0d2cd47617
When doing DNSSEC lookups we need to know one or more DS or DNSKEY RRs as trust anchors to validate lookups. With this change we add a compiled-in trust anchor database, serving the root DS key as of today, retrieved from: https://data.iana.org/root-anchors/root-anchors.xml The interface is kept generic, so that additional DS or DNSKEY RRs may be served via the same interface, for example by provisioning them locally in external files to support "islands" of security. The trust anchor database becomes the fourth source of RRs we maintain, besides, the network, the local cache, and the local zone.
160 lines
4.5 KiB
C
160 lines
4.5 KiB
C
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
|
|
|
|
#pragma once
|
|
|
|
/***
|
|
This file is part of systemd.
|
|
|
|
Copyright 2014 Tom Gundersen <teg@jklm.no>
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
|
under the terms of the GNU Lesser General Public License as published by
|
|
the Free Software Foundation; either version 2.1 of the License, or
|
|
(at your option) any later version.
|
|
|
|
systemd is distributed in the hope that it will be useful, but
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public License
|
|
along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
***/
|
|
|
|
#include "sd-event.h"
|
|
#include "sd-netlink.h"
|
|
#include "sd-network.h"
|
|
|
|
#include "hashmap.h"
|
|
#include "list.h"
|
|
#include "ordered-set.h"
|
|
|
|
typedef struct Manager Manager;
|
|
typedef enum Support Support;
|
|
|
|
enum Support {
|
|
SUPPORT_NO,
|
|
SUPPORT_YES,
|
|
SUPPORT_RESOLVE,
|
|
_SUPPORT_MAX,
|
|
_SUPPORT_INVALID = -1
|
|
};
|
|
|
|
#include "resolved-dns-query.h"
|
|
#include "resolved-dns-search-domain.h"
|
|
#include "resolved-dns-server.h"
|
|
#include "resolved-dns-stream.h"
|
|
#include "resolved-dns-trust-anchor.h"
|
|
#include "resolved-link.h"
|
|
|
|
#define MANAGER_SEARCH_DOMAINS_MAX 32
|
|
#define MANAGER_DNS_SERVERS_MAX 32
|
|
|
|
struct Manager {
|
|
sd_event *event;
|
|
|
|
Support llmnr_support;
|
|
|
|
/* Network */
|
|
Hashmap *links;
|
|
|
|
sd_netlink *rtnl;
|
|
sd_event_source *rtnl_event_source;
|
|
|
|
sd_network_monitor *network_monitor;
|
|
sd_event_source *network_event_source;
|
|
|
|
/* DNS query management */
|
|
Hashmap *dns_transactions;
|
|
LIST_HEAD(DnsQuery, dns_queries);
|
|
unsigned n_dns_queries;
|
|
|
|
LIST_HEAD(DnsStream, dns_streams);
|
|
unsigned n_dns_streams;
|
|
|
|
/* Unicast dns */
|
|
LIST_HEAD(DnsServer, dns_servers);
|
|
LIST_HEAD(DnsServer, fallback_dns_servers);
|
|
unsigned n_dns_servers; /* counts both main and fallback */
|
|
DnsServer *current_dns_server;
|
|
|
|
LIST_HEAD(DnsSearchDomain, search_domains);
|
|
unsigned n_search_domains;
|
|
|
|
bool need_builtin_fallbacks:1;
|
|
|
|
bool read_resolv_conf:1;
|
|
usec_t resolv_conf_mtime;
|
|
|
|
DnsTrustAnchor trust_anchor;
|
|
|
|
LIST_HEAD(DnsScope, dns_scopes);
|
|
DnsScope *unicast_scope;
|
|
|
|
/* LLMNR */
|
|
int llmnr_ipv4_udp_fd;
|
|
int llmnr_ipv6_udp_fd;
|
|
int llmnr_ipv4_tcp_fd;
|
|
int llmnr_ipv6_tcp_fd;
|
|
|
|
sd_event_source *llmnr_ipv4_udp_event_source;
|
|
sd_event_source *llmnr_ipv6_udp_event_source;
|
|
sd_event_source *llmnr_ipv4_tcp_event_source;
|
|
sd_event_source *llmnr_ipv6_tcp_event_source;
|
|
|
|
/* dbus */
|
|
sd_bus *bus;
|
|
sd_event_source *bus_retry_event_source;
|
|
|
|
/* The hostname we publish on LLMNR and mDNS */
|
|
char *llmnr_hostname;
|
|
char *mdns_hostname;
|
|
DnsResourceKey *llmnr_host_ipv4_key;
|
|
DnsResourceKey *llmnr_host_ipv6_key;
|
|
|
|
/* Watch the system hostname */
|
|
int hostname_fd;
|
|
sd_event_source *hostname_event_source;
|
|
|
|
/* Watch for system suspends */
|
|
sd_bus_slot *prepare_for_sleep_slot;
|
|
|
|
sd_event_source *sigusr1_event_source;
|
|
};
|
|
|
|
/* Manager */
|
|
|
|
int manager_new(Manager **ret);
|
|
Manager* manager_free(Manager *m);
|
|
|
|
int manager_start(Manager *m);
|
|
|
|
uint32_t manager_find_mtu(Manager *m);
|
|
|
|
int manager_write(Manager *m, int fd, DnsPacket *p);
|
|
int manager_send(Manager *m, int fd, int ifindex, int family, const union in_addr_union *addr, uint16_t port, DnsPacket *p);
|
|
int manager_recv(Manager *m, int fd, DnsProtocol protocol, DnsPacket **ret);
|
|
|
|
int manager_find_ifindex(Manager *m, int family, const union in_addr_union *in_addr);
|
|
LinkAddress* manager_find_link_address(Manager *m, int family, const union in_addr_union *in_addr);
|
|
|
|
void manager_refresh_rrs(Manager *m);
|
|
int manager_next_hostname(Manager *m);
|
|
|
|
bool manager_our_packet(Manager *m, DnsPacket *p);
|
|
DnsScope* manager_find_scope(Manager *m, DnsPacket *p);
|
|
|
|
void manager_verify_all(Manager *m);
|
|
|
|
DEFINE_TRIVIAL_CLEANUP_FUNC(Manager*, manager_free);
|
|
|
|
#define EXTRA_CMSG_SPACE 1024
|
|
|
|
int manager_is_own_hostname(Manager *m, const char *name);
|
|
|
|
int manager_compile_dns_servers(Manager *m, OrderedSet **servers);
|
|
int manager_compile_search_domains(Manager *m, OrderedSet **domains);
|
|
|
|
const char* support_to_string(Support p) _const_;
|
|
int support_from_string(const char *s) _pure_;
|