-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2021-dab7665591 2021-10-02 01:40:19.305279 --------------------------------------------------------------------------------
Name : rpki-client Product : Fedora EPEL 7 Version : 7.3 Release : 1.el7 URL : https://www.rpki-client.org/ Summary : RPKI validator to support BGP Origin Validation Description : The OpenBSD rpki-client is a free, easy-to-use implementation of the Resource Public Key Infrastructure (RPKI) for Relying Parties (RP) to facilitate validation of the Route Origin of a BGP announcement. The program queries the RPKI repository system, downloads and validates Route Origin Authorisations (ROAs) and finally outputs Validated ROA Payloads (VRPs) in the configuration format of OpenBGPD, BIRD, and also as CSV or JSON objects for consumption by other routing stacks.
-------------------------------------------------------------------------------- Update Information:
rpki-client 7.3 =============== * Improve the HTTP client code (status code handling, http proxy support, keep-alive). * In RRDP, do not access URI with userinfo (`@`-sign). * Improve RRDP syncing by considering a notification file serial jumping backwards as synced repository. * Make `-R` (`rsync` only) also apply to the fetching of TA files. * Only sync `*.{cer,crl,gbr,mft,roa}` files via `rsync` and exclude all others. * When producing output for OpenBGPd, make use of the `roa-set expires` attribute to prevent machines from loading outdated `roa-set`s. * In RRDP, limit the number of deltas to 300 per repo. If more deltas exist, downloading a full snapshot is faster. * Limit the validation depth of X509 certificate chains to 12, double the current depth seen in RPKI. -------------------------------------------------------------------------------- ChangeLog:
* Thu Sep 23 2021 Robert Scheck robert@fedoraproject.org 7.3-1 - Upgrade to 7.3 (#2007447) * Tue Sep 14 2021 Sahana Prasad sahana@redhat.com - 7.2-2 - Rebuilt with OpenSSL 3.0.0 -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2007447 - rpki-client-7.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2007447 --------------------------------------------------------------------------------
This update can be installed with the "yum" update programs. Use su -c 'yum update rpki-client' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7%5C /html/System_Administrators_Guide/ch-yum.html
All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
epel-package-announce@lists.fedoraproject.org