Tigthen cert_parse_ee_cert() and ta_parse()
authortb <tb@openbsd.org>
Sat, 8 Jun 2024 13:33:49 +0000 (13:33 +0000)
committertb <tb@openbsd.org>
Sat, 8 Jun 2024 13:33:49 +0000 (13:33 +0000)
commita582643462dde6fbad3115058b7092d202cc242b
tree09b634d5ed0cdada76558c9720ae7ec8568fe254
parent37cdae3df320b508da15a0784449d0ca9d041c97
Tigthen cert_parse_ee_cert() and ta_parse()

Require that a cert fed to cert_parse_ee_cert() have an EE cert purpose.
Instead of throwing a warning for BGPsec router certs, check for the TA
purpose in ta_parse() and reject everything else.

ok job
usr.sbin/rpki-client/cert.c