WEBDIENSTE/NLnetLabs-krill
1
0
Fork 0
mirror of https://github.com/NLnetLabs/krill.git synced 2026-09-24 02:14:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Only set max length on ROAs if it is effectively longer than the prefix length.

Browse Source
This commit is contained in:
Tim Bruijnzeels
2020-06-19 10:35:28 +02:00
parent cb1ad601ca
commit 48188ebd14
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/daemon/ca/routes.rs
+7 -1
View File
@@ -304,7 +304,13 @@ impl Roas {
let signing_key = certified_key.key_id();
let mut roa_builder = RoaBuilder::new(auth.asn().into());
roa_builder.push_addr(prefix.ip_addr(), prefix.addr_len(), auth.max_length());
if auth.effective_max_length() > auth.prefix().prefix().addr_len() {
roa_builder.push_addr(prefix.ip_addr(), prefix.addr_len(), auth.max_length());
} else {
roa_builder.push_addr(prefix.ip_addr(), prefix.addr_len(), None);
}
let mut object_builder = SignedObjectBuilder::new(
Serial::random(signer).map_err(ca::Error::signer)?,
SignSupport::sign_validity_years(ROA_CERTIFICATE_VALIDITY_YEARS),