From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 30 Dec 2013 22:05:12 +0000 (+0000)
Subject: Use different tsig alg
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=d6493a8ad3874ee2ad2a16ef854f45fc2872cbce;p=mirror%2Fdsa-puppet.git

Use different tsig alg
---

diff --git a/modules/named/templates/named.conf.puppet-shared-keys.erb b/modules/named/templates/named.conf.puppet-shared-keys.erb
index e9f7022bb..ab9c65d58 100644
--- a/modules/named/templates/named.conf.puppet-shared-keys.erb
+++ b/modules/named/templates/named.conf.puppet-shared-keys.erb
@@ -23,7 +23,7 @@ pairs.each do |pair|
 
 	key = scope.function_hkdf(['/etc/puppet/secret', "puppet-key-#{keyname}"])
 
-	lines << "key #{keyname} { algorithm hmac-md5; secret \"#{key}\"; };"
+	lines << "key #{keyname} { algorithm hmac-sha256; secret \"#{key}\"; };"
 
 	remote_ip = scope.lookupvar('site::allnodeinfo')[other]['ipHostNumber']
 	remote_ip.each do |r|