Report information
The Basics
Id:
46411
Status:
resolved
Priority:
Low/Low
Queue:
bind9-public
People
BugTracker
Version Fixed:
9.12.0
Version Found:
(no value)
Versions Affected:
(no value)
Versions Planned:
(no value)
Priority:
P2 Normal
Severity:
S2 Normal
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
(no value)
Area:
feature
Dates
Created:Thu, 26 Oct 2017 14:26:41 -0400
Updated:Fri, 27 Oct 2017 12:57:31 -0400
Closed:Fri, 27 Oct 2017 12:57:31 -0400

This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

History
  Thu, 26 Oct 2017 14:26:42 -0400 Evan Hunt <Evan_Hunt@isc.org> - Ticket created
Date: Thu, 26 Oct 2017 18:26:41 +0000
To: bind9-public@isc.org
Subject: kill isc-hmac-fixup
From: Evan_Hunt@isc.org

There was a bug in some old versions of BIND caused interoperability problems with other implementations when using SHA* TSIG keys. This was fixed in 9.7, and in addition to correcting the key generation, we also added the isc-hmac-fixup tool to convert older keys so they'd work properly. That was eight years ago and the buggy releases are long past EOL. What say we remove isc-hmac-fixup now?
  Thu, 26 Oct 2017 22:31:47 -0400 Mukund Sivaraman <muks@isc.org> - Correspondence added
Date: Fri, 27 Oct 2017 08:01:33 +0530
From: "Mukund Sivaraman" <muks@isc.org>
Subject: Re: [ISC-Bugs #46411] kill isc-hmac-fixup
To: "Evan Hunt via RT" <bind9-public@isc.org>

On Thu, Oct 26, 2017 at 06:26:42PM +0000, Evan Hunt via RT wrote: > There was a bug in some old versions of BIND caused interoperability problems > with other implementations when using SHA* TSIG keys. This was fixed in 9.7, > and in addition to correcting the key generation, we also added the isc-hmac-fixup > tool to convert older keys so they'd work properly. > > That was eight years ago and the buggy releases are long past EOL. What > say we remove isc-hmac-fixup now? Yes please let's remove it. Mukund
Thu, 26 Oct 2017 22:31:50 -0400 The RT System itself - Status changed from 'new' to 'open'
  Fri, 27 Oct 2017 00:33:28 -0400 Evan Hunt <Evan_Hunt@isc.org> - Correspondence added

Please review rt46411.
Fri, 27 Oct 2017 00:33:28 -0400 Evan Hunt <Evan_Hunt@isc.org> - Status changed from 'open' to 'review'
  Fri, 27 Oct 2017 02:36:59 -0400 Mark Andrews <marka@isc.org> - Correspondence added

On Thu Oct 26 18:33:28 2017, each wrote: > Please review rt46411. Nothing in release notes. The solution file needed references to isc-hmac-fixup to be remove (done). Looks good to go other than the release notes.
Fri, 27 Oct 2017 02:37:23 -0400 Mark Andrews <marka@isc.org> - Given to Evan Hunt <Evan_Hunt@isc.org>
Fri, 27 Oct 2017 02:37:23 -0400 Mark Andrews <marka@isc.org> - Severity S2 Normal added
Fri, 27 Oct 2017 02:37:23 -0400 Mark Andrews <marka@isc.org> - Priority P2 Normal added
  Fri, 27 Oct 2017 12:57:30 -0400 Evan Hunt <Evan_Hunt@isc.org> - Correspondence added

Added a release note in the removed features section. 4797. [func] Removed "isc-hmac-fixup", as the versions of BIND that had the bug it worked around are long past end of life. [RT #46411] 9.12.0
Fri, 27 Oct 2017 12:57:31 -0400 Evan Hunt <Evan_Hunt@isc.org> - Status changed from 'review' to 'resolved'
Fri, 27 Oct 2017 12:57:31 -0400 Evan Hunt <Evan_Hunt@isc.org> - Version Fixed 9.12.0 added