artulab
projects / openbsd / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6330972) | patch
Disallow AS Resources extension on ROA EE certificates
authorjob <job@openbsd.org>
Wed, 10 Aug 2022 14:37:33 +0000 (14:37 +0000)
committerjob <job@openbsd.org>
Wed, 10 Aug 2022 14:37:33 +0000 (14:37 +0000)
commita0c9452ca2958327fcc7904b72637f6af6d81131
tree7321b63f48a33f0c2375bb6d0f1a08925be5c4e4tree | snapshot
parent6330972769a361433bd99a7861420a652e154134commit | diff
Disallow AS Resources extension on ROA EE certificates

The ROA specification (RFC 6482 section 4) is a bit underspecified, however
in the wild the RFC 3779 AS Resources extension never ever appears on ROA EE
certificates, as it serves no purpose in the validation process.

OK tb@
usr.sbin/rpki-client/roa.c diff | blob | history
OpenBSD src
by Ahmet Artu Yildirim