external/bsd/bind/dist/lib/dns/rdata/generic/rrsig_46.c

   1 /*      $NetBSD$        */
   2
   3 /*
   4  * Copyright (C) 2004, 2005, 2007, 2009  Internet Systems Consortium, Inc. ("ISC")
   5  * Copyright (C) 2003  Internet Software Consortium.
   6  *
   7  * Permission to use, copy, modify, and/or distribute this software for any
   8  * purpose with or without fee is hereby granted, provided that the above
   9  * copyright notice and this permission notice appear in all copies.
  10  *
  11  * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
  12  * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
  13  * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
  14  * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
  15  * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
  16  * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
  17  * PERFORMANCE OF THIS SOFTWARE.
  18  */
  19
  20 /* Id: rrsig_46.c,v 1.12 2009/12/04 22:06:37 tbox Exp */
  21
  22 /* Reviewed: Fri Mar 17 09:05:02 PST 2000 by gson */
  23
  24 /* RFC2535 */
  25
  26 #ifndef RDATA_GENERIC_RRSIG_46_C
  27 #define RDATA_GENERIC_RRSIG_46_C
  28
  29 #define RRTYPE_RRSIG_ATTRIBUTES (DNS_RDATATYPEATTR_DNSSEC)
  30
  31 static inline isc_result_t
  32 fromtext_rrsig(ARGS_FROMTEXT) {
  33         isc_token_t token;
  34         unsigned char c;
  35         long i;
  36         dns_rdatatype_t covered;
  37         char *e;
  38         isc_result_t result;
  39         dns_name_t name;
  40         isc_buffer_t buffer;
  41         isc_uint32_t time_signed, time_expire;
  42
  43         REQUIRE(type == 46);
  44
  45         UNUSED(type);
  46         UNUSED(rdclass);
  47         UNUSED(callbacks);
  48
  49         /*
  50          * Type covered.
  51          */
  52         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
  53                                       ISC_FALSE));
  54         result = dns_rdatatype_fromtext(&covered, &token.value.as_textregion);
  55         if (result != ISC_R_SUCCESS && result != ISC_R_NOTIMPLEMENTED) {
  56                 i = strtol(DNS_AS_STR(token), &e, 10);
  57                 if (i < 0 || i > 65535)
  58                         RETTOK(ISC_R_RANGE);
  59                 if (*e != 0)
  60                         RETTOK(result);
  61                 covered = (dns_rdatatype_t)i;
  62         }
  63         RETERR(uint16_tobuffer(covered, target));
  64
  65         /*
  66          * Algorithm.
  67          */
  68         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
  69                                       ISC_FALSE));
  70         RETTOK(dns_secalg_fromtext(&c, &token.value.as_textregion));
  71         RETERR(mem_tobuffer(target, &c, 1));
  72
  73         /*
  74          * Labels.
  75          */
  76         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
  77                                       ISC_FALSE));
  78         if (token.value.as_ulong > 0xffU)
  79                 RETTOK(ISC_R_RANGE);
  80         c = (unsigned char)token.value.as_ulong;
  81         RETERR(mem_tobuffer(target, &c, 1));
  82
  83         /*
  84          * Original ttl.
  85          */
  86         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
  87                                       ISC_FALSE));
  88         RETERR(uint32_tobuffer(token.value.as_ulong, target));
  89
  90         /*
  91          * Signature expiration.
  92          */
  93         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
  94                                       ISC_FALSE));
  95         RETTOK(dns_time32_fromtext(DNS_AS_STR(token), &time_expire));
  96         RETERR(uint32_tobuffer(time_expire, target));
  97
  98         /*
  99          * Time signed.
 100          */
 101         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
 102                                       ISC_FALSE));
 103         RETTOK(dns_time32_fromtext(DNS_AS_STR(token), &time_signed));
 104         RETERR(uint32_tobuffer(time_signed, target));
 105
 106         /*
 107          * Key footprint.
 108          */
 109         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
 110                                       ISC_FALSE));
 111         RETERR(uint16_tobuffer(token.value.as_ulong, target));
 112
 113         /*
 114          * Signer.
