]> git.ipfire.org Git - thirdparty/dnspython.git/commitdiff
TSIG: don't relativize algorithm name 609/head
authorDaniel Salzman <daniel.salzman@nic.cz>
Wed, 25 Nov 2020 12:05:29 +0000 (13:05 +0100)
committerDaniel Salzman <daniel.salzman@nic.cz>
Wed, 25 Nov 2020 12:05:34 +0000 (13:05 +0100)
The domain name relativization of TSIG's algorithm name breaks TSIG validation
when using with the Root zone.

Example for algorithm hmac-sha224:

zone 'example.com.' -> hmac-sha224.
zone '.'            -> hmac-sha224

dns/rdtypes/ANY/TSIG.py

index 546219578af49979b4ab7e28c9e3bf42fe93bbed..b43a78f1fc5c7cbcdfc0a56740e2efdd1eb2659b 100644 (file)
@@ -110,7 +110,7 @@ class TSIG(dns.rdata.Rdata):
 
     @classmethod
     def from_wire_parser(cls, rdclass, rdtype, parser, origin=None):
-        algorithm = parser.get_name(origin)
+        algorithm = parser.get_name()
         time_signed = parser.get_uint48()
         fudge = parser.get_uint16()
         mac = parser.get_counted_bytes(2)