getdns_root_trust_anchor(3)

getdns_root_trust_anchor3

Usage

#include <getdns.h>

getdns_list *
getdns_root_trust_anchor (time_t *utc_date_of_anchor)

Library

DNS Resolver library (libgetdns, -lgetdns)

Overview

If an application wants the API to perform DNSSEC validation without using the extensions, it can use the getdns_validate_dnssec() helper function. The API will use the resource records in bundle_of_support_records to construct the validation chain and the DNSKEY or DS records in trust_anchor_records as trust anchors. The default list of trust anchor records that is used by the library to validate DNSSEC can be retrieved by using the getdns_root_trust_anchor helper function.

utc_date_of_anchor time the trust anchors were obtained in epoch seconds (on success)

Return values

Returns the default list of trust anchor records used by the library to validate DNSSEC or NULL if no default trust anchors are available.

Examples

TBD

Releases

6 releases since Debian 9 (Stretch); the text changed 3 times.

  1. 9
  2. 10
  3. 11–13
  4. Arch

From getdns 1.7.3-2 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.