code wiki / _hdl_build / nx_acme_dns01_propagation_gate.nx

nx_acme_dns01_propagation_gate.nx

buildroot/runtime/_hdl_build/nx_acme_dns01_propagation_gate.nx

7391 B167 linesdepth 21pulls 139 transitivereach 0 importersview sourcekind gate/prooftopic acme
docsdependenciesstructsconstsfunctions

about

nx_acme_dns01_propagation_gate.nx -- LIVE proof for the DNS-01 TXT propagation poll that replaces the fixed sys_sleep_ms(360000) in nx_acme_dns01_issue. Rows: 1. SET a UNIQUE _acme-challenge.nishifamily.com TXT at Porkbun (TLS 1.2). 2. POLL nx_dns01_wait_txt_propagated -> assert it returns VISIBLE(1) within a bounded window, and report how long it took (this is the "trigger as soon as propagated, not after a fixed 6 min" win). 3. DELETE the TXT (ALWAYS runs -> guaranteed cleanup, fully reversible). 4. NEG-CONTROL: poll for a value that was NEVER set, with a SHORT timeout -> assert it returns TIMED-OUT(0) and is BOUNDED (does not hang). This proves the ceiling path. AUTHORIZED scope: ONE Porkbun TXT set + delete (cleaned up), read-only DNS queries. NO Let's Encrypt challenge is triggered. Creds: ./_offc/nx_secret_cli.elf get porkbun (/tmp/nxsecret.out; BOM stripped). expect_exit: 0 license_tier: ORIGINAL

dependencies 5 imports · 0 importers

nx_syscalls.nx nx_x509_trust_store.nx nx_trust_store_load_from_certdata. nx_acme_porkbun.nx nx_acme_dns01_propagation.nx nx_acme_dns01_propagation_gate

imports: nx_syscalls.nxnx_x509_trust_store.nxnx_trust_store_load_from_certdata.nxnx_acme_porkbun.nxnx_acme_dns01_propagation.nx

imported by: nobody (leaf or entry point)

call flow from main pre-order; caps 40 nodes / depth 6 declared; ↻ = already shown

main sys_mmap p_w sys_write nx_trust_store_load_from_c sys_mmap ↻ sys_read_file sys_openat_rd sys_lseek sys_mmap ↻ sys_read sys_close nx_nss_certdata_parse sys_mmap ↻ _pat_class_cert _pat_value_octal _pat_end _find_newline _starts_with _parse_octal_line sys_mmap ↻ _is_space _decode_octal_escape _is_octal trust_store_alloc sys_mmap ↻ nx_x509_trust_store_load sys_mmap ↻ x509_parse sys_mmap ↻ asn1_cursor_init asn1_expect_tag sys_mmap ↻ asn1_read_tlv_header asn1_read_tag asn1_read_length asn1_read_length ↻ x509_read_tlv sys_mmap ↻ asn1_expect_tag ↻

structs

none

consts

none

functions

29func p_w(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 }
called by 3: p_np_rowmain calls 1: sys_write
30func p_n(v: i64) -> i64
called by 1: main calls 3: p_wsys_mmapsys_write
40func p_row(id: *u8, ok: i64, pass: *i64) -> i64
called by 1: main calls 1: p_w
45func p_dec(buf: *u8, off: i64, v: i64) -> i64
called by 1: main calls 1: sys_mmap
54func p_read_file(path: *u8, out: *u8, cap: i64) -> i64
called by 1: main calls 3: sys_openat_rdsys_readsys_close
62func main() -> i64
calls 13: sys_mmapp_wnx_trust_store_load_from_certdatasys_exitsys_now_realtime_secp_read_file+7