Evan Hunt 0f66aced26 2834. [bug] HMAC-SHA* keys that were longer than the algorithm ...

digest length were used incorrectly, leading to
			interoperability problems with other DNS
			implementations.  This has been corrected.
			(Note: If an oversize key is in use, and
			compatibility is needed with an older release of
			BIND, the new tool "isc-hmac-fixup" can convert
			the key secret to a form that will work with all
			versions.) [RT #20751]

2010-01-07 21:52:12 +00:00

4.9 KiB

Raw Blame History

View Raw