CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/01/19 03:12:20
Modified files:
usr.sbin/rpki-client: cert.c
Log message:
rpki-client: split some checks out of ta_parse()
This pulls the non-inheritance check for TAs into cert_parse_extensions()
and adds a check that the INRs are a non-empty set. The latter is redundant
with existing checks for presence of at least one of ASIdentifiers and
IPAddrBlocks combined with non-inheritance but it does not hurt to be
explicit.
The second change is splitting everything to do with the SPKI into a
helper since the current logic is messy and has completely unrelated
things interleaved. In a follow-up I'll also split out the validity
check. Later on ta_parse() will be renamed into something more
appropriate.
ok claudio job
