Re: Integrating BIND 8.2

[Mark Kettenis <kettenis@wins.uva.nl>]

Hi Zack & other interested people,

I've looked a bit closer at the res_* routines in BIND 8.2.  The only
algorithm that is needed by those functions is the HMAC_MD5
algorithm.  And even this algorithm is only needed for the
(experimental?) TSIG functionality.  Since HMAC_MD5 is a simple hash
algorithm I don't think it is export restricted, but I'm not sure.
If we can include it in glibc we should probably rewrite it to use the
md5 routines that are already present in glibc.  The public key
encryption algorithms are only needed by named.  From the various
documents (especially the TSIG draft) it is clear that the resolver in
libc should not do the crypto itself, but leave that to a (trusted)
named.

Anyway, integration of everything in the src/lib/resolv and
src/lib/nameser directories of the bind-8.2-src distribution, except
for res_sendsigned.c, ns_sign.c and ns_verify.c should be no problem
since there is absolutely no crypto code there.

Mark