CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/09/07 03:11:06
Modified files:
usr.sbin/rpki-client: cms.c
Log message:
rpki-client: split a large chunk of cms_parse_validate() into a helper
There is a huge messy part in the CMS validation code that deals with
things needing the SignerInfo (the OpenSSL version of it, that is).
All this stuff does not need cleanup at exit and is very long, boring
and meandering code which is concerned with requirements from RFC 6488
which are largely independent of the econtent validation and parsing.
So pull all this into a helper and pass in the few things we need.
The only info we want to retain is that the object is well-formed and
its signtime. Since we need to pass in the cert, we call the helper
after extraction and before validation of the signtime against the cert.
The main point is that cms_parse_validate() finally becomes somewhat
manageable in size.
ok job
