CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/06/07 05:48:05
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Fine-tune the TA tiebreaker logic
Additional tiebreaker: prefer TA certificates with the narrower validity window
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/05/30 03:54:59
Modified files:
usr.sbin/rpki-client: rrdp_delta.c rrdp_snapshot.c
Log message:
Increase logging verbosity as to what exactly hit a limit
rpki-client:
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/05/15 03:09:38
Modified files:
usr.sbin/bgpd : bgpd.c session.c
Log message:
Mark RTR and IPv6 BGP packets with DSCP CS6 (network control)
Additionally, set TCP_NODELAY on the RTR socket, there is no
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/05/15 02:45:03
Modified files:
usr.sbin/ospf6d: ospfe.c
Log message:
Mark network control packets with DSCP CS6 (parity with ospfd)
OK claudio@
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2024/05/13 08:11:02
Modified files:
. : ftp.html ftplist httpslist
build : mirrors.dat
openbgpd : ftp.html
openntpd : portable.html
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/25 03:58:17
Modified files:
usr.bin/vi/vi : vs_refresh.c
Log message:
Don't divide by zero (empty files)
While there, also increase buf[]
OK claudio@
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2024/04/24 11:35:40
Modified files:
. : ftp.html ftplist httpslist
build : mirrors.dat
openbgpd : ftp.html
openntpd : portable.html
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/24 09:15:40
Modified files:
usr.bin/vi/docs/USD.doc/vi.man: vi.1
usr.bin/vi/vi : vs_refresh.c
Log message:
In ruler show the current line number as a percentage of the total lines
OK
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/21 03:03:22
Modified files:
usr.sbin/rpki-client: cms.c x509.c
Log message:
Mandate presence of CMS signing-time and disallow binary-signing-time
RFC-to-be draft-ietf-sidrops-cms-signing-time
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/20 09:45:41
Modified files:
usr.sbin/rpki-client: mft.c
Log message:
Display distinct errors for various problematic CRL/MFT situationships
RFC 6487 section 8 specifies only a single CRL is issued
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/17 09:00:50
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Remove outdated (now inaccurate) warning message
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/17 08:31:59
Modified files:
etc/rpki : apnic.constraints arin.constraints
lacnic.constraints ripe.constraints
Log message:
Sync RPKI Trust Anchor constraints to
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/15 07:57:45
Modified files:
usr.sbin/rpki-client: crl.c extern.h parser.c
Log message:
Use the manifest location as additional differentiator when comparing CRLs
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/12 05:50:29
Modified files:
usr.sbin/rpki-client: rrdp_notification.c
Log message:
Fix warning about delta element issues in the Update Notification File XML
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/04/05 10:05:15
Modified files:
usr.sbin/rpki-client: aspa.c extern.h main.c output-bgpd.c
output-json.c
Log message:
Don't emit Validated ASPAs for Customer ASIDs with
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/25 05:27:01
Modified files:
lib/libcrypto/x509: x509rset.c
Log message:
Error on setting an invalid CSR version
Reported by David Benjamin (BoringSSL)
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/24 04:53:27
Modified files:
usr.sbin/httpd : http.h
Log message:
Sync with IANA Status Code Registry
>From https://www.iana.org/assignments/http-status-codes/http-status-codes.xhtml
OK sthen@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/22 22:18:56
Modified files:
etc/rpki : lacnic.constraints
Log message:
Expand ASN range for LACNIC
LACNIC received a new block of ASNs from IANA
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/21 21:38:12
Modified files:
usr.sbin/rpki-client: cert.c extern.h filemode.c http.c main.c
repo.c rrdp_delta.c rrdp_notification.c
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/19 22:39:10
Modified files:
regress/usr.sbin/rpki-client: test-aspa.c test-gbr.c test-mft.c
test-roa.c test-spl.c test-tak.c
Log message:
Run most of regress
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/19 22:36:30
Modified files:
usr.sbin/rpki-client: x509.c
Log message:
Check whether filename and SIA match
Verify whether the filename as presented by the publication point (which
is unsigned
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/15 23:18:01
Modified files:
distrib/sets/lists/base: mi
distrib/sets/lists/etc: mi
Log message:
Move RPKI Trust Anchor constraints from etc set to base
The cadence of updates being applied
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/14 21:38:59
Modified files:
usr.sbin/rpki-client: constraints.c
Log message:
Log which of the constraints files triggered a violation
Requested by Ties de Kock (RIPE NCC)
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/14 00:23:14
Modified files:
usr.bin/ssh: ssh.1
Log message:
Clarify how literal IPv6 addresses can be used in -J mode
