Uploaded image for project: 'Traffic Control'
  1. Traffic Control
  2. TC-125

Case sensitivity in DNSSEC keys

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.8.0
    • 2.0.0
    • Traffic Router
    • None

    Description

      When an XML ID on a Delivery Service is mixed case, Traffic Router is unable to find the corresponding DNSSEC key. This causes Traffic Router to be unable to sign an RRset, thus breaking certain parts of the DNS tree on a given CDN.

      Solution:
      1) Lowercase all FQDNs in the "name" field of the DNSSEC keys when generating and saving in Riak.
      2) Lowercase all XML IDs in Traffic Ops when Delivery Services are created and/or modified in Traffic Ops.
      3) Lowercase the names in the keys fetched from Traffic Ops in Traffic Router, regardless of case, such that even if a mixed case name pops into the keys, we have protection on the Traffic Router side.

      Attachments

        Issue Links

          Activity

            People

              elsloo Jeff Elsloo
              elsloo Jeff Elsloo
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Slack

                  Issue deployment