From edee2434a87bb480b26c224589b25793b809bf80 Mon Sep 17 00:00:00 2001 From: claudio Date: Thu, 4 Mar 2021 14:29:02 +0000 Subject: [PATCH] Update TAL files to offical versions that include a https:// URL for the trust anchor. rpki-client will then use the https:// URL first and fall back to rsync if the https request failed. OK job@ tb@ --- etc/rpki/afrinic.tal | 1 + etc/rpki/apnic.tal | 1 + etc/rpki/ripe.tal | 1 + 3 files changed, 3 insertions(+) diff --git a/etc/rpki/afrinic.tal b/etc/rpki/afrinic.tal index fc7639f38f4..5ff40bfd551 100644 --- a/etc/rpki/afrinic.tal +++ b/etc/rpki/afrinic.tal @@ -1,4 +1,5 @@ rsync://rpki.afrinic.net/repository/AfriNIC.cer +https://rpki.afrinic.net/repository/AfriNIC.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsAqAhWIO+ON2Ef9oRDM pKxv+AfmSLIdLWJtjrvUyDxJPBjgR+kVrOHUeTaujygFUp49tuN5H2C1rUuQavTH diff --git a/etc/rpki/apnic.tal b/etc/rpki/apnic.tal index fc781ee2240..803eb20d861 100644 --- a/etc/rpki/apnic.tal +++ b/etc/rpki/apnic.tal @@ -1,3 +1,4 @@ +https://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9RWSL61YAAYumEiU8z8 diff --git a/etc/rpki/ripe.tal b/etc/rpki/ripe.tal index acdb1731307..80002d97689 100644 --- a/etc/rpki/ripe.tal +++ b/etc/rpki/ripe.tal @@ -1,3 +1,4 @@ +https://rpki.ripe.net/ta/ripe-ncc-ta.cer rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0URYSGqUz2myBsOzeW1j -- 2.20.1