Re: rpki-client: in filemode read concatenated sequence of objects

Theo Buehler <[email protected]> Mon, 13 Jul 2026 08:53:44 +0200
Newsgroups gmane.os.openbsd.tech
Message-ID <[email protected]>
> There is an XXX to also add support to be able to read concatenated gzip
> streams. Later on I'd also like to add the ability to read from stdin
> ('rpki-client -f -'). Man page will also need a slight tweak.

There is a fundamental design issue that needs careful thought.

This change means that we are now parsing stuff under a wide pledge.
In particular, the libz and ASN.1 code is no longer confined to
"stdio rpath" like it was before. It would be nice if that could be
addressed one way or the other. Perhaps not running this by default
would be an option...

I am also very annoyed at ARIN that they can't be bothered to fix their
incorrectly encoded objects which have been flagged many times by several
groups over the years, so instead of looking only at a few octets to get
the lengths, we need to slurp in, parse and immediately free the whole
thing. That's just disgusting.