diff options
| author | Lennart Poettering <lennart@poettering.net> | 2015-12-29 20:50:03 +0100 |
|---|---|---|
| committer | Lennart Poettering <lennart@poettering.net> | 2015-12-29 21:42:10 +0100 |
| commit | d15ad74251454d55b715958d8e6f50f45195904a (patch) | |
| tree | 9b46c0d7a41b9dd14f49ec9757e7007c8133bfa6 /src/resolve/resolved-dns-rr.h | |
| parent | 0a9a2ac3d3369b5add3b54823d088ba89baa27ab (diff) | |
resolved: NSEC3 hash algorithms are distinct from DS digest algorithms
Previously, we'd use the same set of identifiers for both, but that's
actually incorrect. It didn't matter much since the only NSEC3 hash
algorithm defined (SHA-1) is mapped to code 1 which is also what it is
encoded as in DS digests, but we really should make sure to use two
distinct enumerations.
Diffstat (limited to 'src/resolve/resolved-dns-rr.h')
| -rw-r--r-- | src/resolve/resolved-dns-rr.h | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/src/resolve/resolved-dns-rr.h b/src/resolve/resolved-dns-rr.h index cee3978969..27c5f5384e 100644 --- a/src/resolve/resolved-dns-rr.h +++ b/src/resolve/resolved-dns-rr.h @@ -72,6 +72,13 @@ enum { _DNSSEC_DIGEST_MAX_DEFINED }; +/* DNSSEC NSEC3 hash algorithms, see + * https://www.iana.org/assignments/dnssec-nsec3-parameters/dnssec-nsec3-parameters.xhtml */ +enum { + NSEC3_ALGORITHM_SHA1 = 1, + _NSEC3_ALGORITHM_MAX_DEFINED +}; + struct DnsResourceKey { unsigned n_ref; uint16_t class, type; |