Report information
The Basics
Id:
46743
Status:
resolved
Priority:
Low/Low
Queue:

People
BugTracker
Version Fixed:
9.9.12, 9.9.12(sub), 9.10.7, 9.10.7(sub), 9.11.3, 9.12.0
Version Found:
(no value)
Versions Affected:
(no value)
Versions Planned:
(no value)
Priority:
P2 Normal
Severity:
S2 Normal
CVSS Score:
(no value)
CVE ID:
(no value)
Component:
(no value)
Area:
bug

Dates
Created:Fri, 01 Dec 2017 00:12:45 -0500
Updated:Wed, 06 Dec 2017 12:31:59 -0500
Closed:Wed, 06 Dec 2017 12:31:59 -0500



This bug tracker is no longer active.

Please go to our Gitlab to submit issues (both feature requests and bug reports) for active projects maintained by Internet Systems Consortium (ISC).

Due to security and confidentiality requirements, full access is limited to the primary maintainers.

Subject: When checking whether there are both KSK and ZSK keys the inner loop needs to ignore non private keys.
From: marka@isc.org
To: bind9-public@isc.org
Date: Thu, 30 Nov 2017 19:12:44 -1000
Code looks fine. There's no test.
On Thu Nov 30 19:39:19 2017, each wrote: > Code looks fine. There's no test. Added
To: "Mark Andrews via RT" <bind9-public@isc.org>
CC:
Date: Sun, 3 Dec 2017 08:08:00 +0000
From: "Evan Hunt" <each@isc.org>
Subject: Re: [ISC-Bugs #46743] When checking whether there are both KSK and ZSK keys the inner loop needs to ignore non private keys.
> Added Looks fine.
4837. [bug] dns_update_signatures{inc} (add_sigs) was not properly determining if there were active KSK and ZSK keys for a algorithm when update-check-ksk is true (default) leaving records unsigned. [RT #46743]
Moving to qa state for QA to determine whether the test suite is sufficient.