CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/08/25 23:57:47
Modified files:
usr.sbin/rpki-client: cms.c
Log message:
rpki-client: reject some signed objects with BER encoding
ARIN finally fixed their shit and no longer distributes malformed ROAs.
Detect one symptom of their malformedness. This is a very unsatisfactory
kludge since it only detects indefinite length encoding at the outermost
layer, but this will hopefully help avoid regressions. libcrypto's ASN.1
parser is not going to help making the world a cleaner place.
fine with claudio, ok job
