From bb7fb11cb70608a73770c0ebd9e4d49b808d02c3 Mon Sep 17 00:00:00 2001
From: Kees Monshouwer <mind04@monshouwer.org>
Date: Tue, 22 Jul 2014 21:46:35 +0200
Subject: [PATCH] sign IXFR with te right TSIG key

---
 pdns/tcpreceiver.cc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/pdns/tcpreceiver.cc b/pdns/tcpreceiver.cc
index 5314d54ca..d96f54110 100644
--- a/pdns/tcpreceiver.cc
+++ b/pdns/tcpreceiver.cc
@@ -1015,7 +1015,10 @@ int TCPNameserver::doIXFR(shared_ptr<DNSPacket> q, int outsock)
     q->getTSIGDetails(&trc, &tsigkeyname, 0);
 
     if(!tsigkeyname.empty()) {
-      string tsig64, algorithm;
+      string tsig64;
+      string algorithm=toLowerCanonic(trc.d_algoName);
+      if (algorithm == "hmac-md5.sig-alg.reg.int")
+        algorithm = "hmac-md5";
       Lock l(&s_plock);
       s_P->getBackend()->getTSIGKey(tsigkeyname, &algorithm, &tsig64);
       B64Decode(tsig64, tsigsecret);
-- 
2.40.0