rpki-client: check SIA signedObject on ASPA/MFT/ROA/GBR/TAK

2022-11-03 Thread Job Snijders
Hi all, RFC 6487 section 4.8.8.2 mandates that the SIA extension must be present, and contain *at least* an instance of accessMethod id-ad-signedObject. The below changeset enforces this requirement. OK? Index: aspa.c === RCS file:

bgpctl show mpls label in fib output

2022-11-03 Thread Claudio Jeker
Noticed while figuring out the kroute bug with MPLS. I think it would be nice to know the MPLS label of a fib MPLS route. bgpctl show fib table 13 flags: B = BGP, C = Connected, S = Static N = BGP Nexthop reachable via this route r = reject route, b = blackhole route flags prio

Re: resolvd: write nameservers in expected order

2022-11-03 Thread Theo de Raadt
If you do not sort the, you cannot remove duplicates.

resolvd: write nameservers in expected order

2022-11-03 Thread Klemens Nanni
RFC 2132 "DHCP Options and BOOTP Vendor Extensions" 3.8. Domain Name Server Option says: The domain name server option specifies a list of Domain Name System (STD 13, RFC 1035 [8]) name servers available to the client. Servers SHOULD be listed in order of preference. I'm on a wifi with

tweak to dependency checking

2022-11-03 Thread Marc Espie
I'd like to add a special construct to dependencies, "=" to mean the exact version of the package we're depending on. The patch is trivial: Index: OpenBSD/PackingElement.pm === RCS file: