Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BPKI validation behaviour #1204

Open
tomhrr opened this issue Jun 14, 2024 · 0 comments
Open

BPKI validation behaviour #1204

tomhrr opened this issue Jun 14, 2024 · 0 comments

Comments

@tomhrr
Copy link

tomhrr commented Jun 14, 2024

Per mail to the mailing list, APNIC's BPKI TA (used for both provisioning and publication) will expire in mid-July of this year. While it is possible in Krill to update the TA used for the provisioning protocol, there is no option for that in the publication protocol, and since the current behaviour doesn't take account of the BPKI TA expiry date, we've advised our users that no action is required here (see https://orbit.apnic.net/hyperkitty/list/apnic-services@apnic.net/thread/CE4FTANNG46SCPXYXIKWAGJUQFLRVSKE/). This is just a note to say that if the BPKI validation behaviour changes in the future, it would be a good idea either to grandfather any existing provisioning/publication protocol links so that they continue to work as they do today, or to notify the user in some way where they are relying on an expired TA and that they should get an updated TA before updating Krill.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant