Do not fail on non-rsync URIs in EE cert SIA extensions
authortb <tb@openbsd.org>
Fri, 4 Nov 2022 23:52:59 +0000 (23:52 +0000)
committertb <tb@openbsd.org>
Fri, 4 Nov 2022 23:52:59 +0000 (23:52 +0000)
commite6a231f03c6348b158d9a9b0faf6bcc7258d1411
tree50bbb1986d85399479fff1e57a244a4c71237a03
parentc39877f08d2607e7a4e3f0d5b9a815ef4006c9b3
Do not fail on non-rsync URIs in EE cert SIA extensions

The spec allows multiple accessMethod entries, ordered by preference.
While an rsync URI must be present, others are allowed. Do not fail
in that situation and pick the first rsync URI encountered. The logic
is very similar to the one in x509_get_crl().

ok job
usr.sbin/rpki-client/x509.c