add OpenBSD TA constraints and localhost TLS examples

docker/examples/validate-all5.toml

@@ -8,30 +8,37 @@ ccr-out = "/output/result.ccr"
 run-timeout-secs = 1800
 require-complete = true
 ta-refresh-policy = "allow-valid-cache"
+# Set false to ignore all constraints files, including adjacent auto-discovery.
+ta-constraints-enabled = true
 log-level = "info"
 log-format = "text"
 
 [[anchors]]
 id = "afrinic"
 tal = "/input/afrinic.tal"
+constraints = "/input/afrinic.constraints"
 # ta = "/input/afrinic.cer" # uncomment to pin a fixed TA certificate
 
 [[anchors]]
 id = "apnic"
 tal = "/input/apnic.tal"
+constraints = "/input/apnic.constraints"
 # ta = "/input/apnic.cer" # uncomment to pin a fixed TA certificate
 
 [[anchors]]
 id = "arin"
 tal = "/input/arin.tal"
+constraints = "/input/arin.constraints"
 # ta = "/input/arin.cer" # uncomment to pin a fixed TA certificate
 
 [[anchors]]
 id = "lacnic"
 tal = "/input/lacnic.tal"
+constraints = "/input/lacnic.constraints"
 # ta = "/input/lacnic.cer" # uncomment to pin a fixed TA certificate
 
 [[anchors]]
 id = "ripe"
 tal = "/input/ripe.tal"
+constraints = "/input/ripe.constraints"
 # ta = "/input/ripe.cer" # uncomment to pin a fixed TA certificate