Test System News

New SSL certificate for test system has SHA1 fingerprint 20:4A:3E:C3:92:2F:A8:62:33:CC:4E:6E:E2:F0:DF:1E:C7:48:65:9A (SHA256: 43:D3:BF:7C: 80:A2:E2:02:EC:82:66:87:75:E6:CE:FB:0F:2D:99:82:CF:D2:7E:9A:09:9C:E1:12:A1:A8:F4:31) and is valid until 2018-03-06. See EPP Server access details for the ports on which SSL is supported.

The feature update adds support for TLS client certificat pre-authentication for EPP access next to more strict enforcement of IP access white-listing. Impact on test platform is limited as there are no IP address restrictions though use of client certificate will limit accepted logins. Access white-listing information is listed in registrar interface.

Current self-signed SSL certificate for test system has SHA1 fingerprint 0B:B2:7A:EE:​C0:91:87:99:​33:7E:59:2C:​1C:AE:B0:37:​D6:AB:D9:0E (SHA256: 82:16:EB:79:​36:CE:6D:FE:​A9:23:FB:37:​2F:F2:4E:85:​19:16:C1:C3:​AE:CB:03:D7:​BF:62:61:55:​95:1D:C6:A7) and is valid until 2017-03-11. See EPP Server access details for the ports on which SSL is supported.

Current self-signed SSL certificate for test system has SHA fingerprint A5:40:05:58:​D6:5E:1F:DC:​A5:8F:AE:E6:​EF:4C:5E:2B:​8E:08:C4:0C and is valid until 2015-03-19. See EPP Server access details for the ports on which SSL is supported.

On 19 April at noon the NSTest service of the test platform has been updated to handle validation of DNSSec records (check that given DS record(s) match with advertised DNSKEY records and that a few basic records validate properly). See NSTest protocol description for details on how to use it.

In the afternoon of 23 December 2010 the test platform will get updated in order for it to support DNS-SEC. This update will cause a downtime of 30-90 minutes, after which EPP server will announce DNS-SEC support as described in RFC5910.

The test system's web pages have been merged back into main .lu web presence and both registrar and registrant interface did get the .lu website style applied. Note that a recent browser supporting CSS3 is recommended for improved experience.

In preparation to IDN launch on 1st February it's now possible to register IDNs on the test system using those IDN characters introduced. There are no changes to documentation.

Current self-signed SSL certification for test system has SHA fingerprint 03:D6:38:E7:​E5:10:53:4A:​7F:59:31:E1:​08:94:8C:DC:​E2:3A:20:D0 and is valid until 2011-03-31. See EPP Server access details for the ports on which SSL is supported.

The technical documentation has been updated. Changes include new automatic copy feature for transfer and transfer-restore commands and some minor improvements.

The nameserver test service got a protocol extension. This extension allows for easy integration in multilingual interfaces and automatic handling of errors by providing each detail line in for of a message code with list of arguments. See the protocol description for details.

The SSL and TLS support mentionned in technical documentation version 2.0.6 with upgrades is now available.
SSL tunneled communication is available on ports 1702 (DNS-LU) and 1704 (RFC3734), the startTLS command is enabled on port 1703 (RFC3734).
On all ports the same self-signed certificate is used. The SHA1 finger print for the certificate is: E8:AB:97:28:​86:36:DC:5B:​19:B4:E8:4F:​F4:31:88:4B:​AB:1E:FB:3F.

The technical documentation has been updated. Changes new startTLS command, improved transport description, missing type 26 for poll messages, documentation of creData in domain creation response and addition of troubleshooting chapter.

The compatibility issue in EPP over TCP implementation of RFC3734 has been fixed, now the 4 bytes of header size are being included in the message size calculation as required by the RFC.

From now on EPP Test Server also speaks EPP over TCP as specified in RFC3734 where each message is preceded by a 32bit size header in big-endian byteorder. To use this transport, user port 1701 instead of 1700. (currently broken, for details see FAQ Test services).

Fixed some errata in EPP XML description (Domain trade). The latest version is available. (LINK TO FR_3.1.2.6_Technical doc Registrar) Aditionally, dns-lu-1.0 schema got a missing element added for poll messages.

Nameserver test service is now available for public testing. Read Protocol description.

Added missing element description for Domain Info command.
In dnslu-1.0.xsd, the status definitions got changed to make validating parsers understand response correctly. In addition missing response data for transfer/trade operations have been added. Important: all date types are 'dateTime', contrary to what original xsd stated. Please update the xsd deployed in your software!
The new version is available.

Added subchapter in EPP Poll message chapter describing the list of defined Poll Message type IDs. The latest version is available.

Fixed some errata in EPP XML samples (Domain Transfer, Host Delete). The new version is available.