CVSROOT:        /cvs
Module name:    src
Changes by:     [email protected]    2024/06/04 08:10:53

Modified files:
        usr.sbin/rpki-client: cert.c 

Log message:
rpki-client: reject certs with unexpected SIA accessMethods

RFC 6487, section 4.8.8.1 only lists caRepository and rpkiManifest, and
RFC 8182 added rpkiNotify for RRDP. All other access methods (which would
be children of id-ad), are not allowed and do not really make sense here.

ok claudio

Reply via email to