You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficcontrol.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2017/02/01 18:51:51 UTC

[jira] [Commented] (TC-125) Case sensitivity in DNSSEC keys

    [ https://issues.apache.org/jira/browse/TC-125?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15848775#comment-15848775 ] 

ASF GitHub Bot commented on TC-125:
-----------------------------------

GitHub user elsloo opened a pull request:

    https://github.com/apache/incubator-trafficcontrol/pull/243

    [TC-125] Lowercase FQDNs generated by Traffic Ops for use as DNSSEC k…

    …ey names, and lowercase the corresponding usage on the Traffic Router side.

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/elsloo/incubator-trafficcontrol 2.0.x_tr_dnssec_key_name_case_sensitivity

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/incubator-trafficcontrol/pull/243.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #243
    
----
commit 4709fc4e971ce7287f4f3d1a950eab7b6c64fc2b
Author: Jeff Elsloo <je...@cable.comcast.com>
Date:   2017-02-01T18:49:37Z

    [TC-125] Lowercase FQDNs generated by Traffic Ops for use as DNSSEC key names, and lowercase the corresponding usage on the Traffic Router side.

----


> Case sensitivity in DNSSEC keys
> -------------------------------
>
>                 Key: TC-125
>                 URL: https://issues.apache.org/jira/browse/TC-125
>             Project: Traffic Control
>          Issue Type: Bug
>          Components: Traffic Router
>    Affects Versions: 1.8.0
>            Reporter: Jeff Elsloo
>
> When an XML ID on a Delivery Service is mixed case, Traffic Router is unable to find the corresponding DNSSEC key. This causes Traffic Router to be unable to sign an RRset, thus breaking certain parts of the DNS tree on a given CDN.
> Solution:
> 1) Lowercase all FQDNs in the "name" field of the DNSSEC keys when generating and saving in Riak.
> 2) Lowercase all XML IDs in Traffic Ops when Delivery Services are created and/or modified in Traffic Ops.
> 3) Lowercase the names in the keys fetched from Traffic Ops in Traffic Router, regardless of case, such that even if a mixed case name pops into the keys, we have protection on the Traffic Router side.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)