Package net.ripe.rpki.commons.validation

Class ValidationOptions

  • public class ValidationOptions
extends Object
    User controlled options to use when validating objects.

    • Method Detail

      • strictValidation

        public static ValidationOptions strictValidation()
        Validate manifest in a strict way, i.e. the whole manifest is considered invalid if any of the references on it are not found in the downloaded data or cache. Set grace periods to 0.

      • backCompatibleRipeNccValidator

        public static ValidationOptions backCompatibleRipeNccValidator()
        Validate manifest in a non-strict way, i.e. the if any of the references on it are not found, a warning is emitted and the validation process continues for the correct references. Set grace periods to 0.

      • paranoidTestValidations

        public static ValidationOptions paranoidTestValidations()
        This mode is introduced for internal testing purposes.

        RIPE regularly refresh Crl/Manifest in our RPKI core every 16 hours,with validity for 24 hours. Leaving 8 for troubleshooting if needed. This one will invalidates a crl/manifest with still 7 hours remaining, indicating something wrong with refresh.

      • withStaleConfigurations

        public static ValidationOptions withStaleConfigurations​(org.joda.time.Duration maxCrlStalePeriod,
                                                        org.joda.time.Duration maxMftStalePeriod)

      • getCrlMaxStalePeriod

        public org.joda.time.Duration getCrlMaxStalePeriod()

      • getManifestMaxStalePeriod

        public org.joda.time.Duration getManifestMaxStalePeriod()

      • isAllowOverclaimParentChild

        public boolean isAllowOverclaimParentChild()

      • setAllowOverclaimParentChild

        public void setAllowOverclaimParentChild​(boolean allowOverclaimParentChild)

      • isStrictManifestCRLValidityChecks

        public boolean isStrictManifestCRLValidityChecks()

      • setStrictManifestCRLValidityChecks

        public void setStrictManifestCRLValidityChecks​(boolean strictManifestCRLValidityChecks)