Switch default from DSA to RSASHA1.

diff --git a/bind8/CHANGELOG b/bind8/CHANGELOG
index 8e9b156..6b80c5b 100644 (file)
--- a/bind8/CHANGELOG
+++ b/bind8/CHANGELOG
@@ -116,3 +116,4 @@ When all DNS records in a zone are shown, the Type column can be clicked on to s
 Root zone records files are now included in Webmin backups.
 ---- Changes since 1.500 ----
 Added new NSEC3 algorithms for DNSSEC.
+Changed the default DNSSEC algorithm from DSA to the stronger RSASHA1.

diff --git a/bind8/bind8-lib.pl b/bind8/bind8-lib.pl
index 1b93d67..0277538 100755 (executable)
--- a/bind8/bind8-lib.pl
+++ b/bind8/bind8-lib.pl
@@ -2667,7 +2667,7 @@ return $alg eq 'RSAMD5' || $alg eq 'RSASHA1' ? ( 512, 2048 ) :
 
 sub list_dnssec_algorithms
 {
-return ("DSA", "RSAMD5", "RSASHA1", "DH", "HMAC-MD5",
+return ("RSASHA1", "RSAMD5", "DSA", "DH", "HMAC-MD5",
        "NSEC3RSASHA1", "NSEC3DSA");
 }
 

diff --git a/bind8/conf_zonedef.cgi b/bind8/conf_zonedef.cgi
index 5e77f59..eaef73b 100755 (executable)
--- a/bind8/conf_zonedef.cgi
+++ b/bind8/conf_zonedef.cgi
@@ -74,7 +74,7 @@ if (&supports_dnssec()) {
 
        # Default algorithm
        print &ui_table_row($text{'zonedef_alg'},
-               &ui_select("alg", $config{'tmpl_dnssecalg'} || "DSA",
+               &ui_select("alg", $config{'tmpl_dnssecalg'} || "RSASHA1",
                           [ &list_dnssec_algorithms() ]), 3);
 
        # Default size

diff --git a/bind8/edit_zonekey.cgi b/bind8/edit_zonekey.cgi
index 11707e5..83e66e8 100755 (executable)
--- a/bind8/edit_zonekey.cgi
+++ b/bind8/edit_zonekey.cgi
@@ -78,7 +78,7 @@ else {
 
        # Key algorithm
        print &ui_table_row($text{'zonekey_alg'},
-               &ui_select("alg", "DSA",
+               &ui_select("alg", "RSASHA1",
                           [ &list_dnssec_algorithms() ]));
 
        # Key size