BIND 10 #920: extension to TSIG: support truncated signature

BIND 10 Development do-not-reply at isc.org
Wed May 11 18:58:49 UTC 2011


#920: extension to TSIG: support truncated signature
-------------------------------------+-------------------------------------
            Reporter:  jinmei        |                        Owner:
                Type:  enhancement   |  jinmei
            Priority:  major         |                       Status:  new
           Component:  DNSPacket     |                    Milestone:  New
  API                                |  Tasks
           Sensitive:  0             |                     Keywords:
         Sub-Project:  DNS           |              Defect Severity:  N/A
Estimated Difficulty:  0             |  Feature Depending on Ticket:
         Total Hours:  0             |          Add Hours to Ticket:  0
                                     |                    Internal?:  0
-------------------------------------+-------------------------------------
 This is a remaining task (for relatively minor cases) of #893 as noted in
 http://bind10.isc.org/ticket/893#comment:3

 We need to support truncated signature in TSIGContext::verify() (and
 perhaps also in sign() - BIND 9 does something about this in its verify
 implementation.  we need to check).  We then need to revert the short term
 hack (and temporarily disabled tests) made in libcryptolink in #893.

-- 
Ticket URL: <http://bind10.isc.org/ticket/920>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list