From de660623edbc40d467b38015cb6629edd3f98f95 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Thu, 15 Dec 2022 16:27:38 +0100
Subject: [PATCH] dns/rfc2136: probable fix for #3187

This could be more elegant in some other format that is allowed but
someone else will have to open a reasonable PR about it.  I don't
trust the number change alone in the PR as bind said it would try
to "unbreak" it again breaking the plugin if we would...
---
 dns/rfc2136/Makefile                              | 3 +--
 dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc | 7 ++++---
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/dns/rfc2136/Makefile b/dns/rfc2136/Makefile
index 9a1a3618e..54f5bd4da 100644
--- a/dns/rfc2136/Makefile
+++ b/dns/rfc2136/Makefile
@@ -1,6 +1,5 @@
 PLUGIN_NAME=		rfc2136
-PLUGIN_VERSION=		1.6
-PLUGIN_REVISION=	3
+PLUGIN_VERSION=		1.7
 PLUGIN_COMMENT=		RFC-2136 Support
 PLUGIN_MAINTAINER=	franco@opnsense.org
 PLUGIN_DEPENDS=		bind-tools
diff --git a/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc b/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
index 8858cde0c..b399dfe76 100644
--- a/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
+++ b/dns/rfc2136/src/etc/inc/plugins.inc.d/rfc2136.inc
@@ -125,9 +125,10 @@ function rfc2136_configure_do($verbose = false, $int = '', $updatehost = '', $fo
            but nsupdate insists on having both */
         $fd = fopen("/var/etc/K{$i}{$keyname}+157+00000.private", "w");
         $privkey = <<<EOD
-Private-key-format: v1.2
-Algorithm: 157 (HMAC)
-Key: {$dnsupdate['keydata']}
+key "{$keyname}" {
+	algorithm hmac-md5;
+	secret "{$dnsupdate['keydata']}";
+};
 
 EOD;
         fwrite($fd, $privkey);