You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@trafficcontrol.apache.org by "Jeff Elsloo (JIRA)" <ji...@apache.org> on 2017/02/01 15:00:57 UTC

[jira] [Created] (TC-125) Case sensitivity in DNSSEC keys

Jeff Elsloo created TC-125:
------------------------------

             Summary: Case sensitivity in DNSSEC keys
                 Key: TC-125
                 URL: https://issues.apache.org/jira/browse/TC-125
             Project: Traffic Control
          Issue Type: Bug
          Components: Traffic Router
    Affects Versions: 1.8.0
            Reporter: Jeff Elsloo


When an XML ID on a Delivery Service is mixed case, Traffic Router is unable to find the corresponding DNSSEC key. This causes Traffic Router to be unable to sign an RRset, thus breaking certain parts of the DNS tree on a given CDN.

Solution:
1) Lowercase all FQDNs in the "name" field of the DNSSEC keys when generating and saving in Riak.
2) Lowercase the names in the keys fetched from Traffic Ops in Traffic Router, regardless of case, such that even if a mixed case name pops into the keys, we have protection on the Traffic Router side.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)