Master/Slave communication not working if I use HMAC-SHA* algorithms when views are implemented

Bob Harold rharolde at umich.edu
Fri Oct 14 16:00:00 UTC 2016


On Fri, Oct 14, 2016 at 1:30 AM, Nagesh Thati <nagesh.thati at tcpwave.com>
wrote:

> Hi,
>
> Can anybody implemented master/slave communication with views and
> algorithm HMAC-SHA* algorithms. I tried with all the HMAC-SHA* algorithms
> it didn't work for me, only HMAC-MD5 algorithm worked for communication. If
> anybody has any idea please help me.
> Thanks.
>
>
> --
> Thanks,
> Nagesh Thati
>
> That appears to depend on the version of BIND:

The BIND manual for 9.8 says that only HMAC-MD5 can be used for TSIG.

The BIND manual for 9.9 lists HMAC-MD5 and lots of HMAC-SHA* versions.

See "dnssec-keygen" in the appendix.

-- 
Bob Harold
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20161014/92f52dc8/attachment.html>


More information about the bind-users mailing list