interesting
/
getdns
mirror of https://github.com/getdnsapi/getdns.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Lookup DS only, for no sigs INSECURE

This commit is contained in:
Willem Toorop 2015-07-14 10:22:42 +02:00
parent a8adf662d1
commit 6f21d89e2a
1 changed files with 41 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
src/dnssec.c
View File

@ -750,6 +750,7 @@ struct chain_node {
* Hence they need to be enumerated before the construction functions. * Hence they need to be enumerated before the construction functions.
*/ */
static void val_chain_sched(chain_head *head, uint8_t *dname); static void val_chain_sched(chain_head *head, uint8_t *dname);
static void val_chain_sched_ds(chain_head *head, uint8_t *dname);
static void val_chain_sched_signer(chain_head *head, rrsig_iter *rrsig); static void val_chain_sched_signer(chain_head *head, rrsig_iter *rrsig);
static void val_chain_sched_soa(chain_head *head, uint8_t *dname); static void val_chain_sched_soa(chain_head *head, uint8_t *dname);
@ -1018,7 +1019,7 @@ static void add_pkt2val_chain(struct mem_funcs *mf,
/* No signatures found for this RRset */ /* No signatures found for this RRset */
if (rrset->rr_type == GETDNS_RRTYPE_SOA) if (rrset->rr_type == GETDNS_RRTYPE_SOA)
val_chain_sched(head, rrset->name); val_chain_sched_ds(head, rrset->name);
else if (rrset->rr_type == GETDNS_RRTYPE_CNAME) else if (rrset->rr_type == GETDNS_RRTYPE_CNAME)
val_chain_sched_soa(head, rrset->name + *rrset->name + 1); val_chain_sched_soa(head, rrset->name + *rrset->name + 1);
else else
@ -1175,6 +1176,42 @@ static void val_chain_sched(chain_head *head, uint8_t *dname)
val_chain_sched_node(node); val_chain_sched_node(node);
} }
static void val_chain_sched_ds_node(chain_node *node)
{
getdns_context *context;
getdns_eventloop *loop;
getdns_dns_req *ds_req;
char name[1024];
context = node->chains->netreq->owner->context;
loop = node->chains->netreq->owner->loop;
if (!gldns_wire2str_dname_buf(node->ds.name, 256, name, sizeof(name)))
return;
DEBUG_SEC("schedule DS lookup for %s\n", name);
if (! node->ds_req && node->parent /* not root */ &&
! priv_getdns_general_loop(context, loop, name, GETDNS_RRTYPE_DS,
dnssec_ok_checking_disabled, node, &ds_req, NULL, val_chain_node_cb))
node->ds_req = ds_req->netreqs[0];
}
static void val_chain_sched_ds(chain_head *head, uint8_t *dname)
{
chain_node *node;
if (!head->netreq)
return;
for ( node = head->parent
; node && !_dname_equal(dname, node->ds.name)
; node = node->parent);
if (node)
val_chain_sched_ds_node(node);
}
static void val_chain_sched_signer_node(chain_node *node, rrsig_iter *rrsig) static void val_chain_sched_signer_node(chain_node *node, rrsig_iter *rrsig)
{ {
priv_getdns_rdf_iter rdf_spc, *rdf; priv_getdns_rdf_iter rdf_spc, *rdf;
@ -1256,8 +1293,9 @@ static void val_chain_node_soa_cb(getdns_dns_req *dnsreq)
node = node->parent; node = node->parent;
if (node) if (node)
val_chain_sched_node(node); val_chain_sched_ds_node(node);
} else
} else if (node->parent)
val_chain_sched_soa_node(node->parent); val_chain_sched_soa_node(node->parent);
check_chain_complete(node->chains); check_chain_complete(node->chains);