v7.3
This release includes the following changes to the previous release:
- Improve the HTTP client code (status code handling, http proxy support, keep-alive).
- In RRDP, do not access URI with userinfo (@-sign)
- Improve RRDP syncing by considering a notification file serial jumping backwards as synced repository.
- Make -R (rsync only) also apply to the fetching of TA files.
- Only sync *.{cer,crl,gbr,mft,roa} files via rsync and exclude all others.
- When producing output for OpenBGPd, make use of the 'roa-set expires' attribute to prevent machines from loading outdated roa-sets.
- In RRDP, limit the number of deltas to 300 per repo. If more deltas exist, downloading a full snapshot is faster.
- Limit the validation depth of X509 certificate chains to 12, double the current depth seen in RPKI.