NOTES |
- DK_STAT_NOKEY is returned if the DNS query for a selector
(public key) record returned with NXDOMAIN, i.e. the record
does not exist; this should be considered a permanent failure.
- DK_STAT_CANTVRFY is returned if the DNS query for a selector
(public key) record timed out or suffered some other kind of transient
failure; verification can be re-attempted later.
- DK_STAT_SYNTAX is returned to indicate required data could
not be extracted from the arriving message to be signed or verified,
or if a selector (public key) record returned from a DNS query could
not be parsed (e.g. corrupted, wrong format, etc.).
- DK_STAT_NOSIG can be returned early, i.e. from
dk_eoh(), if no signature was found
on a message which is being verified. See that function's description
for further details.
- DK_STAT_INTERNAL can be returned on system error (e.g.
malloc() failure), or if functions provided by this API are
called in the incorrect order (e.g. dk_getsig() before
dk_eom(), or dk_eoh() before dk_header(),
etc.).
|