 115          */
 116         RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
 117                                       ISC_FALSE));
 118         dns_name_init(&name, NULL);
 119         buffer_fromregion(&buffer, &token.value.as_region);
 120         origin = (origin != NULL) ? origin : dns_rootname;
 121         RETTOK(dns_name_fromtext(&name, &buffer, origin, options, target));
 122
 123         /*
 124          * Sig.
 125          */
 126         return (isc_base64_tobuffer(lexer, target, -1));
 127 }
 128
 129 static inline isc_result_t
 130 totext_rrsig(ARGS_TOTEXT) {
 131         isc_region_t sr;
 132         char buf[sizeof("4294967295")];
 133         dns_rdatatype_t covered;
 134         unsigned long ttl;
 135         unsigned long when;
 136         unsigned long exp;
 137         unsigned long foot;
 138         dns_name_t name;
 139         dns_name_t prefix;
 140         isc_boolean_t sub;
 141
 142         REQUIRE(rdata->type == 46);
 143         REQUIRE(rdata->length != 0);
 144
 145         dns_rdata_toregion(rdata, &sr);
 146
 147         /*
 148          * Type covered.
 149          */
 150         covered = uint16_fromregion(&sr);
 151         isc_region_consume(&sr, 2);
 152         /*
 153          * XXXAG We should have something like dns_rdatatype_isknown()
 154          * that does the right thing with type 0.
 155          */
 156         if (dns_rdatatype_isknown(covered) && covered != 0) {
 157                 RETERR(dns_rdatatype_totext(covered, target));
 158         } else {
 159                 char buf[sizeof("TYPE65535")];
 160                 sprintf(buf, "TYPE%u", covered);
 161                 RETERR(str_totext(buf, target));
 162         }
 163         RETERR(str_totext(" ", target));
 164
 165         /*
 166          * Algorithm.
 167          */
 168         sprintf(buf, "%u", sr.base[0]);
 169         isc_region_consume(&sr, 1);
 170         RETERR(str_totext(buf, target));
 171         RETERR(str_totext(" ", target));
 172
 173         /*
 174          * Labels.
 175          */
 176         sprintf(buf, "%u", sr.base[0]);
 177         isc_region_consume(&sr, 1);
 178         RETERR(str_totext(buf, target));
 179         RETERR(str_totext(" ", target));
 180
 181         /*
 182          * Ttl.
 183          */
 184         ttl = uint32_fromregion(&sr);
 185         isc_region_consume(&sr, 4);
 186         sprintf(buf, "%lu", ttl);
 187         RETERR(str_totext(buf, target));
 188         RETERR(str_totext(" ", target));
 189
 190         /*
 191          * Sig exp.
 192          */
 193         exp = uint32_fromregion(&sr);
 194         isc_region_consume(&sr, 4);
 195         RETERR(dns_time32_totext(exp, target));
 196
 197         if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
 198                 RETERR(str_totext(" (", target));
 199         RETERR(str_totext(tctx->linebreak, target));
 200
 201         /*
 202          * Time signed.
 203          */
 204         when = uint32_fromregion(&sr);
 205         isc_region_consume(&sr, 4);
 206         RETERR(dns_time32_totext(when, target));
 207         RETERR(str_totext(" ", target));
 208
 209         /*
 210          * Footprint.
 211          */
 212         foot = uint16_fromregion(&sr);
 213         isc_region_consume(&sr, 2);
 214         sprintf(buf, "%lu", foot);
 215         RETERR(str_totext(buf, target));
 216         RETERR(str_totext(" ", target));
 217
 218         /*
 219          * Signer.
 220          */
 221         dns_name_init(&name, NULL);
 222         dns_name_init(&prefix, NULL);
 223         dns_name_fromregion(&name, &sr);
 224         isc_region_consume(&sr, name_length(&name));
 225         sub = name_prefix(&name, tctx->origin, &prefix);
 226         RETERR(dns_name_totext(&prefix, sub, target));
 227
 228         /*
 229          * Sig.
