ldns(3)

πŸ“¦
version 1.9.2 Β· 2 versions
, in alpine 3.22, alpine 3.23, alpine 3.24, arch rolling, debian trixie, fedora 43, fedora 44, nixos 26.05, nixpkgs unstable, opensuse-leap 16.0, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– ldns(3) β€” Library Functions Manual πŸ’–

okay bestie, welcome to ldns(3) β€” it's a Library Functions Manual situation and we're about to talk about verifying signature data buffers. yes. we're doing crypto. slay. πŸŽ€


✨ NAME ✨

ldns_verify_rrsig_dsa, ldns_verify_rrsig_rsasha1, ldns_verify_rrsig_rsamd5 β€” verify signature data buffers πŸ’…


🌸 SYNOPSIS 🌸

#include <stdint.h>
#include <stdbool.h>

#include <ldns/ldns.h>

ldns_status ldns_verify_rrsig_dsa(ldns_buffer *sig, ldns_buffer *rrset,
ldns_buffer *key);

ldns_status ldns_verify_rrsig_rsasha1(ldns_buffer *sig, ldns_buffer
*rrset, ldns_buffer *key);

ldns_status ldns_verify_rrsig_rsamd5(ldns_buffer *sig, ldns_buffer
*rrset, ldns_buffer *key);

like yes, three functions, same shape, three different algorithms. the way that they all take the exact same three buffers… iconic honestly. πŸ¦‹


🌈 DESCRIPTION 🌈

okay so. all three of these are verify girlies. they take a buffer of signature data, a buffer of rrset data, and a buffer of key data, and they check whether the sig actually checks out. no cap. πŸ”₯

  • ldns_verify_rrsig_dsa() β€” verifies a buffer with signature data (DSA) for a buffer with rrset data with a buffer with key data.
    • sig: the signature data
    • rrset: the rrset data, sorted and processed for verification
    • key: the key data
  • ldns_verify_rrsig_rsasha1() β€” verifies a buffer with signature data (RSASHA1) for a buffer with rrset data with a buffer with key data.
    • sig: the signature data
    • rrset: the rrset data, sorted and processed for verification
    • key: the key data
  • ldns_verify_rrsig_rsamd5() β€” verifies a buffer with signature data (RSAMD5) for a buffer with rrset data with a buffer with key data.
    • sig: the signature data
    • rrset: the rrset data, sorted and processed for verification
    • key: the key data
bestie pls note: the rrset buffer has to be sorted and processed for verification before you hand it over. that's not optional, that's the whole vibe. 🫢

πŸ‘‘ AUTHOR πŸ‘‘

The ldns team at NLnet Labs. ✨


😭 REPORTING BUGS 😭

found something cursed? please report bugs to dns-team@nlnetlabs.nl or on GitHub at https://github.com/NLnetLabs/ldns/issues. they wanna hear it fr fr. πŸ’€


Copyright (c) 2004 - 2006 NLnet Labs.

Licensed under the BSD License. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. (read it again bestie, that's the dramatic part. no warranty. periodt. πŸ’…)


🧚 SEE ALSO 🧚

  • ldns_key
  • ldns_sign_public
  • ldns_zone_sign
  • ldns_verify
  • ldns_verify_rrsig

And perldoc Net::DNS, RFC1034, RFC1035, RFC4033, RFC4034 and RFC4035. iykyk πŸ“š


⭐ REMARKS ⭐

This manpage was automatically generated from the ldns source code. yes, a machine wrote it. and now a very enthusiastic teenager rewrote it. the circle of life. πŸ¦‹


and that's the whole page bestie!! this one's from 30 May 2006, it lives in ldns(3), and it ate. go verify some signatures, main character. πŸŽ€βœ¨πŸ’–