--------------------------------------------------------------------------------
Fedora EPEL Update Notification
FEDORA-EPEL-2021-c2362a6c0f
2021-10-02 01:30:40.919771
--------------------------------------------------------------------------------
Name : rpki-client
Product : Fedora EPEL 8
Version : 7.3
Release : 1.el8
URL :
https://www.rpki-client.org/
Summary : RPKI validator to support BGP Origin Validation
Description :
The OpenBSD rpki-client is a free, easy-to-use implementation of the
Resource Public Key Infrastructure (RPKI) for Relying Parties (RP) to
facilitate validation of the Route Origin of a BGP announcement. The
program queries the RPKI repository system, downloads and validates
Route Origin Authorisations (ROAs) and finally outputs Validated ROA
Payloads (VRPs) in the configuration format of OpenBGPD, BIRD, and
also as CSV or JSON objects for consumption by other routing stacks.
--------------------------------------------------------------------------------
Update Information:
rpki-client 7.3 =============== * Improve the HTTP client code (status code
handling, http proxy support, keep-alive). * In RRDP, do not access URI with
userinfo (`@`-sign). * Improve RRDP syncing by considering a notification file
serial jumping backwards as synced repository. * Make `-R` (`rsync` only) also
apply to the fetching of TA files. * Only sync `*.{cer,crl,gbr,mft,roa}` files
via `rsync` and exclude all others. * When producing output for OpenBGPd, make
use of the `roa-set expires` attribute to prevent machines from loading outdated
`roa-set`s. * In RRDP, limit the number of deltas to 300 per repo. If more
deltas exist, downloading a full snapshot is faster. * Limit the validation
depth of X509 certificate chains to 12, double the current depth seen in RPKI.
--------------------------------------------------------------------------------
ChangeLog:
* Thu Sep 23 2021 Robert Scheck <robert(a)fedoraproject.org> 7.3-1
- Upgrade to 7.3 (#2007447)
* Tue Sep 14 2021 Sahana Prasad <sahana(a)redhat.com> - 7.2-2
- Rebuilt with OpenSSL 3.0.0
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #2007447 - rpki-client-7.3 is available
https://bugzilla.redhat.com/show_bug.cgi?id=2007447
--------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use
su -c 'yum update rpki-client' at the command line.
For more information, refer to "YUM", available at
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\
/html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------