ds_43.c 8.65 KB
Newer Older
1
/*
2
 * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
3
 *
4 5 6
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/.
7 8 9
 *
 * See the COPYRIGHT file distributed with this work for additional
 * information regarding copyright ownership.
10 11 12
 */


13
/* RFC3658 */
14 15 16 17

#ifndef RDATA_GENERIC_DS_43_C
#define RDATA_GENERIC_DS_43_C

18
#define RRTYPE_DS_ATTRIBUTES \
19 20
	( DNS_RDATATYPEATTR_DNSSEC | DNS_RDATATYPEATTR_ZONECUTAUTH | \
	  DNS_RDATATYPEATTR_ATPARENT )
21

22 23 24 25 26
#include <isc/sha1.h>
#include <isc/sha2.h>

#include <dns/ds.h>

Evan Hunt's avatar
Evan Hunt committed
27 28
#include "dst_gost.h"

29
static inline isc_result_t
30
generic_fromtext_ds(ARGS_FROMTEXT) {
31
	isc_token_t token;
32
	unsigned char c;
33
	int length;
34 35 36 37

	UNUSED(type);
	UNUSED(rdclass);
	UNUSED(origin);
38
	UNUSED(options);
39 40 41 42 43 44
	UNUSED(callbacks);

	/*
	 * Key tag.
	 */
	RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_number,
45
				      false));
Mark Andrews's avatar
Mark Andrews committed
46
	if (token.value.as_ulong > 0xffffU)
47 48 49 50 51 52
		RETTOK(ISC_R_RANGE);
	RETERR(uint16_tobuffer(token.value.as_ulong, target));

	/*
	 * Algorithm.
	 */
53
	RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
54
				      false));
55 56
	RETTOK(dns_secalg_fromtext(&c, &token.value.as_textregion));
	RETERR(mem_tobuffer(target, &c, 1));
57 58 59 60

	/*
	 * Digest type.
	 */
61
	RETERR(isc_lex_getmastertoken(lexer, &token, isc_tokentype_string,
62
				      false));
63 64
	RETTOK(dns_dsdigest_fromtext(&c, &token.value.as_textregion));
	RETERR(mem_tobuffer(target, &c, 1));
65 66 67 68

	/*
	 * Digest.
	 */
69 70
	switch (c) {
	case DNS_DSDIGEST_SHA1:
71
		length = ISC_SHA1_DIGESTLENGTH;
72 73
		break;
	case DNS_DSDIGEST_SHA256:
74
		length = ISC_SHA256_DIGESTLENGTH;
75
		break;
Evan Hunt's avatar
Evan Hunt committed
76
#ifdef ISC_GOST_DIGESTLENGTH
77 78 79
	case DNS_DSDIGEST_GOST:
		length = ISC_GOST_DIGESTLENGTH;
		break;
Evan Hunt's avatar
Evan Hunt committed
80
#endif
81 82 83
	case DNS_DSDIGEST_SHA384:
		length = ISC_SHA384_DIGESTLENGTH;
		break;
84
	default:
85
		length = -2;
86 87
		break;
	}
88
	return (isc_hex_tobuffer(lexer, target, length));
89 90 91
}

static inline isc_result_t
92 93 94 95 96 97 98 99 100 101
fromtext_ds(ARGS_FROMTEXT) {

	REQUIRE(type == dns_rdatatype_ds);

	return (generic_fromtext_ds(rdclass, type, lexer, origin, options,
				    target, callbacks));
}

static inline isc_result_t
generic_totext_ds(ARGS_TOTEXT) {
102 103 104 105 106 107 108 109 110 111 112 113 114 115 116
	isc_region_t sr;
	char buf[sizeof("64000 ")];
	unsigned int n;

	REQUIRE(rdata->length != 0);

	UNUSED(tctx);

	dns_rdata_toregion(rdata, &sr);

	/*
	 * Key tag.
	 */
	n = uint16_fromregion(&sr);
	isc_region_consume(&sr, 2);
117
	snprintf(buf, sizeof(buf), "%u ", n);
118 119 120 121 122 123 124
	RETERR(str_totext(buf, target));

	/*
	 * Algorithm.
	 */
	n = uint8_fromregion(&sr);
	isc_region_consume(&sr, 1);
125
	snprintf(buf, sizeof(buf), "%u ", n);
126 127 128 129 130 131 132
	RETERR(str_totext(buf, target));

	/*
	 * Digest type.
	 */
	n = uint8_fromregion(&sr);
	isc_region_consume(&sr, 1);
133
	snprintf(buf, sizeof(buf), "%u", n);
134 135 136 137 138 139 140 141
	RETERR(str_totext(buf, target));

