2 * This file is part of PowerDNS or dnsdist.
3 * Copyright -- PowerDNS.COM B.V. and its contributors
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of version 2 of the GNU General Public License as
7 * published by the Free Software Foundation.
9 * In addition, for the avoidance of any doubt, permission is granted to
10 * link this program with OpenSSL and to (re)distribute the binaries
11 * produced as the result of such linking.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
25 #include "dns_random.hh"
27 #include "pdnsexception.hh"
28 #include "tsigutils.hh"
32 * Returns a generated Base64'd TSIG key
34 * Will raise a PDNSException() if algorithm is invalid
36 std::string
makeTSIGKey(const DNSName
& algorithm
) {
37 TSIGHashEnum tsigHashEnum
;
38 if (!getTSIGHashEnum(algorithm
, tsigHashEnum
)) {
39 throw PDNSException("Invalid TSIG algorithm: " + algorithm
.toStringNoDot());
43 if (tsigHashEnum
== TSIG_MD5
44 || tsigHashEnum
== TSIG_SHA1
45 || tsigHashEnum
== TSIG_SHA224
) {
53 for (size_t i
= 0; i
< klen
; i
+= sizeof(uint32_t)) {
54 uint32_t t
= dns_random_uint32();
55 memcpy(&tmpkey
.at(i
), &t
, sizeof(uint32_t));
58 return Base64Encode(tmpkey
);