CTF crl integration flawed
There are several issues in the crl/ctfd integration
- Challenges are never removed
- Challenges is only updated at creation time
- In jeopardy style (published ports) all non statict connection-infos will be wrong
- If two challenges have the same name (=hostname if not defined) only 1 will be created/used even if they are defined in different blueprints.
- This is problematic as it does not scale to keep track of all challenge-names in all blueprints.
Possible solutions:
- We create unique challenges per world/user or blueprint (name/category/blueprint)
- If we use a separate ctfd per world/user
- Solves all the above
- Maybe somewhat messy and requires automatic ctfd creation
- A in between is to split per blueprint but then connection-info will still be wrong
- If we do split the challenges per world (with world=username) we might run into privacy issues as other will see what other users have solved, issue or not ?
- If we use a separate ctfd per world/user
- Connection-info is the major problem as we create unique ports per world/user but challenges are shared.
Edited by Jonas Karlsson