summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorTheo Buehler <tb@cvs.openbsd.org>2024-06-05 13:36:29 +0000
committerTheo Buehler <tb@cvs.openbsd.org>2024-06-05 13:36:29 +0000
commitdf4696b6c79a62c50ff9848dd27b5bf2849642ed (patch)
treebe7e730a9c90defdce7bc066ecf247122bb63bf3
parentd533391d8bf2bab134884742be5acefae895de0e (diff)
Only complain about empty list of revoked certs if verbosity > 1
Given that 15% of CRLs is affected, this is a noisy warning. Krill is dormant and it will take forever until a fixed version iss deployed. Until then I'd like to avoid being annoyed wiht this stupid noise. ok claudio
-rw-r--r--usr.sbin/rpki-client/crl.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/usr.sbin/rpki-client/crl.c b/usr.sbin/rpki-client/crl.c
index 6896b6f6784..0e7705c7429 100644
--- a/usr.sbin/rpki-client/crl.c
+++ b/usr.sbin/rpki-client/crl.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: crl.c,v 1.36 2024/05/31 02:45:15 tb Exp $ */
+/* $OpenBSD: crl.c,v 1.37 2024/06/05 13:36:28 tb Exp $ */
/*
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
*
@@ -132,7 +132,7 @@ crl_check_revoked(const char *fn, X509_CRL *x509_crl)
* to a bug in rpki-rs/Krill. So silently accept this for now.
* https://github.com/NLnetLabs/krill/issues/1197
*/
- if (verbose > 0)
+ if (verbose > 1)
warnx("%s: RFC 5280, section 5.1.2.6: revoked "
"certificate list without entries disallowed", fn);
return 1;