From af719fc9d51e337bcf3984edfb63dc66fcedf4d9 Mon Sep 17 00:00:00 2001
From: Evan Hunt <each@isc.org>
Date: Fri, 28 Feb 2014 21:10:37 -0800
Subject: [PATCH] [v9_9] add sha-384 to dnssec-checkds

3768.	[bug]		"dnssec-checkds" was missing the SHA-384 digest
			algorithm. [RT #34000]

(cherry picked from commit 72aa3b2a4e33a1b9b3521fddce383002b7201ab7)
---
 CHANGES                         | 3 +++
 bin/python/dnssec-checkds.py.in | 4 ++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/CHANGES b/CHANGES
index dae75172e4..dda61d0b7c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3768.	[bug]		"dnssec-checkds" was missing the SHA-384 digest
+			algorithm. [RT #34000]
+
 3767.	[func]		Log explicitly when using rndc.key to configure
 			command channel. [RT #35316]
 
diff --git a/bin/python/dnssec-checkds.py.in b/bin/python/dnssec-checkds.py.in
index b6dbdb1950..3a66ee24b4 100644
--- a/bin/python/dnssec-checkds.py.in
+++ b/bin/python/dnssec-checkds.py.in
@@ -57,7 +57,7 @@ def shellquote(s):
 # Delegation Signer (DS) resource record
 ############################################################################
 class DSRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     rrname=''
     rrclass='IN'
     rrtype='DS'
@@ -107,7 +107,7 @@ class DSRR:
 # DNSSEC Lookaside Validation (DLV) resource record
 ############################################################################
 class DLVRR:
-    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST'}
+    hashalgs = {1: 'SHA-1', 2: 'SHA-256', 3: 'GOST', 4: 'SHA-384' }
     parent=''
     dlvname=''
     rrname='IN'