]> git.ipfire.org Git - thirdparty/bind9.git/commit
Restore the ability to read legacy K*+157+* files
authorMark Andrews <marka@isc.org>
Mon, 19 Jun 2023 04:17:14 +0000 (14:17 +1000)
committerMark Andrews <marka@isc.org>
Thu, 29 Jun 2023 00:32:10 +0000 (10:32 +1000)
commit2376abc18ee04a8d2e98acb901ba9418be5a6fd8
treefe6bb257b56f445ab248270723ffb2f2ebe7a50a
parent068d14a9631b72493767b4c4c05a5d167c9f3483
Restore the ability to read legacy K*+157+* files

The ability to read legacy HMAC-MD5 K* keyfile pairs using algorithm
number 157 was accidentally lost when the algorithm numbers were
consolidated into a single block, in commit
09f7e0607a34d90eae53f862954e98c31b5ae532.

The assumption was that these algorithm numbers were only known
internally, but they were also used in key files. But since HMAC-MD5
got renumbered from 157 to 160, legacy HMAC-MD5 key files no longer
work.

Move HMAC-MD5 back to 157 and GSSAPI back to 160.  Add exception for
GSSAPI to list_hmac_algorithms.

(cherry picked from commit 3f93d3f757ce3e5ea92c3e899e262aa2318b32fc)
CHANGES
bin/named/main.c
bin/tests/system/dnssec/tests.sh
lib/dns/include/dst/dst.h