20261015 实现RRDP失步检测与TA证书择优

2026-10-15 14:31:50 +08:00
parent 0fa0c940fe
commit 385af349ae
23 changed files with 989 additions and 92 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,13 @@
 # Changelog

+## Unreleased
+
+- Detect RRDP session desynchronization from persisted notification delta hashes
+  (RFC 9697), warn and recover using the current snapshot before applying deltas.
+- Select automatic TA certificates using `draft-ietf-sidrops-rpki-ta-tiebreaker-06`:
+  prefer later notBefore, then earlier notAfter, then the newly fetched certificate.
+  A healthy preference for cache preserves a successful validation result.
+
 ## 0.1.0 — 2026-09-29

 - Vendor five OpenBSD TALs and constraints with pinned provenance; enable policies