 230          */
 231         RETERR(str_totext(tctx->linebreak, target));
 232         RETERR(isc_base64_totext(&sr, tctx->width - 2,
 233                                     tctx->linebreak, target));
 234         if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
 235                 RETERR(str_totext(" )", target));
 236
 237         return (ISC_R_SUCCESS);
 238 }
 239
 240 static inline isc_result_t
 241 fromwire_rrsig(ARGS_FROMWIRE) {
 242         isc_region_t sr;
 243         dns_name_t name;
 244
 245         REQUIRE(type == 46);
 246
 247         UNUSED(type);
 248         UNUSED(rdclass);
 249
 250         dns_decompress_setmethods(dctx, DNS_COMPRESS_NONE);
 251
 252         isc_buffer_activeregion(source, &sr);
 253         /*
 254          * type covered: 2
 255          * algorithm: 1
 256          * labels: 1
 257          * original ttl: 4
 258          * signature expiration: 4
 259          * time signed: 4
 260          * key footprint: 2
 261          */
 262         if (sr.length < 18)
 263                 return (ISC_R_UNEXPECTEDEND);
 264
 265         isc_buffer_forward(source, 18);
 266         RETERR(mem_tobuffer(target, sr.base, 18));
 267
 268         /*
 269          * Signer.
 270          */
 271         dns_name_init(&name, NULL);
 272         RETERR(dns_name_fromwire(&name, source, dctx, options, target));
 273
 274         /*
 275          * Sig.
 276          */
 277         isc_buffer_activeregion(source, &sr);
 278         isc_buffer_forward(source, sr.length);
 279         return (mem_tobuffer(target, sr.base, sr.length));
 280 }
 281
 282 static inline isc_result_t
 283 towire_rrsig(ARGS_TOWIRE) {
 284         isc_region_t sr;
 285         dns_name_t name;
 286         dns_offsets_t offsets;
 287
 288         REQUIRE(rdata->type == 46);
 289         REQUIRE(rdata->length != 0);
 290
 291         dns_compress_setmethods(cctx, DNS_COMPRESS_NONE);
 292         dns_rdata_toregion(rdata, &sr);
 293         /*
 294          * type covered: 2
 295          * algorithm: 1
 296          * labels: 1
 297          * original ttl: 4
 298          * signature expiration: 4
 299          * time signed: 4
 300          * key footprint: 2
 301          */
 302         RETERR(mem_tobuffer(target, sr.base, 18));
 303         isc_region_consume(&sr, 18);
 304
 305         /*
 306          * Signer.
 307          */
 308         dns_name_init(&name, offsets);
 309         dns_name_fromregion(&name, &sr);
 310         isc_region_consume(&sr, name_length(&name));
 311         RETERR(dns_name_towire(&name, cctx, target));
 312
 313         /*
 314          * Signature.
 315          */
 316         return (mem_tobuffer(target, sr.base, sr.length));
 317 }
 318
 319 static inline int
 320 compare_rrsig(ARGS_COMPARE) {
 321         isc_region_t r1;
 322         isc_region_t r2;
 323
 324         REQUIRE(rdata1->type == rdata2->type);
 325         REQUIRE(rdata1->rdclass == rdata2->rdclass);
 326         REQUIRE(rdata1->type == 46);
 327         REQUIRE(rdata1->length != 0);
 328         REQUIRE(rdata2->length != 0);
 329
 330         dns_rdata_toregion(rdata1, &r1);
 331         dns_rdata_toregion(rdata2, &r2);
 332         return (isc_region_compare(&r1, &r2));
 333 }
 334
 335 static inline isc_result_t
 336 fromstruct_rrsig(ARGS_FROMSTRUCT) {
 337         dns_rdata_rrsig_t *sig = source;
 338
 339         REQUIRE(type == 46);
 340         REQUIRE(source != NULL);
 341         REQUIRE(sig->common.rdtype == type);
 342         REQUIRE(sig->common.rdclass == rdclass);
 343         REQUIRE(sig->signature != NULL || sig->siglen == 0);
 344
 345         UNUSED(type);
 346         UNUSED(rdclass);
 347
 348         /*
 349          * Type covered.
