Skip to content

v7.3

Compare
Choose a tag to compare
@cjeker cjeker released this 15 Dec 17:17
· 138 commits to master since this release
0bf531a

This release includes the following changes to the previous release:

  • Improve the HTTP client code (status code handling, http proxy support, keep-alive).
  • In RRDP, do not access URI with userinfo (@-sign)
  • Improve RRDP syncing by considering a notification file serial jumping backwards as synced repository.
  • Make -R (rsync only) also apply to the fetching of TA files.
  • Only sync *.{cer,crl,gbr,mft,roa} files via rsync and exclude all others.
  • When producing output for OpenBGPd, make use of the 'roa-set expires' attribute to prevent machines from loading outdated roa-sets.
  • In RRDP, limit the number of deltas to 300 per repo. If more deltas exist, downloading a full snapshot is faster.
  • Limit the validation depth of X509 certificate chains to 12, double the current depth seen in RPKI.