BIND 10 #920: extension to TSIG: support truncated signature

[BIND 10 Development]

#920: extension to TSIG: support truncated signature
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:  UnAssigned
  jinmei                             |                Status:  assigned
                       Type:         |             Milestone:  Next-Sprint-
  enhancement                        |  Proposed
                   Priority:  major  |            Resolution:
                  Component:         |             Sensitive:  0
  DNSPacket API                      |           Sub-Project:  DNS
                   Keywords:         |  Estimated Difficulty:  0.0
            Defect Severity:  N/A    |           Total Hours:  0
Feature Depending on Ticket:         |
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------
Description changed by jinmei:

Old description:

> This is a remaining task (for relatively minor cases) of #893 as noted in
> http://bind10.isc.org/ticket/893#comment:3
>
> We need to support truncated signature in TSIGContext::verify() (and
> perhaps also in sign() - BIND 9 does something about this in its verify
> implementation.  we need to check).  We then need to revert the short
> term
> hack (and temporarily disabled tests) made in libcryptolink in #893.

New description:

 This is a remaining task (for relatively minor cases) of #893 as noted in
 http://bind10.isc.org/ticket/893#comment:3

 We need to support truncated signature in TSIGContext::verify() (and
 perhaps also in sign() - BIND 9 does something about this in its verify
 implementation.  we need to check).  We then need to revert the short term
 hack (and temporarily disabled tests) made in libcryptolink in #893 and
 #954.

--

-- 
Ticket URL: <http://bind10.isc.org/ticket/920#comment:4>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development