a210692525
This makes most header files easier to look at. Also Emacs gets really slow when browsing through large sections of overly long prototypes, which is much improved by this macro. We should probably not do something similar with too many other cases, as macros like this might help readability for some, but make it worse for others. But I think given the complexity of this specific prototype and how often we use it, it's worth doing.
50 lines
1.4 KiB
C
50 lines
1.4 KiB
C
/* SPDX-License-Identifier: LGPL-2.1+ */
|
|
#pragma once
|
|
|
|
/***
|
|
This file is part of systemd.
|
|
|
|
Copyright 2016 Lennart Poettering
|
|
***/
|
|
|
|
#include "conf-parser.h"
|
|
#include "macro.h"
|
|
|
|
typedef enum ResolveSupport ResolveSupport;
|
|
typedef enum DnssecMode DnssecMode;
|
|
|
|
enum ResolveSupport {
|
|
RESOLVE_SUPPORT_NO,
|
|
RESOLVE_SUPPORT_YES,
|
|
RESOLVE_SUPPORT_RESOLVE,
|
|
_RESOLVE_SUPPORT_MAX,
|
|
_RESOLVE_SUPPORT_INVALID = -1
|
|
};
|
|
|
|
enum DnssecMode {
|
|
/* No DNSSEC validation is done */
|
|
DNSSEC_NO,
|
|
|
|
/* Validate locally, if the server knows DO, but if not,
|
|
* don't. Don't trust the AD bit. If the server doesn't do
|
|
* DNSSEC properly, downgrade to non-DNSSEC operation. Of
|
|
* course, we then are vulnerable to a downgrade attack, but
|
|
* that's life and what is configured. */
|
|
DNSSEC_ALLOW_DOWNGRADE,
|
|
|
|
/* Insist on DNSSEC server support, and rather fail than downgrading. */
|
|
DNSSEC_YES,
|
|
|
|
_DNSSEC_MODE_MAX,
|
|
_DNSSEC_MODE_INVALID = -1
|
|
};
|
|
|
|
CONFIG_PARSER_PROTOTYPE(config_parse_resolve_support);
|
|
CONFIG_PARSER_PROTOTYPE(config_parse_dnssec_mode);
|
|
|
|
const char* resolve_support_to_string(ResolveSupport p) _const_;
|
|
ResolveSupport resolve_support_from_string(const char *s) _pure_;
|
|
|
|
const char* dnssec_mode_to_string(DnssecMode p) _const_;
|
|
DnssecMode dnssec_mode_from_string(const char *s) _pure_;
|