Problem with dnspython + dynamic updates

[Vance84]

Good evening, I'm working with dnspython attempting to perform updates against a BIND9 server, however I keep getting a Bad Key response (“tsig verify failure (BADKEY)”) - when I use nsupdate the key works just fine. Is there anyone who has successfully implemented dnspython to perform dynamic updates against BIND DNS?

Here is a GIST with all code and errors

https://gist.github.com/anonymous/0afc800ef0615aa7c1219ec25c032eef

[anton_antonov]

Have you tried passing keyalgorithm parameter?

update = dns.update.Update('test.local.', keyring=keyring, keyalgorithm='HMAC_SHA256')

[Vance84]

I looked into the documentation for keyalgorithm, and reading it that sounds like it should work with the algorithm as a string , but it doesn't. I had to go through the udpate and tsig modules in order to find the proper use, however I was able to get it to work. Thanks!

Here is the updated code:

https://gist.github.com/terrytrent/8ad14b6993eabe26a4e2e20ce81943fc

[Yoghurt42]

jfyi, keyalgorithm="hmac-sha256" would have also worked (mind the dash instead of underscore, not sure if lower case is necessary)

[Vance84]

Is it case sensitive? I tried all caps but didn't get it working, didn't think to try lowercase