Re: lib/49138: "libdns" cannot use "hmac-sha512" keys

[Matthias Scheler <tron%zhadum.org.uk@localhost>]

The following reply was made to PR bin/49138; it has been noted by GNATS.

From: Matthias Scheler <tron%zhadum.org.uk@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: lib/49138: "libdns" cannot use "hmac-sha512" keys
Date: Fri, 22 Aug 2014 00:32:47 +0100

 On Thu, Aug 21, 2014 at 09:35:00PM +0000, gnats-admin%netbsd.org@localhost 
wrote:
 > Thank you very much for your problem report.
 > It has the internal identification `lib/49138'.
 > The individual assigned to look at your
 > report is: lib-bug-people. 
 > 
 > >Category:       lib
 > >Responsible:    lib-bug-people
 > >Synopsis:       "libdns" cannot use "hmac-sha512" keys
 > >Arrival-Date:   Thu Aug 21 21:35:00 +0000 2014
 
 It turns out that dhcpd(8) didn't work with "hmac-sha256" keys in
 NetBSD 6.1_STABLE as well:
 
 Aug 21 14:08:23 colwyn dhcpd: Unable to add forward map from 
MacBook.zhadum.intern to 192.168.25.186: bad DNS key
 
 As far as I can tell it only supports "HMAC-MD5.SIG-ALG.REG.INT" keys
 which is of course not very satisfactory. However Google suggests that
 this problem also affects various Linux distributions (e.g. Arch Linux
 or Ubuntu). So it seems to be a problem with ISCP DHCP Daemon itself.
 
 However the "nsupdate" behaviour is still a regression. It definitely
 worked with the "hmac-256" key under NetBSD 6.1_STABLE.
 
        Kind regards
 
 -- 
 Matthias Scheler                                 https://zhadum.org.uk/