From 72aa3b2a4e33a1b9b3521fddce383002b7201ab7 Mon Sep 17 00:00:00 2001
From: Evan Hunt <each@isc.org>
Date: Fri, 28 Feb 2014 21:09:24 -0800
Subject: [PATCH] [master] add sha-384 to dnssec-checkds

3768.	[bug]		"dnssec-checkds" was missing the SHA-384 digest
			algorithm. [RT #34000]
---
 CHANGES                         | 3 +++
 bin/python/dnssec-checkds.py.in | 4 ++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGES b/CHANGES
index 1208bffc6b..0249275da8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3768.	[bug]		"dnssec-checkds" was missing the SHA-384 digest
+			algorithm. [RT #34000]
+
 3767.	[func]		Log explicitly when using rndc.key to configure
 			command channel. [RT #35316]
 
diff --git a/bin/python/dnssec-checkds.py.in b/bin/python/dnssec-checkds.py.in
index b6dbdb1950..3a66ee24b4 100644
--- a/bin/python/dnssec-checkds.py.in
+++ b/bin/python/dnssec-checkds.py.in
@@ -57,7 +57,7 @@ def shellquote(s):
 # Delegation Signer (DS) resource record
 ############################################################################
 class DSRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     rrname=''
     rrclass='IN'
     rrtype='DS'
@@ -107,7 +107,7 @@ class DSRR:
 # DNSSEC Lookaside Validation (DLV) resource record
 ############################################################################
 class DLVRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     parent=''
     dlvname=''
     rrname='IN'