ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

use algorithm number instead of name to create TSIG keys

Browse Source 
the prior practice of passing a dns_name containing the
expanded name of an algorithm to dns_tsigkey_create() and
dns_tsigkey_createfromkey() is unnecessarily cumbersome;
we can now pass the algorithm number instead.
This commit is contained in:
Evan Hunt
2023-04-11 19:01:31 -07:00
parent a6e187a8d5
commit ffacf0aec6
16 changed files with 181 additions and 353 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
fuzz/dns_message_checksig.c
View File

@@ -264,7 +264,7 @@ LLVMFuzzerInitialize(int *argc ISC_ATTR_UNUSED, char ***argv ISC_ATTR_UNUSED) {
return (1);
}
result = dns_tsigkey_create(name, dns_tsig_hmacsha256_name, secret,
result = dns_tsigkey_create(name, DST_ALG_HMACSHA256, secret,
sizeof(secret), mctx, &tsigkey);
if (result != ISC_R_SUCCESS) {
fprintf(stderr, "dns_tsigkey_create failed: %s\n",