CVSROOT: /cvs Module name: src Changes by: clau...@cvs.openbsd.org 2023/02/23 02:50:40
Modified files: usr.sbin/rpki-client: main.c parser.c Log message: When parsing MFT the CRL referenced by the MFT is loaded and verified at the same time. So in case of a valid crl pass the CRL filename as entity message to the parent process together with the MFT. This way the MFT and CRL end up both in the valid cache even if some files in the MFT are missing. On severe errors (like X.509 verify errors) the CRL is not moved since it is not considered valid. With and OK job@, tb@