Next to signedObject only allow rpkiNotify accessMethods
authortb <tb@openbsd.org>
Sun, 6 Nov 2022 14:50:51 +0000 (14:50 +0000)
committertb <tb@openbsd.org>
Sun, 6 Nov 2022 14:50:51 +0000 (14:50 +0000)
commit5fb296d692b43a4a1a1d34a2922b643713ec5e9e
treebfda4f095e4b364ddcd9e0014ad34d2c7d22cfca
parent39a5cc30bcf39f1b59b166978c9a0f335ad4d190
Next to signedObject only allow rpkiNotify accessMethods

Instead of ignoring all non-signedObject accessMethods, we can be stricter
and only allow rpkiNotify (for now) and error on anything else. Also make
sure we properly clean up behind ourselves on error.

With and ok job
usr.sbin/rpki-client/x509.c