Update TAL files to offical versions that include a https:// URL for the

trust anchor. rpki-client will then use the https:// URL first and fall
back to rsync if the https request failed.
OK job@ tb@

diff --git a/etc/rpki/afrinic.tal b/etc/rpki/afrinic.tal
index fc7639f..5ff40bf 100644 (file)
--- a/etc/rpki/afrinic.tal
+++ b/etc/rpki/afrinic.tal
@@ -1,4 +1,5 @@
 rsync://rpki.afrinic.net/repository/AfriNIC.cer
+https://rpki.afrinic.net/repository/AfriNIC.cer
 
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsAqAhWIO+ON2Ef9oRDM
 pKxv+AfmSLIdLWJtjrvUyDxJPBjgR+kVrOHUeTaujygFUp49tuN5H2C1rUuQavTH

diff --git a/etc/rpki/apnic.tal b/etc/rpki/apnic.tal
index fc781ee..803eb20 100644 (file)
--- a/etc/rpki/apnic.tal
+++ b/etc/rpki/apnic.tal
@@ -1,3 +1,4 @@
+https://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
 rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
 
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8

diff --git a/etc/rpki/ripe.tal b/etc/rpki/ripe.tal
index acdb173..80002d9 100644 (file)
--- a/etc/rpki/ripe.tal
+++ b/etc/rpki/ripe.tal
@@ -1,3 +1,4 @@
+https://rpki.ripe.net/ta/ripe-ncc-ta.cer
 rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
 
 MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0URYSGqUz2myBsOzeW1j