diff options
author | Theo Buehler <tb@cvs.openbsd.org> | 2022-02-04 16:21:12 +0000 |
---|---|---|
committer | Theo Buehler <tb@cvs.openbsd.org> | 2022-02-04 16:21:12 +0000 |
commit | 542bd7961519dc8a44bd3ba9a133ccaa49f5aa7d (patch) | |
tree | f750a4c87a14737efc9883d49c97e777e0659203 /usr.sbin/kgmon | |
parent | 10f7c295a5ef8d6b1500366c099527a9d684187f (diff) |
Enforce Certificate Policy for RPKI
RFCs 6384 defines a certificate policy for RPKI. Ensure that the verifier
builds a certification path that follows this OID: set up a policy on the
X509_STORE_CTX's verify parameters and set initial-explicit-policy and
initial-policy-mapping-inhibit.
Pointed out by Ties de Kock
ok claudio
Diffstat (limited to 'usr.sbin/kgmon')
0 files changed, 0 insertions, 0 deletions