keystate.c 2.04 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18
/*  Copyright (C) 2017 CZ.NIC, z.s.p.o. <knot-dns@labs.nic.cz>

    This program is free software: you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program.  If not, see <http://www.gnu.org/licenses/>.
*/

#include "knot/dnssec/kasp/keystate.h"

19
key_state_t get_key_state(const knot_kasp_key_t *key, knot_time_t moment)
20
{
Daniel Salzman's avatar
Daniel Salzman committed
21
	if (!key || moment <= 0) {
22 23 24
		return DNSSEC_KEY_STATE_INVALID;
	}

25
	const knot_kasp_key_timing_t *t = &key->timing;
26

27
	bool removed = (knot_time_cmp(t->remove, moment) <= 0);
28
	bool post_active = (knot_time_cmp(t->post_active, moment) <= 0);
29
	bool retired = (knot_time_cmp(t->retire, moment) <= 0);
30 31 32 33 34 35 36 37
	bool retire_active = (knot_time_cmp(t->retire_active, moment) <= 0);
	bool active = (knot_time_cmp(t->active, moment) <= 0);
	bool ready = (knot_time_cmp(t->ready, moment) <= 0);
	bool published = (knot_time_cmp(t->publish, moment) <= 0);
	bool pre_active = (knot_time_cmp(t->pre_active, moment) <= 0);
	bool created = (knot_time_cmp(t->created, moment) <= 0);

	if (removed) {
38 39
		return DNSSEC_KEY_STATE_REMOVED;
	}
40 41 42 43 44 45 46 47
	if (post_active) {
		if (retired) {
			return DNSSEC_KEY_STATE_INVALID;
		} else {
			return DNSSEC_KEY_STATE_POST_ACTIVE;
		}
	}
	if (retired) {
48 49
		return DNSSEC_KEY_STATE_RETIRED;
	}
50 51 52 53
	if (retire_active) {
		return DNSSEC_KEY_STATE_RETIRE_ACTIVE;
	}
	if (active) {
54 55
		return DNSSEC_KEY_STATE_ACTIVE;
	}
56 57 58 59
	if (ready) {
		return DNSSEC_KEY_STATE_READY;
	}
	if (published) {
60 61
		return DNSSEC_KEY_STATE_PUBLISHED;
	}
62 63 64 65 66
	if (pre_active) {
		return DNSSEC_KEY_STATE_PRE_ACTIVE;
	}
	if (created) {
		// don't care
67 68
	}

69 70
	return DNSSEC_KEY_STATE_INVALID;
}