FEDORA-2022-719ef76593 created by robert a year ago for Fedora 37

rpki-client 8.0

  • Add suport for validating Autonomous System Provider Authorization (ASPA) objects conforming to draft-ietf-sidrops-aspa-profile-10. Validated ASPA payloads are visible in JSON and filemode (-f) output.
  • Set rsync connection I/O idle timeout to 15 seconds.
  • Unify the maximum idle I/O and connect timeouts for RSYNC & HTTPS.
  • Rpki-client now performs stricter EE certificate validation:
    • Disallow AS Resources extensions in ROA EE certificates.
    • Disallow Subject Information Access (SIA) extensions in RPKI Signed Checklist (RSC) EE certs.
    • Check the resources in ROAs and RSCs against EE certs.
  • Improve readability and add various information being printed in verbose mode.
  • Extend filemode (-f) output and print X.509 certificates in PEM format when increased verbosity (-vv) is specified.
  • Shorten the RRDP I/O idle timeout.
  • Introduce a deadline timer that aborts all repository synchronization after seven eights of timeout (-s). With this rpki-client has improved chances to complete and produce an output even when a CA is excessivly slow.
  • Abort a currently running RRDP request process when the per-repository timeout is reached.
  • Permit multiple AccessDescription entries in SIA X.509 extensions. While fetching from secondary locations is not yet supported, rpki-client will not treat occurence as a fatal error.
  • Resolve a potential for a race condition in non-atomic RRDP deltas.
  • Fix some memory leaks.
  • Improve compliance with the HTTP protocol specification.

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2022-719ef76593

This update has been submitted for testing by robert.

a year ago

This update's test gating status has been changed to 'ignored'.

a year ago
User Icon generalprobe commented & provided feedback a year ago


BZ#2125925 rpki-client-8.0 is available

This update has been pushed to testing.

a year ago

This update can be pushed to stable now if the maintainer wishes

a year ago

This update has been submitted for stable by bodhi.

a year ago

This update has been pushed to stable.

a year ago

Please login to add feedback.

Content Type
Test Gating
Unstable by Karma
Stable by Karma
Stable by Time
7 days
a year ago
in testing
a year ago
in stable
a year ago
BZ#2125925 rpki-client-8.0 is available

Automated Test Results