CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2022/11/04 17:42:56
Modified files:
usr.sbin/rpki-client: x509.c
Log message:
In very verbose mode, log unexpected accessMethods
While RFC 6487, 4.8.2.2 is very explicit about allowing id-ad-signedObject
as the only accessMethod, the clear language was lost during the RFC 8182
editing process. APNIC, TWNIC and JPNIC and a few others are currently
known to have an id-ad-rpkiNotify. The verbose logging allows us to check
the ecosystem while waiting for the point in time where we can turn this
into an error. See also https://www.rfc-editor.org/errata/eid7239.
ok job
