CVSROOT: /cvs
Module name: src
Changes by: j...@cvs.openbsd.org 2024/04/21 03:03:22
Modified files:
usr.sbin/rpki-client: cms.c x509.c
Log message:
Mandate presence of CMS signing-time and disallow binary-signing-time
RFC-to-be draft-ietf-sidrops-cms-signing-time updates RFC 6488 by
mandating the presence of the CMS signing-time attribute and disallowing
the use of the CMS binary-signing-time attribute in RPKI Signed Objects.
The ecosystem has behaved this way for a number of years now.
Flip from warning to erroring for non-compliant objects.
OK tb@
