pullup:

 786.   [bug]           When DNSSEC signing/verifying data, owner names were
                        not properly downcased.

diff --git a/CHANGES b/CHANGES
index 18ea7e078f98b46c640add3c7c6f5ee07365dfbf..f0130e61e1700548620e9ab0a8efb46e0e5e1e31 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,6 +2,9 @@
  787.  [bug]           The DNSSEC tools failed to downcase domain
                        names when mapping them into file names.
 
+ 786.  [bug]           When DNSSEC signing/verifying data, owner names were
+                       not properly downcased.
+
        --- 9.1.1rc6 released ---
 
  785.  [bug]           A race condition in the resolver could cause

diff --git a/lib/dns/dnssec.c b/lib/dns/dnssec.c
index f3e2b3d8efc829d6add9fd5d7a71db5c89bc871b..a994262fd3d17a305f78ce6479b90d596b28f6ba 100644 (file)
--- a/lib/dns/dnssec.c
+++ b/lib/dns/dnssec.c
@@ -16,7 +16,7 @@
  */
 
 /*
- * $Id: dnssec.c,v 1.56.2.2 2001/01/16 22:38:42 gson Exp $
+ * $Id: dnssec.c,v 1.56.2.3 2001/03/26 19:12:48 gson Exp $
  */
 
 
@@ -155,6 +155,7 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key,
        unsigned char data[300];
        isc_uint32_t flags;
        unsigned int sigsize;
+       dns_fixedname_t fnewname;
 
        REQUIRE(name != NULL);
        REQUIRE(dns_name_depth(name) <= 255);
@@ -223,7 +224,9 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key,
        if (ret != ISC_R_SUCCESS)
                goto cleanup_context;
 
-       dns_name_toregion(name, &r);
+       dns_fixedname_init(&fnewname);
+       dns_name_downcase(name, dns_fixedname_name(&fnewname), NULL);
+       dns_name_toregion(dns_fixedname_name(&fnewname), &r);
 
        /*
         * Create an envelope for each rdata: <name|type|class|ttl>.
@@ -363,15 +366,19 @@ dns_dnssec_verify(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key,
        /*
         * If the name is an expanded wildcard, use the wildcard name.
         */
+       dns_fixedname_init(&fnewname);
        labels = dns_name_depth(name) - 1;
        if (labels - sig.labels > 0) {
-               dns_fixedname_init(&fnewname);
                dns_name_splitatdepth(name, sig.labels + 1, NULL,
                                      dns_fixedname_name(&fnewname));
-               dns_name_toregion(dns_fixedname_name(&fnewname), &r);
+               dns_name_downcase(dns_fixedname_name(&fnewname),
+                                 dns_fixedname_name(&fnewname),
+                                 NULL);
        }
        else
-               dns_name_toregion(name, &r);
+               dns_name_downcase(name, dns_fixedname_name(&fnewname), NULL);
+
+       dns_name_toregion(dns_fixedname_name(&fnewname), &r);
 
        /*
         * Create an envelope for each rdata: <name|type|class|ttl>.