CVSROOT: /cvs
Module name: src
Changes by: clau...@cvs.openbsd.org 2020/03/16 08:47:30
Modified files:
usr.sbin/bgpd : parse.y
Log message:
The assumption that in roa tables a prefix / source-as combo only appears
once in the input file is not correct. I thought the RPKI validators would
aggreagte these entries but that is not necessarily the case.
There are cases where prefixes show up with the same source-as multiple times
with different maxlen lenght. In those cases merge these multiple entries
and keep the one entry with the longest maxlen length since that is the VRP
which covers all others.
Found by job@ OK benno@
