only RSASHA1 is allowed

diff --git a/examples/ldns-signzone.c b/examples/ldns-signzone.c
index ed094df7ebff7753e6afd7f276840aa1a4379f19..7f0813ca2bd9261c1fdc7bea4938f3fc05febaa1 100644 (file)
--- a/examples/ldns-signzone.c
+++ b/examples/ldns-signzone.c
@@ -393,6 +393,10 @@ main(int argc, char *argv[])
                switch (c) {
                case 'a':
                        nsec3_algorithm = (uint8_t) atoi(optarg);
+                       if (nsec3_algorithm != 1) {
+                               fprintf(stderr, "Bad NSEC3 algorithm, only RSASHA1 allowed\n");
+                               exit(EXIT_FAILURE);
+                       }
                        break;
                case 'b':
                        fmt.flags |= LDNS_COMMENT_BUBBLEBABBLE;