Gecko [ paxlifestyle.com ]

Name	Size	Permission	Date
acl.h	8.74 KB	-rw-r--r--	2025-01-20 13:39
adb.h	21.28 KB	-rw-r--r--	2025-01-20 13:39
badcache.h	3.28 KB	-rw-r--r--	2025-01-20 13:39
bit.h	788 B	-rw-r--r--	2025-01-20 13:39
byaddr.h	3.5 KB	-rw-r--r--	2025-01-20 13:39
cache.h	6.68 KB	-rw-r--r--	2025-01-20 13:39
callbacks.h	2.04 KB	-rw-r--r--	2025-01-20 13:39
catz.h	12.03 KB	-rw-r--r--	2025-01-20 13:39
cert.h	1.42 KB	-rw-r--r--	2025-01-20 13:39
client.h	9.18 KB	-rw-r--r--	2025-01-20 13:39
clientinfo.h	2.58 KB	-rw-r--r--	2025-01-20 13:39
compress.h	6.86 KB	-rw-r--r--	2025-01-20 13:39
db.h	49.1 KB	-rw-r--r--	2025-01-20 13:39
dbiterator.h	7.18 KB	-rw-r--r--	2025-01-20 13:39
diff.h	6.86 KB	-rw-r--r--	2025-01-20 13:39
dispatch.h	10.25 KB	-rw-r--r--	2026-03-27 00:00
dlz.h	10.61 KB	-rw-r--r--	2025-01-20 13:39
dlz_dlopen.h	4.27 KB	-rw-r--r--	2025-01-20 13:39
dns64.h	6.22 KB	-rw-r--r--	2025-01-20 13:39
dnsrps.h	2.49 KB	-rw-r--r--	2025-01-20 13:39
dnssec.h	12.86 KB	-rw-r--r--	2025-01-20 13:39
dnstap.h	9.95 KB	-rw-r--r--	2025-01-20 13:39
ds.h	1.62 KB	-rw-r--r--	2025-01-20 13:39
dsdigest.h	1.65 KB	-rw-r--r--	2025-01-20 13:39
dyndb.h	4.8 KB	-rw-r--r--	2025-01-20 13:39
ecs.h	1.91 KB	-rw-r--r--	2025-01-20 13:39
edns.h	763 B	-rw-r--r--	2025-01-20 13:39
enumclass.h	1.13 KB	-rw-r--r--	2026-03-27 00:00
enumtype.h	8.42 KB	-rw-r--r--	2026-03-27 00:00
events.h	4.33 KB	-rw-r--r--	2025-01-20 13:39
fixedname.h	1.59 KB	-rw-r--r--	2025-01-20 13:39
forward.h	3.13 KB	-rw-r--r--	2025-01-20 13:39
geoip.h	2.27 KB	-rw-r--r--	2025-01-20 13:39
ipkeylist.h	2.13 KB	-rw-r--r--	2025-01-20 13:39
iptable.h	1.46 KB	-rw-r--r--	2025-01-20 13:39
journal.h	9.46 KB	-rw-r--r--	2025-01-20 13:39
kasp.h	12.46 KB	-rw-r--r--	2025-01-20 13:39
keydata.h	1 KB	-rw-r--r--	2025-01-20 13:39
keyflags.h	1.22 KB	-rw-r--r--	2025-01-20 13:39
keymgr.h	3.99 KB	-rw-r--r--	2025-01-20 13:39
keytable.h	7.85 KB	-rw-r--r--	2025-01-20 13:39
keyvalues.h	3.96 KB	-rw-r--r--	2025-01-20 13:39
librpz.h	30.29 KB	-rw-r--r--	2025-01-20 13:39
log.h	3.91 KB	-rw-r--r--	2025-01-20 13:39
lookup.h	2.84 KB	-rw-r--r--	2025-01-20 13:39
master.h	8.52 KB	-rw-r--r--	2025-01-20 13:39
masterdump.h	9.64 KB	-rw-r--r--	2025-01-20 13:39
