From muks@isc.org  Fri Oct 27 02:31:43 2017
Delivered-To: bind9-public@bugs.isc.org
Received: from mx.pao1.isc.org (mx.pao1.isc.org [IPv6:2001:4f8:0:2::2b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx.pao1.isc.org", Issuer "COMODO RSA Organization Validation Secure Server CA" (not verified)) by bugs.isc.org (Postfix) with ESMTPS id C8DE0D78B0A for <bind9-public@bugs.isc.org>; Fri, 27 Oct 2017 02:31:43 +0000 (UTC)
Received: from mail.banu.com (mail.banu.com [46.4.129.225]) by mx.pao1.isc.org (Postfix) with ESMTP id 0CFB43B12A3 for <bind9-public@isc.org>; Fri, 27 Oct 2017 02:31:41 +0000 (UTC)
Received: from jurassic.lan.banu.com (unknown [115.117.168.221]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by mail.banu.com (Postfix) with ESMTPSA id 7E24F56A00EC; Fri, 27 Oct 2017 02:31:38 +0000 (GMT)
MIME-Version: 1.0
X-Original-To: bind9-public@bugs.isc.org
X-RT-Incoming-Encryption: Not encrypted
Message-ID: <20171027023133.GA24608@jurassic.lan.banu.com>
Date: Fri, 27 Oct 2017 08:01:33 +0530
User-Agent: Mutt/1.9.1 (2017-09-22)
References: <RT-Ticket-46411@isc.org> <rt-4.4.1-46398-1509042402-1930.46411-3-0@isc.org>
X-RT-Original-Encoding: utf-8
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on mx.pao1.isc.org
From: "Mukund Sivaraman" <muks@isc.org>
Content-Disposition: inline
In-Reply-To: <rt-4.4.1-46398-1509042402-1930.46411-3-0@isc.org>
X-RT-Interface: Email
Return-Path: <muks@isc.org>
X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=unavailable autolearn_force=no version=3.4.1
content-type: text/plain; charset="utf-8"
Subject: Re: [ISC-Bugs #46411] kill isc-hmac-fixup
To: "Evan Hunt via RT" <bind9-public@isc.org>
RT-Message-ID: <rt-4.4.1-46398-1509071507-1040.46411-0-0@isc.org>
Content-Length: 517

On Thu, Oct 26, 2017 at 06:26:42PM +0000, Evan Hunt via RT wrote:
> There was a bug in some old versions of BIND caused interoperability problems
> with other implementations when using SHA* TSIG keys. This was fixed in 9.7,
> and in addition to correcting the key generation, we also added the isc-hmac-fixup
> tool to convert older keys so they'd work properly.
> 
> That was eight years ago and the buggy releases are long past EOL. What
> say we remove isc-hmac-fixup now?

Yes please let's remove it.

		Mukund