Re: [Sidrops] Test objects: ASPA and BGPSec Router Certificate

Di Ma <madi@rpstir.net> Wed, 27 July 2022 08:01 UTC

Return-Path: <madi@rpstir.net>
X-Original-To: sidrops@ietfa.amsl.com
Delivered-To: sidrops@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42FE8C16ECBF for <sidrops@ietfa.amsl.com>; Wed, 27 Jul 2022 01:01:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([50.223.129.194]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gVgQ-Ae-ENDV for <sidrops@ietfa.amsl.com>; Wed, 27 Jul 2022 01:01:16 -0700 (PDT)
Received: from out20-85.mail.aliyun.com (out20-85.mail.aliyun.com [115.124.20.85]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6EF8C16ECB0 for <sidrops@ietf.org>; Wed, 27 Jul 2022 01:01:14 -0700 (PDT)
X-Alimail-AntiSpam: AC=CONTINUE; BC=0.1016047|-1; CH=green; DM=|CONTINUE|false|; DS=CONTINUE|ham_regular_dialog|0.0350113-0.010555-0.954434; FP=0|0|0|0|0|-1|-1|-1; HT=ay29a033018047211; MF=madi@rpstir.net; NM=1; PH=DS; RN=2; RT=2; SR=0; TI=SMTPD_---.OeqtwJc_1658908870;
Received: from smtpclient.apple(mailfrom:madi@rpstir.net fp:SMTPD_---.OeqtwJc_1658908870) by smtp.aliyun-inc.com; Wed, 27 Jul 2022 16:01:11 +0800
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.100.31\))
From: Di Ma <madi@rpstir.net>
In-Reply-To: <CC611E4A-F6AC-4E59-89D9-7ED6042F759E@nlnetlabs.nl>
Date: Wed, 27 Jul 2022 16:01:07 +0800
Cc: SIDR Operations WG <sidrops@ietf.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <70B72AB9-110E-4005-B484-7D8781327E73@rpstir.net>
References: <DADDAAB3-109E-4B83-A54A-2AAF65E2FA62@nlnetlabs.nl> <127BBB15-7F9A-4983-9D7F-742B43F28B05@rpstir.net> <6A4FA576-E506-4376-8837-BF3CD62FCC82@nlnetlabs.nl> <CC611E4A-F6AC-4E59-89D9-7ED6042F759E@nlnetlabs.nl>
To: Tim Bruijnzeels <tim@nlnetlabs.nl>
X-Mailer: Apple Mail (2.3696.100.31)
Archived-At: <https://mailarchive.ietf.org/arch/msg/sidrops/pxqAGPmR0MA3NMe-NxYyiEZ7RXw>
Subject: Re: [Sidrops] Test objects: ASPA and BGPSec Router Certificate
X-BeenThere: sidrops@ietf.org
X-Mailman-Version: 2.1.39
Precedence: list
List-Id: A list for the SIDR Operations WG <sidrops.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/sidrops>, <mailto:sidrops-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/sidrops/>
List-Post: <mailto:sidrops@ietf.org>
List-Help: <mailto:sidrops-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sidrops>, <mailto:sidrops-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 27 Jul 2022 08:01:17 -0000

Tim,

The issues I reported have been resolved as per the test with RPSTIR2.

Di

> 2022年7月26日 05:22,Tim Bruijnzeels <tim@nlnetlabs.nl> 写道:
> 
> Hi Di, all,
> 
>> On 24 Jul 2022, at 20:06, Tim Bruijnzeels <tim@nlnetlabs.nl> wrote:
>> 
>> I will have a fix during the week, test it better this time,
>> and let you know!
> 
> Our testbed should be in better shape now.*
> 
> Could you check again?
> 
> @Job. It's high on my todo list to set up a smoketest environment
> which will include rpki-client and other RP implementations.
> 
> Unfortunately, our previous setup for this proved too unreliable
> and we had to switch it off. I won't have time to do this until
> perhaps later in the week or next week though, so if you could have
> another look again it's highly appreciated.
> 
> Tim
> 
> ==
> *: Beware.. this is public testbed primarily focussed on CA testing.
> Anyone can set up a CA as a child, claiming any resources, and anyone
> can publish anything they like. It is expected that many such test
> CAs will be broken (or just switched off) leaving expired manifests
> etc.