From: Matthijs Mekking <matje@NLnetLabs.nl>
Date: Thu, 27 Oct 2011 11:30:05 +0000 (+0000)
Subject: only RSASHA1 is allowed
X-Git-Tag: release-1.6.12~53
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dc2e1a20d6c5618422bd23edcfa8c30d10e08569;p=thirdparty%2Fldns.git

only RSASHA1 is allowed
---

diff --git a/examples/ldns-signzone.c b/examples/ldns-signzone.c
index ed094df7..7f0813ca 100644
--- a/examples/ldns-signzone.c
+++ b/examples/ldns-signzone.c
@@ -393,6 +393,10 @@ main(int argc, char *argv[])
 		switch (c) {
 		case 'a':
 			nsec3_algorithm = (uint8_t) atoi(optarg);
+			if (nsec3_algorithm != 1) {
+				fprintf(stderr, "Bad NSEC3 algorithm, only RSASHA1 allowed\n");
+				exit(EXIT_FAILURE);
+			}
 			break;
 		case 'b':
 			fmt.flags |= LDNS_COMMENT_BUBBLEBABBLE;