rpki-client: reject some signed objects with BER encoding
ARIN finally fixed their shit and no longer distributes malformed ROAs.
Detect one symptom of their malformedness. This is a very unsatisfactory
kludge since it only detects indefinite length encoding at the outermost
layer, but this will hopefully help avoid regressions. libcrypto's ASN.1
parser is not going to help making the world a cleaner place.
fine with claudio, ok job
rpki-client: unconditionally warn about incorrect RSA parameters
Now that ARIN have fixed their old ROAs, this encoding no longer occurs
in the wild, so enabling this warning does no harm. Ideally we'd error,
but a Postel-inspired MUST that has been sprinkled across numerous RFCs
ensured that this had to be tolerated for more than a quarter of a century
and will continue to be for at least another one.
discussed with claudio job
Most dictionaries list the noun "firmware" as uncountable,
so avoid the plural form.
OK jsg@ ian@ and also agrees with jmc@'s past practice.
Minor issue found by jsg@.
Provide assembly implementation of SHA-1 for aarch64 in libc
Provide a CE assembly implementation that can be used on hardware that
has the CE SHA-1 instructions. This is considerably faster than the
generic C implementation.
Largely borrowed from libcrypto.
With input from naddy@
ok naddy@ tb@
Validate the IP address the dhcp server acks.
acts1631 at proton.me points out that a rogue dhcp server can trick
dhcpleased into holding on to a lease indefinitely since it looses
track which IP is actually configured.
Diff provided by acts1631 as well, thanks!
While here, remove checking for yiaddr being absent (i.e. INADDR_ANY)
because that check is now redundant.
