summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client
AgeCommit message (Expand)Author
2019-12-02output_createtmp() remembers the true name, so output_finish() does notTheo de Raadt
2019-12-02linewrap usageTheo de Raadt
2019-12-02missing | leads to incompete resultsTheo de Raadt
2019-11-30- no -r optionJason McIntyre
2019-11-30Document new flag and output arrangement betterTheo de Raadt
2019-11-30Tweak rpki-client to create all 4 output file formats from a singleTheo de Raadt
2019-11-29Use X509_STORE_CTX_set_flags() instead of doing the same thing by handClaudio Jeker
2019-11-29Restore the previous behaiviour of not checking the crl for the mft.Sebastian Benoit
2019-11-29remove two items from the todo listSebastian Benoit
2019-11-29... and fix the compile.Sebastian Benoit
2019-11-29bring back CRL checks, noted by claudio@Sebastian Benoit
2019-11-29delete REAMDE.mdSebastian Benoit
2019-11-29Improve the programs description a littleSebastian Benoit
2019-11-29add a comment noting missing functionalitySebastian Benoit
2019-11-29whitespacesTheo de Raadt
2019-11-29document use of /var/db/rpki-client/ and /var/cache/rpki-client/Sebastian Benoit
2019-11-29s/EXIT_SUCCESS/0/Sebastian Benoit
2019-11-29e2k19 - above parSebastian Benoit
2019-11-29not a backout commitSebastian Benoit
2019-11-29commited at minus 21 degCSebastian Benoit
2019-11-29You know the main street in white horse? On the left...Sebastian Benoit
2019-11-29The code is more what you'd call 'guidelines' than actual rules.Sebastian Benoit
2019-11-29s/EXIT_FAILURE/1/Sebastian Benoit
2019-11-29s/EXIT_FAILURE/1/Sebastian Benoit
2019-11-29s/EXIT_FAILURE/1/Sebastian Benoit
2019-11-29normalize_name() is no longer neededClaudio Jeker
2019-11-29Use the AKI embedded in the CRL to store the crls. This way the AKI fromClaudio Jeker
2019-11-29If run as root, priv-drop to _rpki-client.Theo de Raadt
2019-11-29fchmod 0644 the output roa file, since it is public information andTheo de Raadt
2019-11-29Shuffle the desk chairs on this ocean linerClaudio Jeker
2019-11-29valid_as() should be as strict as valid_ip() when it comes to not-coveredClaudio Jeker
2019-11-29fix io_simple_read() change from earlier 'fix warnings' commitSebastian Benoit
2019-11-28enable more warning flags and fix a few issues noticed.Sebastian Benoit
2019-11-28improve snprintf overflow test; noted by bennoTheo de Raadt
2019-11-28Convert the auths array into an RB tree indexed by SKI. For fast lookupsClaudio Jeker
2019-11-28The root certs do not have a CRL distribution point extension so don'tClaudio Jeker
2019-11-28Output to a temporary file, which gets renamed on success. This willTheo de Raadt
2019-11-28convert the return code to be 0 for success and 1 for failure.Sebastian Benoit
2019-11-28intentionally fclose output file, rather than relying on exit() to do it.Theo de Raadt
2019-11-28add missing prototypeSebastian Benoit
2019-11-28Remove -r flag and associated plumbing. We are always checking CRLs from now on.Sebastian Benoit
2019-11-28improve on previous to only use the required CRLs.Sebastian Benoit
2019-11-28build with -Wall, more -W coming, ok claudio@Sebastian Benoit
2019-11-28Check for failure of X509_get_ext_d2i() in x509_get_crl()Claudio Jeker
2019-11-28Use x509_get_crl() to get the crl distribution point out of the x509 cert.Claudio Jeker
2019-11-28Document x509_get_crl()Claudio Jeker
2019-11-28some whitespace invaded this island, and deraadt@ demanded its removal.Sebastian Benoit
2019-11-28To verify a manifest, a roa, or a certificate, we check its signatureSebastian Benoit
2019-11-27swap some comparisonsTheo de Raadt
2019-11-27whitespaceSebastian Benoit