[jira] [Comment Edited] (TC-125) Case sensitivity in DNSSEC keys

["Jeff Elsloo (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/TC-125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848777#comment-15848777 ] 

Jeff Elsloo edited comment on TC-125 at 2/1/17 6:52 PM:
--------------------------------------------------------

I decided not to change anything related to the XML ID due to the fact that we use a different means to generate the FQDNs used with the DNSSEC API in Traffic Ops. I did fix the case sensitivity issues in both Traffic Ops and Traffic Router, both of which are in the following PR: https://github.com/apache/incubator-trafficcontrol/pull/243


was (Author: elsloo):
I decided not to change anything related to the XML ID due to the fact that we use a different means to generate the FQDNs used with the DNSSEC API in Traffic Ops. I did fix the case sensitivity issues in both Traffic Ops and Traffic Router, both of which are in the following PR: https://github.com/apache/incubator-trafficcontrol/pull/243

This will most likely make it into the next release after 1.8.

> Case sensitivity in DNSSEC keys
> -------------------------------
>
>                 Key: TC-125
>                 URL: https://issues.apache.org/jira/browse/TC-125
>             Project: Traffic Control
>          Issue Type: Bug
>          Components: Traffic Router
>    Affects Versions: 1.8.0
>            Reporter: Jeff Elsloo
>
> When an XML ID on a Delivery Service is mixed case, Traffic Router is unable to find the corresponding DNSSEC key. This causes Traffic Router to be unable to sign an RRset, thus breaking certain parts of the DNS tree on a given CDN.
> Solution:
> 1) Lowercase all FQDNs in the "name" field of the DNSSEC keys when generating and saving in Riak.
> 2) Lowercase all XML IDs in Traffic Ops when Delivery Services are created and/or modified in Traffic Ops.
> 3) Lowercase the names in the keys fetched from Traffic Ops in Traffic Router, regardless of case, such that even if a mixed case name pops into the keys, we have protection on the Traffic Router side.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)