val_env Struct Reference

Global state for the validator. More...

#include <validator.h>


Data Fields

struct key_cachekcache
 key cache; these are validated keys.
int32_t date_override
 for debug testing a fixed validation date can be entered.
uint32_t bogus_ttl
 TTL for bogus data; used instead of untrusted TTL from data.
int clean_additional
 If set, the validator should clean the additional section of secure messages.
int permissive_mode
 If set, the validator will not make messages bogus, instead indeterminate is issued, so that no clients receive SERVFAIL.
int nsec3_keyiter_count
 Number of entries in the NSEC3 maximum iteration count table.
size_t * nsec3_keysize
 NSEC3 maximum iteration count per signing key size.
size_t * nsec3_maxiter
 NSEC3 maximum iteration count per signing key size.


Detailed Description

Global state for the validator.

Field Documentation

struct key_cache* val_env::kcache [read]

key cache; these are validated keys.

trusted keys only end up here after being primed.

Referenced by primeResponseToKE(), process_dnskey_response(), processInit(), val_apply_cfg(), val_deinit(), and val_get_mem().

for debug testing a fixed validation date can be entered.

if 0, current time is used for rrsig validation

Referenced by adjust_ttl(), check_dates(), val_apply_cfg(), and verifytest_file().

TTL for bogus data; used instead of untrusted TTL from data.

Bogus data will not be verified more often than this interval. seconds.

Referenced by processFinished(), val_apply_cfg(), and val_verify_rrset().

If set, the validator will not make messages bogus, instead indeterminate is issued, so that no clients receive SERVFAIL.

This allows an operator to run validation 'shadow' without hurting responses to clients.

Referenced by processFinished(), val_apply_cfg(), and val_init().

Number of entries in the NSEC3 maximum iteration count table.

Keep this table short, and sorted by size

Referenced by get_max_iter(), val_apply_cfg(), and val_get_mem().

NSEC3 maximum iteration count per signing key size.

This array contains key size values (in increasing order)

Referenced by fill_nsec3_iter(), and val_deinit().

NSEC3 maximum iteration count per signing key size.

This array contains the maximum iteration count for the keysize in the keysize array.

Referenced by fill_nsec3_iter(), get_max_iter(), and val_deinit().


The documentation for this struct was generated from the following file:

Generated on Sun Sep 21 16:23:31 2008 for unbound by  doxygen 1.5.6