BIND 10 #813: TSIG: verifying messages

BIND 10 Development do-not-reply at isc.org
Tue May 3 06:28:01 UTC 2011


#813: TSIG: verifying messages
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:  jinmei
  stephen                            |                Status:  accepted
                       Type:         |             Milestone:
  enhancement                        |  Sprint-20110503
                   Priority:  major  |            Resolution:
                  Component:         |             Sensitive:  0
  Unclassified                       |           Sub-Project:  DNS
                   Keywords:         |  Estimated Difficulty:  7.0
            Defect Severity:  N/A    |           Total Hours:  0
Feature Depending on Ticket:  tsig   |
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------

Comment (by jinmei):

 Branch trac813 is ready for review.  It's based on a recent version
 of the trac871 branch, but is mostly independent from that branch
 functionality wise.  So this branch can be reviewed separately.

 Like the signing case, I chose separating this task to two subtasks:
 parsing incoming TSIG RR and verifying it.  This branch implements the
 first part.  I plan to create a separate ticket for the latter.

 Other notes:

 - the first commit (8320ec6) can be ignored.  It simply incorporates
 trac871.
 - commit e22700f (the changes under lib/util/unittests) is not
   directly related this task but I introduced it for additional tests
   for Message::toText().  Also, some part of it has duplicate
   functionality with lib/dns/unittest_util.  I plan to unify them and
   move generic utility to lib/util/unittests, which will be a separate
   task (and separate ticket)
 - the total diff is not small, but excluding the new files in
   unittests (they should be quite trivial) and test data, (I hope)
   it's essentially not that big.

-- 
Ticket URL: <http://bind10.isc.org/ticket/813#comment:4>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list