Index | Thread | Search

From:
Job Snijders <job@openbsd.org>
Subject:
Re: rpki-client: print zero signtime
To:
Theo Buehler <tb@theobuehler.org>
Cc:
tech@openbsd.org
Date:
Sun, 20 Jul 2025 13:41:38 +0000

Download raw body.

Thread
On Sun, Jul 20, 2025 at 02:26:31PM +0200, Theo Buehler wrote:
> This is a leftover from the time where we had to allow signtime to be
> absent. cms_parse_validate_internal() has rejected signed objects
> without signing-time since cms.c r1.43 (April 2024). The signed object
> parsers all set it. If signtime happens to be 0, it is because the
> signed object is weird. No reason to treat such an object specially at
> this point in the code.
> 
> PS: the Manifest this/next update lines are longer than 80. I'll wrap
> them in a follow-up.

OK job@