mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-01 06:55:30 +00:00
Code Issues Releases Wiki Activity

1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.

Browse Source
This commit is contained in:
Mark Andrews
2001-11-01 06:11:43 +00:00
parent ca6cee1837
commit ca033e166c
2 changed files with 8 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGES
View File

@@ -1,4 +1,6 @@
1096. [func] libbind: RES_PRF_TRUNC for dig. 1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
1097. [func] libbind: RES_PRF_TRUNC for dig.
1096. [func] libbind: "DNSSEC OK" (DO) support. 1096. [func] libbind: "DNSSEC OK" (DO) support.

7
lib/bind/dst/dst_api.c
View File

@@ -1,5 +1,5 @@
#ifndef LINT #ifndef LINT
static const char rcsid[] = "$Header: /u0/home/explorer/proj/ISC/git-conversion/cvsroot/bind9/lib/bind/dst/Attic/dst_api.c,v 1.4 2001/04/03 06:42:17 marka Exp $"; static const char rcsid[] = "$Header: /u0/home/explorer/proj/ISC/git-conversion/cvsroot/bind9/lib/bind/dst/Attic/dst_api.c,v 1.5 2001/11/01 06:11:43 marka Exp $";
#endif #endif
/* /*
@@ -587,6 +587,7 @@ dst_s_write_public_key(const DST_KEY *key)
u_char out_key[RAW_KEY_SIZE]; u_char out_key[RAW_KEY_SIZE];
char enc_key[RAW_KEY_SIZE]; char enc_key[RAW_KEY_SIZE];
int len = 0; int len = 0;
int mode;
memset(out_key, 0, sizeof(out_key)); memset(out_key, 0, sizeof(out_key));
if (key == NULL) { if (key == NULL) {
@@ -602,8 +603,10 @@ dst_s_write_public_key(const DST_KEY *key)
key->dk_key_name, key->dk_id, PUBLIC_KEY)); key->dk_key_name, key->dk_id, PUBLIC_KEY));
return (0); return (0);
} }
/* XXX in general this should be a check for symmetric keys */
mode = (key->dk_alg == KEY_HMAC_MD5) ? 0600 : 0644;
/* create public key file */ /* create public key file */
if ((fp = dst_s_fopen(filename, "w+", 0644)) == NULL) { if ((fp = dst_s_fopen(filename, "w+", mode)) == NULL) {
EREPORT(("DST_write_public_key: open of file:%s failed (errno=%d)\n", EREPORT(("DST_write_public_key: open of file:%s failed (errno=%d)\n",
filename, errno)); filename, errno));
return (0); return (0);