summaryrefslogtreecommitdiff
path: root/dns/tsig.py
diff options
context:
space:
mode:
authorBrian Wellington <bwelling@xbill.org>2020-05-11 12:40:35 -0700
committerBrian Wellington <bwelling@xbill.org>2020-05-11 12:40:35 -0700
commit5b2234c2f60a33624b16ff118295dd680e39d3b9 (patch)
treecda1a962c584964e9b6bea102fa38a75fed97a55 /dns/tsig.py
parent60f53c5905ca0337f09dc998932c5b95bfc8f2b1 (diff)
downloaddnspython-5b2234c2f60a33624b16ff118295dd680e39d3b9.tar.gz
Update the default TSIG algorithm to hmac-sha256.
In the upcoming update to RFC 2845, HMAC-MD5 will move to "MUST NOT" use, so it shouldn't be the default.
Diffstat (limited to 'dns/tsig.py')
-rw-r--r--dns/tsig.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/dns/tsig.py b/dns/tsig.py
index 2517162..dade52a 100644
--- a/dns/tsig.py
+++ b/dns/tsig.py
@@ -77,7 +77,7 @@ _hashes = {
HMAC_MD5: hashlib.md5,
}
-default_algorithm = HMAC_MD5
+default_algorithm = HMAC_SHA256
BADSIG = 16
BADKEY = 17