CVSROOT: /cvs
Module name: src
Changes by: clau...@cvs.openbsd.org 2023/05/30 06:14:48
Modified files:
regress/usr.sbin/rpki-client: test-aspa.c test-cert.c test-gbr.c
test-geofeed.c test-ip.c
test-mft.c test-roa.c test-rrdp.c
test-rsc.c test-tak.c test-tal.c
usr.sbin/rpki-client: extern.h main.c output-bird.c parser.c
validate.c
Log message:
Revert commitid ANSBO0rBvIUtTi45:
Make rpki-client choose the verification time of the time it is invoked
rather than always getting the current system time for every certificate
verification. This will result in output that is not variable on run-time.
Using the time of invocation does not work well with fast publishing CAs. It
can take a few minutes to reach a repo and that CA may have issued certificates
that are not yet valid if that startup time of rpki-client is used to validate.
This still keeps the -P option to specify a fixed validation time.
OK beck@ job@ tb@
