BIND 10 #1587: auth::Query NSEC3 support: cleanup

BIND 10 Development do-not-reply at isc.org
Wed Feb 22 04:32:53 UTC 2012


#1587: auth::Query NSEC3 support: cleanup
-------------------------------------+-------------------------------------
                   Reporter:         |                 Owner:  jinmei
  jinmei                             |                Status:  accepted
                       Type:  task   |             Milestone:
                   Priority:         |  Sprint-20120306
  critical                           |            Resolution:
                  Component:         |             Sensitive:  0
  b10-auth                           |           Sub-Project:  DNS
                   Keywords:         |  Estimated Difficulty:  5
            Defect Severity:  N/A    |           Total Hours:  0
Feature Depending on Ticket:  NSEC3  |
        Add Hours to Ticket:  0      |
                  Internal?:  0      |
-------------------------------------+-------------------------------------

Comment (by jinmei):

 trac1587 is ready for review.

 I summarized how the NSEC3 cases call findNSEC3() and use the results
 in a table, and decided to categorize the cases into two cases,
 corresponding to recursive/non recursive mode of findNSEC3().  I
 introduced separate private methods for these 2 cases and implemented
 consistent validation policy there.

 Of course, this is not the only reasonable way to unify the cases.
 For example, we could probably even consolidate all cases into a
 single super clever method.  But in my subjective impression based on
 the summary table that would be rather complicated.  I hope my result
 is at least reasonably understandable.

 I'm not answering each point noted in the ticket, but I believe I
 covered all major concerns in this branch.

 I've also performed coverage check.  It was actually quite good, and
 at least I didn't find any uncovered code related to NSEC3 changes.
 The coverage report is available here:
 http://bind10.isc.org/~jinmei/cov-1587/cov/bin/auth/query.cc.gcov.html

 Since we are adding a new user-visible feature, I think we should
 provide a summarized changelog entry.  This is the proposal:
 {{{
 384.?   [func]          haikuo, jelte, jinmei, kevin, vorner
         b10-auth now supports NSEC3-signed zones in the in-memory data
         source.
         (Trac #1580-#1585, #1587, and other related changes to the
         in-memory data source)
 }}}

-- 
Ticket URL: <http://bind10.isc.org/ticket/1587#comment:9>
BIND 10 Development <http://bind10.isc.org>
BIND 10 Development


More information about the bind10-tickets mailing list