summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client/mft.c
AgeCommit message (Expand)Author
2024-11-02Improve detection of gaps in ManifestissuanceJob Snijders
2024-09-12Reintroduce check that CRL Number is in rangeTheo Buehler
2024-09-08rpki-client: fix typos in comments and one in a warning messageTheo Buehler
2024-06-11rpki-client: fix incorrect use of ASN1_tag2str()Theo Buehler
2024-05-24Update references to new and not quite so new RFCsTheo Buehler
2024-05-20Instead of tracking certificates by SKI track them by an internal identifier.Claudio Jeker
2024-05-15rpki-client: plug leak of the crl pathTheo Buehler
2024-04-20Display distinct errors for various problematic CRL/MFT situationshipsJob Snijders
2024-02-22Add support for RPKI Signed Prefix ListsJob Snijders
2024-02-21rpki-client: remove the remaining struct parseTheo Buehler
2024-02-16Rename fn into file to avoid clash in upcoming diffTheo Buehler
2024-02-16Use _asn1 suffix for some aspa/mft/roa/rsc/takTheo Buehler
2024-02-15Ensure that the FileAndHashes list in a mft has no duplicatesTheo Buehler
2024-02-13Add explicit ASN1_ITEM_EXP prototypesJob Snijders
2024-02-05Check whether all data in eContent has been consumedJob Snijders
2024-02-04Use x509_get_time() to get the Manifest thisUpdate / nextUpdateJob Snijders
2024-02-03Refactor handling of stale manifestsJob Snijders
2024-02-02Remove old commentJob Snijders
2024-01-31Introduce and use mft_compare_issued()Theo Buehler
2024-01-31Rename mft_compare() to mft_compare_seqnum()Theo Buehler
2023-12-11Log a warning when a manifest replay is detectedJob Snijders
2023-10-13Allow imposing constraints on RPKI trust anchorsJob Snijders
2023-09-25Pass the talid to various parse functionsTheo Buehler
2023-09-03Shuffle the order in which Manifest entries are processedJob Snijders
2023-06-29Retire log.cTheo Buehler
2023-06-20Add compliance checks for the version, KU, and EKU of TAK/MFT/GBR EE certsJob Snijders
2023-06-07In anticipation of a bump of the ASPA eContent profile version, updateJob Snijders
2023-05-22Convert generalizedtime_to_tm() to ASN1_TIME_to_tm()Theo Buehler
2023-05-22Avoid use of LibreSSL-specific ASN1_time_tm_cmp() APITheo Buehler
2023-04-26Improve accounting by tracking things by repo and tal.Claudio Jeker
2023-04-24If the two mfts in mft_compare() are the same do not prefer theClaudio Jeker
2023-03-13Check that the CMS signing-time is not after the MFT's nextUpdateJob Snijders
2023-03-13Revert accidental change from explicit to implicit tagging in r1.86.Theo Buehler
2023-03-13Rename some data fields to closer match their provenanceJob Snijders
2023-03-12Refactor expiration calculationJob Snijders
2023-03-12Initialize the local signtime variable in the individual *_parse()Theo Buehler
2023-03-09Unwrap a few lines and zap a tabTheo Buehler
2023-03-09Show CMS signing-time signed attribute in filemodeJob Snijders
2022-12-01Adjust comment for rtype_from_mftfile(). It is important that RTYPE_INVALIDClaudio Jeker
2022-11-30Remove unused ctype.h includeJob Snijders
2022-11-29Only include stdarg.h, if we call any of va_{start,end}()Job Snijders
2022-11-26Add support for authenticating geofeed data CSV files in filemodeJob Snijders
2022-11-07Simplify use of strrchr()Job Snijders
2022-11-04Check the SIA signedObject in ROA/MFT/ASPA/TAK/GBR EE certificatesJob Snijders
2022-11-02Add support for draft-ietf-sidrops-signed-tal-12Job Snijders
2022-10-13All of ROA, MFT, ASPA, and RSC define their respective 'version' fieldJob Snijders
2022-08-30Add support for ASPA objects (draft-ietf-sidrops-aspa-profile-10)Job Snijders
2022-08-18Remove dangling ASPA references until we land real supportJob Snijders
2022-06-10Unify error messages on d2i failure for econtentTheo Buehler
2022-06-10Dedup econtent version checksTheo Buehler