Import Kristaps Dzonsons' RPKI validator into the tree

rpki-client(1) is an implementation of the Resource Public Key
Infrastructure (RPKI), specified by RFC 6480. The client is responsible
for downloading, validating and converting Route Origin Authorisations
(ROAs) into Validated ROA Payloads (VRPs). The client's output (VRPs)
can be used by bgpd(8) to perform BGP Origin Validation (RFC 6811).

The current rpki-client(1) version depends on the CMS functions in
OpenSSL, this of course needs to be addressed urgently.

Thanks to NetNod, IIS.SE, SUNET & 6connect for supporting this effort!

OK deraadt@

1 files changed, 73 insertions, 0 deletions

diff --git a/usr.sbin/rpki-client/Makefile b/usr.sbin/rpki-client/Makefile
new file mode 100644
index 00000000000..bac70a147af
--- /dev/null
+++ b/usr.sbin/rpki-client/Makefile
@@ -0,0 +1,73 @@
+include Makefile.configure
+
+OBJS	 = as.o \
+	   cert.o \
+	   cms.o \
+	   compats.o \
+	   crl.o \
+	   io.o \
+	   ip.o \
+	   log.o \
+	   mft.o \
+	   output-bgpd.o \
+	   roa.o \
+	   rsync.o \
+	   tal.o \
+	   validate.o \
+	   x509.o
+ALLOBJS	 = $(OBJS) \
+	   main.o \
+	   test-cert.o \
+	   test-ip.o \
+	   test-mft.o \
+	   test-roa.o \
+	   test-tal.o
+BINS	 = rpki-client \
+	   test-cert \
+	   test-ip \
+	   test-mft \
+	   test-roa \
+	   test-tal
+
+# Linux.
+#LDADD += `pkg-config --libs openssl` -lresolv
+#CFLAGS += `pkg-config --cflags openssl`
+
+# OpenBSD.
+CFLAGS += -I/usr/local/include/eopenssl
+LDADD += /usr/local/lib/eopenssl/libssl.a /usr/local/lib/eopenssl/libcrypto.a
+
+all: $(BINS)
+
+install: all
+	mkdir -p $(DESTDIR)$(BINDIR)
+	mkdir -p $(DESTDIR)$(MANDIR)/man1
+	$(INSTALL_PROGRAM) rpki-client $(DESTDIR)$(BINDIR)
+	$(INSTALL_MAN) rpki-client.1 $(DESTDIR)$(MANDIR)/man1
+
+uninstall:
+	rm -f $(DESTDIR)$(BINDIR)/rpki-client
+	rm -f $(DESTDIR)$(MANDIR)/man1/rpki-client.1
+
+rpki-client: $(OBJS) main.o
+	$(CC) -o $@ main.o $(OBJS) $(LDFLAGS) $(LDADD)
+
+test-tal: $(OBJS) test-tal.o
+	$(CC) -o $@ test-tal.o $(OBJS) $(LDFLAGS) $(LDADD)
+
+test-ip: $(OBJS) test-ip.o
+	$(CC) -o $@ test-ip.o $(OBJS) $(LDFLAGS) $(LDADD)
+
+test-mft: $(OBJS) test-mft.o
+	$(CC) -o $@ test-mft.o $(OBJS) $(LDFLAGS) $(LDADD)
+
+test-roa: $(OBJS) test-roa.o
+	$(CC) -o $@ test-roa.o $(OBJS) $(LDFLAGS) $(LDADD)
+
+test-cert: $(OBJS) test-cert.o
+	$(CC) -o $@ test-cert.o $(OBJS) $(LDFLAGS) $(LDADD)
+
+clean:
+	rm -f $(BINS) $(ALLOBJS)
+
+$(ALLOBJS): extern.h config.h