 350          */
 351         RETERR(uint16_tobuffer(sig->covered, target));
 352
 353         /*
 354          * Algorithm.
 355          */
 356         RETERR(uint8_tobuffer(sig->algorithm, target));
 357
 358         /*
 359          * Labels.
 360          */
 361         RETERR(uint8_tobuffer(sig->labels, target));
 362
 363         /*
 364          * Original TTL.
 365          */
 366         RETERR(uint32_tobuffer(sig->originalttl, target));
 367
 368         /*
 369          * Expire time.
 370          */
 371         RETERR(uint32_tobuffer(sig->timeexpire, target));
 372
 373         /*
 374          * Time signed.
 375          */
 376         RETERR(uint32_tobuffer(sig->timesigned, target));
 377
 378         /*
 379          * Key ID.
 380          */
 381         RETERR(uint16_tobuffer(sig->keyid, target));
 382
 383         /*
 384          * Signer name.
 385          */
 386         RETERR(name_tobuffer(&sig->signer, target));
 387
 388         /*
 389          * Signature.
 390          */
 391         return (mem_tobuffer(target, sig->signature, sig->siglen));
 392 }
 393
 394 static inline isc_result_t
 395 tostruct_rrsig(ARGS_TOSTRUCT) {
 396         isc_region_t sr;
 397         dns_rdata_rrsig_t *sig = target;
 398         dns_name_t signer;
 399
 400         REQUIRE(rdata->type == 46);
 401         REQUIRE(target != NULL);
 402         REQUIRE(rdata->length != 0);
 403
 404         sig->common.rdclass = rdata->rdclass;
 405         sig->common.rdtype = rdata->type;
 406         ISC_LINK_INIT(&sig->common, link);
 407
 408         dns_rdata_toregion(rdata, &sr);
 409
 410         /*
 411          * Type covered.
 412          */
 413         sig->covered = uint16_fromregion(&sr);
 414         isc_region_consume(&sr, 2);
 415
 416         /*
 417          * Algorithm.
 418          */
 419         sig->algorithm = uint8_fromregion(&sr);
 420         isc_region_consume(&sr, 1);
 421
 422         /*
 423          * Labels.
 424          */
 425         sig->labels = uint8_fromregion(&sr);
 426         isc_region_consume(&sr, 1);
 427
 428         /*
 429          * Original TTL.
 430          */
 431         sig->originalttl = uint32_fromregion(&sr);
 432         isc_region_consume(&sr, 4);
 433
 434         /*
 435          * Expire time.
 436          */
 437         sig->timeexpire = uint32_fromregion(&sr);
 438         isc_region_consume(&sr, 4);
 439
 440         /*
 441          * Time signed.
 442          */
 443         sig->timesigned = uint32_fromregion(&sr);
 444         isc_region_consume(&sr, 4);
 445
 446         /*
 447          * Key ID.
 448          */
 449         sig->keyid = uint16_fromregion(&sr);
 450         isc_region_consume(&sr, 2);
 451
 452         dns_name_init(&signer, NULL);
 453         dns_name_fromregion(&signer, &sr);
 454         dns_name_init(&sig->signer, NULL);
 455         RETERR(name_duporclone(&signer, mctx, &sig->signer));
 456         isc_region_consume(&sr, name_length(&sig->signer));
 457
 458         /*
 459          * Signature.
