getdns_validate_dnssec(3) getdns getdns_validate_dnssec(3) NAME getdns_validate_dnssec -- DNSSEC validate a given getdns record LIBRARY DNS Resolver library (libgetdns, -lgetdns) SYNOPSIS #include <getdns.h> getdns_return_t getdns_validate_dnssec (getdns_list *record_to_validate, getdns_list *bundle_of_support_records, getdns_list *trust_anchor_records) DESCRIPTION If an application wants the API to perform DNSSEC validation without using the extensions, it can use the getdns_validate_dnssec() helper function. The API will use the resource records in bundle_of_support_records to con- struct the validation chain and the DNSKEY or DS records in trust_an- chor_records as trust anchors. The default list of trust anchor records that is used by the library to validate DNSSEC can be retrieved by using the getdns_root_trust_anchor helper function. record_to_validate the resource record being validated bundle_of_support_records records used to construct the validation chain trust_anchor_records trust anchor records to use for the validation RETURN VALUES GETDNS_DNSSEC_BOGUS the DNSSEC signature is bogus GETDNS_DNSSEC_INDETERMINATE validation could not be completed GETDNS_DNSSEC_INSECURE one or more pieces of the validation chain are demonstrably incorrect GETDNS_DNSSEC_SECURE validation succeeded GETDNS_RETURN_MEMORY_ERROR an attempt to allocate memory failed EXAMPLES TBD SEE ALSO getdns_root_trust_anchor(3) libgetdns(3) getdns 1.7.3 December 2015 getdns_validate_dnssec(3)
NAME | LIBRARY | SYNOPSIS | DESCRIPTION | RETURN VALUES | EXAMPLES | SEE ALSO
Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=getdns_validate_dnssec&sektion=3&manpath=FreeBSD+Ports+15.1.quarterly>