hints:rpki
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| hints:rpki [2025/04/14 19:28] – [Building rpki-client] philip | hints:rpki [2025/10/21 23:41] (current) – [RPKI-client] philip | ||
|---|---|---|---|
| Line 86: | Line 86: | ||
| ===== FORT ===== | ===== FORT ===== | ||
| - | FORT is the validator developed by NIC Mexico. More about it is on the [[https:// | + | FORT is the validator developed by NIC Mexico. More about it is on the [[https:// |
| FORT is available as part of Ubuntu 22.04 packaging, but it is an older version (1.5.3-1). Likewise for Ubuntu 24.04, the FORT shipped is version 1.6.1-1build3. For this reason we use the latest NIC Mexico produced package. | FORT is available as part of Ubuntu 22.04 packaging, but it is an older version (1.5.3-1). Likewise for Ubuntu 24.04, the FORT shipped is version 1.6.1-1build3. For this reason we use the latest NIC Mexico produced package. | ||
| Line 95: | Line 95: | ||
| < | < | ||
| - | wget https:// | + | wget https:// |
| </ | </ | ||
| and then install it: | and then install it: | ||
| < | < | ||
| - | sudo apt install ./fort_1.6.6-1_amd64.deb | + | sudo apt install ./fort_1.6.7-1_amd64.deb |
| </ | </ | ||
| Line 190: | Line 190: | ||
| **rpki-client** is just a validator - it does not have the functionality to accept connections from a router. We'll come to that later on (we'll need to use [[rpki# | **rpki-client** is just a validator - it does not have the functionality to accept connections from a router. We'll come to that later on (we'll need to use [[rpki# | ||
| - | **rpki-client** has now been packaged and is available as part of the Ubuntu 22.04 distribution. However, the packaged version is old (version 7.6). At the time of writing, the current release of **rpki-client** is version | + | **rpki-client** has now been packaged and is available |
| + | |||
| + | So to stay up to date on Ubuntu, we have to build it ourselves. A pity that the **rpki-client** maintainers don't build their own deb package, or pre-build packages like NLnetLabs do with Routinator, given that Ubuntu maintainers seem to be unable to keep the software current. Oh well. | ||
| - | So for this reason, and to stay up to date, at least on Ubuntu, we have to build it ourselves. A pity that the **rpki-client** maintainers don't build their own deb package, or pre-build packages like NLnetLabs do with Routinator. Oh well. | ||
| ==== Initial Preparation ==== | ==== Initial Preparation ==== | ||
| Line 279: | Line 281: | ||
| </ | </ | ||
| and that's it. Every hour, cron will run **rpki-client** which will produce JSON output of all the VRPs it has collected. As noted above, JSON output is what is used by StayRTR and GoRTR as their input sources. Make sure that the **/ | and that's it. Every hour, cron will run **rpki-client** which will produce JSON output of all the VRPs it has collected. As noted above, JSON output is what is used by StayRTR and GoRTR as their input sources. Make sure that the **/ | ||
| + | |||
| + | If you would like to include the [[https:// | ||
| + | < | ||
| + | / | ||
| + | </ | ||
| It's a good idea to check the log file in case **rpki-client** reports issues trying to write local files etc. But mostly what you'll see there are all the transactions with the various CAs, and the problems encountered (there will be lots, unfortunately). | It's a good idea to check the log file in case **rpki-client** reports issues trying to write local files etc. But mostly what you'll see there are all the transactions with the various CAs, and the problems encountered (there will be lots, unfortunately). | ||
| Line 295: | Line 302: | ||
| First you will need a working Go environment. Full instructions are at [[https:// | First you will need a working Go environment. Full instructions are at [[https:// | ||
| - | First off, download the latest Go package (1.24.1 at time of writing): | + | First off, download the latest Go package (1.24.4 at time of writing): |
| < | < | ||
| - | wget https:// | + | wget https:// |
| </ | </ | ||
| If you have an existing Go environment, | If you have an existing Go environment, | ||
| Line 307: | Line 314: | ||
| cd /usr/local | cd /usr/local | ||
| sudo chmod 777 . | sudo chmod 777 . | ||
| - | tar xzf ~/go1.24.1.linux-amd64.tar.gz | + | tar xzf ~/go1.24.4.linux-amd64.tar.gz |
| sudo chmod 755 . | sudo chmod 755 . | ||
| </ | </ | ||
hints/rpki.1744658928.txt.gz · Last modified: by philip