1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
|
/*
* This file is part of PowerDNS or dnsdist.
* Copyright -- PowerDNS.COM B.V. and its contributors
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of version 2 of the GNU General Public License as
* published by the Free Software Foundation.
*
* In addition, for the avoidance of any doubt, permission is granted to
* link this program with OpenSSL and to (re)distribute the binaries
* produced as the result of such linking.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/
#pragma once
#ifdef HAVE_CONFIG_H
#include "config.h"
#endif
#include "dnsname.hh"
#include "qtype.hh"
#include "dnsrecords.hh"
#include "validate.hh"
class ZoneParserTNG;
namespace pdns
{
class ZoneMD
{
public:
enum class Config : uint8_t
{
Ignore,
Validate,
Require
};
enum class Result : uint8_t
{
OK,
NoValidationDone,
ValidationFailure
};
ZoneMD(const DNSName& zone) :
d_zone(zone)
{}
void readRecords(ZoneParserTNG& zpt);
void readRecords(const std::vector<DNSRecord>& records);
void readRecord(const DNSRecord& record);
void verify(bool& validationDone, bool& validationOK);
// Return the zone's apex DNSKEYs
const std::set<shared_ptr<DNSKEYRecordContent>>& getDNSKEYs() const
{
return d_dnskeys;
}
// Return the zone's apex RRSIGs
[[nodiscard]] const std::vector<shared_ptr<RRSIGRecordContent>>& getRRSIGs(QType requestedType)
{
if (d_rrsigs.count(requestedType) == 0) {
d_rrsigs[requestedType] = {};
}
return d_rrsigs[requestedType];
}
// Return the zone's apex ZONEMDs
std::vector<shared_ptr<ZONEMDRecordContent>> getZONEMDs() const
{
std::vector<shared_ptr<ZONEMDRecordContent>> ret;
for (const auto& zonemd : d_zonemdRecords) {
ret.emplace_back(zonemd.second.record);
}
return ret;
}
// Return the zone's apex NSECs with signatures
const ContentSigPair& getNSECs() const
{
return d_nsecs;
}
// Return the zone's apex NSEC3s with signatures
const ContentSigPair& getNSEC3s() const
{
const auto it = d_nsec3s.find(d_nsec3label);
return it == d_nsec3s.end() ? empty : d_nsec3s.at(d_nsec3label);
}
const DNSName& getNSEC3Label() const
{
return d_nsec3label;
}
const std::vector<shared_ptr<NSEC3PARAMRecordContent>>& getNSEC3Params() const
{
return d_nsec3params;
}
private:
typedef std::pair<DNSName, QType> RRSetKey_t;
typedef std::vector<std::shared_ptr<DNSRecordContent>> RRVector_t;
struct CanonRRSetKeyCompare
{
bool operator()(const RRSetKey_t& a, const RRSetKey_t& b) const
{
// FIXME surely we can be smarter here
if (a.first.canonCompare(b.first)) {
return true;
}
if (b.first.canonCompare(a.first)) {
return false;
}
return a.second < b.second;
}
};
typedef std::map<RRSetKey_t, RRVector_t, CanonRRSetKeyCompare> RRSetMap_t;
struct ZoneMDAndDuplicateFlag
{
std::shared_ptr<ZONEMDRecordContent> record;
bool duplicate;
};
// scheme,hashalgo -> zonemdrecord,duplicate
std::map<pair<uint8_t, uint8_t>, ZoneMDAndDuplicateFlag> d_zonemdRecords;
RRSetMap_t d_resourceRecordSets;
std::map<RRSetKey_t, uint32_t> d_resourceRecordSetTTLs;
std::shared_ptr<SOARecordContent> d_soaRecordContent;
std::set<shared_ptr<DNSKEYRecordContent>> d_dnskeys;
std::vector<shared_ptr<NSEC3PARAMRecordContent>> d_nsec3params;
std::map<QType, std::vector<shared_ptr<RRSIGRecordContent>>> d_rrsigs;
ContentSigPair d_nsecs;
map<DNSName, ContentSigPair> d_nsec3s;
DNSName d_nsec3label;
const DNSName d_zone;
const ContentSigPair empty;
};
}
|
