Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-6142

CAA Validator should return "May" for a CAA record with only a dummy property

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: EJBCA 6.9.0.6
    • Fix Version/s: None
    • Component/s: None

      Description

      When validating www.auto-base-san.caatestsuite.com with the caa-cli utility it returns the following output:

      Found CAA Record for domain www.auto-base-san.caatestsuite.com.: www.auto-base-san.caatestsuite.com.	59	IN	CAA	0 dummy "dummy"
      CAA lookup gave the following results: 
      
          Domain Name                             Issuer              Result                                                              
          www.auto-base-san.caatestsuite.com.     digidentity.com     Rejected due to issuer not having a CAA record at domain's DNS      
      

      The result should be "May issue" because it's effectively the same as an empty RRSet.

        Attachments

          Activity

            People

            Assignee:
            Unassigned
            Reporter:
            mikek Mike Agrenius Kushner
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:

                Time Tracking

                Estimated:
                Original Estimate - 1 day
                1d
                Remaining:
                Remaining Estimate - 1 day
                1d
                Logged:
                Time Spent - Not Specified
                Not Specified