From: Kees Monshouwer <mind04@monshouwer.org>
Date: Tue, 22 Jul 2014 19:46:35 +0000 (+0200)
Subject: sign IXFR with te right TSIG key
X-Git-Tag: auth-3.4.0-rc1~29^2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=refs%2Fpull%2F1613%2Fhead;p=thirdparty%2Fpdns.git

sign IXFR with te right TSIG key
---

diff --git a/pdns/tcpreceiver.cc b/pdns/tcpreceiver.cc
index 5314d54ca6..d96f541101 100644
--- a/pdns/tcpreceiver.cc
+++ b/pdns/tcpreceiver.cc
@@ -1015,7 +1015,10 @@ int TCPNameserver::doIXFR(shared_ptr<DNSPacket> q, int outsock)
     q->getTSIGDetails(&trc, &tsigkeyname, 0);
 
     if(!tsigkeyname.empty()) {
-      string tsig64, algorithm;
+      string tsig64;
+      string algorithm=toLowerCanonic(trc.d_algoName);
+      if (algorithm == "hmac-md5.sig-alg.reg.int")
+        algorithm = "hmac-md5";
       Lock l(&s_plock);
       s_P->getBackend()->getTSIGKey(tsigkeyname, &algorithm, &tsig64);
       B64Decode(tsig64, tsigsecret);