From: Daniel Salzman Date: Wed, 25 Nov 2020 12:05:29 +0000 (+0100) Subject: TSIG: don't relativize algorithm name X-Git-Tag: v2.1.0~12^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F609%2Fhead;p=thirdparty%2Fdnspython.git TSIG: don't relativize algorithm name The domain name relativization of TSIG's algorithm name breaks TSIG validation when using with the Root zone. Example for algorithm hmac-sha224: zone 'example.com.' -> hmac-sha224. zone '.' -> hmac-sha224 --- diff --git a/dns/rdtypes/ANY/TSIG.py b/dns/rdtypes/ANY/TSIG.py index 54621957..b43a78f1 100644 --- a/dns/rdtypes/ANY/TSIG.py +++ b/dns/rdtypes/ANY/TSIG.py @@ -110,7 +110,7 @@ class TSIG(dns.rdata.Rdata): @classmethod def from_wire_parser(cls, rdclass, rdtype, parser, origin=None): - algorithm = parser.get_name(origin) + algorithm = parser.get_name() time_signed = parser.get_uint48() fudge = parser.get_uint16() mac = parser.get_counted_bytes(2)