Functions

/build/buildd-opendnssec_1.3.2-1~bpo60+1-sparc-g2IJWF/opendnssec-1.3.2/signer/src/shared/hsm.h File Reference

#include "config.h"
#include "shared/status.h"
#include "signer/keys.h"
#include <ctype.h>
#include <stdint.h>
#include <ldns/ldns.h>
#include <libhsm.h>
#include <libhsmdns.h>
Include dependency graph for hsm.h:
This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions

ods_status lhsm_get_key (hsm_ctx_t *ctx, ldns_rdf *owner, key_type *key_id)
ldns_rr * lhsm_sign (hsm_ctx_t *ctx, ldns_rr_list *rrset, key_type *key_id, ldns_rdf *owner, time_t inception, time_t expiration)

Function Documentation

ods_status lhsm_get_key ( hsm_ctx_t *  ctx,
ldns_rdf *  owner,
key_type key_id 
)

Hardware Security Module support. Get key from one of the HSMs, store the DNSKEY and HSM key.

Parameters:
[in] ctx HSM context
[in] owner the zone owner name
[in] key_id key credentials
Returns:
ods_status status

Get key from one of the HSMs.

Definition at line 45 of file hsm.c.

References key_struct::algorithm, key_struct::dnskey, key_struct::flags, key_struct::hsmkey, key_struct::locator, ods_log_assert, ods_log_error(), and key_struct::params.

Referenced by lhsm_sign(), signconf_compare_keys(), and zone_publish_dnskeys().

ldns_rr* lhsm_sign ( hsm_ctx_t *  ctx,
ldns_rr_list *  rrset,
key_type key_id,
ldns_rdf *  owner,
time_t  inception,
time_t  expiration 
)

Get RRSIG from one of the HSMs, given a RRset and a key.

Parameters:
[in] ctx HSM context
[in] rrset RRset to be signed
[in] key_id key credentials
[in] owner owner of the keys
[in] inception signature inception
[in] expiration signature expiration
Returns:
ldns_rr* RRSIG record

Get RRSIG from one of the HSMs, given a RRset and a key.

Definition at line 116 of file hsm.c.

References key_struct::algorithm, key_struct::dnskey, key_struct::flags, key_struct::hsmkey, lhsm_get_key(), key_struct::locator, ods_log_assert, ods_log_debug(), ods_log_error(), ODS_STATUS_OK, and key_struct::params.

Referenced by rrset_sign().