	/*
	 * Digest.
	 */
	if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
		RETERR(str_totext(" (", target));
	RETERR(str_totext(tctx->linebreak, target));
142 143 144 145 146 147
	if ((tctx->flags & DNS_STYLEFLAG_NOCRYPTO) == 0) {
		if (tctx->width == 0) /* No splitting */
			RETERR(isc_hex_totext(&sr, 0, "", target));
		else
			RETERR(isc_hex_totext(&sr, tctx->width - 2,
					      tctx->linebreak, target));
Tinderbox User's avatar
Tinderbox User committed
148
	} else
149
		RETERR(str_totext("[omitted]", target));
150 151 152 153 154 155
	if ((tctx->flags & DNS_STYLEFLAG_MULTILINE) != 0)
		RETERR(str_totext(" )", target));
	return (ISC_R_SUCCESS);
}

static inline isc_result_t
156
totext_ds(ARGS_TOTEXT) {
157

158 159 160 161 162 163 164 165
	REQUIRE(rdata->type == dns_rdatatype_ds);

	return (generic_totext_ds(rdata, tctx, target));
}

static inline isc_result_t
generic_fromwire_ds(ARGS_FROMWIRE) {
	isc_region_t sr;
166 167 168 169

	UNUSED(type);
	UNUSED(rdclass);
	UNUSED(dctx);
170
	UNUSED(options);
171 172

	isc_buffer_activeregion(source, &sr);
173 174 175 176 177 178 179 180

	/*
	 * Check digest lengths if we know them.
	 */
	if (sr.length < 4 ||
	    (sr.base[3] == DNS_DSDIGEST_SHA1 &&
	     sr.length < 4 + ISC_SHA1_DIGESTLENGTH) ||
	    (sr.base[3] == DNS_DSDIGEST_SHA256 &&
181
	     sr.length < 4 + ISC_SHA256_DIGESTLENGTH) ||
Evan Hunt's avatar
Evan Hunt committed
182
#ifdef ISC_GOST_DIGESTLENGTH
183
	    (sr.base[3] == DNS_DSDIGEST_GOST &&
184
	     sr.length < 4 + ISC_GOST_DIGESTLENGTH) ||
Evan Hunt's avatar
Evan Hunt committed
185
#endif
186 187
	    (sr.base[3] == DNS_DSDIGEST_SHA384 &&
	     sr.length < 4 + ISC_SHA384_DIGESTLENGTH))
188 189
		return (ISC_R_UNEXPECTEDEND);

190 191 192 193 194 195 196 197 198
	/*
	 * Only copy digest lengths if we know them.
	 * If there is extra data dns_rdata_fromwire() will
	 * detect that.
	 */
	if (sr.base[3] == DNS_DSDIGEST_SHA1)
		sr.length = 4 + ISC_SHA1_DIGESTLENGTH;
	else if (sr.base[3] == DNS_DSDIGEST_SHA256)
		sr.length = 4 + ISC_SHA256_DIGESTLENGTH;
Evan Hunt's avatar
Evan Hunt committed
199
#ifdef ISC_GOST_DIGESTLENGTH
200 201
	else if (sr.base[3] == DNS_DSDIGEST_GOST)
		sr.length = 4 + ISC_GOST_DIGESTLENGTH;
Evan Hunt's avatar
Evan Hunt committed
202
#endif
203 204
	else if (sr.base[3] == DNS_DSDIGEST_SHA384)
		sr.length = 4 + ISC_SHA384_DIGESTLENGTH;
205

206 207 208 209
	isc_buffer_forward(source, sr.length);
	return (mem_tobuffer(target, sr.base, sr.length));
}

210 211 212 213 214 215 216 217 218
static inline isc_result_t
fromwire_ds(ARGS_FROMWIRE) {

	REQUIRE(type == dns_rdatatype_ds);

	return (generic_fromwire_ds(rdclass, type, source, dctx, options,
				    target));
}

219 220 221 222
static inline isc_result_t
towire_ds(ARGS_TOWIRE) {
	isc_region_t sr;

223
	REQUIRE(rdata->type == dns_rdatatype_ds);
224 225 226 227 228 229 230 231 232 233 234 235 236 237 238
	REQUIRE(rdata->length != 0);

	UNUSED(cctx);

	dns_rdata_toregion(rdata, &sr);
	return (mem_tobuffer(target, sr.base, sr.length));
}

static inline int
compare_ds(ARGS_COMPARE) {
	isc_region_t r1;
	isc_region_t r2;

	REQUIRE(rdata1->type == rdata2->type);
	REQUIRE(rdata1->rdclass == rdata2->rdclass);
239
	REQUIRE(rdata1->type == dns_rdatatype_ds);
240 241 242 243 244 245 246 247 248
	REQUIRE(rdata1->length != 0);
	REQUIRE(rdata2->length != 0);

	dns_rdata_toregion(rdata1, &r1);
	dns_rdata_toregion(rdata2, &r2);
	return (isc_region_compare(&r1, &r2));
}

static inline isc_result_t
249
generic_fromstruct_ds(ARGS_FROMSTRUCT) {
250 251 252 253 254
	dns_rdata_ds_t *ds = source;

	REQUIRE(source != NULL);
	REQUIRE(ds->common.rdtype == type);
	REQUIRE(ds->common.rdclass == rdclass);
255 256 257 258

	UNUSED(type);
	UNUSED(rdclass);

