summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client
AgeCommit message (Expand)Author
2021-12-07Use one common function to build the base directory path for repositories.Claudio Jeker
2021-12-05fix unintended sizeof pointerJonathan Gray
2021-12-03Apply the same MAX_IP_SIZE limit to ROA files as it is done on certificates.Claudio Jeker
2021-12-03Clarify manpageJob Snijders
2021-11-25Initialize the repo_timeout to timeout / 4 at start of main().Claudio Jeker
2021-11-25Replace MAX_REPO_TIMEOUT with repo_timeout, which is set to 1/4th ofJob Snijders
2021-11-25Check for possible negative diff timeout. Clamp it to 0 in that case.Claudio Jeker
2021-11-24Move some functions from rrdp.c to rrdp_util.c and hex_decode to encoding.c.Claudio Jeker
2021-11-19Fix typoJob Snijders
2021-11-15Adjust how the repository count limit works. Instead of failing hard justClaudio Jeker
2021-11-10Collaps the AFI specific IP print functions into ip_addr_print() theirClaudio Jeker
2021-11-10Sync the encoding functions for URI with the version of ftp(1)Claudio Jeker
2021-11-10Increase maximum filesize of RPKI objects to 4MBJob Snijders
2021-11-09Limit the number of publication points under a given TAL.Claudio Jeker
2021-11-09Issue a parse error for XML files that include a DOCTYPE section.Claudio Jeker
2021-11-09Implementation of HTTP Keep-Alive sessions introduced a regression forClaudio Jeker
2021-11-07bump version, ok claudio@Sebastian Benoit
2021-11-05Show the attribute name like in the other non conforming attribute errorsClaudio Jeker
2021-11-05Simplify how IP addresses and AS numbers are passed between processes.Claudio Jeker
2021-11-04Cleanup some old XXX needed comments. cert_parse() returns a referencedClaudio Jeker
2021-11-04On errors related to the pipes to the childs don't error out right away.Claudio Jeker
2021-11-04Instead of creating a struct repo for each unique caRepository URIClaudio Jeker
2021-11-04Move and promote getmonotime() to an internal API function.Claudio Jeker
2021-11-04Use the same spacing for all defines.Claudio Jeker
2021-11-04Instead of passing tal descriptions around just pass a tal id andClaudio Jeker
2021-11-03When handling CRLF and nulling out the optional CR, point nl at theTheo Buehler
2021-11-03Limit the number of rsync processes being spawned by stopping to acceptClaudio Jeker
2021-11-03Print the name of the non conforming attribute in the XML parse error.Claudio Jeker
2021-11-03For chunked encoding on switch to STATE_RESPONSE_CHUNKED_TRAILER whenClaudio Jeker
2021-11-03Move the MAX_CERT_DEPTH to extern.h and adjust the comments of all limitsClaudio Jeker
2021-11-03In proc_parser_roa() adjust the expiry calculation to walk all ofClaudio Jeker
2021-11-02Only add CA certificates to the auth tree, skip BGPsec certificates.Claudio Jeker
2021-11-01Further simplify cert and auth handling. Move common code into auth_insertClaudio Jeker
2021-11-01Cleanup struct auth a bit. The tal description is also stored in the certClaudio Jeker
2021-10-31Further improve load_file(). Always set an errno on errors and make sureClaudio Jeker
2021-10-31When converting the TAL parser to use load_file and pass the file viaClaudio Jeker
2021-10-29rpki-client 7.4 is imminent, bump versionClaudio Jeker
2021-10-29Ensure that RRDP snapshot and delta files are fetched from the same hostClaudio Jeker
2021-10-29Limit the HTTP requests to 2GB of data. This is enforced via a quickClaudio Jeker
2021-10-28Sync output at end of run with output inside the openbgpd output file.Claudio Jeker
2021-10-28Limit how many FileAndHash entries a single manifest may containJob Snijders
2021-10-28Don't fetch files larger than 2MBJob Snijders
2021-10-28Limit the size of the base64 blob inside the RRDP XML to be less thanClaudio Jeker
2021-10-28Don't exit in certain cases on failures to parse x509 objects.Bob Beck
2021-10-27Add limits on size of certain untrusted inputsBob Beck
2021-10-27Limit length on URIsJob Snijders
2021-10-26Move load_file() to encoding.c so that regress can use the function.Claudio Jeker
2021-10-26Refactor the tal parsing code to use the same load_file() and bufferClaudio Jeker
2021-10-26Also move the cert parser code away from using BIO.Claudio Jeker
2021-10-26rpki-client supports RFC8630 TAL files.Claudio Jeker