--- name: "ldns_dnssec_derive_trust_tree_dnskey_rrset" section: "3" platform: "linux" package: "ldns" version: "1.9.2-1" release: "Arch Linux 2026-11-01" platforms: ["linux"] url: "https://new.carta.tech/ldns_dnssec_derive_trust_tree_dnskey_rrset" --- # ldns\_dnssec\_derive\_trust\_tree\_dnskey\_rrset(3) functions for ldns\_dnssec\_trust\_tree ## NAME ldns\_dnssec\_trust\_tree\_new, ldns\_dnssec\_trust\_tree\_free, ldns\_dnssec\_trust\_tree\_depth, ldns\_dnssec\_derive\_trust\_tree, ldns\_dnssec\_trust\_tree\_contains\_keys, ldns\_dnssec\_trust\_tree\_print, ldns\_dnssec\_trust\_tree\_print\_sm, ldns\_dnssec\_trust\_tree\_add\_parent, ldns\_dnssec\_derive\_trust\_tree\_normal\_rrset, ldns\_dnssec\_derive\_trust\_tree\_dnskey\_rrset, ldns\_dnssec\_derive\_trust\_tree\_ds\_rrset, ldns\_dnssec\_derive\_trust\_tree\_no\_sig - functions for ldns\_dnssec\_trust\_tree ## SYNOPSIS \#include \\ \#include \\ \#include \ ldns\_dnssec\_trust\_tree\* ldns\_dnssec\_trust\_tree\_new(void); void ldns\_dnssec\_trust\_tree\_free(ldns\_dnssec\_trust\_tree \*tree); size\_t ldns\_dnssec\_trust\_tree\_depth(ldns\_dnssec\_trust\_tree \*tree); ldns\_dnssec\_trust\_tree\* ldns\_dnssec\_derive\_trust\_tree( ldns\_dnssec\_data\_chain \*data\_chain, ldns\_rr \*rr); ldns\_status ldns\_dnssec\_trust\_tree\_contains\_keys( ldns\_dnssec\_trust\_tree \*tree, ldns\_rr\_list \*keys); void ldns\_dnssec\_trust\_tree\_print(FILE \*out, ldns\_dnssec\_trust\_tree \*tree, size\_t tabs, bool extended); ldns\_dnssec\_trust\_tree\_print\_sm(); ldns\_status ldns\_dnssec\_trust\_tree\_add\_parent(ldns\_dnssec\_trust\_tree \*tree, const ldns\_dnssec\_trust\_tree \*parent, const ldns\_rr \*parent\_signature, const ldns\_status parent\_status); void ldns\_dnssec\_derive\_trust\_tree\_normal\_rrset( ldns\_dnssec\_trust\_tree \*new\_tree, ldns\_dnssec\_data\_chain \*data\_chain, ldns\_rr \*cur\_sig\_rr); void ldns\_dnssec\_derive\_trust\_tree\_dnskey\_rrset( ldns\_dnssec\_trust\_tree \*new\_tree, ldns\_dnssec\_data\_chain \*data\_chain, ldns\_rr \*cur\_rr, ldns\_rr \*cur\_sig\_rr); void ldns\_dnssec\_derive\_trust\_tree\_ds\_rrset( ldns\_dnssec\_trust\_tree \*new\_tree, ldns\_dnssec\_data\_chain \*data\_chain, ldns\_rr \*cur\_rr); void ldns\_dnssec\_derive\_trust\_tree\_no\_sig( ldns\_dnssec\_trust\_tree \*new\_tree, ldns\_dnssec\_data\_chain \*data\_chain); ## DESCRIPTION *ldns\_dnssec\_trust\_tree\_new*() Creates a new (empty) dnssec\_trust\_tree structure .br Returns ldns\_dnssec\_trust\_tree \* *ldns\_dnssec\_trust\_tree\_free*() Frees the dnssec\_trust\_tree recursively There is no deep free; all data in the trust tree consists of pointers to a data\_chain .br **tree**: The tree to free *ldns\_dnssec\_trust\_tree\_depth*() returns the depth of the trust tree .br **tree**: tree to calculate the depth of .br Returns The depth of the tree *ldns\_dnssec\_derive\_trust\_tree*() Generates a dnssec\_trust\_tree for the given rr from the given data\_chain This does not clone the actual data; Don't free the data\_chain before you are done with this tree .br **\*data\_chain**: The chain to derive the trust tree from .br **\*rr**: The RR this tree will be about .br Returns ldns\_dnssec\_trust\_tree \* *ldns\_dnssec\_trust\_tree\_contains\_keys*() Returns OK if there is a trusted path in the tree to one of the DNSKEY or DS RRs in the given list \\param \*tree The trust tree so search \\param \*keys A ldns\_rr\_list of DNSKEY and DS rrs to look for .br Returns LDNS\_STATUS\_OK if there is a trusted path to one of the keys, or the \*first\* error encountered if there were no paths *ldns\_dnssec\_trust\_tree\_print*() Prints the dnssec\_trust\_tree structure to the given file stream. If a link status is not LDNS\_STATUS\_OK; the status and relevant signatures are printed too .br **\*out**: The file stream to print to .br **tree**: The trust tree to print .br **tabs**: Prepend each line with tabs\*2 spaces .br **extended**: If true, add little explanation lines to the output *ldns\_dnssec\_trust\_tree\_print\_sm*() *ldns\_dnssec\_trust\_tree\_add\_parent*() Adds a trust tree as a parent for the given trust tree .br **\*tree**: The tree to add the parent to .br **\*parent**: The parent tree to add .br **\*parent\_signature**: The RRSIG relevant to this parent/child connection .br **parent\_status**: The DNSSEC status for this parent, child and RRSIG .br Returns LDNS\_STATUS\_OK if the addition succeeds, error otherwise *ldns\_dnssec\_derive\_trust\_tree\_normal\_rrset*() Sub function for derive\_trust\_tree that is used for a 'normal' rrset .br **new\_tree**: The trust tree that we are building .br **data\_chain**: The data chain containing the data for the trust tree .br **cur\_sig\_rr**: The currently relevant signature *ldns\_dnssec\_derive\_trust\_tree\_dnskey\_rrset*() Sub function for derive\_trust\_tree that is used for DNSKEY rrsets .br **new\_tree**: The trust tree that we are building .br **data\_chain**: The data chain containing the data for the trust tree .br **cur\_rr**: The currently relevant DNSKEY RR .br **cur\_sig\_rr**: The currently relevant signature *ldns\_dnssec\_derive\_trust\_tree\_ds\_rrset*() Sub function for derive\_trust\_tree that is used for DS rrsets .br **new\_tree**: The trust tree that we are building .br **data\_chain**: The data chain containing the data for the trust tree .br **cur\_rr**: The currently relevant DS RR *ldns\_dnssec\_derive\_trust\_tree\_no\_sig*() Sub function for derive\_trust\_tree that is used when there are no signatures .br **new\_tree**: The trust tree that we are building .br **data\_chain**: The data chain containing the data for the trust tree ## AUTHOR The ldns team at NLnet Labs. ## REPORTING BUGS Please report bugs to dns-team@nlnetlabs.nl or on GitHub at https://github.com/NLnetLabs/ldns/issues ## COPYRIGHT Copyright (c) 2004 - 2006 NLnet Labs. Licensed under the BSD License. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. ## SEE ALSO *ldns\_dnssec\_data\_chain*, *ldns\_dnssec\_trust\_tree*. And **perldoc Net::DNS**, **RFC1034**, **RFC1035**, **RFC4033**, **RFC4034** and **RFC4035**. ## REMARKS This manpage was automatically generated from the ldns source code.