Added compatibility with RFC8624

This commit is contained in:
Pinga 2023-12-26 13:44:11 +02:00
parent 39271dc1db
commit 4df16e200f
5 changed files with 5 additions and 36 deletions

View file

@ -543,7 +543,7 @@ class DomainsController extends Controller
}
// Validate alg
$validAlgorithms = [2, 3, 5, 6, 7, 8, 10, 13, 14, 15, 16];
$validAlgorithms = [8, 13, 14, 15, 16];
if (!empty($dsAlg) && !in_array($dsAlg, $validAlgorithms)) {
return view($response, 'admin/domains/createDomain.twig', [
'domainName' => $domainName,
@ -563,7 +563,6 @@ class DomainsController extends Controller
]);
}
$validDigests = [
1 => 40, // SHA-1
2 => 64, // SHA-256
4 => 96 // SHA-384
];
@ -1336,7 +1335,7 @@ class DomainsController extends Controller
}
// Validate alg
$validAlgorithms = [2, 3, 5, 6, 7, 8, 10, 13, 14, 15, 16];
$validAlgorithms = [8, 13, 14, 15, 16];
if (!empty($dsAlg) && !in_array($dsAlg, $validAlgorithms)) {
$this->container->get('flash')->addMessage('error', 'Incomplete algorithm provided');
return $response->withHeader('Location', '/domain/update/'.$domainName)->withStatus(302);
@ -1348,7 +1347,6 @@ class DomainsController extends Controller
return $response->withHeader('Location', '/domain/update/'.$domainName)->withStatus(302);
}
$validDigests = [
1 => 40, // SHA-1
2 => 64, // SHA-256
4 => 96 // SHA-384
];

View file

@ -130,13 +130,7 @@
<input type="text" class="form-control mb-2" placeholder="{{ __('Key Tag') }}" name="dsKeyTag" id="dsKeyTag">
<select class="form-control mb-2" name="dsAlg">
<option value="" disabled selected>{{ __('Select Algorithm') }}</option>
<option value="2">Diffie-Hellman</option>
<option value="3">DSA/SHA1</option>
<option value="5">RSA/SHA-1</option>
<option value="6">DSA-NSEC3-SHA1</option>
<option value="7">RSASHA1-NSEC3-SHA1</option>
<option value="8">RSA/SHA-256</option>
<option value="10">RSA/SHA-512</option>
<option value="13">ECDSA Curve P-256 with SHA-256</option>
<option value="14">ECDSA Curve P-384 with SHA-384</option>
<option value="15">Ed25519</option>
@ -144,7 +138,6 @@
</select>
<select class="form-control mb-2" name="dsDigestType">
<option value="" disabled selected>{{ __('Select Digest Type') }}</option>
<option value="1">SHA-1</option>
<option value="2">SHA-256</option>
<option value="4">SHA-384</option>
</select>
@ -157,13 +150,7 @@
<input type="number" class="form-control mb-2" placeholder="{{ __('Protocol') }}" name="dnskeyProtocol" value="3" readonly> <!-- Protocol is typically set to 3 -->
<select class="form-control mb-2" name="dnskeyAlg">
<option value="" disabled selected>{{ __('Select Algorithm') }}</option>
<option value="2">Diffie-Hellman</option>
<option value="3">DSA/SHA1</option>
<option value="5">RSA/SHA-1</option>
<option value="6">DSA-NSEC3-SHA1</option>
<option value="7">RSASHA1-NSEC3-SHA1</option>
<option value="8">RSA/SHA-256</option>
<option value="10">RSA/SHA-512</option>
<option value="13">ECDSA Curve P-256 with SHA-256</option>
<option value="14">ECDSA Curve P-384 with SHA-384</option>
<option value="15">Ed25519</option>

