logo
Free, unlimited AI code reviews that run on commit
git-lrc git-lrc GitHub Install Now We'd appreciate a star git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt git-lrc - Free, unlimited AI code reviews that run on commit | Product Hunt

ldns_pkt_tsig_verify, ldns_pkt_tsig_sign - tsig signing and verification

Author

       The ldns team at NLnet Labs.

Description

ldns_pkt_tsig_verify() verifies the tsig rr for the given packet and key.  The wire  must  be  given  too
              because tsig does not sign normalized packets.
              pkt: the packet to verify
              wire: needed to verify the mac
              wire_size: size of wire
              key_name: the name of the shared key
              key_data: the key in base 64 format
              mac: original mac
              Returns true if tsig is correct, false if not, or if tsig is not set

       ldns_pkt_tsig_sign() creates a tsig rr for the given packet and key.
              pkt: the packet to sign
              key_name: the name of the shared key
              key_data: the key in base 64 format
              fudge: seconds of error permitted in time signed
              algorithm_name: the name of the algorithm used
              query_mac:  is  added  to  the digest if not NULL (so NULL is for signing queries, not NULL is for
              signing answers)
              Returns status (OK if success)

Name

       ldns_pkt_tsig_verify, ldns_pkt_tsig_sign - tsig signing and verification

Remarks

       This manpage was automatically generated from the ldns source code.

                                                   30 May 2006                                           ldns(3)

Reporting Bugs

       Please report bugs to dns-team@nlnetlabs.nl or on GitHub at https://github.com/NLnetLabs/ldns/issues

See Also

ldns_key.  And perldocNet::DNS, RFC1034, RFC1035, RFC4033, RFC4034  and RFC4035.

Synopsis

       #include <stdint.h>
       #include <stdbool.h>

       #include <ldns/ldns.h>

       bool  ldns_pkt_tsig_verify(ldns_pkt  *pkt,  const  uint8_t *wire, size_t wire_size, const char *key_name,
       const char *key_data, const ldns_rdf *mac);

       ldns_status ldns_pkt_tsig_sign(ldns_pkt *pkt, const char *key_name, const char *key_data, uint16_t fudge,
       const char *algorithm_name, const ldns_rdf *query_mac);

See Also