usr.sbin/rpki-client/validate.c

46 	c = as_check_covered(min, max, a->cert->as, a->cert->asz);
72 	c = ip_addr_check_covered(afi, min, max, a->cert->ips, a->cert->ipsz);
88 valid_cert(const char *fn, struct auth *a, const struct cert *cert)
93 	for (i = 0; i < cert->asz; i++) {
94 		if (cert->as[i].type == CERT_AS_INHERIT)
97 		if (cert->as[i].type == CERT_AS_ID) {
98 			min = cert->as[i].id;
99 			max = cert->as[i].id;
101 			min = cert->as[i].range.min;
102 			max = cert->as[i].range.max;
108 		as_warn(fn, "RFC 6487: uncovered resource", &cert->as[i]);
112 	for (i = 0; i < cert->ipsz; i++) {
113 		if (cert->ips[i].type == CERT_IP_INHERIT)
116 		if (valid_ip(a, cert->ips[i].afi, cert->ips[i].min,
117 		    cert->ips[i].max))
120 		ip_warn(fn, "RFC 6487: uncovered resource", &cert->ips[i]);
132 valid_roa(const char *fn, struct cert *cert, struct roa *roa)
139 		    roa->ips[i].max, cert->ips, cert->ipsz) > 0)
157 valid_spl(const char *fn, struct cert *cert, struct spl *spl)
159 	if (as_check_covered(spl->asid, spl->asid, cert->as, cert->asz) > 0)
316 		assert(a->cert->x509 != NULL);
318 			if (!sk_X509_push(*root, a->cert->x509))
322 		if (!sk_X509_push(*intermediates, a->cert->x509))
440 valid_rsc(const char *fn, struct cert *cert, struct rsc *rsc)
454 		if (as_check_covered(min, max, cert->as, cert->asz) > 0)
463 		    rsc->ips[i].max, cert->ips, cert->ipsz) > 0)
510 valid_aspa(const char *fn, struct cert *cert, struct aspa *aspa)
514 	    cert->as, cert->asz) > 0)
527 valid_geofeed(const char *fn, struct cert *cert, struct geofeed *g)
534 		    g->geoips[i].ip->min, g->geoips[i].ip->max, cert->ips,
535 		    cert->ipsz) > 0)