key_list, ldns_key *key)
pushes a key to a keylist
Definition: keys.c:1653
ldns_key_set_flags
void ldns_key_set_flags(ldns_key *k, uint16_t flags)
Set the key's flags.
Definition: keys.c:1395
ldns_get_signing_algorithm_by_name
ldns_signing_algorithm ldns_get_signing_algorithm_by_name(const char *name)
Get signing algorithm by name.
Definition: keys.c:2181
ldns_key_use
signed char ldns_key_use(const ldns_key *k)
return the use flag
Definition: keys.c:1530
ldns_key_get_file_base_name
char * ldns_key_get_file_base_name(const ldns_key *key)
Returns the 'default base name' for key files; IE.
Definition: keys.c:2153
LDNS_SIGN_ECC_GOST
@ LDNS_SIGN_ECC_GOST
Definition: keys.h:98
LDNS_SIGN_RSASHA1
@ LDNS_SIGN_RSASHA1
Definition: keys.h:92
ldns_key_rsa_key
RSA * ldns_key_rsa_key(const ldns_key *k)
returns the (openssl) RSA struct contained in the key
Definition: keys.c:1547
ldns_key_hmac_size
size_t ldns_key_hmac_size(const ldns_key *k)
return the hmac key size
Definition: keys.c:1584
ldns_key_new_frm_fp_l
ldns_status ldns_key_new_frm_fp_l(ldns_key **k, FILE *fp, int *line_nr)
Creates a new private key based on the contents of the file pointed by fp.
Definition: keys.c:454
ldns_enum_signing_algorithm
ldns_enum_signing_algorithm
Algorithms used in dns for signing.
Definition: keys.h:89
ldns_key_new_frm_fp_dsa_l
DSA * ldns_key_new_frm_fp_dsa_l(FILE *fp, int *line_nr)
frm_fp helper function.
ldns_enum_algorithm
ldns_enum_algorithm
Algorithms used in dns.
Definition: keys.h:44
ldns_key_new_frm_fp_hmac
unsigned char * ldns_key_new_frm_fp_hmac(FILE *fp, size_t *hmac_size)
frm_fp helper function.
Definition: keys.c:1057
ldns_key_list_set_use
void ldns_key_list_set_use(ldns_key_list *keys, signed char v)
Set the 'use' flag for all keys in the list.
ldns_struct_key::flags
uint16_t flags
The dnssec key flags as specified in RFC4035, like ZSK and KSK.
Definition: keys.h:165
LDNS_SIGN_RSASHA512
@ LDNS_SIGN_RSASHA512
Definition: keys.h:96
LDNS_SHA384
@ LDNS_SHA384
Definition: keys.h:82
ldns_key_set_algorithm
void ldns_key_set_algorithm(ldns_key *k, ldns_signing_algorithm l)
Set the key's algorithm.
Definition: keys.c:1389
ldns_key_set_evp_key
void ldns_key_set_evp_key(ldns_key *k, EVP_PKEY *e)
Set the key's evp key.
Definition: keys.c:1403
ldns_struct_key
General key structure, can contain all types of keys that are used in DNSSEC.
Definition: keys.h:126
LDNS_INDIRECT
@ LDNS_INDIRECT
Definition: keys.h:68
ldns_key_new_frm_fp_hmac_l
unsigned char * ldns_key_new_frm_fp_hmac_l(FILE *fp, int *line_nr, size_t *hmac_size)
frm_fp helper function.
ldns_key_set_hmac_size
void ldns_key_set_hmac_size(ldns_key *k, size_t hmac_size)
Set the key's hmac size.
Definition: keys.c:1457
ldns_key_dsa_key
DSA * ldns_key_dsa_key(const ldns_key *k)
returns the (openssl) DSA struct contained in the key
Definition: keys.c:1557
LDNS_ECDSAP256SHA256
@ LDNS_ECDSAP256SHA256
Definition: keys.h:56
LDNS_ECDSAP384SHA384
@ LDNS_ECDSAP384SHA384
Definition: keys.h:57
ldns_struct_key::_pubkey_owner
ldns_rdf * _pubkey_owner
Owner name of the key.
Definition: keys.h:169
ldns_status
enum ldns_enum_status ldns_status
Definition: error.h:134
LDNS_SHA1
@ LDNS_SHA1
Definition: keys.h:79
LDNS_RSASHA512
@ LDNS_RSASHA512
Definition: keys.h:54
LDNS_SIGN_HMACSHA384
@ LDNS_SIGN_HMACSHA384
Definition: keys.h:111
ldns_key_expiration
uint32_t ldns_key_expiration(const ldns_key *k)
return the key's expiration date
Definition: keys.c:1618
ldns_struct_lookup_table
A general purpose lookup table.
Definition: util.h:156
LDNS_SIGN_DSA
@ LDNS_SIGN_DSA
Definition: keys.h:93
LDNS_SHA256
@ LDNS_SHA256
Definition: keys.h:80
LDNS_PRIVATEOID
@ LDNS_PRIVATEOID
Definition: keys.h:70
LDNS_ECC
@ LDNS_ECC
Definition: keys.h:49
ldns_key_set_origttl
void ldns_key_set_origttl(ldns_key *k, uint32_t t)
Set the key's original ttl.
Definition: keys.c:1469
ldns_struct_rdf
Resource record data field.
Definition: rdata.h:174
LDNS_DSA_NSEC3
@ LDNS_DSA_NSEC3
Definition: keys.h:51
ldns_key2rr
ldns_rr * ldns_key2rr(const ldns_key *k)
converts a ldns_key to a public key rr If the key data exists at an external point,...
