summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client
AgeCommit message (Expand)Author
2022-03-28Compare the SKI of the embedded EE certificate of the CMS message with theClaudio Jeker
2022-03-28Fix error check of CMS_unsigned_get_addr_count()Theo Buehler
2022-03-25Implement most of the CMS related checks required by RFC 6488 section 3Claudio Jeker
2022-03-21Make sure that the string generated by pretty_key_id() is always properlyClaudio Jeker
2022-03-11Fix overflow protection check in the poll loop. The check needs to happenClaudio Jeker
2022-02-14Draw a bit more attention to transport switches between RRDP, RSYNC, and cacheJob Snijders
2022-02-14Name the maximum number of deltas permitted in a RRDP Notification fileJob Snijders
2022-02-10Improve free inodes check from fs.f_favail > 0 to fs.f_free > 0.Theo Buehler
2022-02-10Fix serial number printing in crl_print() for large serials.Claudio Jeker
2022-02-10Implement some code to print crls with -f.Claudio Jeker
2022-02-10Only show the 'not enough inodes' warning if the filesystem reports moreTheo Buehler
2022-02-10Free s->last_mod before overwriting it with a new last_mod.Theo Buehler
2022-02-10Free conn->last_modified before overwriting it with strdup().Theo Buehler
2022-02-08Check CRLs also for manifestsTheo Buehler
2022-02-08Before loading the certificate chain for the file under inspection checkClaudio Jeker
2022-02-08Move the guts of proc_parser_crl() into crl_parse(). This is actuallyTheo Buehler
2022-02-04More consistency in the return code docs.Theo Buehler
2022-02-04Document certificate_policies() in a comment.Theo Buehler
2022-02-04whitespaceTheo Buehler
2022-02-04Ensure that certificate policies follow RFC 7318Theo Buehler
2022-02-04Enforce Certificate Policy for RPKITheo Buehler
2022-02-04Add id-cp-ipAddr-asNumber OID to x509_init_oid()Theo Buehler
2022-02-04Fix outdated commentJob Snijders
2022-02-03Enforce the RRDP XMLNS to "http://www.ripe.net/rpki/rrdp"Claudio Jeker
2022-02-03Time for rpki-client 7.6Claudio Jeker
2022-02-02When a RRDP fetch failed not only clear the filesystem but also flushClaudio Jeker
2022-02-02typoTheo Buehler
2022-01-28Properly handle .mft files as intended by the RFC. Instead of alwaysClaudio Jeker
2022-01-28Do not skip .rrdp cache cleanup if rrdp is off (option -R). The syncClaudio Jeker
2022-01-28When it's the possessive of 'it', it's spelled "its", without thePhilip Guenther
2022-01-26Allow rsync:// URI as file in -f mode. This makes it easier to exploreClaudio Jeker
2022-01-26Change the repository layout by removing the valid directory. EverythingClaudio Jeker
2022-01-24Adjust code to handle unsupported file types a bit more graceful.Claudio Jeker
2022-01-24When rename fails show the source filename and not the destination.Claudio Jeker
2022-01-24in the options list, show -f as taking "file ..." arguments;Jason McIntyre
2022-01-23rearrange SYNOPSIS/usage to be a bit clearer;Jason McIntyre
2022-01-23Handle EINTR the same way in all poll loops. In all cases restart theClaudio Jeker
2022-01-23zap extra blank lineTheo Buehler
2022-01-23Allow rpki-client to display more than one file in -f mode.Claudio Jeker
2022-01-23Simplify valid_cert() and valid_roa() by passing in struct auth insteadClaudio Jeker
2022-01-22Change valid_filename() ot return an enum rtype and rename it toTheo Buehler
2022-01-21Add function to determine the file type from the file name extensionTheo Buehler
2022-01-21Avoid out-of-bounds accesses in case the filename is too showrt toTheo Buehler
2022-01-20Move the notBefore and notAfter checks from proc_parser_root_cert()Claudio Jeker
2022-01-20Rename mft_check() to proc_parser_mft_check() and make it a static function.Claudio Jeker
2022-01-19Add -f to usage in main routineJob Snijders
2022-01-19Document the -f file inspection functionJob Snijders
2022-01-19Implement a filemode where the passed file from the command line isClaudio Jeker
2022-01-19rpki-client: don't leak nfile if no repo is found.Theo Buehler
2022-01-18Pass the X509_V_FLAG_CRL_CHECK flag as argument to valid_x509().Claudio Jeker