Lines Matching defs:dkey
444 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keys); dkey != NULL;
445 dkey = ISC_LIST_NEXT(dkey, link))
447 if (dst_key_alg(dkey->key) != alg) {
450 if (dst_key_id(dkey->key) == id ||
451 dst_key_rid(dkey->key) == id ||
452 dst_key_id(dkey->key) == rid ||
453 dst_key_rid(dkey->key) == rid)
773 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
774 dkey = ISC_LIST_NEXT(dkey, link))
777 (dst_key_alg(dkey->key) != dst_key_alg(key->key)))
782 if (!keymgr_key_match_state(dkey->key, key->key, type,
800 if (skey == dkey) {
813 if (keymgr_key_is_successor(dkey->key, skey->key,
861 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
862 dkey = ISC_LIST_NEXT(dkey, link))
865 (dst_key_alg(dkey->key) != dst_key_alg(key->key)))
870 if (keymgr_key_match_state(dkey->key, key->key, type,
886 if (keymgr_key_match_state(dkey->key, key->key, type,
930 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
931 dkey = ISC_LIST_NEXT(dkey, link))
934 (dst_key_alg(dkey->key) != dst_key_alg(key->key)))
939 if (keymgr_key_match_state(dkey->key, key->key, type,
951 (void)dst_key_getstate(dkey->key, DST_KEY_DNSKEY,
1464 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
1465 dkey = ISC_LIST_NEXT(dkey, link))
1468 dst_key_format(dkey->key, keystr, sizeof(keystr));
1470 if (dkey->purge) {
1481 ret = dst_key_getstate(dkey->key, i, &state);
1494 keymgr_keyrole(dkey->key), keystr,
1498 next_state = keymgr_desiredstate(dkey, state);
1510 keymgr_keyrole(dkey->key), keystr,
1520 keymgr_keyrole(dkey->key), keystr,
1525 if (!keymgr_policy_approval(keyring, dkey, i,
1535 keymgr_keyrole(dkey->key), keystr,
1543 if (!keymgr_transition_allowed(keyring, dkey, i,
1554 keymgr_keyrole(dkey->key), keystr,
1562 keymgr_transition_time(dkey, i, next_state, kasp, now,
1572 keymgr_keyrole(dkey->key), keystr,
1586 keymgr_keyrole(dkey->key), keystr,
1591 dst_key_setstate(dkey->key, i, next_state);
1592 dst_key_settime(dkey->key, keystatetimes[i], now);
1593 INSIST(dst_key_ismodified(dkey->key));
2067 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring);
2068 dkey != NULL; dkey = ISC_LIST_NEXT(dkey, link))
2070 dst_key_format(dkey->key, keystr, sizeof(keystr));
2076 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*dnskeys);
2077 dkey != NULL; dkey = ISC_LIST_NEXT(dkey, link))
2079 dst_key_format(dkey->key, keystr, sizeof(keystr));
2087 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*dnskeys); dkey != NULL;
2088 dkey = ISC_LIST_NEXT(dkey, link))
2094 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2095 dkey = ISC_LIST_NEXT(dkey, link))
2099 keymgr_key_init(dkey, kasp, now, (numkeys == 1));
2104 if (dns_kasp_key_match(kkey, dkey)) {
2112 keymgr_key_retire(dkey, kasp, now);
2116 if (keymgr_key_may_be_purged(dkey->key,
2119 dst_key_format(dkey->key, keystr, sizeof(keystr));
2124 keystr, keymgr_keyrole(dkey->key),
2127 keymgr_purge_keyfile(dkey->key, DST_TYPE_PUBLIC);
2128 keymgr_purge_keyfile(dkey->key, DST_TYPE_PRIVATE);
2129 keymgr_purge_keyfile(dkey->key, DST_TYPE_STATE);
2130 dkey->purge = true;
2143 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring);
2144 dkey != NULL; dkey = ISC_LIST_NEXT(dkey, link))
2146 if (dns_kasp_key_match(kkey, dkey)) {
2148 dst_key_format(dkey->key, keystr,
2155 keystr, keymgr_keyrole(dkey->key),
2159 keymgr_key_update_lifetime(dkey, kasp, now,
2166 if (!dst_key_is_unused(dkey->key) &&
2167 (dst_key_goal(dkey->key) ==
2169 !keymgr_dep(dkey->key, keyring,
2179 keymgr_key_retire(dkey, kasp,
2189 if (dst_key_goal(dkey->key) == OMNIPRESENT ||
2190 dst_key_is_active(dkey->key, now))
2192 active_key = dkey;
