Disallow 'inherit' elements in geofeed authenticators
authorjob <job@openbsd.org>
Sat, 26 Nov 2022 17:06:43 +0000 (17:06 +0000)
committerjob <job@openbsd.org>
Sat, 26 Nov 2022 17:06:43 +0000 (17:06 +0000)
commitb058bac1848470a4713b904cf51a98c36082485d
tree33e24e9aec856b9ce7c6b740dd6669be284b0c44
parent61b772202fd5a7d35e71ee7e5abaa136e6b4fcaf
Disallow 'inherit' elements in geofeed authenticators

RFC 9092 is underspecified in this regard, but other signed
objects relating to Internet number resources (ROA, BGPsec,
ASPA, RSC) all disallow inherit.

See https://mailarchive.ietf.org/arch/msg/opsawg/JXjxCA14BkW4DWyVoUMwqDvB17I/

OK tb@
usr.sbin/rpki-client/geofeed.c