Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't set directory modtimes to match the source #100

Merged
merged 1 commit into from
Nov 24, 2023

Conversation

job
Copy link
Contributor

@job job commented Nov 24, 2023

When syncing against remote repositories, the modtimes of the remote directories is irrelevant. In the RRDP protocol the directory modtimes aren't signalled either. This should save some IOPS.

When syncing against remote repositories, the modtimes of the
remote directories is irrelevant. In the RRDP protocol the directory
modtimes aren't signalled either. This should save some IOPS.
@ydahhrk ydahhrk merged commit 9bc2e24 into NICMx:main Nov 24, 2023
@ydahhrk
Copy link
Member

ydahhrk commented Nov 24, 2023

Thanks

One detail:

In the RRDP protocol the directory modtimes aren't signalled either.

I'm probably just jumping to conclusions, but just to make sure:

Are you suggesting that RRDP signals file modtimes?

Because if it does, it would seem I'm missing something important.

ydahhrk added a commit that referenced this pull request Nov 24, 2023
@job
Copy link
Contributor Author

job commented Nov 24, 2023

In RRDP (and RSYNC) you can derive file modtimes from the internal timestamps, the APNIC and RIPE NCC repositories use this trick, and Validators can take advantage of this when serialising RRDP files to disk, then in RSYNC you can use —compare-dest=

The timestamps the community has come to consensus on:

Certificate files: notBefore
CRLs: thisUpdate (which OpenSSL confusingly calls lastUpdate)
Signed Objects (MFT/ROA/ASA/GBR/etc): CMS signing-time

https://www.ietf.org/archive/id/draft-ietf-sidrops-cms-signing-time-00.html

@job job deleted the omitdirtimes branch November 24, 2023 17:29
@ydahhrk
Copy link
Member

ydahhrk commented Dec 4, 2023

Need to clarify, because the release notes reference this issue seemingly unrelatedly:

As part of the rsync review for Fort 1.6.0, a few months ago I compared the rsync arguments of rpki-client, Routinator and Fort.

What came out of that is I ended up plagiarizing several of rpki-client's arguments.

So, credit to them.

Some time later, rpki-client added --omit-dir-times, and that's what this pull request specifically added.

Sorry for the confusion.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants