mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Code Issues Releases Wiki Activity

Remove all cookie algorithms but AES, which was used as a default, for legacy purposes.

Browse Source
This commit is contained in:
Witold Kręcicki
2019-03-24 09:59:19 +01:00
committed by Ondřej Surý
parent 4e33942742
commit afa81ee4e4
13 changed files with 23 additions and 231 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
lib/bind9/check.c
View File

@@ -1355,22 +1355,6 @@ check_options(const cfg_obj_t *options, isc_log_t *logctx, isc_mem_t *mctx,
if (result == ISC_R_SUCCESS)
result = ISC_R_RANGE;
}
if (strcasecmp(ccalg, "sha1") == 0 &&
usedlength != ISC_SHA1_DIGESTLENGTH) {
cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
"SHA1 cookie-secret must be "
"160 bits");
if (result == ISC_R_SUCCESS)
result = ISC_R_RANGE;
}
if (strcasecmp(ccalg, "sha256") == 0 &&
usedlength != ISC_SHA256_DIGESTLENGTH) {
cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
"SHA256 cookie-secret must be "
"256 bits");
if (result == ISC_R_SUCCESS)
result = ISC_R_RANGE;
}
}
}