CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/10/14 00:18:35
Modified files:
usr.sbin/rpki-client: cert.c parser.c
Log message:
rpki-client: use expire time of the signature path for BRKs
Previously, the expire time in the BRK tree was simply the notAfter in
the BGPsec Router cert. This diff pushes the expire time for all certs
to the main process and switches to using the signature path to compute
the expire time. This way BRKs are treated the same way as VRPs and VAPs
and will probably expire in the next hours up to a week rather than
months from now.
This also makes the data pushed to rtrd and stored in the json output
match what file mode has reported since forever. Since we're still at
exactly two BRKs in the entire RPKI it does not currently matter much.
ok job rcovelli
