Last Modified: Apr 28, 2025
Affected Product(s):
BIG-IP TMOS
Fixed In:
17.1.0
Opened: Jul 23, 2021 Severity: 3-Major
In BIG-IP, DNS Cache does not support Elliptic Curve Digital Signature Algorithm (ECDSA), which is important for DNS software vendors to comply with DNS standards.
Unable to validate the zone, signed with ECDSA.
Listener is configured with cache (validating resolver) profile, and zone is signed with ECDSA algorithms.
None
Able to validate the zone, signed with ECDSA.