xref: /openbsd-src/sbin/unwind/libunbound/validator/val_kcache.c (revision d500c338f73eadbc8ea62778504d2ca76933e0f6)
1ae8c6e27Sflorian /*
2ae8c6e27Sflorian  * validator/val_kcache.c - validator key shared cache with validated keys
3ae8c6e27Sflorian  *
4ae8c6e27Sflorian  * Copyright (c) 2007, NLnet Labs. All rights reserved.
5ae8c6e27Sflorian  *
6ae8c6e27Sflorian  * This software is open source.
7ae8c6e27Sflorian  *
8ae8c6e27Sflorian  * Redistribution and use in source and binary forms, with or without
9ae8c6e27Sflorian  * modification, are permitted provided that the following conditions
10ae8c6e27Sflorian  * are met:
11ae8c6e27Sflorian  *
12ae8c6e27Sflorian  * Redistributions of source code must retain the above copyright notice,
13ae8c6e27Sflorian  * this list of conditions and the following disclaimer.
14ae8c6e27Sflorian  *
15ae8c6e27Sflorian  * Redistributions in binary form must reproduce the above copyright notice,
16ae8c6e27Sflorian  * this list of conditions and the following disclaimer in the documentation
17ae8c6e27Sflorian  * and/or other materials provided with the distribution.
18ae8c6e27Sflorian  *
19ae8c6e27Sflorian  * Neither the name of the NLNET LABS nor the names of its contributors may
20ae8c6e27Sflorian  * be used to endorse or promote products derived from this software without
21ae8c6e27Sflorian  * specific prior written permission.
22ae8c6e27Sflorian  *
23ae8c6e27Sflorian  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
24ae8c6e27Sflorian  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
25ae8c6e27Sflorian  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
26ae8c6e27Sflorian  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
27ae8c6e27Sflorian  * HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
28ae8c6e27Sflorian  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
29ae8c6e27Sflorian  * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
30ae8c6e27Sflorian  * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31ae8c6e27Sflorian  * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32ae8c6e27Sflorian  * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33ae8c6e27Sflorian  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34ae8c6e27Sflorian  */
35ae8c6e27Sflorian 
36ae8c6e27Sflorian /**
37ae8c6e27Sflorian  * \file
38ae8c6e27Sflorian  *
39ae8c6e27Sflorian  * This file contains functions for dealing with the validator key cache.
40ae8c6e27Sflorian  */
41ae8c6e27Sflorian #include "config.h"
42ae8c6e27Sflorian #include "validator/val_kcache.h"
43ae8c6e27Sflorian #include "validator/val_kentry.h"
44ae8c6e27Sflorian #include "util/log.h"
45ae8c6e27Sflorian #include "util/config_file.h"
46ae8c6e27Sflorian #include "util/data/dname.h"
47ae8c6e27Sflorian #include "util/module.h"
48ae8c6e27Sflorian 
49ae8c6e27Sflorian struct key_cache*
key_cache_create(struct config_file * cfg)50ae8c6e27Sflorian key_cache_create(struct config_file* cfg)
51ae8c6e27Sflorian {
52ae8c6e27Sflorian 	struct key_cache* kcache = (struct key_cache*)calloc(1,
53ae8c6e27Sflorian 		sizeof(*kcache));
54ae8c6e27Sflorian 	size_t numtables, start_size, maxmem;
55ae8c6e27Sflorian 	if(!kcache) {
56ae8c6e27Sflorian 		log_err("malloc failure");
57ae8c6e27Sflorian 		return NULL;
58ae8c6e27Sflorian 	}
59ae8c6e27Sflorian 	numtables = cfg->key_cache_slabs;
60ae8c6e27Sflorian 	start_size = HASH_DEFAULT_STARTARRAY;
61ae8c6e27Sflorian 	maxmem = cfg->key_cache_size;
62ae8c6e27Sflorian 	kcache->slab = slabhash_create(numtables, start_size, maxmem,
63ae8c6e27Sflorian 		&key_entry_sizefunc, &key_entry_compfunc,
64ae8c6e27Sflorian 		&key_entry_delkeyfunc, &key_entry_deldatafunc, NULL);
65ae8c6e27Sflorian 	if(!kcache->slab) {
66ae8c6e27Sflorian 		log_err("malloc failure");
67ae8c6e27Sflorian 		free(kcache);
68ae8c6e27Sflorian 		return NULL;
69ae8c6e27Sflorian 	}
70ae8c6e27Sflorian 	return kcache;
71ae8c6e27Sflorian }
72ae8c6e27Sflorian 
73ae8c6e27Sflorian void
key_cache_delete(struct key_cache * kcache)74ae8c6e27Sflorian key_cache_delete(struct key_cache* kcache)
75ae8c6e27Sflorian {
76ae8c6e27Sflorian 	if(!kcache)
77ae8c6e27Sflorian 		return;
78ae8c6e27Sflorian 	slabhash_delete(kcache->slab);
79ae8c6e27Sflorian 	free(kcache);
80ae8c6e27Sflorian }
81ae8c6e27Sflorian 
82ae8c6e27Sflorian void
key_cache_insert(struct key_cache * kcache,struct key_entry_key * kkey,int copy_reason)83ae8c6e27Sflorian key_cache_insert(struct key_cache* kcache, struct key_entry_key* kkey,
84*d500c338Sflorian 	int copy_reason)
85ae8c6e27Sflorian {
86*d500c338Sflorian 	struct key_entry_key* k = key_entry_copy(kkey, copy_reason);
87ae8c6e27Sflorian 	if(!k)
88ae8c6e27Sflorian 		return;
89ae8c6e27Sflorian 	key_entry_hash(k);
90ae8c6e27Sflorian 	slabhash_insert(kcache->slab, k->entry.hash, &k->entry,
91ae8c6e27Sflorian 		k->entry.data, NULL);
92ae8c6e27Sflorian }
93ae8c6e27Sflorian 
94ae8c6e27Sflorian /**
95ae8c6e27Sflorian  * Lookup exactly in the key cache. Returns pointer to locked entry.
