diff options
Diffstat (limited to 'usr.sbin/rpki-client/validate.c')
| -rw-r--r-- | usr.sbin/rpki-client/validate.c | 27 |
1 files changed, 26 insertions, 1 deletions
diff --git a/usr.sbin/rpki-client/validate.c b/usr.sbin/rpki-client/validate.c index 71d08236084..d7623808704 100644 --- a/usr.sbin/rpki-client/validate.c +++ b/usr.sbin/rpki-client/validate.c @@ -1,4 +1,4 @@ -/* $OpenBSD: validate.c,v 1.46 2022/11/02 11:28:36 tb Exp $ */ +/* $OpenBSD: validate.c,v 1.47 2022/11/26 12:02:37 job Exp $ */ /* * Copyright (c) 2019 Kristaps Dzonsons <kristaps@bsd.lv> * @@ -523,3 +523,28 @@ valid_aspa(const char *fn, struct cert *cert, struct aspa *aspa) return 0; } + +/* + * Validate Geofeed prefixes: check that the prefixes are contained. + * Returns 1 if valid, 0 otherwise. + */ +int +valid_geofeed(const char *fn, struct cert *cert, struct geofeed *g) +{ + size_t i; + char buf[64]; + + for (i = 0; i < g->geoipsz; i++) { + if (ip_addr_check_covered(g->geoips[i].ip->afi, + g->geoips[i].ip->min, g->geoips[i].ip->max, cert->ips, + cert->ipsz) > 0) + continue; + + ip_addr_print(&g->geoips[i].ip->ip, g->geoips[i].ip->afi, buf, + sizeof(buf)); + warnx("%s: Geofeed: uncovered IP: %s", fn, buf); + return 0; + } + + return 1; +} |