sha256 support enabled by default.

git-svn-id: file:///svn/unbound/trunk@1878 be551aaa-1e26-0410-a405-d3ace91eadb9

configure

@@ -1580,7 +1580,7 @@ Optional Features:
                           optimize for fast installation [default=yes]
   --disable-libtool-lock  avoid locking (might break parallel builds)
   --disable-rpath         disable hardcoded rpath (default=enabled)
-  --enable-sha2           Enable SHA256 and SHA512 RRSIG support, experimental
+  --disable-sha2          Disable SHA256 and SHA512 RRSIG support
   --enable-gost           Enable GOST support, experimental
   --enable-static-exe     enable to compile executables statically against
                           event, ldns libs, for debug purposes
@@ -17910,15 +17910,15 @@ if test "${enable_sha2+set}" = set; then
 fi
 
 case "$enable_sha2" in
-	yes)
+	no)
+	;;
+	yes|*)
 
 cat >>confdefs.h <<\_ACEOF
 #define USE_SHA2 1
 _ACEOF
 
 	;;
-	no|*)
-	;;
 esac
 
 # Check whether --enable-gost was given.

configure.ac

@@ -386,12 +386,12 @@ AC_INCLUDES_DEFAULT
 #include <openssl/evp.h>
 ])
 
-AC_ARG_ENABLE(sha2, AC_HELP_STRING([--enable-sha2], [Enable SHA256 and SHA512 RRSIG support, experimental]))
+AC_ARG_ENABLE(sha2, AC_HELP_STRING([--disable-sha2], [Disable SHA256 and SHA512 RRSIG support]))
 case "$enable_sha2" in
-	yes)
-	AC_DEFINE([USE_SHA2], [1], [Define this to enable SHA256 and SHA512 support.])
+	no)
 	;;
-	no|*)
+	yes|*)
+	AC_DEFINE([USE_SHA2], [1], [Define this to enable SHA256 and SHA512 support.])
 	;;
 esac
 

doc/Changelog

@@ -1,6 +1,7 @@
-29 October 2009: Wouter
+28 October 2009: Wouter
 	- removed abort on prealloc failure, error still printed but softfail.
 	- iana portlist updated.
+	- RFC 5702: RSASHA256 and RSASHA512 support enabled by default.
 
 27 October 2009: Wouter
 	- iana portlist updated.

doc/README

@@ -63,8 +63,8 @@ This software is under BSD license, see LICENSE for details.
 	Needs python-devel and swig development tools.
   * --with-pythonmodule
   	Compile the python module that processes responses in the server.
-  * --enable-sha2
-  	Enable draft support for RSASHA256 and RSASHA512 crypto.
+  * --disable-sha2
+  	Disable support for RSASHA256 and RSASHA512 crypto.
   * --enable-gost
   	Enable draft support for GOST crypto.