CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2024/06/04 08:07:10
Modified files:
usr.sbin/rpki-client: cert.c
Log message:
rpki-client: only allow a single rpkiNotify SIA accessMethod
RFC 8182, section 3.2 is not super explicit about it, but there should
only be one rpkiNotify accessMethod, and it should contain a location
with a URI of type https. Check this and reject certs that contain more
than one.
ok claudio
