From 9479c15b01d63321a1d9e7bcd391146501c22a0e Mon Sep 17 00:00:00 2001 From: Daniel Salzman Date: Wed, 25 Nov 2020 13:05:29 +0100 Subject: [PATCH] TSIG: don't relativize algorithm name The domain name relativization of TSIG's algorithm name breaks TSIG validation when using with the Root zone. Example for algorithm hmac-sha224: zone 'example.com.' -> hmac-sha224. zone '.' -> hmac-sha224 --- dns/rdtypes/ANY/TSIG.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dns/rdtypes/ANY/TSIG.py b/dns/rdtypes/ANY/TSIG.py index 54621957..b43a78f1 100644 --- a/dns/rdtypes/ANY/TSIG.py +++ b/dns/rdtypes/ANY/TSIG.py @@ -110,7 +110,7 @@ class TSIG(dns.rdata.Rdata): @classmethod def from_wire_parser(cls, rdclass, rdtype, parser, origin=None): - algorithm = parser.get_name(origin) + algorithm = parser.get_name() time_signed = parser.get_uint48() fudge = parser.get_uint16() mac = parser.get_counted_bytes(2) -- 2.47.3