diff options
author | job <job@cvs.openbsd.org> | 2021-07-28 00:46:06 +0000 |
---|---|---|
committer | job <job@cvs.openbsd.org> | 2021-07-28 00:46:06 +0000 |
commit | 86778afff6673c44e908481ecce5dbdf940622c9 (patch) | |
tree | f1315be9c03971fe5826abdae049bb5a415d0278 /usr.sbin/rpki-client | |
parent | e1dc3e935b15b54701d2a45353880ec87311582d (diff) |
Remove outdated information
Diffstat (limited to 'usr.sbin/rpki-client')
-rw-r--r-- | usr.sbin/rpki-client/TODO.md | 22 |
1 files changed, 0 insertions, 22 deletions
diff --git a/usr.sbin/rpki-client/TODO.md b/usr.sbin/rpki-client/TODO.md deleted file mode 100644 index d8b4708f425..00000000000 --- a/usr.sbin/rpki-client/TODO.md +++ /dev/null @@ -1,22 +0,0 @@ - -The following are unclear to me. - -- Following up on validating AS numbers for certificates. The - specification is not clear on what happens with empty AS extensions in - a chain of certificates. Do we consider that inheritence? If so, - what's the point of having an inheritence clause? - -- I get that ASid 0 has special meaning for ROAs (see RFC 6483 sec 4), - but it doesn't make sense that some top-level certificates (e.g., - Afrinic) have a range inclusive of zero, since it's reserved. In this - system, I let the range through but don't let a specific ASid of 0 in - certificates---only ROAs. - -- VRP duplication. When run as-is, there are duplicate VRPs and - that doesn't seem right. It happens when two ROAs have their validity - period overlap. I need to see if there's a more programmatic way to - check before commiting the routes to output. - -- (**Important**.) Stipulating `X509_V_FLAG_IGNORE_CRITICAL` might be - dangerous. Which extensions are being ignored should be - double-checked. |