summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client
AgeCommit message (Expand)Author
2019-11-29s/EXIT_FAILURE/1/Sebastian Benoit
2019-11-29s/EXIT_FAILURE/1/Sebastian Benoit
2019-11-29s/EXIT_FAILURE/1/Sebastian Benoit
2019-11-29normalize_name() is no longer neededClaudio Jeker
2019-11-29Use the AKI embedded in the CRL to store the crls. This way the AKI fromClaudio Jeker
2019-11-29If run as root, priv-drop to _rpki-client.Theo de Raadt
2019-11-29fchmod 0644 the output roa file, since it is public information andTheo de Raadt
2019-11-29Shuffle the desk chairs on this ocean linerClaudio Jeker
2019-11-29valid_as() should be as strict as valid_ip() when it comes to not-coveredClaudio Jeker
2019-11-29fix io_simple_read() change from earlier 'fix warnings' commitSebastian Benoit
2019-11-28enable more warning flags and fix a few issues noticed.Sebastian Benoit
2019-11-28improve snprintf overflow test; noted by bennoTheo de Raadt
2019-11-28Convert the auths array into an RB tree indexed by SKI. For fast lookupsClaudio Jeker
2019-11-28The root certs do not have a CRL distribution point extension so don'tClaudio Jeker
2019-11-28Output to a temporary file, which gets renamed on success. This willTheo de Raadt
2019-11-28convert the return code to be 0 for success and 1 for failure.Sebastian Benoit
2019-11-28intentionally fclose output file, rather than relying on exit() to do it.Theo de Raadt
2019-11-28add missing prototypeSebastian Benoit
2019-11-28Remove -r flag and associated plumbing. We are always checking CRLs from now on.Sebastian Benoit
2019-11-28improve on previous to only use the required CRLs.Sebastian Benoit
2019-11-28build with -Wall, more -W coming, ok claudio@Sebastian Benoit
2019-11-28Check for failure of X509_get_ext_d2i() in x509_get_crl()Claudio Jeker
2019-11-28Use x509_get_crl() to get the crl distribution point out of the x509 cert.Claudio Jeker
2019-11-28Document x509_get_crl()Claudio Jeker
2019-11-28some whitespace invaded this island, and deraadt@ demanded its removal.Sebastian Benoit
2019-11-28To verify a manifest, a roa, or a certificate, we check its signatureSebastian Benoit
2019-11-27swap some comparisonsTheo de Raadt
2019-11-27whitespaceSebastian Benoit
2019-11-27Only store ta certs in the trust store and build chains of theSebastian Benoit
2019-11-27knf, make types grepable. ok claudio@Sebastian Benoit
2019-11-27rename a variable to show it's a CRL. ok claudio@Sebastian Benoit
2019-11-18Move the define of TALSZ_MAX to top and add a description forClaudio Jeker
2019-11-18Add and fix some comments.Claudio Jeker
2019-11-18Remove unused variables, these output formats don't need special handlingClaudio Jeker
2019-11-18tal_read_file() should error out instead of returning a NULL buffer.Claudio Jeker
2019-11-06For now ignore https:// URI in tal files. rpki-client only does rsync.Claudio Jeker
2019-11-06The memory returned by realloc(NULL, ...) is uninitalized. Therefore makeClaudio Jeker
2019-11-06If tal_parse_buffer() fails return early because the code that followsClaudio Jeker
2019-11-04The argument to the ctype functions needs to be representable as anClaudio Jeker
2019-11-04Refactor tal code a bit. Move the file reader back into tal.c so that theClaudio Jeker
2019-11-02Build rpki-client with LibreSSL.Joel Sing
2019-10-31Handle the TAL files in the master process and pass them as buffer to theClaudio Jeker
2019-10-23Rewrite the time validity check for mfts. Using ASN1_GENERALIZEDTIME_printClaudio Jeker
2019-10-16tweak previous; help/ok claudioJason McIntyre
2019-10-16Add an output format for bird and one doing CSV. Also update the manpageClaudio Jeker
2019-10-16Clean up header includes. Most are no longer required.Claudio Jeker
2019-10-16Set the maxlength to either the prefixlen itself or the value from the ROA.Claudio Jeker
2019-10-08Rewrite the output handling of rpki-client and add an option to dump theClaudio Jeker
2019-10-03memset struct ip_addr before assigning values to it. in the IPv4 caseClaudio Jeker
2019-09-26For whatever reason it is fairly common that a ROA object references a CRLClaudio Jeker