Module Dns.Tsig_opSource

Signature operations and their errors.

Sourcetype e = [
  1. | `Bad_key of [ `raw ] Domain_name.t * Tsig.t
  2. | `Bad_timestamp of [ `raw ] Domain_name.t * Tsig.t * Dnskey.t
  3. | `Bad_truncation of [ `raw ] Domain_name.t * Tsig.t
  4. | `Invalid_mac of [ `raw ] Domain_name.t * Tsig.t
]

The type of a verification error.

Sourceval pp_e : e Fmt.t

pp_e ppf e pretty-prints the verification error e on ppf.

Sourcetype verify = ?mac:Cstruct.t -> Ptime.t -> Packet.t -> [ `raw ] Domain_name.t -> ?key:Dnskey.t -> Tsig.t -> Cstruct.t -> (Tsig.t * Cstruct.t * Dnskey.t, e * Cstruct.t option) result

The type of a verification function. The mac contains data for a reply to a signed request.

Sourceval no_verify : verify

no_verify always returns an error.

Sourcetype sign = ?mac:Cstruct.t -> ?max_size:int -> [ `raw ] Domain_name.t -> Tsig.t -> key:Dnskey.t -> Packet.t -> Cstruct.t -> (Cstruct.t * Cstruct.t) option

The type of a signature function. The mac contains data for a reply to a signed request.

Sourceval no_sign : sign

no_sign always returns None.