20260511 CIR V3 trust anchors self-contained
This commit is contained in:
@@ -242,6 +242,30 @@ ta_file_for_rir() {
|
||||
esac
|
||||
}
|
||||
|
||||
refresh_ta_file_for_rir() {
|
||||
local rir="$1"
|
||||
local uri
|
||||
local file
|
||||
uri="$(tal_uri_for_rir "$rir")"
|
||||
file="$(ta_file_for_rir "$rir")"
|
||||
python3 - <<'PY' "$uri" "$file"
|
||||
import sys
|
||||
import urllib.request
|
||||
uri, path = sys.argv[1:]
|
||||
request = urllib.request.Request(uri, headers={"User-Agent": "rpki-dev/compare-fast-path"})
|
||||
with urllib.request.urlopen(request, timeout=30) as response:
|
||||
data = response.read()
|
||||
if not data:
|
||||
raise SystemExit(f"empty TA certificate response: {uri}")
|
||||
with open(path, "wb") as output:
|
||||
output.write(data)
|
||||
PY
|
||||
}
|
||||
|
||||
for rir in "${RIRS[@]}"; do
|
||||
refresh_ta_file_for_rir "$rir"
|
||||
done
|
||||
|
||||
OURS_TAL_ARGS=()
|
||||
CLIENT_TAL_ARGS=()
|
||||
OURS_CIR_TAL_ARGS=()
|
||||
@@ -260,6 +284,8 @@ fi
|
||||
mkdir -p state/ours/work-db state/ours/raw-store.db state/ours/repo-bytes.db state/rpki-client/cache state/rpki-client/out state/rpki-client/ta state/rpki-client/.ta
|
||||
chmod 0777 state/ours/work-db state/ours/raw-store.db state/ours/repo-bytes.db
|
||||
chmod -R 0777 state/rpki-client
|
||||
touch state/rpki-client/rpki-client-skiplist
|
||||
chmod 0644 state/rpki-client/rpki-client-skiplist
|
||||
|
||||
START_EPOCH="$(python3 - <<'PY'
|
||||
import time
|
||||
@@ -333,7 +359,7 @@ PY
|
||||
set +e
|
||||
LD_LIBRARY_PATH="$REMOTE_ROOT/lib${LD_LIBRARY_PATH:+:$LD_LIBRARY_PATH}" "$REMOTE_ROOT/bin/rpki-client" \
|
||||
-vv \
|
||||
-S "$REMOTE_ROOT/rpki-client-skiplist" \
|
||||
-S rpki-client-skiplist \
|
||||
"${CLIENT_TAL_ARGS[@]}" \
|
||||
-d cache out \
|
||||
> "$REMOTE_ROOT/steps/$STEP_ID/rpki-client/run.log" 2>&1
|
||||
|
||||
Reference in New Issue
Block a user