 460          */
 461         sig->siglen = sr.length;
 462         sig->signature = mem_maybedup(mctx, sr.base, sig->siglen);
 463         if (sig->signature == NULL)
 464                 goto cleanup;
 465
 466
 467         sig->mctx = mctx;
 468         return (ISC_R_SUCCESS);
 469
 470  cleanup:
 471         if (mctx != NULL)
 472                 dns_name_free(&sig->signer, mctx);
 473         return (ISC_R_NOMEMORY);
 474 }
 475
 476 static inline void
 477 freestruct_rrsig(ARGS_FREESTRUCT) {
 478         dns_rdata_rrsig_t *sig = (dns_rdata_rrsig_t *) source;
 479
 480         REQUIRE(source != NULL);
 481         REQUIRE(sig->common.rdtype == 46);
 482
 483         if (sig->mctx == NULL)
 484                 return;
 485
 486         dns_name_free(&sig->signer, sig->mctx);
 487         if (sig->signature != NULL)
 488                 isc_mem_free(sig->mctx, sig->signature);
 489         sig->mctx = NULL;
 490 }
 491
 492 static inline isc_result_t
 493 additionaldata_rrsig(ARGS_ADDLDATA) {
 494         REQUIRE(rdata->type == 46);
 495
 496         UNUSED(rdata);
 497         UNUSED(add);
 498         UNUSED(arg);
 499
 500         return (ISC_R_SUCCESS);
 501 }
 502
 503 static inline isc_result_t
 504 digest_rrsig(ARGS_DIGEST) {
 505
 506         REQUIRE(rdata->type == 46);
 507
 508         UNUSED(rdata);
 509         UNUSED(digest);
 510         UNUSED(arg);
 511
 512         return (ISC_R_NOTIMPLEMENTED);
 513 }
 514
 515 static inline dns_rdatatype_t
 516 covers_rrsig(dns_rdata_t *rdata) {
 517         dns_rdatatype_t type;
 518         isc_region_t r;
 519
 520         REQUIRE(rdata->type == 46);
 521
 522         dns_rdata_toregion(rdata, &r);
 523         type = uint16_fromregion(&r);
 524
 525         return (type);
 526 }
 527
 528 static inline isc_boolean_t
 529 checkowner_rrsig(ARGS_CHECKOWNER) {
 530
 531         REQUIRE(type == 46);
 532
 533         UNUSED(name);
 534         UNUSED(type);
 535         UNUSED(rdclass);
 536         UNUSED(wildcard);
 537
 538         return (ISC_TRUE);
 539 }
 540
 541 static inline isc_boolean_t
 542 checknames_rrsig(ARGS_CHECKNAMES) {
 543
 544         REQUIRE(rdata->type == 46);
 545
 546         UNUSED(rdata);
 547         UNUSED(owner);
 548         UNUSED(bad);
 549
 550         return (ISC_TRUE);
 551 }
 552
 553 static inline int
 554 casecompare_rrsig(ARGS_COMPARE) {
 555         isc_region_t r1;
 556         isc_region_t r2;
 557         dns_name_t name1;
 558         dns_name_t name2;
 559         int order;
 560
 561         REQUIRE(rdata1->type == rdata2->type);
 562         REQUIRE(rdata1->rdclass == rdata2->rdclass);
 563         REQUIRE(rdata1->type == 46);
 564         REQUIRE(rdata1->length != 0);
 565         REQUIRE(rdata2->length != 0);
 566
 567         dns_rdata_toregion(rdata1, &r1);
 568         dns_rdata_toregion(rdata2, &r2);
 569
 570         INSIST(r1.length > 18);
 571         INSIST(r2.length > 18);
 572         r1.length = 18;
 573         r2.length = 18;
 574         order = isc_region_compare(&r1, &r2);
 575         if (order != 0)
 576                 return (order);
 577
 578         dns_name_init(&name1, NULL);
 579         dns_name_init(&name2, NULL);
 580         dns_rdata_toregion(rdata1, &r1);
 581         dns_rdata_toregion(rdata2, &r2);
 582         isc_region_consume(&r1, 18);
 583         isc_region_consume(&r2, 18);
 584         dns_name_fromregion(&name1, &r1);
 585         dns_name_fromregion(&name2, &r2);
 586         order = dns_name_rdatacompare(&name1, &name2);
 587         if (order != 0)
 588                 return (order);
 589
 590         isc_region_consume(&r1, name_length(&name1));
 591         isc_region_consume(&r2, name_length(&name2));
 592
 593         return (isc_region_compare(&r1, &r2));
 594 }
 595
 596 #endif  /* RDATA_GENERIC_RRSIG_46_C */