Files
certforge/src/dns
Roman KivalinandClaude Opus 4.6 0726e829a9 Add HMAC-SHA-384 TSIG support, document HMAC-SHA-512 truncation limitation
BIND 9.18+ truncates HMAC-SHA-512 MACs by default, and hickory-dns
does not support verifying truncated HMACs. Document the workaround
(use hmac-sha256) and add hmac-sha384 as an additional option.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-13 20:35:12 +02:00
..