Opened 8 years ago
Closed 5 years ago
#1353 closed defect (wontfix)
Wrong reason for transfer failure logged when TSIG fails
Reported by: | vorner | Owned by: | |
---|---|---|---|
Priority: | low | Milestone: | DNS Outstanding Tasks |
Component: | xfrin | Version: | |
Keywords: | Cc: | ||
CVSS Scoring: | Parent Tickets: | ||
Sensitive: | no | Defect Severity: | Medium |
Sub-Project: | DNS | Feature Depending on Ticket: | |
Estimated Difficulty: | 0 | Add Hours to Ticket: | 0 |
Total Hours: | 0 | Internal?: | no |
Description
This log message appears whenever validation of TSIG fails for some reason:
2011-10-26 12:35:52.460 ERROR [b10-xfrin.xfrin] XFRIN_XFR_TRANSFER_FAILURE AXFR transfer of zone example.com./IN failed: TSIG verify fail: FORMERR
However, the FORMERR is misleading. In this exact case, the signature was missing completely (because it was a servfail), but AFAIK it happened at other situations as well. It should tell more details.
Subtickets
Change History (3)
comment:1 Changed 8 years ago by shane
- Defect Severity changed from N/A to Medium
- Milestone changed from New Tasks to Year 3 Task Backlog
comment:2 Changed 6 years ago by stephen
- Milestone set to DNS Outstanding Tasks
comment:3 Changed 5 years ago by tomek
- Resolution set to wontfix
- Status changed from new to closed
Note: See
TracTickets for help on using
tickets.
DNS and BIND10 framework is outside of scope for Kea project.
The corresponding code has been removed from Kea git repository.
If you want to follow up on DNS or former BIND10 issues, see
http://bundy-dns.de project.
Closing ticket.