2251 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2252 dkey = ISC_LIST_NEXT(dkey, link))
2254 bool modified = dst_key_ismodified(dkey->key);
2255 if (dst_key_getttl(dkey->key) != dns_kasp_dnskeyttl(kasp)) {
2256 dst_key_setttl(dkey->key, dns_kasp_dnskeyttl(kasp));
2259 if (modified && !dkey->purge) {
2260 const char *directory = dst_key_directory(dkey->key);
2265 dns_dnssec_get_hints(dkey, now);
2266 RETERR(dst_key_tofile(dkey->key, options, directory));
2267 dst_key_setmodified(dkey->key, false);
2272 dst_key_format(dkey->key, keystr, sizeof(keystr));
2277 keystr, keymgr_keyrole(dkey->key),
2280 dst_key_setmodified(dkey->key, false);
2317 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2318 dkey = ISC_LIST_NEXT(dkey, link))
2323 ret = dst_key_getbool(dkey->key, DST_BOOL_KSK, &ksk);
2325 if (check_id && dst_key_id(dkey->key) != id) {
2328 if (alg > 0 && dst_key_alg(dkey->key) != alg) {
2339 ksk_key = dkey;
2431 rollover_status(dns_dnsseckey_t *dkey, dns_kasp_t *kasp, isc_stdtime_t now,
2438 dst_key_t *key = dkey->key;
2489 dkey, kasp,
2553 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2554 dkey = ISC_LIST_NEXT(dkey, link))
2560 if (dst_key_is_unused(dkey->key)) {
2565 dns_secalg_format((dns_secalg_t)dst_key_alg(dkey->key), algstr,
2568 dst_key_id(dkey->key), algstr,
2569 keymgr_keyrole(dkey->key));
2572 keytime_status(dkey->key, now, &buf,
2577 ret = dst_key_getbool(dkey->key, DST_BOOL_KSK, &ksk);
2579 keytime_status(dkey->key, now, &buf,
2583 ret = dst_key_getbool(dkey->key, DST_BOOL_ZSK, &zsk);
2585 keytime_status(dkey->key, now, &buf,
2591 rollover_status(dkey, kasp, now, &buf, zsk);
2594 keystate_status(dkey->key, &buf,
2596 keystate_status(dkey->key, &buf,
2598 keystate_status(dkey->key, &buf,
2600 keystate_status(dkey->key, &buf,
2602 keystate_status(dkey->key, &buf,
2620 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2621 dkey = ISC_LIST_NEXT(dkey, link))
2623 if (dst_key_id(dkey->key) != id) {
2626 if (algorithm > 0 && dst_key_alg(dkey->key) != algorithm) {
2635 key = dkey;
2695 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2696 dkey = ISC_LIST_NEXT(dkey, link))
2708 (void)dst_key_role(dkey->key, &ksk, &zsk);
2713 keymgr_key_init(dkey, kasp, now, false);
2716 RETERR(dst_key_getstate(dkey->key, DST_KEY_DNSKEY,
2718 RETERR(dst_key_getstate(dkey->key, DST_KEY_ZRRSIG,
2720 RETERR(dst_key_getstate(dkey->key, DST_KEY_GOAL,
2722 RETERR(dst_key_gettime(dkey->key, DST_TIME_PUBLISH,
2724 RETERR(dst_key_gettime(dkey->key, DST_TIME_ACTIVATE, &active));
2725 (void)dst_key_gettime(dkey->key, DST_TIME_INACTIVE, &inactive);
2726 (void)dst_key_gettime(dkey->key, DST_TIME_DELETE, &remove);
2736 (void)dst_key_gettime(dkey->key,
2746 dns_ttl_t key_ttl = dst_key_getttl(dkey->key);
2752 (void)dst_key_gettime(dkey->key,
2768 (void)dst_key_gettime(dkey->key,
2778 dns_ttl_t key_ttl = dst_key_getttl(dkey->key);
2784 (void)dst_key_gettime(dkey->key,
2803 dst_key_setstate(dkey->key, DST_KEY_GOAL, goal_state);
2806 dst_key_setstate(dkey->key, DST_KEY_DNSKEY,
2808 dst_key_settime(dkey->key, DST_TIME_DNSKEY, now);
2811 dst_key_setstate(dkey->key, DST_KEY_ZRRSIG,
2813 dst_key_settime(dkey->key, DST_TIME_ZRRSIG, now);
2815 dkey->first_sign = true;
2818 modified = dst_key_ismodified(dkey->key);
2821 const char *directory = dst_key_directory(dkey->key);
2826 dns_dnssec_get_hints(dkey, now);
2828 RETERR(dst_key_tofile(dkey->key, options, directory));
2829 dst_key_setmodified(dkey->key, false);
2834 dst_key_format(dkey->key, keystr, sizeof(keystr));
2839 keystr, keymgr_keyrole(dkey->key),
2842 dst_key_setmodified(dkey->key, false);