[master] add sha-384 to dnssec-checkds

3768.	[bug]		"dnssec-checkds" was missing the SHA-384 digest
			algorithm. [RT #34000]

diff --git a/CHANGES b/CHANGES
index 1208bffc6bb7798d8378150a1cf2931a5444a1af..0249275da8e91a505e222a5607fc73efd0c2a8d3 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3768.  [bug]           "dnssec-checkds" was missing the SHA-384 digest
+                       algorithm. [RT #34000]
+
 3767.  [func]          Log explicitly when using rndc.key to configure
                        command channel. [RT #35316]
 

diff --git a/bin/python/dnssec-checkds.py.in b/bin/python/dnssec-checkds.py.in
index b6dbdb195023d6b5fac0027aef63a86aa257c15b..3a66ee24b4a6c09a1c758044ef5d8b107a77755a 100644 (file)
--- a/bin/python/dnssec-checkds.py.in
+++ b/bin/python/dnssec-checkds.py.in
@@ -57,7 +57,7 @@ def shellquote(s):
 # Delegation Signer (DS) resource record
 ############################################################################
 class DSRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     rrname=''
     rrclass='IN'
     rrtype='DS'
@@ -107,7 +107,7 @@ class DSRR:
 # DNSSEC Lookaside Validation (DLV) resource record
 ############################################################################
 class DLVRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     parent=''
     dlvname=''
     rrname='IN'