Ties de Kock

strange log line on missing snapshot

2

``` 2022-09-12T09:45:47.629970000Z Bad outer: not snapshot, but Name(html 2022-09-12T09:45:47.631377000Z RRDP https://rrdp.example.org/notification.xml: failed to process snapshot file https://rrdp.example.org/6846b259-4932-36d2-1f12-a50f2c2bfb84/82113/snapshot.xml: malformed XML ```

As a user, we got bitten by our configuration containing `ipv6` instead of `ip6` (and `ipv4`). As a result, our probes to an IPv6 only host failed. This was harder...

rrdp content not matching XML schema

3

One of my tools fails to parse RRDP content generated by what I expect is krill. One example delta from nicbr their repository: ``` ``` The relaxng schema requires at...

repository_request with tag should result in repository_response with tag

4

After reading about tags, I tried to upload the following `repository_request` to `testbed.krill.cloud`: ```xml MIIDEzCCAfugAwIBAgIBATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RDFCMEQ4NjE4ODhFODY2OEI4MDFCMjA4MjU3Mjc0MjJFNDNGODE0MB4XDTIyMTIwNzA3MzcwNloXDTM3MTIwNzA3NDIwNlowMzExMC8GA1UEAxMoNEQxQjBEODYxODg4RTg2NjhCODAxQjIwODI1NzI3NDIyRTQzRjgxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANFw8JrYqV7SREIdGygG2fn5FbykV+4RjtqBwC83D8wtHZCx8kdmNAc/7NM5/8KkkhFUTFx+pY677YEUvCRoIrmxCEks2g8UnVG7HEir3rVbicrujFSbQ0hU50LPBUaCyNvMpLHLyScIl20lLbnP/AfrI9vKgZi3O/hHeE0u3wj6CkCf29maq0SDtMie+ZpvoNrL/bcRngq8MIgIl2AGkmZtyZ+JyaJVVB+DYJYtMEaiCGbfOBFQ6xB9UIueloyVIpd4OFFRavLpMxIHGaSxQnr69S2oRggTNYZWQVJlp34bmPLpEp/mtUm/0kw/OFik09mu3mrQQSFytU2R8YK5sLMCAwEAAaMyMDAwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUTRsNhhiI6GaLgBsgglcnQi5D+BQwDQYJKoZIhvcNAQELBQADggEBALAc+mAKU7yZ8zQ2JkL7fFw9GaNMOZniBRGmGzIh6z1EMut2w/qT70JuZpt38oU/ZzcH9eB/7IUq7O9Xxs1JDrT5FeBnbqLHJonLectQLbprl8JT0fTOWY6mnIf1YoexInZevAos4hndRxZgrOL6HzJ7Tvh1d/RMn/QcL1wzGfGiu66dbA55zCeBV6wnWgO52tijXIdID30B5ulQ5epd9ox+4R9kJ8Vb7KB8RZ69LxCADH40DureK/u1yLv5ZNH00NWzpmh84nFVf5KiVttRSS4sXfrntX47fm08faGjV1hiW9eFsZSA61ZYhstXCwoRKSWDcxKdzOo67La3hiTxYlc= ``` This gave this response: ```xml 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 ``` ## Expected behavior: Identical "tag" attribute is...

routinator_serial_info metric is sparse

1

As a publication point operator I want to alert when my repository is not updating. For this I use an alert on the `routinator_serial_info` metric. _When doing so we sometimes...

--rrdp-keep-responses does not keep responses for repository that uses redirects

2

As a user, when I use `routinator --rrdp-keep-responses ~/src/tmp/routinator-responses -vv server` to log RRDP responses, I see an empty file for the repository at `https://rpki1.rpki-test.sit.fraunhofer.de/rrdp/notification.xml`. ~~I think that this is...

jsonext does not seem to include EE/crl/manifest expiry time

1

When looking at the `chainValidity` in the `jsonext` output it seems like manifest/crl expiry is not considered. It might be nice to include this information in the result so a...

Prefer highest numbered, valid, complete manifest

6

After some discussion today I think that if multiple copies exist (current content, cache) the most recent (highest number) manifest should be used. If the cache, and current repository both...

Support gzip/deflate/etc compression with a memory limit

2

As RPKI repository operator we noticed that a significant amount of traffic can be saved by using compression. However, due to the issues reported earlier (gzip bomb), compression was disabled...

I think that not filtering by default is better behaviour. This commit changes the default for the prefix filtering behaviour to be off. This allows longer prefixes to pass by...