diff options
Diffstat (limited to 'src/dnsmasq.h')
| -rw-r--r-- | src/dnsmasq.h | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/src/dnsmasq.h b/src/dnsmasq.h index 7bc982d..2f45972 100644 --- a/src/dnsmasq.h +++ b/src/dnsmasq.h @@ -569,8 +569,9 @@ struct hostsfile { #define STAT_SECURE_WILDCARD 7 #define STAT_NO_SIG 8 #define STAT_NO_DS 9 -#define STAT_NEED_DS_NEG 10 -#define STAT_CHASE_CNAME 11 +#define STAT_NO_NS 10 +#define STAT_NEED_DS_NEG 11 +#define STAT_CHASE_CNAME 12 #define FREC_NOREBIND 1 #define FREC_CHECKING_DISABLED 2 @@ -604,7 +605,9 @@ struct frec { #ifdef HAVE_DNSSEC int class, work_counter; struct blockdata *stash; /* Saved reply, whilst we validate */ - size_t stash_len; + struct blockdata *orig_domain; /* domain of original query, whilst + we're seeing is if in unsigned domain */ + size_t stash_len, name_start, name_len; struct frec *dependent; /* Query awaiting internally-generated DNSKEY or DS query */ struct frec *blocking_query; /* Query which is blocking us. */ #endif @@ -1126,7 +1129,7 @@ int in_zone(struct auth_zone *zone, char *name, char **cut); size_t dnssec_generate_query(struct dns_header *header, char *end, char *name, int class, int type, union mysockaddr *addr); int dnssec_validate_by_ds(time_t now, struct dns_header *header, size_t n, char *name, char *keyname, int class); int dnssec_validate_ds(time_t now, struct dns_header *header, size_t plen, char *name, char *keyname, int class); -int dnssec_validate_reply(time_t now, struct dns_header *header, size_t plen, char *name, char *keyname, int *class, int *neganswer); +int dnssec_validate_reply(time_t now, struct dns_header *header, size_t plen, char *name, char *keyname, int *class, int *neganswer, int *nons); int dnssec_chase_cname(time_t now, struct dns_header *header, size_t plen, char *name, char *keyname); int dnskey_keytag(int alg, int flags, unsigned char *rdata, int rdlen); size_t filter_rrsigs(struct dns_header *header, size_t plen); |