CVSROOT: /cvs Module name: src Changes by: j...@cvs.openbsd.org 2023/03/06 09:04:52
Modified files:
usr.sbin/rpki-client: cert.c cms.c extern.h rpki-client.8
validate.c
Log message:
Add check for RSA key pair modulus & public exponent
Both the SPKI inside a CA's .cer TBS section and Signers wrapped in CMS
must be RSA, with mod 2048 & (e) 0x10001
OK tb@
