Re: rpki-client refactor common repo code

2021-12-28 Thread Theo Buehler
On Thu, Dec 23, 2021 at 04:19:59PM +0100, Claudio Jeker wrote: > Create a common repo_done() function which does the entiyq_flush and in > the case of RRDP the fallback to rsync. This simplifies the code and will > help to add the repo info to the parser process. > > One difference between this an

Re: rpki-client: check ipAddrBlock and autonomousSysNum for criticality

2021-12-28 Thread Theo Buehler
On Tue, Dec 28, 2021 at 05:08:46PM +0100, Claudio Jeker wrote: > On Mon, Dec 27, 2021 at 12:23:32PM +0100, Theo Buehler wrote: > > On Sat, Dec 25, 2021 at 05:48:53PM +0100, Claudio Jeker wrote: > > [...] > > > I would love to get rid of X509_V_FLAG_IGNORE_CRITICAL and use a callback > > > to ensure

Re: simplify rpki-client entity marshal

2021-12-28 Thread Sebastian Benoit
Claudio Jeker(cje...@diehard.n-r-g.com) on 2021.12.28 16:57:48 +0100: > This re-shuffles struct entity a bit and removes the unneeded has_data > indicator. Both data and datasz are not null when data is present and null > when there is no data. With this in mind the code becomes simpler. > ok ben

[PATCH] [src] etc/etc.*/login.conf, share/man/man5/login.conf.5, libexec/login_radius/login_radius.8

2021-12-28 Thread Raf Czlonka
Hello, Most changes touch the same files hence a single email and diff: - login_ldap(8) is missing from login.conf(5) - capitalise 'radius' where talking about the protocol, and use an indefinite article where relevant - remove 'tis' style - moved to the attic a while ago[0] I was also thinkin

Re: rpki-client: check ipAddrBlock and autonomousSysNum for criticality

2021-12-28 Thread Claudio Jeker
On Mon, Dec 27, 2021 at 12:23:32PM +0100, Theo Buehler wrote: > On Sat, Dec 25, 2021 at 05:48:53PM +0100, Claudio Jeker wrote: > [...] > > I would love to get rid of X509_V_FLAG_IGNORE_CRITICAL and use a callback > > to ensure the right extensions are critical but I never managed to > > understand

simplify rpki-client entity marshal

2021-12-28 Thread Claudio Jeker
This re-shuffles struct entity a bit and removes the unneeded has_data indicator. Both data and datasz are not null when data is present and null when there is no data. With this in mind the code becomes simpler. -- :wq Claudio Index: extern.h

Make bpf event filter MP-safe

2021-12-28 Thread Visa Hankala
This patch makes bpf(4) serialize its event filter using bd_mtx, which allows calling the filter without the kernel lock. The patch uses the same filter pattern that has been utilized with pipes and sockets. Note that bpfkqfilter() still runs with the kernel locked. I think bpfilter_lookup() sho