CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/11/03 08:58:42
Modified files:
usr.sbin/rpki-client: cert.c extern.h x509.c
Log message:
rpki-client: disallow certs with zero serialNumber
Consistency is hard:
RFC 5280 (eid3200 clarifies) and RFC 6487 disallow a zero serialNumber.
For extra fun, CRLNumber and manifestNumber are defined via ASN.1
explicitly allowing zero. So we need some extra dances.
Arguably eid3200 was resolved the wrong way.
Serial number issue pointed out by the rpki-rp-benchmark.
ok claudio
