Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-6121

CAA Validator doesn't fail for nonsense domains.

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: EJBCA 6.9.1
    • Component/s: None
    • Labels:

      Description

      For some reason the CAA Validator stopped rejecting nonsense domains:

      albion:ejbca_alpha mikek$ java -jar dist/caa-cli/caa-cli.jar caalookup --dns 8.8.8.8 --issuer "ca.com" --domains dfgdgdf.orgkg.
      CAA lookup gave the following results: 
      
          Domain Name         Issuer      Result                                                      
          dfgdgdf.orgkg.      ca.com      May issue, DNS lookup gave no CAA results for domain. 

        Attachments

          Activity

            People

            • Assignee:
              hsunmark Henrik Sunmark
              Reporter:
              mikek Mike Agrenius Kushner
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 1 day
                1d
                Remaining:
                Time Spent - 2 hours, 30 minutes Remaining Estimate - 5 hours, 30 minutes
                5h 30m
                Logged:
                Time Spent - 2 hours, 30 minutes Remaining Estimate - 5 hours, 30 minutes
                2h 30m