4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and

                        'ECDSAP384SHA384' don't have settable keysize.
                        [RT #42718]

diff --git a/CHANGES b/CHANGES
index 1ee00ecf24f35ae72773d428fa9217ff3b21b6f9..f73ecbf4e64883956dcc2294589cca7df4bceab1 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+4399.  [bug]           policy.py 'ECCGOST', 'ECDSAP256SHA256', and
+                       'ECDSAP384SHA384' don't have settable keysize.
+                       [RT #42718]
+
 4398.  [bug]           Correct spelling of ECDSAP256SHA256 in policy.py.
                        [RT #42718]
 

diff --git a/bin/python/isc/policy.py.in b/bin/python/isc/policy.py.in
index 6e739e82e648f230500474f948bc6fb09ff37189..99e820a75e858a919fbd32f561c03e5fcbfefc3e 100644 (file)
--- a/bin/python/isc/policy.py.in
+++ b/bin/python/isc/policy.py.in
@@ -281,6 +281,12 @@ class Policy:
                         ('ZSK key size %d not divisible by 64 ' +
                          'as required for DSA') % self.zsk_keysize
 
+            if self.algorithm in ['ECCGOST', \
+                                  'ECDSAP256SHA256', \
+                                  'ECDSAP384SHA384']:
+                self.ksk_keysize = None
+                self.zsk_keysize = None
+
         return True, ''
 
 ############################################################################
@@ -371,10 +377,14 @@ class dnssec_policy:
         self.alg_policy['ECDSAP256SHA256'] = copy(p)
         self.alg_policy['ECDSAP256SHA256'].algorithm = "ECDSAP256SHA256"
         self.alg_policy['ECDSAP256SHA256'].name = "ECDSAP256SHA256"
+        self.alg_policy['ECDSAP256SHA256'].ksk_keysize = None;
+        self.alg_policy['ECDSAP256SHA256'].zsk_keysize = None;
 
         self.alg_policy['ECDSAP384SHA384'] = copy(p)
         self.alg_policy['ECDSAP384SHA384'].algorithm = "ECDSAP384SHA384"
         self.alg_policy['ECDSAP384SHA384'].name = "ECDSAP384SHA384"
+        self.alg_policy['ECDSAP384SHA384'].ksk_keysize = None;
+        self.alg_policy['ECDSAP384SHA384'].zsk_keysize = None;
 
         if filename:
             self.load(filename)