From 3a76d759b0e4d2e0cbfac6c738955cfa4252af8c Mon Sep 17 00:00:00 2001
From: Perry Harrington <35117150+drwonky@users.noreply.github.com>
Date: Tue, 16 Feb 2021 19:47:23 -0800
Subject: [PATCH] Added hmac-sha256 to DNS update key algorithms

SHA1 and MD5 are not considered good choices for hash algorithms at this time, added SHA256 to the list of DNS update key algorithms.
---
 html/cgi-bin/dhcp.cgi | 1 +
 1 file changed, 1 insertion(+)

diff --git a/html/cgi-bin/dhcp.cgi b/html/cgi-bin/dhcp.cgi
index 867614f2a7..9d702c45db 100644
--- a/html/cgi-bin/dhcp.cgi
+++ b/html/cgi-bin/dhcp.cgi
@@ -673,6 +673,7 @@ print <<END
 			<select name='DNS_UPDATE_KEY_ALGO_${itf}'>
 				<!-- <option value='hmac-sha1' $selected{'DNS_UPDATE_KEY_ALGO_${itf}'}{'hmac-sha1'}>HMAC-SHA1</option> -->
 				<option value='hmac-md5' $selected{'DNS_UPDATE_KEY_ALGO_${itf}'}{'hmac-md5'}>HMAC-MD5</option>
+				<option value='hmac-sha256' $selected{'DNS_UPDATE_KEY_ALGO_${itf}'}{'hmac-sha256'}>HMAC-SHA256</option>
 			</select>
 		</td>
 	</tr>