CVSROOT: /cvs Module name: src Changes by: [email protected] 2023/01/17 17:27:10
Modified files:
usr.sbin/rpki-client: validate.c
Log message:
rpki-client: explicitly enable policy checks
In x509_verify.c r1.62, beck disabled policy checks by default in the new
X.509 verifier to match the behavior of the legacy validator and OpenSSL.
In order to keep policy checks as mandated by RFC 7318, we need to opt
into them explicitly.
ok beck
