[Sidrops] trying to limit RP processing variability

[Stephen Kent <[e-mail]>]

                                    *Overview *


A publication point (PP) in an RPKI repository contains the following 
elements:

1.CA certificates (optional, present only for subordinate CAs)

2.EE certificates (optional, present only for routers)

3.CRL (usually one)

4.ROAs

5.Manifest (usually one)

6.Ghostbusters record (one, optional)

*Terminology*

Valid: a signed object (other than a certificate or CRL) is deemed 
*valid* if it is encoded in a fashion consistent with the relevant RPKI 
RFCs (i.e., 6482, 6486, 6487, 6488, 6493) and the signed object’s 
signature can be verified consistent with RFC 6488.


Current: A CRL or Manifest is *current* if the current date & time is 
before the Next Update date and the CRLNumber (or ManifestNumber) is 
greater than any prior, valid CRLs or Manifests processed by the RP.


Stale: A CRL or Manifest is stale if the current date & time is later 
than the Next Update date. A stale CRL or Manifest is not “expired” it’s 
just not as current as it is supposed to be. The case analysis below 
examines what to do when a Manifest, or CRL, or both are stale.

Missing: an object named in a Manifest, but not available for download 
from a PP, is termed *missing*. An RP has no obvious way to acquire 
missing objects, but operators SHOULD be warned about which objects are 
missing.

Corrupted: if an object named in a Manifest, is available for download 
from a PP, but it’s hash does not match the corresponding value in the 
Manifest, the object is termed *corrupted* and the object SHOULD be ignored.

*Case analysis*

If we can agree to ignore any objects at a PP that do not appear on the 
current manifest, the case analysis is easier. (The discussion of 
corrupted objects above addresses the case where an object is named on 
the Manifest, but the hash does not match.)


Below is a proposed outline for the cases. The group needs to decide 
what action is to be taken in each case.



1.Manifest present, valid, current

1.1.CRL present, valid, current

1.2.CRL present, stale

1.3.CRL present, invalid

1.4.CRL missing

2.Manifest present, valid, stale

2.1.CRL present, valid, current

2.2.CRL present, stale

2.3.CRL present, invalid

2.4.CRL missing

3.Manifest present, but invalid

3.1.CRL present, valid, current

3.2.CRL present, stale

3.3.CRL present, invalid

3.4.CRL missing

4.Manifest not present

4.1.CRL present, valid, current

4.2.CRL present, stale

4.3.CRL present, invalid

4.4.CRL missing