CVSROOT: /cvs Module name: src Changes by: j...@cvs.openbsd.org 2022/08/10 08:37:33
Modified files:
usr.sbin/rpki-client: roa.c
Log message:
Disallow AS Resources extension on ROA EE certificates
The ROA specification (RFC 6482 section 4) is a bit underspecified, however
in the wild the RFC 3779 AS Resources extension never ever appears on ROA EE
certificates, as it serves no purpose in the validation process.
OK tb@
