ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Restore the ability to read legacy K*+157+* files

Browse Source 
The ability to read legacy HMAC-MD5 K* keyfile pairs using algorithm
number 157 was accidentally lost when the algorithm numbers were
consolidated into a single block, in commit
09f7e0607a.

The assumption was that these algorithm numbers were only known
internally, but they were also used in key files. But since HMAC-MD5
got renumbered from 157 to 160, legacy HMAC-MD5 key files no longer
work.

Move HMAC-MD5 back to 157 and GSSAPI back to 160.  Add exception for
GSSAPI to list_hmac_algorithms.
This commit is contained in:
Mark Andrews
2023-06-19 14:17:14 +10:00
parent 4320c1f345
commit 3f93d3f757
4 changed files with 16 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
bin/tests/system/dnssec/tests.sh
View File

@@ -3539,7 +3539,7 @@ do
2) # Diffie Helman
alg=$((alg+1))
continue;;
159|160|161|162|163|164|165) # private - non standard
157|160|161|162|163|164|165) # private - non standard
alg=$((alg+1))
continue;;
1|5|7|8|10) # RSA algorithms