yuyr/panda-rpki-oss
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

20261015 实现RRDP失步检测与TA证书择优
Some checks failed
ci / rust (push) Failing after 1m42s
Details
ci / docker (push) Failing after 50s
Details
ci / audit (push) Failing after 8s
Details

Browse Source
This commit is contained in:
yuyr
2026-10-15 14:31:50 +08:00
parent 0fa0c940fe
commit 385af349ae
23 changed files with 989 additions and 92 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
docs/conformance-matrix.md
View File

@@ -1,5 +1,22 @@
# v0.1.0 conformance matrix
## Unreleased additions
| Behaviour | Standard reference | Implementation | Evidence |
| --- | --- | --- | --- |
| Detect changed hashes for overlapping delta serials within a session, warn and recover with a snapshot | [RFC 9697 §§3–5](https://www.rfc-editor.org/rfc/rfc9697.html) | `src/repository/sync/rrdp/`, `src/repository/storage/models_summary.rs` | `tests_parts/desynchronization.rs`; `tests/security_recovery_e2e.rs` |
| Choose between valid fetched and cached TA certificates by later notBefore, earlier notAfter, then freshly fetched | [TA tiebreaker draft -06 §2](https://datatracker.ietf.org/doc/html/draft-ietf-sidrops-rpki-ta-tiebreaker-06) | `src/cli/anchors.rs` | `anchors_tiebreaker_tests.rs`; `tests/security_recovery_e2e.rs` |
The RRDP hash window is the last successfully processed notification's delta
references, retained across restarts. An old database without this window learns
it on its next successful sync. Failed recovery keeps the previous baseline.
No historical delta download is required for comparison. TA selection compares
revalidated DER certificates; fixed TA inputs retain their explicit selection.
The tiebreaker is a draft implementation. Failed-refresh fallback still follows
`ta-refresh-policy`; see [configuration](configuration.md#5-anchor-fields).
## Released v0.1.0 baseline
| Behaviour | Standard reference | Implementation | Evidence |
| --- | --- | --- | --- |
| TAL syntax and TA public-key binding | RFC 8630 §2 | `src/validation/from_tal.rs`, `src/model/ta.rs` | parser and synthetic integration tests |
@@ -29,6 +46,6 @@ revalidation of the entire trust chain by another relying party.
The worker pool and interval index are implementation mechanisms, not new wire
protocols; their tests must also prove deterministic output and unchanged
validation decisions. Only the table entries above are in v0.1.0 scope.
validation decisions. Only the released baseline table is in v0.1.0 scope.
Adding a new source file or protocol feature requires a new row with a document
revision, section, test, and reviewer decision.