getdns_root_trust_anchor(3)

💖 getdns_root_trust_anchor 💖

okay bestie, so you know how libgetdns is the DNS resolver library? yeah. this is one of its little helper functions and it's lowkey important if you're doing DNSSEC stuff. it lives in the DNS Resolver library, aka libgetdns, and you link it with -lgetdns. 🎀

---

✨ NAME ✨

getdns_root_trust_anchor — the function that hands you back the getdns list of default root trust anchors. that's it. that's the vibe. 👑

---

📚 LIBRARY 📚

DNS Resolver library (libgetdns, -lgetdns) — she's the whole reason we're here, no cap. 🦋

---

🌸 SYNOPSIS 🌸

#include <getdns.h>

getdns_list *
getdns_root_trust_anchor (time_t *utc_date_of_anchor)

like look at her. one include, one function, one pointer argument. she's giving minimal main character energy and honestly? iconic. 💅

---

💫 DESCRIPTION 💫

so here's the situation, bestie. if an application wants the API to do DNSSEC validation without using the extensions, it can just use the getdns_validate_dnssec() helper function. easy. that's the move. ✨

and then the way it all comes together: the API is gonna use the resource records inside bundle_of_support_records to construct the validation chain, and it uses the DNSKEY or DS records inside trust_anchor_records as the trust anchors. that's the whole recipe fr fr. 🍓

now — the default list of trust anchor records that the library uses to validate DNSSEC? that's exactly what you get when you call the getdns_root_trust_anchor helper function. she just hands it over. 🫶

• utc_date_of_anchor — the time the trust anchors were obtained, in epoch seconds (this one's on success, so don't come for her if it's empty otherwise 🙈)

---

🌈 RETURN VALUES 🌈

she returns the default list of trust anchor records used by the library to validate DNSSEC. and if there are no default trust anchors available? you get NULL. that's the whole story. 💀

---

🎀 EXAMPLES 🎀

TBD 😭

bestie they literally just wrote TBD and moved on. we love a mysterious queen. 💜

---

👀 SEE ALSO 👀

• getdns_validate_dnssec(3)
• libgetdns(3)

go read those too, iykyk. 🔥

---

mwah 💋 that's the page. this one's from getdns 1.7.3, dated December 2015 — oldie but a goodie, and yes she still ate. periodt. 💅✨