mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-01 06:55:30 +00:00
Diffie Hellman keys shouldn't even think about creating SIG records
This commit is contained in:
@@ -16,7 +16,7 @@
|
|||||||
*/
|
*/
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* $Id: dnssec.c,v 1.6 1999/09/23 20:56:59 bwelling Exp $
|
* $Id: dnssec.c,v 1.7 1999/09/30 02:50:54 bwelling Exp $
|
||||||
* Principal Author: Brian Wellington
|
* Principal Author: Brian Wellington
|
||||||
*/
|
*/
|
||||||
|
|
||||||
@@ -280,6 +280,11 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key,
|
|||||||
sig.timeexpire = *expire;
|
sig.timeexpire = *expire;
|
||||||
sig.keyid = dst_key_id(key);
|
sig.keyid = dst_key_id(key);
|
||||||
sig.siglen = dst_sig_size(key);
|
sig.siglen = dst_sig_size(key);
|
||||||
|
if (sig.siglen < 0) {
|
||||||
|
/* close enough for now */
|
||||||
|
return (DNS_R_KEYUNAUTHORIZED);
|
||||||
|
goto cleanup_signer;
|
||||||
|
}
|
||||||
sig.signature = isc_mem_get(mctx, sig.siglen);
|
sig.signature = isc_mem_get(mctx, sig.siglen);
|
||||||
if (sig.signature == NULL)
|
if (sig.signature == NULL)
|
||||||
goto cleanup_name;
|
goto cleanup_name;
|
||||||
|
Reference in New Issue
Block a user