From af63e286dda7bf44af4010658042e0c1e6902ce1 Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Wed, 8 Jul 2015 12:20:46 +1000
Subject: [PATCH] set error code if aes selected and not implemented

---
 lib/bind9/check.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/lib/bind9/check.c b/lib/bind9/check.c
index e8cd028eb7..3f19f231f4 100644
--- a/lib/bind9/check.c
+++ b/lib/bind9/check.c
@@ -1178,13 +1178,15 @@ check_options(const cfg_obj_t *options, isc_log_t *logctx, isc_mem_t *mctx,
 	}
 
 	obj = NULL;
-	(void) cfg_map_get(options, "cookie-algorithm,", &obj);
+	(void) cfg_map_get(options, "cookie-algorithm", &obj);
 	if (obj != NULL)
 		ccalg = cfg_obj_asstring(obj);
 #if !defined(HAVE_OPENSSL_AES) && !defined(HAVE_OPENSSL_EVP_AES)
-	if (strcasecmp(ccalg, "aes") == 0)
+	if (strcasecmp(ccalg, "aes") == 0) {
 		cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
 			    "cookie-algorithm: '%s' not supported", ccalg);
+		result = ISC_R_NOTIMPLEMENTED;
+	}
 #endif
 
 	obj = NULL;