[ldns-users] Given a DS and a DNSKEY, how do I check if the DS signs the DNSKEY?

[Johannes Naab]

On 2013-11-18 15:09, Calle Dybedahl wrote:
> Hello.
> 
> I’ve been trying to figure this out from the documentation and the source code, but I’m not getting anywhere, so I thought I’d ask here. 
> 
> Given two ldns_rr objects, one of type LDNS_RR_TYPE_DS and one of type LDNS_RR_TYPE_DNSKEY, what do I need to do to find out if the DS correctly signs the DNSKEY? Pointers to what documentation to read is just as welcome as plain answers.
> 

The functions ldns_rr_compare_ds and ldns_rr_compare_ds_dnskey should do
exactly that.

ldns_rr_compare_ds is documented in the man pages.

--