getdns_validate_dnssec(3)

✨ getdns_validate_dnssec(3) ✨

okay bestie, so this is a page from the getdns manual, section 3, and it's all about getdns_validate_dnssec. let's get into it 💅

---

🌸 NAME 🌸

getdns_validate_dnssec — DNSSEC validate a given getdns record. like, it checks the vibes of a record's DNSSEC situation. no cap.

---

📚 LIBRARY 📚

DNS Resolver library (libgetdns, -lgetdns) — she lives in the getdns resolver library, link her with -lgetdns.

---

🎀 SYNOPSIS 🎀

#include <getdns.h>

getdns_return_t
getdns_validate_dnssec (getdns_list *record_to_validate,
   getdns_list *bundle_of_support_records,
   getdns_list *trust_anchor_records)

---

🦋 DESCRIPTION 🦋

so here's the tea 🍓: if your app wants the API to do the DNSSEC validation thing without touching the extensions, you can just call the getdns_validate_dnssec() helper function. that's literally what she's here for.

the API will take the resource records hanging out in bundle_of_support_records and use them to construct the validation chain. then it takes the DNSKEY or DS records chillin' in trust_anchor_records and uses those as the trust anchors. iconic behaviour, honestly 👑

and if you want the default list of trust anchor records — the one the library itself uses to validate DNSSEC — you can grab it with the getdns_root_trust_anchor helper function. free of charge, no cap. 🫶

• record_to_validate — the resource record being validated. the main character, if you will. 🌟
• bundle_of_support_records — records used to construct the validation chain. the support squad. 💪
• trust_anchor_records — trust anchor records to use for the validation. the ones we actually trust, fr fr. 🔐

---

🔥 RETURN VALUES 🔥

• GETDNS_DNSSEC_BOGUS — the DNSSEC signature is bogus. 💀 not it. not it at all.
• GETDNS_DNSSEC_INDETERMINATE — validation could not be completed. we simply don't know, bestie. 🤷
• GETDNS_DNSSEC_INSECURE — one or more pieces of the validation chain are demonstrably incorrect. the chain is giving broken. 😭
• GETDNS_DNSSEC_SECURE — validation succeeded. slay! periodt. 💖✨
• GETDNS_RETURN_MEMORY_ERROR — an attempt to allocate memory failed. she ran out of room, poor thing. 🥺

---

🌈 EXAMPLES 🌈

TBD — yeah bestie, that's literally all it says. the examples are TBD. we wait. 🧚

---

👀 SEE ALSO 👀

• getdns_root_trust_anchor(3)
• libgetdns(3)

---

and that's the whole page, bestie 🎀 this was getdns 1.7.3, dated December 2015 — an absolute icon of a release, we love her, mwah 💜💅