BIND 10 #893: TSIG verify, part 2
BIND 10 Development
do-not-reply at isc.org
Tue May 3 07:23:12 UTC 2011
#893: TSIG verify, part 2
-------------------------------------+-------------------------------------
Reporter: jinmei | Owner:
Type: enhancement | jinmei
Priority: major | Status: new
Component: DNSPacket | Milestone:
API | Sprint-20110503
Sensitive: 0 | Keywords:
Sub-Project: DNS | Defect Severity: N/A
Estimated Difficulty: 0 | Feature Depending on Ticket:
Total Hours: 0 | Add Hours to Ticket: 0
| Internal?: 0
-------------------------------------+-------------------------------------
This is a continuation of #813, and the final step of TSIG support
in libdns++.
The remaining task is:
- add another constructor of TSIGContext, which would take an
TSIGRecord and TSIGKeyRing, and internally identifies the
appropriate key
- implement TSIGContext::verify(). It would take TSIGRecord and the
original wire data (pointer + len)
I also think we should update TSIGKeyRing so that keys are identified
by the key name + algorithm (currently only key name is used) to be
compatible with BIND 9.
I'd steal an estimate of 3 from #813 for this subtask.
--
Ticket URL: <http://bind10.isc.org/ticket/893>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list