Uploaded image for project: 'EJBCA'
  1. EJBCA
  2. ECA-7083

CaaValidator always succeeds when the domain ignore list matches

    Details

      Description

      Reading the code in CaaValidator.java, it looks like the CAA validator will succeed validation when the domain ignore list matches at least one domain name, even if there is another domain name not on the domain ignore list for which a CAA record prohibits issuance.

      Confirm that the problem exists and fix it.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                realiserad Bastian Fredriksson
                Reporter:
                realiserad Bastian Fredriksson
                Verified by:
                Amin Khorsandi
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 1 hour
                  1h
                  Remaining:
                  Time Spent - 10 minutes Remaining Estimate - 50 minutes
                  50m
                  Logged:
                  Time Spent - 10 minutes Remaining Estimate - 50 minutes
                  10m