Re: [Pdns-users] SSHFP fingerprint size validation

2023-10-04 Thread atanas argirov via Pdns-users
Hello Peter, > On 4 Oct 2023, at 07:42, Peter Thomassen wrote: > > Hi Atanas, > > On 10/3/23 18:56, atanas argirov via Pdns-users wrote: >> * testing malformed fingerprint size of (hash size +/- 2) is accepted with >> no complaints from both API and pdnsutil >> My question is: >> * is there an

Re: [Pdns-users] SSHFP fingerprint size validation

2023-10-03 Thread Peter Thomassen via Pdns-users
Hi Atanas, On 10/3/23 18:56, atanas argirov via Pdns-users wrote: * testing malformed fingerprint size of (hash size +/- 2) is accepted with no complaints from both API and pdnsutil My question is: * is there any validation on the SSHFP fingerprint size based on the hash type? Apparently no

[Pdns-users] SSHFP fingerprint size validation

2023-10-03 Thread atanas argirov via Pdns-users
Hello All, We have found some peculiar behaviour around SSHFP records on ingress via the PowerDNS API or pdnsutil, and before delving deeper, just reaching out here if someone has the answer already. Doing API RRSet update for SSHFPs is showing that: * having malformed SHA256 fingerprint (has