View file

@ -256,13 +256,7 @@
<input type="text" class="form-control mb-2" placeholder="{{ __('Key Tag') }}" name="dsKeyTag" id="dsKeyTag">
<select class="form-control mb-2" name="dsAlg">
<option value="" disabled selected>{{ __('Select Algorithm') }}</option>
<option value="2">Diffie-Hellman</option>
<option value="3">DSA/SHA1</option>
<option value="5">RSA/SHA-1</option>
<option value="6">DSA-NSEC3-SHA1</option>
<option value="7">RSASHA1-NSEC3-SHA1</option>
<option value="8">RSA/SHA-256</option>
<option value="10">RSA/SHA-512</option>
<option value="13">ECDSA Curve P-256 with SHA-256</option>
<option value="14">ECDSA Curve P-384 with SHA-384</option>
<option value="15">Ed25519</option>
@ -270,7 +264,6 @@
</select>
<select class="form-control mb-2" name="dsDigestType">
<option value="" disabled selected>{{ __('Select Digest Type') }}</option>
<option value="1">SHA-1</option>
<option value="2">SHA-256</option>
<option value="4">SHA-384</option>
</select>
@ -283,13 +276,7 @@
<input type="number" class="form-control mb-2" placeholder="{{ __('Protocol') }}" name="dnskeyProtocol" value="3" readonly> <!-- Protocol is typically set to 3 -->
<select class="form-control mb-2" name="dnskeyAlg">
<option value="" disabled selected>{{ __('Select Algorithm') }}</option>
<option value="2">Diffie-Hellman</option>
<option value="3">DSA/SHA1</option>
<option value="5">RSA/SHA-1</option>
<option value="6">DSA-NSEC3-SHA1</option>
<option value="7">RSASHA1-NSEC3-SHA1</option>
<option value="8">RSA/SHA-256</option>
<option value="10">RSA/SHA-512</option>
<option value="13">ECDSA Curve P-256 with SHA-256</option>
<option value="14">ECDSA Curve P-384 with SHA-384</option>
<option value="15">Ed25519</option>

View file

@ -1124,7 +1124,7 @@ function processDomainCreate($conn, $db, $xml, $clid, $database_type, $trans) {
}
// Validate alg
$validAlgorithms = [2, 3, 5, 6, 7, 8, 10, 13, 14, 15, 16];
$validAlgorithms = [8, 13, 14, 15, 16];
if (!isset($alg) || !in_array($alg, $validAlgorithms)) {
$db->rollBack();
sendEppError($conn, $db, 2006, 'Invalid algorithm', $clTRID, $trans);
@ -1138,7 +1138,6 @@ function processDomainCreate($conn, $db, $xml, $clid, $database_type, $trans) {
return;
}
$validDigests = [
1 => 40, // SHA-1
2 => 64, // SHA-256
4 => 96 // SHA-384
];

View file

@ -1770,7 +1770,7 @@ function processDomainUpdate($conn, $db, $xml, $clid, $database_type, $trans) {
}
// Validate alg
$validAlgorithms = [2, 3, 5, 6, 7, 8, 10, 13, 14, 15, 16];
$validAlgorithms = [8, 13, 14, 15, 16];
if (!isset($alg) || !in_array($alg, $validAlgorithms)) {
sendEppError($conn, $db, 2006, 'Invalid algorithm', $clTRID, $trans);
return;
@ -1782,7 +1782,6 @@ function processDomainUpdate($conn, $db, $xml, $clid, $database_type, $trans) {
return;
}
$validDigests = [
1 => 40, // SHA-1
2 => 64, // SHA-256
4 => 96 // SHA-384
];
@ -1887,7 +1886,7 @@ function processDomainUpdate($conn, $db, $xml, $clid, $database_type, $trans) {
}
// Validate alg
$validAlgorithms = [2, 3, 5, 6, 7, 8, 10, 13, 14, 15, 16];
$validAlgorithms = [8, 13, 14, 15, 16];
if (!isset($alg) || !in_array($alg, $validAlgorithms)) {
sendEppError($conn, $db, 2006, 'Invalid algorithm', $clTRID, $trans);
return;
@ -1899,7 +1898,6 @@ function processDomainUpdate($conn, $db, $xml, $clid, $database_type, $trans) {
return;
}
$validDigests = [
1 => 40, // SHA-1
2 => 64, // SHA-256
4 => 96 // SHA-384
];