mirror of
https://github.com/coredns/coredns.git
synced 2026-10-08 19:45:21 -04:00
core/dnsserver: make TsigSecret public (#8434)
NewServer aggregates secrets from all assigned sites and the final value can only be reached by plugins via dnsserver.Server Signed-off-by: Ilya Kulakov <kulakov.ilya@gmail.com>
This commit is contained in:
@@ -196,9 +196,9 @@ func (s *ServergRPC) Query(ctx context.Context, in *pb.DnsPacket) (*pb.DnsPacket
|
||||
w := &gRPCresponse{localAddr: s.listenAddr, remoteAddr: a, Msg: msg}
|
||||
|
||||
if tsig := msg.IsTsig(); tsig != nil {
|
||||
if s.tsigSecret == nil {
|
||||
if s.TsigSecret == nil {
|
||||
w.tsigStatus = dns.ErrSecret
|
||||
} else if secret, ok := s.tsigSecret[tsig.Hdr.Name]; !ok {
|
||||
} else if secret, ok := s.TsigSecret[tsig.Hdr.Name]; !ok {
|
||||
w.tsigStatus = dns.ErrSecret
|
||||
} else {
|
||||
w.tsigStatus = dns.TsigVerify(in.GetMsg(), secret, "", false)
|
||||
|
||||
Reference in New Issue
Block a user