OK djm@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/12 10:03:56
Modified files:
regress/usr.sbin/rpki-client: test-http.c
regress/usr.sbin/rpki-client/libressl: Makefile
Log message:
Add regress for cross-origin HTTP redirection
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/12 10:02:30
Modified files:
usr.sbin/rpki-client: http.c
Log message:
Enforce same-origin policy for HTTP redirects
Isolate resources from different RRDP servers to avoid
inappropriately increasing
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/03/01 02:36:55
Modified files:
usr.sbin/rpki-client: main.c
Log message:
Lipstick on a pig: avoid comparing signed and unsigned
OK tb@ claudio@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/26 13:37:27
Modified files:
usr.sbin/rpki-client: rsync.c
Log message:
Also download SPLs via rsync
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/26 08:40:33
Modified files:
usr.sbin/rpki-client: extern.h main.c output-json.c
output-ometric.c repo.c
Log message:
Track the number of new files moving from
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/26 03:02:37
Modified files:
usr.sbin/rpki-client: print.c
Log message:
Properly close JSON array before continuing in TAK
OK claudio@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/22 05:51:50
Modified files:
regress/usr.sbin/rpki-client: Makefile.inc
Added files:
regress/usr.sbin/rpki-client: test-spl.c
regress/usr.sbin/rpki-client/spl:
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/22 05:50:11
src/regress/usr.sbin/rpki-client/spl
Update of /cvs/src/regress/usr.sbin/rpki-client/spl
In directory cvs.openbsd.org:/tmp/cvs-serv28908/spl
Log Message:
Directory
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/22 05:49:42
Modified files:
usr.sbin/rpki-client: Makefile extern.h filemode.c main.c mft.c
output-bgpd.c output-bird.c output-csv.c
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/19 03:15:35
Modified files:
usr.sbin/bgpd : bgpd.h session.c
Log message:
IANA assigned error 8 to draft-ietf-idr-sendholdtimer
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/17 07:53:29
Modified files:
usr.sbin/tcpdump: print-bgp.c
Log message:
Add 'Send Hold Timer expired' BGP Error code
OK deraadt@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/13 15:44:21
Modified files:
usr.sbin/rpki-client: aspa.c mft.c roa.c rsc.c tak.c
Log message:
Add explicit ASN1_ITEM_EXP prototypes
In LibreSSL *_it are variables, in other implementations they
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/13 14:18:55
Modified files:
usr.sbin/rpki-client: tak.c
Log message:
Refactor parse_takey()
Avoid i2d_RSAPublicKey() to help with future portability efforts.
Avoid a complication related to
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/13 13:41:22
Modified files:
usr.sbin/rpki-client: output-json.c output-ometric.c
Log message:
Remove the stalemanifests metrics (which are no longer in use)
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/13 13:40:17
Modified files:
usr.sbin/rpki-client: print.c
Log message:
Improve printing of TALs extracted from .tak objects
This changeset makes the output align more with the TAL file syntax.
OK
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/13 13:37:15
Modified files:
usr.sbin/rpki-client: x509.c
Log message:
Improve a comment about what exactly the SKI is
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/13 13:36:42
Modified files:
usr.sbin/rpki-client: print.c
Log message:
Avoid using i2d_RSAPublicKey()
This should help with future portability efforts, and perhaps
makes the code a bit more
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/13 05:38:43
Modified files:
lib/libcrypto/man: d2i_ASN1_OCTET_STRING.3
Log message:
Document a portability caveat about GeneralizedTime and UTCTime
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/12 09:42:43
Modified files:
usr.bin/vi/common: options.c
usr.bin/vi/docs/USD.doc/vi.man: vi.1
usr.bin/vi/vi : vs_refresh.c
Log message:
Add showfilename set option
Pressing
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/09 06:49:41
Modified files:
usr.sbin/rpki-client: version.h
Log message:
Bump release
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/05 12:23:58
Modified files:
usr.sbin/rpki-client: aspa.c mft.c roa.c rsc.c tak.c
Log message:
Check whether all data in eContent has been consumed
It is possible that a given ASN.1 template
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/03 17:53:27
Modified files:
usr.sbin/rpki-client: mft.c
Log message:
Use x509_get_time() to get the Manifest thisUpdate / nextUpdate
>From the moment d2i_Manifest() was introduced, it was
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/03 07:30:47
Modified files:
usr.sbin/rpki-client: extern.h main.c mft.c output-json.c
output-ometric.c output.c parser.c repo.c
Log message:
Refactor handling of stale
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 12:31:59
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Update the comment
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 12:26:49
Modified files:
usr.sbin/rpki-client: mft.c
Log message:
Remove old comment
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 12:26:26
