From 89d392d274d3ec65967bbdf4d792cc7bc4457dd6 Mon Sep 17 00:00:00 2001
From: saurori <aurori@gmail.com>
Date: Wed, 29 Mar 2017 15:52:38 -0400
Subject: [PATCH] Fix large RSA exponent check (#481)

---
 dnssec.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dnssec.go b/dnssec.go
index 07262011..3bd55388 100644
--- a/dnssec.go
+++ b/dnssec.go
@@ -515,7 +515,7 @@ func (k *DNSKEY) publicKeyRSA() *rsa.PublicKey {
 	}
 	// Remainder
 	expo += uint64(keybuf[keyoff])
-	if expo > 2<<31 {
+	if expo > (2<<31)+1 {
 		// Larger expo than supported.
 		// println("dns: F5 primes (or larger) are not supported")
 		return nil