Lines Matching +full:inside +full:- +full:secure
2 * validator/val_nsec3.h - validator NSEC3 denial of existence functions.
46 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
48 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
50 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
52 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
54 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
59 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
61 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
63 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
84 * +-+-+-+-+-+-+-+-+
86 * +-+-+-+-+-+-+-+-+
87 * The OPT-OUT bit in the NSEC3 flags field.
125 * sec_status SECURE of the Name Error is proven by the NSEC3 RRs,
139 * 1) Normal NODATA -- qname is matched to an NSEC3 record, type is not
142 * 2) ENT NODATA -- because there must be NSEC3 record for
143 * empty-non-terminals, this is the same as #1.
145 * 3) NSEC3 ownername NODATA -- qname matched an existing, lone NSEC3
146 * ownername, but qtype was not NSEC3. NOTE: as of nsec-05, this case no
149 * 4) Wildcard NODATA -- A wildcard matched the name, but not the type.
151 * 5) Opt-In DS NODATA -- the qname is covered by an opt-in span and qtype ==
152 * DS. (or maybe some future record with the same parent-side-only property)
163 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
188 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
201 * Fundamentally there are two cases here: normal NODATA and Opt-In NODATA.
216 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
218 * or if there was no DS in an insecure (i.e., opt-in) way,
238 * @param nodata: if return value is secure, this indicates if nodata or
243 * sec_status SECURE of the proposition is proven by the NSEC3 RRs,
284 * @return: comparison code, -1, 0, 1, of the keys.
308 * This pointer is used inside the tree, assumed region-alloced.
315 * -1 if the NSEC3 rr was badly formatted (i.e. formerr).
355 * @param salt: ptr to salt inside rdata.