Lines Matching defs:keyring
650 keymgr_dep(dst_key_t *k, dns_dnsseckeylist_t *keyring, uint32_t *dep) {
651 for (dns_dnsseckey_t *d = ISC_LIST_HEAD(*keyring); d != NULL;
681 dns_dnsseckeylist_t *keyring) {
690 if (keymgr_dep(x, keyring, &dep_x)) {
697 if (!keymgr_dep(z, keyring, &dep_z)) {
728 for (dns_dnsseckey_t *y = ISC_LIST_HEAD(*keyring); y != NULL;
751 next_state, keyring);
759 * Check if a key exists in 'keyring' that matches 'states'.
768 keymgr_key_exists_with_state(dns_dnsseckeylist_t *keyring, dns_dnsseckey_t *key,
773 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
797 for (dns_dnsseckey_t *skey = ISC_LIST_HEAD(*keyring);
815 keyring))
830 dns_dnsseckeylist_t *keyring) {
831 for (dns_dnsseckey_t *successor = ISC_LIST_HEAD(*keyring);
851 keymgr_ds_hidden_or_chained(dns_dnsseckeylist_t *keyring, dns_dnsseckey_t *key,
861 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
897 if (!keymgr_key_exists_with_state(keyring, key, type,
919 keymgr_dnskey_hidden_or_chained(dns_dnsseckeylist_t *keyring,
930 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
953 if (!keymgr_key_exists_with_state(keyring, key, type,
970 keymgr_have_ds(dns_dnsseckeylist_t *keyring, dns_dnsseckey_t *key, int type,
985 return keymgr_key_exists_with_state(keyring, key, type, next_state,
987 keymgr_key_exists_with_state(keyring, key, type, next_state,
990 keymgr_key_exists_with_state(keyring, key, type, next_state, na,
1000 keymgr_have_dnskey(dns_dnsseckeylist_t *keyring, dns_dnsseckey_t *key, int type,
1025 keymgr_key_exists_with_state(keyring, key, type, next_state,
1033 keymgr_key_exists_with_state(keyring, key, type, next_state,
1046 keymgr_key_exists_with_state(keyring, key, type, next_state,
1049 keymgr_key_exists_with_state(keyring, key, type, next_state,
1052 keymgr_key_exists_with_state(keyring, key, type, next_state,
1055 keymgr_key_exists_with_state(keyring, key, type, next_state,
1058 keymgr_key_exists_with_state(keyring, key, type, next_state,
1061 keymgr_key_exists_with_state(keyring, key, type, next_state,
1064 keymgr_key_exists_with_state(keyring, key, type, next_state,
1067 keymgr_key_exists_with_state(keyring, key, type, next_state,
1070 keymgr_key_exists_with_state(keyring, key, type, next_state,
1082 keymgr_ds_hidden_or_chained(keyring, key, type, next_state,
1092 keymgr_have_rrsig(dns_dnsseckeylist_t *keyring, dns_dnsseckey_t *key, int type,
1109 keymgr_ds_hidden_or_chained(keyring, key, type, next_state,
1116 keymgr_key_exists_with_state(keyring, key, type, next_state,
1124 keymgr_key_exists_with_state(keyring, key, type, next_state,
1133 keymgr_key_exists_with_state(keyring, key, type, next_state,
1142 keymgr_dnskey_hidden_or_chained(keyring, key, type, next_state,
1158 keymgr_policy_approval(dns_dnsseckeylist_t *keyring, dns_dnsseckey_t *key,
1199 return !(keymgr_key_exists_with_state(keyring, key, type, next,
1202 keymgr_key_exists_with_state(keyring, key, type, next,
1205 keymgr_key_exists_with_state(keyring, key, type, next,
1227 keymgr_transition_allowed(dns_dnsseckeylist_t *keyring, dns_dnsseckey_t *key,
1235 rule1a = keymgr_have_ds(keyring, key, type, NA,
1237 rule1b = keymgr_have_ds(keyring, key, type, next_state,
1239 rule2a = keymgr_have_dnskey(keyring, key, type, NA);
1240 rule2b = keymgr_have_dnskey(keyring, key, type, next_state);
1241 rule3a = keymgr_have_rrsig(keyring, key, type, NA);
1242 rule3b = keymgr_have_rrsig(keyring, key, type, next_state);
1263 (!keymgr_have_ds(keyring, key, type, NA, secure_to_insecure) ||
1264 keymgr_have_ds(keyring, key, type, next_state,
1270 (!keymgr_have_dnskey(keyring, key, type, NA) ||
1271 keymgr_have_dnskey(keyring, key, type, next_state)) &&
1277 (!keymgr_have_rrsig(keyring, key, type, NA) ||
1278 keymgr_have_rrsig(keyring, key, type, next_state));
1455 keymgr_update(dns_dnsseckeylist_t *keyring, dns_kasp_t *kasp, isc_stdtime_t now,
1464 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
1525 if (!keymgr_policy_approval(keyring, dkey, i,
1543 if (!keymgr_transition_allowed(keyring, dkey, i,
1723 dns_dnsseckeylist_t *keyring, dns_dnsseckeylist_t *newkeys,
1774 if (keymgr_key_has_successor(active_key, keyring)) {
1828 for (candidate = ISC_LIST_HEAD(*keyring); candidate != NULL;
1834 /* Found a candidate in keyring. */
1840 /* No key available in keyring, create a new one. */
1846 keydir, keyring, newkeys, &dst_key);
2034 isc_mem_t *mctx, dns_dnsseckeylist_t *keyring,
2048 REQUIRE(keyring != NULL);
2055 /* Debug logging: what keys are available in the keyring? */
2057 if (ISC_LIST_EMPTY(*keyring)) {
2062 "keymgr: keyring empty (zone %s policy "
2067 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring);
2073 "keymgr: keyring: %s (policy %s)", keystr,
2094 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2143 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring);
2169 !keymgr_dep(dkey->key, keyring,
2172 keyring, NULL))
2230 RETERR(keymgr_key_rollover(kkey, active_key, keyring, &newkeys,
2238 ISC_LIST_APPENDLIST(*keyring, newkeys, link);
2248 keymgr_update(keyring, kasp, now, nexttime, secure_to_insecure);
2251 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2306 keymgr_checkds(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
2315 REQUIRE(keyring != NULL);
2317 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2392 dns_keymgr_checkds(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
2394 return keymgr_checkds(kasp, keyring, now, when, dspublish, 0, 0, false);
2398 dns_keymgr_checkds_id(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
2401 return keymgr_checkds(kasp, keyring, now, when, dspublish, id, alg,
2536 dns_keymgr_status(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
2542 REQUIRE(keyring != NULL);
2553 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2608 dns_keymgr_rollover(dns_kasp_t *kasp, dns_dnsseckeylist_t *keyring,
2618 REQUIRE(keyring != NULL);
2620 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;
2685 dns_keymgr_offline(const dns_name_t *origin, dns_dnsseckeylist_t *keyring,
2695 for (dns_dnsseckey_t *dkey = ISC_LIST_HEAD(*keyring); dkey != NULL;