2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 06:25:31 +00:00

3387. [func] Support for a DS digest can be disabled at

runtime with disable-ds-digests. [RT #21581]
This commit is contained in:
Mark Andrews
2012-10-03 12:38:43 +10:00
parent 84c2220360
commit 058e44186b
22 changed files with 412 additions and 63 deletions

View File

@@ -277,6 +277,20 @@ dst_algorithm_supported(unsigned int alg) {
return (ISC_TRUE);
}
isc_boolean_t
dst_ds_digest_supported(unsigned int digest_type) {
#ifdef HAVE_OPENSSL_GOST
return (ISC_TF(digest_type == DNS_DSDIGEST_SHA1 ||
digest_type == DNS_DSDIGEST_SHA256 ||
digest_type == DNS_DSDIGEST_GOST ||
digest_type == DNS_DSDIGEST_SHA384));
#else
return (ISC_TF(digest_type == DNS_DSDIGEST_SHA1 ||
digest_type == DNS_DSDIGEST_SHA256 ||
digest_type == DNS_DSDIGEST_SHA384));
#endif
}
isc_result_t
dst_context_create(dst_key_t *key, isc_mem_t *mctx, dst_context_t **dctxp) {
dst_context_t *dctx;