From: Theo Buehler Subject: Re: rpki-client: in filemode read concatenated sequence of objects To: Job Snijders Cc: tech@openbsd.org Date: Mon, 13 Jul 2026 08:53:44 +0200 > There is an XXX to also add support to be able to read concatenated gzip > streams. Later on I'd also like to add the ability to read from stdin > ('rpki-client -f -'). Man page will also need a slight tweak. There is a fundamental design issue that needs careful thought. This change means that we are now parsing stuff under a wide pledge. In particular, the libz and ASN.1 code is no longer confined to "stdio rpath" like it was before. It would be nice if that could be addressed one way or the other. Perhaps not running this by default would be an option... I am also very annoyed at ARIN that they can't be bothered to fix their incorrectly encoded objects which have been flagged many times by several groups over the years, so instead of looking only at a few octets to get the lengths, we need to slurp in, parse and immediately free the whole thing. That's just disgusting.