CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2022/02/04 09:21:11
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Enforce Certificate Policy for RPKI
RFCs 6384 defines a certificate policy for RPKI. Ensure that the verifier
builds a certification path that follows this OID: set up a policy on the
X509_STORE_CTX's verify parameters and set initial-explicit-policy and
initial-policy-mapping-inhibit.
Pointed out by Ties de Kock
ok claudio
