When fetching, don't pass the list of all distfiles to a recursive make
Calling "make ${tons_of_distfiles}" can go over ARG_MAX as spotted by
aja in sysutils/telegraf when using a longer, non-default PORTSDIR.
Instead of bumping ARG_MAX or weir^Wcomplex solutions in bsd.port.mk,
just use intermediate targets that depend on all distfiles.
With espie
xmlwf: unbreak build after update to 2.9.0
This now needs internal functions from libexpat, so reach around into
the bundled expat sources and compile xcs.c in.
ok bluhm (maintainer)
Do not compile helper functions only used by the regress test, or by the
hibernate code, unless we are building the regress test, or a kernel with
option HIBERNATE.
Remove games/multimc and games/blockgame
Both are superseded by games/prismlauncher which performs the same
function and is actively maintained. Prism Launcher is the active
fork of the MultiMC project (which blockgame is an OpenBSD-specific
for of).
ok phessler
rpki-client: disallow certs with zero serialNumber
Consistency is hard:
RFC 5280 (eid3200 clarifies) and RFC 6487 disallow a zero serialNumber.
For extra fun, CRLNumber and manifestNumber are defined via ASN.1
explicitly allowing zero. So we need some extra dances.
Arguably eid3200 was resolved the wrong way.
Serial number issue pointed out by the rpki-rp-benchmark.
ok claudio
rpki-client: split some helpers out of cms.c
There are a bunch of helper functions that are not really CMS specific
that will be shared by several signed object parsers. Implementations
go into rpki-der.c and they are prototyped in rpki-der.h. The latter
should eventually replace rpki-asn1.h.
ok claudio
Directly dispatch the files referenced by a mft in the parser.
There is no need to circle back to the parent process to schedule more work.
This is the minimal way to handle this and should allow us to further improve
the MFT handling.
The work items enqueued by an MFT are put on the global entity queue but
only after the mft message was enqueued into the output queue.
OK tb@
rpki-client: use strncmp() after x509_location()
Now that the protocol (always expected to be https:// or rsync://) is
normalized, we can do a simpler check.
Prompted by a report by Ties de Kock
ok claudio