diff --git a/lib/dns/sec/dst/openssl_link.c b/lib/dns/sec/dst/openssl_link.c
index 4017b33348..f3207c7ee6 100644
--- a/lib/dns/sec/dst/openssl_link.c
+++ b/lib/dns/sec/dst/openssl_link.c
@@ -19,7 +19,7 @@
 
 /*
  * Principal Author: Brian Wellington
- * $Id: openssl_link.c,v 1.33 2000/08/01 01:27:53 tale Exp $
+ * $Id: openssl_link.c,v 1.34 2000/08/08 16:13:39 bwelling Exp $
  */
 #if defined(OPENSSL)
 
@@ -307,6 +307,7 @@ openssldsa_fromdns(dst_key_t *key, isc_buffer_t *data) {
 	r.base += p_bytes;
 
 	isc_buffer_remainingregion(data, &r);
+	r.length = 1 + ISC_SHA1_DIGESTLENGTH + 3 * p_bytes;
 	key->key_id = dst_region_computeid(&r);
 	key->key_size = p_bytes * 8;
 
diff --git a/lib/dns/sec/dst/openssldh_link.c b/lib/dns/sec/dst/openssldh_link.c
index 3e5db76f27..7a27c8367b 100644
--- a/lib/dns/sec/dst/openssldh_link.c
+++ b/lib/dns/sec/dst/openssldh_link.c
@@ -19,7 +19,7 @@
 
 /*
  * Principal Author: Brian Wellington
- * $Id: openssldh_link.c,v 1.27 2000/08/01 01:27:54 tale Exp $
+ * $Id: openssldh_link.c,v 1.28 2000/08/08 16:13:40 bwelling Exp $
  */
 
 #if defined(OPENSSL)
@@ -369,6 +369,7 @@ openssldh_fromdns(dst_key_t *key, isc_buffer_t *data) {
 	r.base += publen;
 
 	isc_buffer_remainingregion(data, &r);
+	r.length = plen + glen + publen + 6;
 	key->key_id = dst_region_computeid(&r);
 	key->key_size = BN_num_bits(dh->p);