From: tb <tb@openbsd.org>
Date: Wed, 5 Jun 2024 13:36:28 +0000 (+0000)
Subject: Only complain about empty list of revoked certs if verbosity > 1
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=741b0d5fc4bbf8da09dddd04ac7b3c0d9f4a5f93;p=openbsd

Only complain about empty list of revoked certs if verbosity > 1

Given that 15% of CRLs is affected, this is a noisy warning. Krill is
dormant and it will take forever until a fixed version iss deployed.
Until then I'd like to avoid being annoyed wiht this stupid noise.

ok claudio
---

diff --git a/usr.sbin/rpki-client/crl.c b/usr.sbin/rpki-client/crl.c
index 6896b6f6784..0e7705c7429 100644
--- a/usr.sbin/rpki-client/crl.c
+++ b/usr.sbin/rpki-client/crl.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: crl.c,v 1.36 2024/05/31 02:45:15 tb Exp $ */
+/*	$OpenBSD: crl.c,v 1.37 2024/06/05 13:36:28 tb Exp $ */
 /*
  * Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
  *
@@ -132,7 +132,7 @@ crl_check_revoked(const char *fn, X509_CRL *x509_crl)
 		 * to a bug in rpki-rs/Krill. So silently accept this for now.
 		 * https://github.com/NLnetLabs/krill/issues/1197
 		 */
-		if (verbose > 0)
+		if (verbose > 1)
 			warnx("%s: RFC 5280, section 5.1.2.6: revoked "
 			    "certificate list without entries disallowed", fn);
 		return 1;