Go to the source code of this file.
Data Structures | |
struct | _ldns_tsig_credentials |
Typedefs | |
typedef _ldns_tsig_credentials | ldns_tsig_credentials |
Functions | |
char * | ldns_tsig_algorithm (ldns_tsig_credentials *) |
char * | ldns_tsig_keyname (ldns_tsig_credentials *) |
char * | ldns_tsig_keydata (ldns_tsig_credentials *) |
char * | ldns_tsig_keyname_clone (ldns_tsig_credentials *) |
char * | ldns_tsig_keydata_clone (ldns_tsig_credentials *) |
bool | ldns_pkt_tsig_verify (ldns_pkt *pkt, uint8_t *wire, size_t wire_size, const char *key_name, const char *key_data, ldns_rdf *mac) |
verifies the tsig rr for the given packet and key (string?). | |
ldns_status | ldns_pkt_tsig_sign (ldns_pkt *pkt, const char *key_name, const char *key_data, uint16_t fudge, const char *algorithm_name, ldns_rdf *query_mac) |
creates a tsig rr for the given packet and key (string?). |
typedef struct _ldns_tsig_credentials ldns_tsig_credentials |
ldns_status ldns_pkt_tsig_sign | ( | ldns_pkt * | pkt, | |
const char * | key_name, | |||
const char * | key_data, | |||
uint16_t | fudge, | |||
const char * | algorithm_name, | |||
ldns_rdf * | query_mac | |||
) |
creates a tsig rr for the given packet and key (string?).
[in] | pkt | the packet to sign |
[in] | key_name | the name of the shared key |
[in] | key_data | the key in base 64 format |
[in] | fudge | seconds of error permitted in time signed |
[in] | algorithm_name | the name of the algorithm used (TODO more than only hmac-md5.sig-alg.reg.int.?) |
[in] | query_mac | is added to the digest if not NULL (so NULL is for signing queries, not NULL is for signing answers) |
bool ldns_pkt_tsig_verify | ( | ldns_pkt * | pkt, | |
uint8_t * | wire, | |||
size_t | wire_size, | |||
const char * | key_name, | |||
const char * | key_data, | |||
ldns_rdf * | mac | |||
) |
verifies the tsig rr for the given packet and key (string?).
The wire must be given too because tsig does not sign normalized packets.
char* ldns_tsig_algorithm | ( | ldns_tsig_credentials * | ) |
char* ldns_tsig_keydata | ( | ldns_tsig_credentials * | ) |
char* ldns_tsig_keydata_clone | ( | ldns_tsig_credentials * | ) |
char* ldns_tsig_keyname | ( | ldns_tsig_credentials * | ) |
char* ldns_tsig_keyname_clone | ( | ldns_tsig_credentials * | ) |