message.h	41.35 KB	-rw-r--r--	2026-03-27 00:00
name.h	36.35 KB	-rw-r--r--	2025-01-20 13:39
ncache.h	4.83 KB	-rw-r--r--	2025-01-20 13:39
nsec.h	3.43 KB	-rw-r--r--	2025-01-20 13:39
nsec3.h	8.05 KB	-rw-r--r--	2025-01-20 13:39
nta.h	4.6 KB	-rw-r--r--	2025-01-20 13:39
opcode.h	987 B	-rw-r--r--	2025-01-20 13:39
order.h	1.95 KB	-rw-r--r--	2025-01-20 13:39
peer.h	4.8 KB	-rw-r--r--	2025-01-20 13:39
private.h	1.89 KB	-rw-r--r--	2025-01-20 13:39
rbt.h	34.66 KB	-rw-r--r--	2025-01-20 13:39
rcode.h	2.4 KB	-rw-r--r--	2025-01-20 13:39
rdata.h	22.21 KB	-rw-r--r--	2025-01-20 13:39
rdataclass.h	2.17 KB	-rw-r--r--	2025-01-20 13:39
rdatalist.h	2.47 KB	-rw-r--r--	2025-01-20 13:39
rdataset.h	18.67 KB	-rw-r--r--	2025-01-20 13:39
rdatasetiter.h	3.81 KB	-rw-r--r--	2025-01-20 13:39
rdataslab.h	4.11 KB	-rw-r--r--	2025-01-20 13:39
rdatastruct.h	60.33 KB	-rw-r--r--	2026-03-27 00:00
rdatatype.h	2.21 KB	-rw-r--r--	2025-01-20 13:39
request.h	8.67 KB	-rw-r--r--	2026-03-27 00:00
resolver.h	18.7 KB	-rw-r--r--	2025-01-20 13:39
result.h	689 B	-rw-r--r--	2025-01-20 13:39
rootns.h	872 B	-rw-r--r--	2025-01-20 13:39
rpz.h	12.22 KB	-rw-r--r--	2025-01-20 13:39
rriterator.h	4.09 KB	-rw-r--r--	2025-01-20 13:39
rrl.h	6.8 KB	-rw-r--r--	2025-01-20 13:39
sdb.h	7.17 KB	-rw-r--r--	2025-01-20 13:39
sdlz.h	13.75 KB	-rw-r--r--	2025-01-20 13:39
secalg.h	1.65 KB	-rw-r--r--	2025-01-20 13:39
secproto.h	1.5 KB	-rw-r--r--	2025-01-20 13:39
soa.h	2.12 KB	-rw-r--r--	2025-01-20 13:39
ssu.h	7.6 KB	-rw-r--r--	2025-01-20 13:39
stats.h	24.15 KB	-rw-r--r--	2025-01-20 13:39
time.h	1.64 KB	-rw-r--r--	2025-01-20 13:39
tkey.h	7.46 KB	-rw-r--r--	2025-01-20 13:39
transport.h	5.93 KB	-rw-r--r--	2026-03-27 00:00
tsec.h	2.86 KB	-rw-r--r--	2025-01-20 13:39
tsig.h	8.18 KB	-rw-r--r--	2025-01-20 13:39
ttl.h	1.82 KB	-rw-r--r--	2025-01-20 13:39
types.h	14.03 KB	-rw-r--r--	2026-03-27 00:00
update.h	1.94 KB	-rw-r--r--	2025-01-20 13:39
validator.h	6.6 KB	-rw-r--r--	2025-01-20 13:39
view.h	36.94 KB	-rw-r--r--	2025-01-20 13:39
xfrin.h	2.26 KB	-rw-r--r--	2025-01-20 13:39
zone.h	63.88 KB	-rw-r--r--	2025-01-20 13:39
zonekey.h	754 B	-rw-r--r--	2025-01-20 13:39
zoneverify.h	1.4 KB	-rw-r--r--	2025-01-20 13:39
zt.h	5.02 KB	-rw-r--r--	2025-01-20 13:39