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
no longer check staleness in proc_parser_mft
invert logic for readability
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 11:11:13
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
refactor: don't call proc_parser_mft_post for the first mft
should be exact same behaviour as before
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 09:15:09
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
refactor: populate mft->path in the pre parser
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 07:13:58
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
refactor: no longer needed to pass loc to the mft preparser
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 06:40:50
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
refactor: move parse_filepath() to avoid pointer indirection
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 05:35:15
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
refactoring: move time validity window checks out of proc_parser_mft_post()
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/02/02 05:23:16
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Rework error messages a bit
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/31 10:19:02
Modified files:
usr.sbin/rpki-client: rpki-client.8
Log message:
Add reference to RRDP Session Desynchronization draft
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/31 08:01:13
Modified files:
usr.sbin/rpki-client: x509.c
Log message:
Make the error a bit easier to read
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/29 20:40:01
Modified files:
etc/rpki : apnic.constraints arin.constraints
lacnic.constraints ripe.constraints
Log message:
Add more RPKI TA constraints: LACNIC ASNs
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/29 13:37:03
Modified files:
lib/libcrypto/objects: obj_mac.num
Log message:
Add id-ct-rpkiSignedPrefixList NID
References:
https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-prefixlist/
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/29 13:36:20
Modified files:
lib/libcrypto/objects: objects.txt
Log message:
Add id-ct-rpkiSignedPrefixList OID
References:
https://datatracker.ietf.org/doc/draft-ietf-sidrops-rpki-prefixlist/
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/26 11:11:49
Modified files:
usr.sbin/bgplgd: Makefile bgplgd.8 slowcgi.c
Log message:
Add a -V flag to bgplgd
OK claudio@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/26 04:58:37
Modified files:
regress/usr.bin/openssl: appstest.sh
usr.bin/openssl: openssl.1 x509.c
Log message:
Add 'openssl x509 -new' functionality to the libcrypto CLI utility
The
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/23 02:32:57
Modified files:
usr.sbin/rpki-client: filemode.c
Log message:
Warn about overclaiming intermediate CAs, but don't error
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/22 06:44:59
Modified files:
lib/libcrypto/man: Makefile
Added files:
lib/libcrypto/man: CMS_signed_add1_attr.3
Log message:
Document various CMS_{signed,unsigned}_* functions
These
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/18 07:34:26
Modified files:
usr.sbin/rpki-client: crl.c extern.h parser.c print.c
Log message:
The CRL's purported signing time actually is called thisUpdate, not lastUpdate
OK tb@ claudio@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/16 12:52:39
Modified files:
usr.sbin/rpki-client: rpki-client.8
Log message:
Update standards reference
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/12 04:24:03
Modified files:
regress/usr.bin/openssl: appstest.sh
usr.bin/openssl: x509.c openssl.1
Log message:
Add -force_pubkey -multivalue-rdn -set_issuer -set_subject -utf8 to x509 app
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2024/01/11 04:55:14
Modified files:
usr.sbin/rpki-client: cert.c
Log message:
Make the -P option work for Trust Anchor certificates as well
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/29 07:35:43
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Fix a NULL access or use-after-free bug
This is a bandaid, the proc_parser_mft() is too complex and needs reworking
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/26 06:36:18
Modified files:
etc/rpki : apnic.constraints arin.constraints
lacnic.constraints ripe.constraints
Log message:
Align the other RIRs with the recent
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/24 03:48:58
Modified files:
usr.sbin/rpki-client: rrdp_delta.c
Log message:
Zal dead code
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/19 01:10:19
Modified files:
etc/rpki : afrinic.constraints apnic.constraints
arin.constraints lacnic.constraints
ripe.constraints
Log
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/18 16:42:20
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Rephrase some warnings related to Manifests
Feedback from Tom Harrison (APNIC)
with and OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/14 05:26:04
Modified files:
etc/rpki : afrinic.constraints
Log message:
Constrain the AFRINIC TA further
Today AFRINIC clarified its actual current resource holdings by issuing
a new CA
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/14 02:13:00
