]> git.ipfire.org Git - thirdparty/bind9.git/commit
Restore the ability to read legacy K*+157+* files
authorMark Andrews <marka@isc.org>
Mon, 19 Jun 2023 04:17:14 +0000 (14:17 +1000)
committerMark Andrews <marka@isc.org>
Wed, 28 Jun 2023 22:28:44 +0000 (08:28 +1000)
commit3f93d3f757ce3e5ea92c3e899e262aa2318b32fc
tree080a6d157a723dc0261e5313bd9b42f5be6d107c
parent4320c1f3450e549cf1609a8e713e00ae5fbaeedb
Restore the ability to read legacy K*+157+* files

The ability to read legacy HMAC-MD5 K* keyfile pairs using algorithm
number 157 was accidentally lost when the algorithm numbers were
consolidated into a single block, in commit
09f7e0607a34d90eae53f862954e98c31b5ae532.

The assumption was that these algorithm numbers were only known
internally, but they were also used in key files. But since HMAC-MD5
got renumbered from 157 to 160, legacy HMAC-MD5 key files no longer
work.

Move HMAC-MD5 back to 157 and GSSAPI back to 160.  Add exception for
GSSAPI to list_hmac_algorithms.
CHANGES
bin/named/main.c
bin/tests/system/dnssec/tests.sh
lib/dns/include/dst/dst.h