CVSROOT: /cvs
Module name: src
Changes by: t...@cvs.openbsd.org 2024/09/12 04:33:25
Modified files:
usr.sbin/rpki-client: crl.c extern.h mft.c print.c x509.c
Log message:
Reintroduce check that CRL Number is in range
The CRL number draft clarified what ignoring means and it includes checking
that the CRL number is well-formed again. So do this but continue to ignore
the value for any other purpose. This refactors x509_convert_seqnum() into
a couple of helpers. There's some duplication between crl_check_crl_number()
and crl_parse_crl_number() which could be removed if anyone cares.
tweaks/ok job
