Project

General

Profile

Actions

Feature #5115

closed

ValidationPolicySimpleHierarchy: accommodate certificate name in KeyLocator

Added by Junxiao Shi over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Category:
Security
Target version:
Start date:
Due date:
% Done:

100%

Estimated time:
2.00 h

Description

Currently, ValidationPolicySimpleHierarchy::checkPolicy assumes KeyLocator contains key name only:

if (klName.getPrefix(-2).isPrefixOf(interest.getName())) {

Since #5112, KeyLocator would contain certificate name. Additionally, legacy client may continue to send KeyLocator with key name.
Thus, this condition should be relaxed to accept either key name or certificate name as KeyLocator.

Actions #1

Updated by Alex Afanasyev over 4 years ago

  • Tags set to security
Actions #2

Updated by Alex Afanasyev over 4 years ago

  • Status changed from New to Code review
  • Assignee set to Alex Afanasyev
  • % Done changed from 0 to 100
Actions #4

Updated by Davide Pesavento over 4 years ago

  • Status changed from Code review to Closed
  • Target version set to 0.8.0
Actions

Also available in: Atom PDF