CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/01/13 01:37:17
Modified files:
usr.sbin/rpki-client: Tag: OPENBSD_7_7 cert.c
Log message:
rpki-client: only accept BGPsec certs with a single AS number
We've long been pointing out that the possibility of adding multiple AS
numbers and in particular AS ranges to BGPsec Router Certificates is at
best dubious. Enforce that there is a single AS, encoded as an ASID, not
as an ASRange with a single element (cf. eid7653 to RFC 3779).
Prompted by a report by Xie Yifan
with/ok claudio job
this is errata/7.7/018_rpki.patch.sig
