set MODPHP_VERSION=8.3 for now, this requires php-imap which was removed
(upstream should be looking at alternatives soon; this port could do with
an update too)
rpki-client: guard JSON output of ca->aki with a NULL check
While this is about non-functional CAs and TAs are never considered as
such, this block may well be copied around and then end in tears.
discussed with claudio
Add safegaurd: only consider intermediates when storing NCA state on disk
The detection & backoff related to non-functional CAs is only intended to
apply to intermediates (not the trust anchor or end-entity certs). Better
to explicitly check the ca's purpose.
OK tb@
Add safe guard: don't initially mark trust anchors as nonfunctional CAs
The detection & backoff for non-functional CAs is only intended to apply
to intermediates, not the trust anchor itself.
OK tb@
Pinning the validation time implies offline mode
The -P option is merely intended to help research whether the
deterministic validation process produces expected results. The only
scenario where use of -P is productive is in offline mode.
OK tb@ claudio@
In offline mode don't consider state related to non-functional CAs
If '-n' is specified there won't be any network synchronisation anyway.
This help avoid nuking the on-disk state in some scenarios.
OK tb@
update to py3-cryptodome-4.0.0, this is a nice major update with a move away
from GMP to their own constant-time big integers library, and a lot of other
improvements. See https://www.pycryptodome.org/src/changelog for more info.