From: Willem Toorop <willem@nlnetlabs.nl>
Date: Fri, 3 Oct 2014 13:55:06 +0000 (+0200)
Subject: ldns-keygen output .ds files only when SEP bit set
X-Git-Tag: release-1.7.0-rc1~140
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=81cdb69ac3b68ad8222507f78f15e65904622532;p=thirdparty%2Fldns.git

ldns-keygen output .ds files only when SEP bit set
---

diff --git a/examples/ldns-keygen.c b/examples/ldns-keygen.c
index 93a1ee73..b5f576ed 100644
--- a/examples/ldns-keygen.c
+++ b/examples/ldns-keygen.c
@@ -31,7 +31,7 @@ usage(FILE *fp, char *prog) {
 	fprintf(fp, "  The following files will be created:\n");
 	fprintf(fp, "    K<name>+<alg>+<id>.key\tPublic key in RR format\n");
 	fprintf(fp, "    K<name>+<alg>+<id>.private\tPrivate key in key format\n");
-	fprintf(fp, "    K<name>+<alg>+<id>.ds\tDS in RR format (only for DNSSEC keys)\n");
+	fprintf(fp, "    K<name>+<alg>+<id>.ds\tDS in RR format (only for DNSSEC KSK keys)\n");
 	fprintf(fp, "  The base name (K<name>+<alg>+<id> will be printed to stdout\n");
 }
 
@@ -274,7 +274,7 @@ main(int argc, char *argv[])
 	LDNS_FREE(filename);
 
 	/* print the DS to .ds */
-	if (algorithm != LDNS_SIGN_HMACMD5 &&
+	if (ksk && algorithm != LDNS_SIGN_HMACMD5 &&
 		algorithm != LDNS_SIGN_HMACSHA1 &&
 		algorithm != LDNS_SIGN_HMACSHA256) {
 		filename = LDNS_XMALLOC(char, strlen(owner) + 16);