Modified files:
etc/rpki : apnic.constraints
Log message:
For historical reasons, APNIC ended up with a v6 block for IX assignments
carved out of a larger block assigned to RIPE
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/13 04:34:56
Modified files:
etc: Makefile changelist
Added files:
etc/rpki : afrinic.constraints apnic.constraints
arin.constraints
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/11 12:05:20
Modified files:
usr.sbin/rpki-client: extern.h parser.c
Log message:
Warn when the same manifestNumber is recycled across multiple issuances of that
manifest
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/11 08:50:23
Modified files:
usr.sbin/rpki-client: mft.c parser.c
Log message:
Log a warning when a manifest replay is detected
OK tb@ claudio@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/10 07:18:23
Modified files:
usr.sbin/rpki-client: crl.c cms.c cert.c
Log message:
Since errno isn't used here, use warnx() instead of warn()
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/12/08 17:44:18
Modified files:
usr.sbin/rpki-client: parser.c
Log message:
Following a failed fetch, use a previously cached and valid Manifest
RPKI Manifests enable Relying Parties (RPs) to detect
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/11/24 07:05:47
Modified files:
usr.sbin/rpki-client: extern.h rrdp_util.c rsync.c
Log message:
Require files to be of a minimum size in the RRDP & RSYNC transports
Picked 100 bytes as a minimum, to
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/11/23 06:01:15
Modified files:
usr.sbin/rpki-client: rsync.c
Log message:
Don't set directory modtimes to match the source
When syncing against remote repositories, the modtimes of the
remote
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/11/23 04:59:53
Modified files:
usr.bin/rsync : extern.h fargs.c main.c rsync.1 uploader.c
Log message:
Add --omit-dir-times / -O
OK claudio@
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2023/11/22 09:10:49
Modified files:
. : ftp.html ftplist httpslist
build : mirrors.dat
openbgpd : ftp.html
openntpd : portable.html
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2023/11/22 07:26:46
Modified files:
. : ftp.html httpslist
build : mirrors.dat
openbgpd : ftp.html
openntpd : portable.html
openssh
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2023/11/22 07:14:09
Modified files:
. : ftp.html httpslist
build : mirrors.dat
openbgpd : ftp.html
openntpd : portable.html
openssh
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2023/10/24 18:00:10
Modified files:
. : artwork.html
Log message:
List 7.4 in the art gallery
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/10/19 11:05:55
Modified files:
usr.sbin/rpki-client: cert.c cms.c crl.c validate.c
Log message:
Add experimental support for secp256r1 aka P-256 aka prime256v1
ECDSA signatures are much smaller than
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/10/13 06:06:49
Modified files:
usr.sbin/rpki-client: Makefile as.c aspa.c cert.c extern.h
filemode.c gbr.c geofeed.c ip.c main.c
mft.c
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2023/10/03 16:52:34
Modified files:
. : 74.html
Log message:
Add release artwork artist name
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/09/25 02:48:14
Modified files:
usr.sbin/rpki-client: extern.h ip.c validate.c
Log message:
Introduce ip_addr_range_print() to avoid code repetition
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/09/12 03:33:30
Modified files:
usr.sbin/rpki-client: cert.c extern.h x509.c
Log message:
Ensure the X.509 Subject only contains commonName and optionally serialNumber
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/09/10 18:50:47
Modified files:
lib/libcrypto/x509: x509_addr.c
Log message:
Back out superfluous initialization
requested by jsing@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/09/06 09:53:07
Modified files:
lib/libcrypto/x509: x509_addr.c
Log message:
Initialize afi & safi to zero
OK tb@
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/09/04 04:29:58
Modified files:
usr.bin/ssh: ssh-keygen.1 ssh-keygen.c
Log message:
Generate Ed25519 keys when invoked without arguments
Ed25519 public keys are very convenient due to their small
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/09/03 04:48:50
Modified files:
usr.sbin/rpki-client: mft.c
Log message:
Shuffle the order in which Manifest entries are processed
Previously work items were enqueued in the order the CA intended them
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2023/09/02 18:47:11
Modified files:
. : hackathons.html
Added files:
images/hackathons: p2k23-s.gif p2k23.gif
Log message:
p2k23 is happening!
Artwork by Sophie Smyth.
(Maybe it is
CVSROOT:/cvs
Module name:www
Changes by: j...@cvs.openbsd.org2023/09/01 16:17:57
Modified files:
. : innovations.html
Log message:
Update entry for rpki-client(8)
CVSROOT:/cvs
Module name:src
Changes by: j...@cvs.openbsd.org2023/08/30 04:13:12
Modified files:
regress/lib/libcrypto/asn1: asn1time.c
lib/libcrypto/asn1: a_time_tm.c
Log message:
Ensure no memory is leaked after passing NULL to ASN1_TIME_normalize()
OK
1 - 100 of 565 matches
Mail list logo