96ae8c6e27Sflorian  * Caller must unlock it after use.
97ae8c6e27Sflorian  * @param kcache: the key cache.
98ae8c6e27Sflorian  * @param name: for what name to look; uncompressed wireformat
99ae8c6e27Sflorian  * @param namelen: length of the name.
100ae8c6e27Sflorian  * @param key_class: class of the key.
101ae8c6e27Sflorian  * @param wr: set true to get a writelock.
102ae8c6e27Sflorian  * @return key entry, locked, or NULL if not found. No TTL checking is
103ae8c6e27Sflorian  * 	performed.
104ae8c6e27Sflorian  */
105ae8c6e27Sflorian static struct key_entry_key*
key_cache_search(struct key_cache * kcache,uint8_t * name,size_t namelen,uint16_t key_class,int wr)106ae8c6e27Sflorian key_cache_search(struct key_cache* kcache, uint8_t* name, size_t namelen,
107ae8c6e27Sflorian 	uint16_t key_class, int wr)
108ae8c6e27Sflorian {
109ae8c6e27Sflorian 	struct lruhash_entry* e;
110ae8c6e27Sflorian 	struct key_entry_key lookfor;
111ae8c6e27Sflorian 	lookfor.entry.key = &lookfor;
112ae8c6e27Sflorian 	lookfor.name = name;
113ae8c6e27Sflorian 	lookfor.namelen = namelen;
114ae8c6e27Sflorian 	lookfor.key_class = key_class;
115ae8c6e27Sflorian 	key_entry_hash(&lookfor);
116ae8c6e27Sflorian 	e = slabhash_lookup(kcache->slab, lookfor.entry.hash, &lookfor, wr);
117ae8c6e27Sflorian 	if(!e)
118ae8c6e27Sflorian 		return NULL;
119ae8c6e27Sflorian 	return (struct key_entry_key*)e->key;
120ae8c6e27Sflorian }
121ae8c6e27Sflorian 
122ae8c6e27Sflorian struct key_entry_key*
key_cache_obtain(struct key_cache * kcache,uint8_t * name,size_t namelen,uint16_t key_class,struct regional * region,time_t now)123ae8c6e27Sflorian key_cache_obtain(struct key_cache* kcache, uint8_t* name, size_t namelen,
124ae8c6e27Sflorian 	uint16_t key_class, struct regional* region, time_t now)
125ae8c6e27Sflorian {
126ae8c6e27Sflorian 	/* keep looking until we find a nonexpired entry */
127ae8c6e27Sflorian 	while(1) {
128ae8c6e27Sflorian 		struct key_entry_key* k = key_cache_search(kcache, name,
129ae8c6e27Sflorian 			namelen, key_class, 0);
130ae8c6e27Sflorian 		if(k) {
131ae8c6e27Sflorian 			/* see if TTL is OK */
132ae8c6e27Sflorian 			struct key_entry_data* d = (struct key_entry_data*)
133ae8c6e27Sflorian 				k->entry.data;
134ae8c6e27Sflorian 			if(now <= d->ttl) {
135ae8c6e27Sflorian 				/* copy and return it */
136ae8c6e27Sflorian 				struct key_entry_key* retkey =
137ae8c6e27Sflorian 					key_entry_copy_toregion(k, region);
138ae8c6e27Sflorian 				lock_rw_unlock(&k->entry.lock);
139ae8c6e27Sflorian 				return retkey;
140ae8c6e27Sflorian 			}
141ae8c6e27Sflorian 			lock_rw_unlock(&k->entry.lock);
142ae8c6e27Sflorian 		}
143ae8c6e27Sflorian 		/* snip off first label to continue */
144ae8c6e27Sflorian 		if(dname_is_root(name))
145ae8c6e27Sflorian 			break;
146ae8c6e27Sflorian 		dname_remove_label(&name, &namelen);
147ae8c6e27Sflorian 	}
148ae8c6e27Sflorian 	return NULL;
149ae8c6e27Sflorian }
150ae8c6e27Sflorian 
151ae8c6e27Sflorian size_t
key_cache_get_mem(struct key_cache * kcache)152ae8c6e27Sflorian key_cache_get_mem(struct key_cache* kcache)
153ae8c6e27Sflorian {
154ae8c6e27Sflorian 	return sizeof(*kcache) + slabhash_get_mem(kcache->slab);
155ae8c6e27Sflorian }
156ae8c6e27Sflorian 
key_cache_remove(struct key_cache * kcache,uint8_t * name,size_t namelen,uint16_t key_class)157ae8c6e27Sflorian void key_cache_remove(struct key_cache* kcache,
158ae8c6e27Sflorian 	uint8_t* name, size_t namelen, uint16_t key_class)
159ae8c6e27Sflorian {
160ae8c6e27Sflorian 	struct key_entry_key lookfor;
161ae8c6e27Sflorian 	lookfor.entry.key = &lookfor;
162ae8c6e27Sflorian 	lookfor.name = name;
163ae8c6e27Sflorian 	lookfor.namelen = namelen;
164ae8c6e27Sflorian 	lookfor.key_class = key_class;
165ae8c6e27Sflorian 	key_entry_hash(&lookfor);
166ae8c6e27Sflorian 	slabhash_remove(kcache->slab, lookfor.entry.hash, &lookfor);
167ae8c6e27Sflorian }
168