CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/12 06:46:04
Modified files:
usr.sbin/rpki-client: crl.c extern.h mft.c parser.c
Log message:
Check alignment of certificate CRLDPs with the CRLDP of the referring Manifest
RFC 6480, section 4.2, figure 2 illustrates how all valid products in
the same CA repository (i.e., from the same issuer, listed on the same
manifest) will point to the same CRL. For CRLDPs in manifest EE certs
alignment was already checked against the CRL location derived from
the fileList in a given manifest's eContent. Add a check to explicitly
confirm internally consistent CRLDPs in certificates as well.
OK tb@
