BIND 10 #893: TSIG verify, part 2

BIND 10 Development do-not-reply at isc.org
Tue May 3 07:23:12 UTC 2011


#893: TSIG verify, part 2
-------------------------------------+-------------------------------------
            Reporter:  jinmei        |                        Owner:
                Type:  enhancement   |  jinmei
            Priority:  major         |                       Status:  new
           Component:  DNSPacket     |                    Milestone:
  API                                |  Sprint-20110503
           Sensitive:  0             |                     Keywords:
         Sub-Project:  DNS           |              Defect Severity:  N/A
Estimated Difficulty:  0             |  Feature Depending on Ticket:
         Total Hours:  0             |          Add Hours to Ticket:  0
                                     |                    Internal?:  0
-------------------------------------+-------------------------------------
 This is a continuation of #813, and the final step of TSIG support
 in libdns++.

 The remaining task is:
 - add another constructor of TSIGContext, which would take an
   TSIGRecord and TSIGKeyRing, and internally identifies the
   appropriate key
 - implement TSIGContext::verify().  It would take TSIGRecord and the
   original wire data (pointer + len)

 I also think we should update TSIGKeyRing so that keys are identified
 by the key name + algorithm (currently only key name is used) to be
 compatible with BIND 9.

 I'd steal an estimate of 3 from #813 for this subtask.

-- 
Ticket URL: <http://bind10.isc.org/ticket/893>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list