freeipa

#6345 [RFE] Add support for IDNA2008 (and transitional versions) to DNS plugin
Opened by mbasti. Modified

Open
Close Issue

Python-dns in version 1.15 will add support for IDNA2008 and friends. When python-dns is released we can add support for IDNA2008 into IPA.

A user should specify version of IDNA by global config stored in LDAP.

This requires additional packages:python-dns 1.15, python-idna

IDNA 2008 support is critical for German, Greek, Farsi and Sinhala domain names. Currently IDNA 2008 support is bit of a mess. Firefox supports it. I got a fixes into curl and python-requests. Google Chrome, Microsoft Edge, wget and CLI tools from bind-utils still use IDNA 2003.

  • cURL CVE-2016-8625 https://curl.haxx.se/docs/adv_20161102K.html
  • Python issue https://bugs.python.org/issue17305
  • Unicode FAQ http://unicode.org/faq/idn.html
  • Chrome bug https://bugs.chromium.org/p/chromium/issues/detail?id=61328

Metadata Update from @mbasti:
- Issue assigned to someone
- Issue set to the milestone: Future Releases
Metadata
None
None
None
Normal
enhancement
DNS
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.