[GH-ISSUE #147] sig0 signature invalid due to mismatching key tag #70

New issue

Closed

opened 2026-03-07 22:18:33 +03:00 by kerem · 0 comments

kerem commented

2026-03-07 22:18:33 +03:00

Owner

Originally created by @mwanner on GitHub (Jun 12, 2017).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/147

Using the client portion of trust-dns to implement an nsupdate like tool, I figured I cannot assemble a valid request due to mismatches in how the key's tag is generated. This leads to ISC's bind rejecting the updates, even though the signature itself is perfectly valid.

Originally created by @mwanner on GitHub (Jun 12, 2017). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/147 Using the client portion of trust-dns to implement an nsupdate like tool, I figured I cannot assemble a valid request due to mismatches in how the key's tag is generated. This leads to ISC's bind rejecting the updates, even though the signature itself is perfectly valid.