rsabigexponent: convert the test from RSASHA1 to RSASHA256
RSASHA1 is not supported on some platforms.
This commit is contained in:
committed by
Michal Nowak
parent
3c9fcc8327
commit
a2597319b0
@@ -29,3 +29,11 @@ Do **not** remove `bigkey.c` as it may be needed to generate a new
|
||||
|
||||
`bigkey` is used to both test that we are not running under PKCS#11 and
|
||||
generate a `DNSKEY` key with a large RSA exponent.
|
||||
|
||||
To regenerate `ns2/example.db.bad` comment out the range test in
|
||||
opensslrsa_parse before signing the zone with a ZSK key generated
|
||||
by `bigkey`.
|
||||
|
||||
if (BN_num_bits(e) > RSA_MAX_PUBEXP_BITS) {
|
||||
DST_RET(ISC_R_RANGE);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user