BIND 10 #920: extension to TSIG: support truncated signature
BIND 10 Development
do-not-reply at isc.org
Wed May 11 18:58:49 UTC 2011
#920: extension to TSIG: support truncated signature
-------------------------------------+-------------------------------------
Reporter: jinmei | Owner:
Type: enhancement | jinmei
Priority: major | Status: new
Component: DNSPacket | Milestone: New
API | Tasks
Sensitive: 0 | Keywords:
Sub-Project: DNS | Defect Severity: N/A
Estimated Difficulty: 0 | Feature Depending on Ticket:
Total Hours: 0 | Add Hours to Ticket: 0
| Internal?: 0
-------------------------------------+-------------------------------------
This is a remaining task (for relatively minor cases) of #893 as noted in
http://bind10.isc.org/ticket/893#comment:3
We need to support truncated signature in TSIGContext::verify() (and
perhaps also in sign() - BIND 9 does something about this in its verify
implementation. we need to check). We then need to revert the short term
hack (and temporarily disabled tests) made in libcryptolink in #893.
--
Ticket URL: <http://bind10.isc.org/ticket/920>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development
More information about the bind10-tickets
mailing list