diff options
| author | Brian Wellington <bwelling@xbill.org> | 2023-05-06 07:15:32 -0700 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-05-06 07:15:32 -0700 |
| commit | bf8deda6da437ec5fdaaf5261b8674deb8e6d31c (patch) | |
| tree | 6f8e7f770179aeaa8abb8d2cb700b3f9e982536b /tests/example | |
| parent | b7211a26bdefa7d655a71392bd126f3745f8b862 (diff) | |
| download | dnspython-bf8deda6da437ec5fdaaf5261b8674deb8e6d31c.tar.gz | |
Fix NSEC3 base32 processing. (#929)
The NSEC3 next name field is defined as base32 with no padding, but the
code was doing base32 decoding with padding. This wouldn't have any
effect in the normal case, since the only defined NSEC3 hashing
algorithm is SHA1, and that generates a 160 bit hash that doesn't
require padding when encoded in base32.
This change removes generated padding after encode, rejects padded input
on decode, and adds necessary padding for decode.
Diffstat (limited to 'tests/example')
| -rw-r--r-- | tests/example | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/tests/example b/tests/example index f6a2a76..8aec494 100644 --- a/tests/example +++ b/tests/example @@ -180,6 +180,7 @@ nsec02 NSEC . ( NSAP-PTR NSEC ) nsec03 NSEC . ( NSEC TYPE65535 ) nsec301 NSEC3 1 1 12 aabbccdd 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG nsec302 NSEC3 1 1 12 - 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG +nsec303 NSEC3 1 1 1 abcd alkmaao A dnskey01 DNSKEY 512 255 1 AQMFD5raczCJHViKtLYhWGz8hMY9UGRuniJDBzC7w0aR yzWZriO6i2odGWWQVucZqKVsENW91IOW4vqudngPZsY3 GvQ/xVA8/7pyFj6b7Esga60zyGW6LFe9r8n6paHrlG5o jqf0BaqHT+8= dnskey02 DNSKEY 257 3 RSAMD5 ( AQMFD5raczCJHViKtLYhWGz8hMY9UGRuniJDBzC7w0aR yzWZriO6i2odGWWQVucZqKVsENW91IOW4vqudngPZsY3 GvQ/xVA8/7pyFj6b7Esga60zyGW6LFe9r8n6paHrlG5o jqf0BaqHT+8= ) sshfp1 SSHFP 1 1 aa549bfe898489c02d1715d97d79c57ba2fa76ab |