Definition: keys.c:1816
LDNS_RSASHA1
@ LDNS_RSASHA1
Definition: keys.h:50
ldns_key_new_frm_fp_rsa_l
RSA * ldns_key_new_frm_fp_rsa_l(FILE *fp, int *line_nr)
frm_fp helper function.
Definition: keys.c:774
common.h
ldns_enum_hash
ldns_enum_hash
Hashing algorithms used in the DS record.
Definition: keys.h:77
ldns_key_new_frm_fp_rsa
RSA * ldns_key_new_frm_fp_rsa(FILE *fp)
frm_fp helper function.
Definition: keys.c:768
ldns_algorithm
enum ldns_enum_algorithm ldns_algorithm
Definition: keys.h:72
ldns_key_free
void ldns_key_free(ldns_key *key)
frees a key structure, but not its internal data structures
Definition: keys.c:2065
ldns_key_new_frm_engine
ldns_status ldns_key_new_frm_engine(ldns_key **key, ENGINE *e, char *key_id, ldns_algorithm)
Read the key with the given id from the given engine and store it in the given ldns_key structure.
Definition: keys.c:104
ldns_key_new_frm_fp
ldns_status ldns_key_new_frm_fp(ldns_key **k, FILE *fp)
Creates a new priv key based on the contents of the file pointed by fp.
Definition: keys.c:97
ldns_struct_key::key
unsigned char * key
Definition: keys.h:144
LDNS_RSASHA256
@ LDNS_RSASHA256
Definition: keys.h:53
LDNS_SIGN_DSA_NSEC3
@ LDNS_SIGN_DSA_NSEC3
Definition: keys.h:97
LDNS_RSAMD5
@ LDNS_RSAMD5
Definition: keys.h:46
ldns_key_pubkey_owner
ldns_rdf * ldns_key_pubkey_owner(const ldns_key *k)
return the public key's owner
Definition: keys.c:1630
ldns_key_hmac_key
unsigned char * ldns_key_hmac_key(const ldns_key *k)
return the hmac key data
Definition: keys.c:1574
ldns_key_assign_rsa_key
void ldns_key_assign_rsa_key(ldns_key *k, RSA *r)
Assign the key's rsa data The rsa data will be freed automatically when the key is freed.
Definition: keys.c:1429
ldns_struct_key::key
EVP_PKEY * key
Definition: keys.h:137
ldns_key_keytag
uint16_t ldns_key_keytag(const ldns_key *k)
return the keytag
Definition: keys.c:1624
ldns_key_set_use
void ldns_key_set_use(ldns_key *k, signed char v)
set the use flag
LDNS_DH
@ LDNS_DH
Definition: keys.h:47
LDNS_SIGN_RSASHA256
@ LDNS_SIGN_RSASHA256
Definition: keys.h:95
LDNS_SIGN_RSAMD5
@ LDNS_SIGN_RSAMD5
Definition: keys.h:91
ldns_key_list_set_key_count
void ldns_key_list_set_key_count(ldns_key_list *key, size_t count)
Set the keylist's key count to count.
Definition: keys.c:1647
ldns_struct_key::keytag
uint16_t keytag
The keytag of this key.
Definition: keys.h:163
ldns_signing_algorithm
enum ldns_enum_signing_algorithm ldns_signing_algorithm
Definition: keys.h:114
ldns_key_flags
uint16_t ldns_key_flags(const ldns_key *k)
return the flag of the key
Definition: keys.c:1606
LDNS_HASH_GOST
@ LDNS_HASH_GOST
Definition: keys.h:81
ldns_key_print
void ldns_key_print(FILE *output, const ldns_key *k)
print a private key to the file output
Definition: keys.c:1376
ldns_struct_key_list::_key_count
size_t _key_count
Definition: keys.h:178
ldns_read_anchor_file
ldns_rr * ldns_read_anchor_file(const char *filename)
Instantiates a DNSKEY or DS RR from file.
Definition: keys.c:2101
LDNS_PRIVATEDNS
@ LDNS_PRIVATEDNS
Definition: keys.h:69
LDNS_SIGN_RSASHA1_NSEC3
@ LDNS_SIGN_RSASHA1_NSEC3
Definition: keys.h:94
ldns_signing_algorithms
ldns_lookup_table ldns_signing_algorithms[]
Definition: keys.c:23
ldns_key_list_new
ldns_key_list * ldns_key_list_new(void)
Creates a new empty key list.
Definition: keys.c:58
ldns_key_algorithm
ldns_signing_algorithm ldns_key_algorithm(const ldns_key *k)
return the signing alg of the key
Definition: keys.c:1516
ldns_struct_key::size
size_t size
Definition: keys.h:145
util.h
ldns_key_algo_supported
int ldns_key_algo_supported(int algo)
See if a key algorithm is supported.
Definition: keys.c:2170
LDNS_DSA
@ LDNS_DSA
Definition: keys.h:48
ldns_struct_key::orig_ttl
uint32_t orig_ttl
The TTL of the rrset that is currently signed.
Definition: keys.h:157
ldns_struct_key::_key
struct ldns_struct_key::@0 _key
Storage pointers for the types of keys supported.
LDNS_SIGN_ECDSAP384SHA384
@ LDNS_SIGN_ECDSAP384SHA384
Definition: keys.h:100
ldns_struct_key::inception
uint32_t inception
The inception date of signatures made with this key.
Definition: keys.h:159
ldns_struct_key::hmac
struct ldns_struct_key::@0::@2 hmac
The key can be an HMAC key.
Generated on Mon Apr 13 2020 01:12:45 for ldns by   doxygen 1.8.17