From db9c237fc100cb516e2538d7e8a67251534b6bbb Mon Sep 17 00:00:00 2001
From: Aki Tuomi <cmouse@cmouse.fi>
Date: Fri, 4 Oct 2024 21:23:35 +0300
Subject: [PATCH] modules/geoipbackend: Change NSEC3PARAM to RFC9276
 recommendation

---
 modules/geoipbackend/geoipbackend.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/geoipbackend/geoipbackend.cc b/modules/geoipbackend/geoipbackend.cc
index c6441bbd77..83e3aee798 100644
--- a/modules/geoipbackend/geoipbackend.cc
+++ b/modules/geoipbackend/geoipbackend.cc
@@ -939,7 +939,7 @@ bool GeoIPBackend::getAllDomainMetadata(const DNSName& name, std::map<std::strin
     if (dom.domain == name) {
       if (hasDNSSECkey(dom.domain)) {
         meta[string("NSEC3NARROW")].push_back("1");
-        meta[string("NSEC3PARAM")].push_back("1 0 1 f95a");
+        meta[string("NSEC3PARAM")].push_back("1 0 0 -");
       }
       return true;
     }
-- 
2.47.2