259 260 261 262 263 264 265
	switch (ds->digest_type) {
	case DNS_DSDIGEST_SHA1:
		REQUIRE(ds->length == ISC_SHA1_DIGESTLENGTH);
		break;
	case DNS_DSDIGEST_SHA256:
		REQUIRE(ds->length == ISC_SHA256_DIGESTLENGTH);
		break;
Evan Hunt's avatar
Evan Hunt committed
266
#ifdef ISC_GOST_DIGESTLENGTH
267 268 269
	case DNS_DSDIGEST_GOST:
		REQUIRE(ds->length == ISC_GOST_DIGESTLENGTH);
		break;
Evan Hunt's avatar
Evan Hunt committed
270
#endif
271 272 273
	case DNS_DSDIGEST_SHA384:
		REQUIRE(ds->length == ISC_SHA384_DIGESTLENGTH);
		break;
274
	}
275 276 277 278 279 280 281 282 283

	RETERR(uint16_tobuffer(ds->key_tag, target));
	RETERR(uint8_tobuffer(ds->algorithm, target));
	RETERR(uint8_tobuffer(ds->digest_type, target));

	return (mem_tobuffer(target, ds->digest, ds->length));
}

static inline isc_result_t
284 285 286 287 288 289 290 291 292
fromstruct_ds(ARGS_FROMSTRUCT) {

	REQUIRE(type == dns_rdatatype_ds);

	return (generic_fromstruct_ds(rdclass, type, source, target));
}

static inline isc_result_t
generic_tostruct_ds(ARGS_TOSTRUCT) {
293 294 295 296 297
	dns_rdata_ds_t *ds = target;
	isc_region_t region;

	REQUIRE(target != NULL);
	REQUIRE(rdata->length != 0);
298 299 300
	REQUIRE(ds->common.rdtype == rdata->type);
	REQUIRE(ds->common.rdclass == rdata->rdclass);
	REQUIRE(!ISC_LINK_LINKED(&ds->common, link));
301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319

	dns_rdata_toregion(rdata, &region);

	ds->key_tag = uint16_fromregion(&region);
	isc_region_consume(&region, 2);
	ds->algorithm = uint8_fromregion(&region);
	isc_region_consume(&region, 1);
	ds->digest_type = uint8_fromregion(&region);
	isc_region_consume(&region, 1);
	ds->length = region.length;

	ds->digest = mem_maybedup(mctx, region.base, region.length);
	if (ds->digest == NULL)
		return (ISC_R_NOMEMORY);

	ds->mctx = mctx;
	return (ISC_R_SUCCESS);
}

320 321 322 323 324 325 326 327 328 329 330 331 332 333
static inline isc_result_t
tostruct_ds(ARGS_TOSTRUCT) {
	dns_rdata_ds_t *ds = target;

	REQUIRE(rdata->type == dns_rdatatype_ds);
	REQUIRE(target != NULL);

	ds->common.rdclass = rdata->rdclass;
	ds->common.rdtype = rdata->type;
	ISC_LINK_INIT(&ds->common, link);

	return (generic_tostruct_ds(rdata, target, mctx));
}

334 335 336 337 338
static inline void
freestruct_ds(ARGS_FREESTRUCT) {
	dns_rdata_ds_t *ds = source;

	REQUIRE(ds != NULL);
339
	REQUIRE(ds->common.rdtype == dns_rdatatype_ds);
340 341 342 343 344 345 346 347 348 349 350

	if (ds->mctx == NULL)
		return;

	if (ds->digest != NULL)
		isc_mem_free(ds->mctx, ds->digest);
	ds->mctx = NULL;
}

static inline isc_result_t
additionaldata_ds(ARGS_ADDLDATA) {
351
	REQUIRE(rdata->type == dns_rdatatype_ds);
352 353 354 355 356 357 358 359 360 361 362 363

	UNUSED(rdata);
	UNUSED(add);
	UNUSED(arg);

	return (ISC_R_SUCCESS);
}

static inline isc_result_t
digest_ds(ARGS_DIGEST) {
	isc_region_t r;

364
	REQUIRE(rdata->type == dns_rdatatype_ds);
365 366 367 368 369 370

	dns_rdata_toregion(rdata, &r);

	return ((digest)(arg, &r));
}

371
static inline bool
372 373
checkowner_ds(ARGS_CHECKOWNER) {

374
	REQUIRE(type == dns_rdatatype_ds);
375 376 377 378 379 380

	UNUSED(name);
	UNUSED(type);
	UNUSED(rdclass);
	UNUSED(wildcard);

381
	return (true);
382 383
}

384
static inline bool
385 386
checknames_ds(ARGS_CHECKNAMES) {

387
	REQUIRE(rdata->type == dns_rdatatype_ds);
388 389 390 391 392

	UNUSED(rdata);
	UNUSED(owner);
	UNUSED(bad);

393
	return (true);
394 395
}

396 397 398 399 400
static inline int
casecompare_ds(ARGS_COMPARE) {
	return (compare_ds(rdata1, rdata2));
}

401
#endif	/* RDATA_GENERIC_DS_43_C */