CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2022/04/15 06:59:44
Modified files:
usr.sbin/rpki-client: x509.c
Log message:
Allow more than one CRL URI in certificates
The spec (RFC 6487, 4.8.6) expresses a preference for a single rsync URI
but allows for other URIs in the CRL distributionPoint. This doesn't
currently happen in practice but could come at some point. So look for
the rsync URI and skip over others, which is more correct and might help
in the future.
Pointed out by & ok claudio
