Add support for authenticating geofeed data CSV files in filemode
authorjob <job@openbsd.org>
Sat, 26 Nov 2022 12:02:36 +0000 (12:02 +0000)
committerjob <job@openbsd.org>
Sat, 26 Nov 2022 12:02:36 +0000 (12:02 +0000)
commitef3f6f56d640954e77440eccd5b05c90fd370d7f
treede8cd98bebb85611cd0ff4749ff3677891fe080c
parentcd854ad7c426e77f599078773916efaba7dd0159
Add support for authenticating geofeed data CSV files in filemode

RFC 9092 describes a scheme in which an authenticator is appended to a
geofeed (RFC 8805) file. It is a digest of the main body of the file
signed by the private key of the relevant RPKI certificate for a covering
address range. The authenticator is a detached CMS signature.

with and OK tb@
usr.sbin/rpki-client/Makefile
usr.sbin/rpki-client/cms.c
usr.sbin/rpki-client/extern.h
usr.sbin/rpki-client/filemode.c
usr.sbin/rpki-client/geofeed.c [new file with mode: 0644]
usr.sbin/rpki-client/mft.c
usr.sbin/rpki-client/print.c
usr.sbin/rpki-client/rpki-client.8
usr.sbin/rpki-client/validate.c
usr.sbin/rpki-client/x509.c