upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-07-16 18:02:50 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Report when dnssec-policy has an unsupported algorithn

Browse source
This commit is contained in:
Mark Andrews 2022-08-25 13:35:27 +10:00
parent 805da5bf8f
commit 1246fd3b5f
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
lib/isccfg/kaspconf.c
View file

@ -183,6 +183,14 @@ cfg_kaspkey_fromconfig(const cfg_obj_t *config, dns_kasp_t *kasp,
goto cleanup;
}
if (!dst_algorithm_supported(key->algorithm)) {
cfg_obj_log(obj, logctx, ISC_LOG_ERROR,
"dnssec-policy: algorithm %s not supported",
alg.base);
result = DNS_R_BADALG;
goto cleanup;
}
obj = cfg_tuple_get(config, "length");
if (cfg_obj_isuint32(obj)) {
uint32_t min, size;