Rename

/*
 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
 *
 * SPDX-License-Identifier: MPL-2.0
 *
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, you can obtain one at https://mozilla.org/MPL/2.0/.
 *
 * See the COPYRIGHT file distributed with this work for additional
 * information regarding copyright ownership.
 */

#pragma once

/*! \file dns/keymgr.h */

#include <isc/lang.h>
#include <isc/stdtime.h>

#include <dns/types.h>

#include <dst/dst.h>

ISC_LANG_BEGINDECLS

isc_result_t
dns_keymgr_run(const dns_name_t *origin, dns_rdataclass_t rdclass,
	       const char *directory, isc_mem_t *mctx,
	       dns_dnsseckeylist_t *keyring, dns_dnsseckeylist_t *dnskeys,
	       dns_kasp_t *kasp, isc_stdtime_t now, isc_stdtime_t *nexttime);
/*%<
 * Manage keys in 'keyring' and update timing data according to 'kasp' policy.
 * Create new keys for 'origin' if necessary in 'directory'.  Append all such
 * keys, along with use hints gleaned from their metadata, onto 'keyring'.
 *
 * Update key states and store changes back to disk. Store when to run next
 * in 'nexttime'.
 *
 *	Requires:
 *\li		'origin' is a valid FQDN.
 *\li		'mctx' is a valid memory context.
 *\li		'keyring' is not NULL.
 *\li		'kasp' is not NULL.
 *
 *	Returns:
 *\li		#ISC_R_SUCCESS
 *\li		any error returned by dst_key_generate(), isc_dir_open(),
 *		dst_key_to_file(), or dns_dnsseckey_create().
 *
 *	Ensures:
 *\li		On error, keypool is unchanged
 */

isc_result_t
dns_keymgr_checkds(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		   const char *directory, isc_stdtime_t now, isc_stdtime_t when,
		   bool dspublish);
isc_result_t
dns_keymgr_checkds_id(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		      const char *directory, isc_stdtime_t now,
		      isc_stdtime_t when, bool dspublish, dns_keytag_t id,
		      unsigned int algorithm);
/*%<
 * Check DS for one key in 'keyring'. The key must have the KSK role.
 * If 'dspublish' is set to true, set the DS Publish time to 'now'.
 * If 'dspublish' is set to false, set the DS Removed time to 'now'.
 * If a specific key 'id' is given it must match the keytag.
 * If the 'algorithm' is non-zero, it must match the key's algorithm.
 * The result is stored in the key state file.
 *
 *	Requires:
 *\li		'kasp' is not NULL.
 *\li		'keyring' is not NULL.
 *
 *	Returns:
 *\li		#ISC_R_SUCCESS (No error).
 *\li		#DNS_R_NOKEYMATCH (No matching keys found).
 *\li		#DNS_R_TOOMANYKEYS (More than one matching keys found).
 *
 */

isc_result_t
dns_keymgr_rollover(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		    const char *directory, isc_stdtime_t now,
		    isc_stdtime_t when, dns_keytag_t id,
		    unsigned int algorithm);
/*%<
 * Rollover key with given 'id'. If the 'algorithm' is non-zero, it must
 * match the key's algorithm. The changes are stored in the key state file.
 *
 * A rollover means adjusting the key metadata so that keymgr will start the
 * actual rollover on the next run. Update the 'inactive' time and adjust
 * key lifetime to match the 'when' to rollover time.
 *
 * The 'when' time may be in the past. In that case keymgr will roll the
 * key as soon as possible.
 *
 * The 'when' time may be in the future. This may extend the lifetime,
 * overriding the default lifetime from the policy.
 *
 *	Requires:
 *\li		'kasp' is not NULL.
 *\li		'keyring' is not NULL.
 *
 *	Returns:
 *\li		#ISC_R_SUCCESS (No error).
 *\li		#DNS_R_NOKEYMATCH (No matching keys found).
 *\li		#DNS_R_TOOMANYKEYS (More than one matching keys found).
 *\li		#DNS_R_KEYNOTACTIVE (Key is not active).
 *
 */

void
dns_keymgr_status(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
		  isc_stdtime_t now, char *out, size_t out_len);
/*%<
 * Retrieve the status of given 'kasp' policy and keys in the
 * 'keyring' and store the printable output in the 'out' buffer.
 *
 *	Requires:
 *\li		'kasp' is not NULL.
 *\li		'keyring' is not NULL.
 *\li		'out' is not NULL.
 *
 *	Returns:
 *\li		Printable status in 'out'.
 *
 */

ISC_LANG_ENDDECLS