9b65e5946f
ChangeLog: https://nlnetlabs.nl/news/2023/Sep/21/routinator-0.13.0-released/ New * Added support for ASPA. Processing needs to be enabled via the new option enable-aspa which is only available if the aspa feature is explicitly selected during compilation. This is due to the specification still changing. The implementation currently conforms with draft-ietf-sidrops-aspa-profile-15. * Added support for version 2 of the RTR protocol. This primarly means support for the ASPA payload type. * Sending SIGUSR2 to Routinator will re-open a log file if logging to a file is enabled. * The HTTP server provides a new endpoint /json-delta/notify that can be used to wait for updated data similar to the RTR Notify PDU. * Added support for filtering and adding router keys via local exception files. * The vrps command and the HTTP payload output endpoints now allow excluding specific payload types for output. * Added a new member payload to the output of the /api/v1/status endpoint that gives an overall summary of the produced payload. * Added new members generated and generatedTime to the JSON object produced by the /json-delta endpoint. Breaking Changes * A new field aspa was added to the jsonext format. See the manual page for more information. * A number of ASPA-related fields have been added to all metrics and status formats. * Renamed functions and attributes that refer to standalone end entity certificates to refer to router certificates so they don’t get confused with the end entity certificates included with signed objects. * Renamed the JSON member in the HTTP status API from validEECerts to validRouterCerts. The old name is still available but may be removed in the future. * The regular json output format now includes router key and ASPA output. Since both are disabled by default, the format will still be compatible by default. * The minimal required Rust version has been increased to 1.70. Bug Fixes * Fixed a bug in the RTR server where it would include router key PDUs even if the negotiated protocol version was 0. * Restored the ability to parse ASNs in JSON input to the validity command as string or number. * Update bcder to at least 0.7.3 to fix various decoding issues that could lead to a panic when processing invalid RPKI objects. * Check the request URI when generating a path for storing a copy of a RRDP response with the rrdp-keep-responses option to avoid path traversal. Found by Haya Shulman, Donika Mirdita and Niklas Vogel. Assigned CVE-2023-39916 Other Changes * The log message for missing manifest now include the URI of the CA certificate for which the manifest is missing. (#864) * Binary packages are now also built for Debian bookworm. (#881) PR: 274105 Reported by: jaap@NLnetLabs.nl (maintainer) Security: CVE-2023-39916
57 lines
1.4 KiB
Makefile
57 lines
1.4 KiB
Makefile
PORTNAME= routinator
|
|
DISTVERSIONPREFIX= v
|
|
DISTVERSION= 0.13.0
|
|
CATEGORIES= net
|
|
MASTER_SITES= ${ROUTINATOR_UI_URL}/v${ROUTINATOR_UI_VERSION}/:0
|
|
DISTFILES+= routinator-ui-build.tar.gz:0
|
|
|
|
MAINTAINER= jaap@NLnetLabs.nl
|
|
COMMENT= RPKI signed route collector and validator
|
|
WWW= https://github.com/NLnetLabs/routinator
|
|
|
|
LICENSE= BSD3CLAUSE
|
|
LICENSE_FILE= ${WRKSRC}/LICENSE
|
|
|
|
ONLY_FOR_ARCHS= amd64 i386
|
|
ONLY_FOR_ARCHS_REASON= ring crate not ported to other architectures
|
|
|
|
RUN_DEPENDS= rsync:net/rsync
|
|
|
|
USES= cargo cpe
|
|
CPE_VENDOR= nlnetlabs
|
|
USE_GITHUB= yes
|
|
GH_ACCOUNT= NLnetLabs
|
|
|
|
USE_RC_SUBR= routinator
|
|
|
|
CARGO_FEATURES= --no-default-features routinator-ui
|
|
|
|
SUB_FILES= pkg-message
|
|
SUB_LIST+= GROUPS=${GROUPS} \
|
|
USERS=${USERS}
|
|
|
|
USERS= ${PORTNAME}
|
|
GROUPS= ${PORTNAME}
|
|
|
|
ROUTINATOR_UI_VERSION= 0.3.4
|
|
ROUTINATOR_UI_URL= https://github.com/NLnetLabs/routinator-ui/releases/download/
|
|
|
|
OPTIONS_DEFINE= ASPA
|
|
OPTIONS_SUB= yes
|
|
|
|
ASPA_DESC= (Experimental) enable aspa support
|
|
ASPA_VARS= CARGO_FEATURES+=aspa
|
|
|
|
post-patch:
|
|
${REINPLACE_CMD} -e "s|DISTDIR|${DISTDIR}|" \
|
|
${WRKSRC}/cargo-crates/routinator-ui-${ROUTINATOR_UI_VERSION}/build.rs
|
|
|
|
post-install:
|
|
${STRIP_CMD} ${STAGEDIR}${PREFIX}/bin/routinator
|
|
${INSTALL_MAN} ${WRKSRC}/doc/routinator.1 \
|
|
${STAGEDIR}${PREFIX}/man/man1/
|
|
@${MKDIR} ${STAGEDIR}/${PREFIX}/etc/routinator
|
|
${INSTALL_DATA} ${WRKSRC}/etc/routinator.conf.example \
|
|
${STAGEDIR}${PREFIX}/etc/routinator/routinator.conf.example
|
|
|
|
.include <bsd.port.mk>
|