summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client/main.c
diff options
context:
space:
mode:
authorJob Snijders <job@cvs.openbsd.org>2022-11-02 12:43:03 +0000
committerJob Snijders <job@cvs.openbsd.org>2022-11-02 12:43:03 +0000
commite17f607fbc86892fab7be337c821a84027f605fb (patch)
treeedb189f0266296419ebca13718f32624812cc990 /usr.sbin/rpki-client/main.c
parentb931f2967cb6eae6a9015527fc4eb5053f70d6b2 (diff)
Add support for draft-ietf-sidrops-signed-tal-12
Add support validation of Signed Objects containing Trust Anchor Keys (TAKs - aka 'Signed TALs'). Signed TALs provide a mechanism for RIRs to distribute and sign the next Trust Anchor with the current Trust Anchor. This might be an improvement over visiting RIR websites and copy+pasting TAL data by hand. OK tb@
Diffstat (limited to 'usr.sbin/rpki-client/main.c')
-rw-r--r--usr.sbin/rpki-client/main.c6
1 files changed, 5 insertions, 1 deletions
diff --git a/usr.sbin/rpki-client/main.c b/usr.sbin/rpki-client/main.c
index 9d2cb3482fa..51f42114094 100644
--- a/usr.sbin/rpki-client/main.c
+++ b/usr.sbin/rpki-client/main.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: main.c,v 1.219 2022/09/03 09:22:25 claudio Exp $ */
+/* $OpenBSD: main.c,v 1.220 2022/11/02 12:43:02 job Exp $ */
/*
* Copyright (c) 2021 Claudio Jeker <claudio@openbsd.org>
* Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv>
@@ -612,6 +612,9 @@ entity_process(struct ibuf *b, struct stats *st, struct vrp_tree *tree,
st->aspas_invalid++;
aspa_free(aspa);
break;
+ case RTYPE_TAK:
+ st->taks++;
+ break;
default:
errx(1, "unknown entity type %d", type);
}
@@ -1311,6 +1314,7 @@ main(int argc, char *argv[])
stats.mfts, stats.mfts_fail, stats.mfts_stale);
printf("Certificate revocation lists: %zu\n", stats.crls);
printf("Ghostbuster records: %zu\n", stats.gbrs);
+ printf("Trust Anchor Keys: %zu\n", stats.taks);
printf("Repositories: %zu\n", stats.repos);
printf("Cleanup: removed %zu files, %zu directories, %zu superfluous\n",
stats.del_files, stats.del_dirs, stats.extra_files);