aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
Diffstat
-rw-r--r--scripts/up-down-protocol-samples/Makefile11
-rw-r--r--scripts/up-down-tighter-schema.pl103
-rw-r--r--scripts/up-down-tighter-schema.rnc72
-rw-r--r--scripts/up-down-tighter-schema.rng284
4 files changed, 467 insertions, 3 deletions
diff --git a/scripts/up-down-protocol-samples/Makefile b/scripts/up-down-protocol-samples/Makefile
index eedc1c03..2fbc209a 100644
--- a/scripts/up-down-protocol-samples/Makefile
+++ b/scripts/up-down-protocol-samples/Makefile
@@ -1,6 +1,11 @@
XMLLINT = xmllint --noout --relaxng
JING = java -jar /usr/local/share/java/classes/jing.jar
+SCHEMA = ../up-down-schema.rng
-all:
- ${JING} ../up-down-schema.rng *.xml
- ${XMLLINT} ../up-down-schema.rng *.xml
+all: jing xmllint
+
+jing:
+ ${JING} ${SCHEMA} *.xml
+
+xmllint:
+ ${XMLLINT} ${SCHEMA} *.xml
diff --git a/scripts/up-down-tighter-schema.pl b/scripts/up-down-tighter-schema.pl
new file mode 100644
index 00000000..a243b1f8
--- /dev/null
+++ b/scripts/up-down-tighter-schema.pl
@@ -0,0 +1,103 @@
+# $Id$
+#
+# Trivial Perl script to generate a RelaxNG (Compact Syntax) Schema
+# for RPKI up-down protocol. This is based on the schema in the APNIC
+# Wiki, but has much tighter constraints on a number of fields. It's
+# a Perl script to work around the lack of a mechanism for reusing
+# restrictions in a RelaxNG schema.
+#
+# libxml2 (including xmllint) only groks the XML syntax of RelaxNG, so
+# run the output of this script through a converter like trang to get
+# XML syntax.
+
+# Note that the regexps here are RelaxNG, not Perl, slightly different.
+
+my $as_set = '[0-9]+(,[0-9]+)?';
+
+my $ipv4 = '([0-9]+\.){3}[0-9]+';
+my $ipv4p = "${ipv4}/[0-9]+";
+my $ipv4r = "${ipv4}-${ipv4}";
+my $ipv4_set = "${ipv4p}|${ipv4r}";
+
+
+my $rnc = qq{# \$Id\$
+# Automatically generated from $0
+
+ default namespace = "http://www.apnic.net/specs/rescerts/up-down/"
+
+ grammar {
+ start = element message {
+ attribute version { xsd:positiveInteger { maxInclusive="1" } },
+ attribute sender { xsd:token { maxLength="1024" } },
+ attribute recipient { xsd:token { maxLength="1024" } },
+ attribute msg_ref { xsd:positiveInteger { maxInclusive="999999999999999" } },
+ payload
+ }
+
+ payload |= attribute type { "list" }, list_request
+ payload |= attribute type { "list_response"}, list_response
+ payload |= attribute type { "issue" }, issue_request
+ payload |= attribute type { "issue_response"}, issue_response
+ payload |= attribute type { "revoke" }, revoke_request
+ payload |= attribute type { "revoke_response"}, revoke_response
+ payload |= attribute type { "error_response"}, error_response
+
+ list_request = empty
+ list_response = class*
+
+ class = element class {
+ attribute class_name { xsd:token { maxLength="1024" } },
+ attribute cert_url { xsd:anyURI { maxLength="1024" } },
+ attribute cert_ski { xsd:token { maxLength="1024" } },
+ attribute resource_set_as { xsd:string { maxLength="512000" pattern="${as_set}" } },
+ attribute resource_set_ipv4 { xsd:string { maxLength="512000" pattern="${ipv4_set}" } },
+ attribute resource_set_ipv6 { xsd:string { maxLength="512000" } },
+ attribute suggested_sia_head { xsd:string { maxLength="1024" } }?,
+ element certificate {
+ attribute cert_url { xsd:anyURI { maxLength="1024" } },
+ attribute cert_ski { xsd:token { maxLength="1024" } },
+ attribute cert_aki { xsd:token { maxLength="1024" } },
+ attribute cert_serial { xsd:positiveInteger },
+ attribute resource_set_as { xsd:string { maxLength="512000" pattern="${as_set}" } },
+ attribute resource_set_ipv4 { xsd:string { maxLength="512000" pattern="${ipv4_set}" } },
+ attribute resource_set_ipv6 { xsd:string { maxLength="512000" } },
+ attribute req_resource_set_as { xsd:string { maxLength="512000" pattern="${as_set}" } }?,
+ attribute req_resource_set_ipv4 { xsd:string { maxLength="512000" pattern="${ipv4_set}" } }?,
+ attribute req_resource_set_ipv6 { xsd:string { maxLength="512000" } }?,
+ attribute status { "undersize" | "match" | "oversize" },
+ xsd:base64Binary { maxLength="512000" }
+ }*,
+ element issuer { xsd:base64Binary { maxLength="512000" } }
+ }
+
+ issue_request = element request {
+ attribute class_name { xsd:token { maxLength="1024" } },
+ attribute req_resource_set_as { xsd:string { maxLength="512000" pattern="${as_set}" } }?,
+ attribute req_resource_set_ipv4 { xsd:string { maxLength="512000" pattern="${ipv4_set}" } }?,
+ attribute req_resource_set_ipv6 { xsd:string { maxLength="512000" } }?,
+ xsd:base64Binary { maxLength="512000" }
+ }
+ issue_response = class
+
+ revoke_request = revocation
+ revoke_response = revocation
+
+ revocation = element key {
+ attribute class_name { xsd:token { maxLength="1024" } },
+ attribute ski { xsd:token { maxLength="1024" } }
+ }
+
+ error_response =
+ element status { xsd:positiveInteger { maxInclusive="999999999999999" } },
+ element last_msg_processed { xsd:positiveInteger { maxInclusive="999999999999999" } }?,
+ element description { attribute xml:lang { xsd:language }, xsd:string { maxLength="1024" } }?
+ }
+};
+
+$_ = $0;
+s/\.pl$//;
+
+open(F, ">", "$_.rnc") or die;
+print(F $rnc) or die;
+close(F) or die;
+exec("trang", "$_.rnc", "$_.rng") or die;
diff --git a/scripts/up-down-tighter-schema.rnc b/scripts/up-down-tighter-schema.rnc
new file mode 100644
index 00000000..bffcc41a
--- /dev/null
+++ b/scripts/up-down-tighter-schema.rnc
@@ -0,0 +1,72 @@
+# $Id$
+# Automatically generated from up-down-tighter-schema.pl
+
+ default namespace = "http://www.apnic.net/specs/rescerts/up-down/"
+
+ grammar {
+ start = element message {
+ attribute version { xsd:positiveInteger { maxInclusive="1" } },
+ attribute sender { xsd:token { maxLength="1024" } },
+ attribute recipient { xsd:token { maxLength="1024" } },
+ attribute msg_ref { xsd:positiveInteger { maxInclusive="999999999999999" } },
+ payload
+ }
+
+ payload |= attribute type { "list" }, list_request
+ payload |= attribute type { "list_response"}, list_response
+ payload |= attribute type { "issue" }, issue_request
+ payload |= attribute type { "issue_response"}, issue_response
+ payload |= attribute type { "revoke" }, revoke_request
+ payload |= attribute type { "revoke_response"}, revoke_response
+ payload |= attribute type { "error_response"}, error_response
+
+ list_request = empty
+ list_response = class*
+
+ class = element class {
+ attribute class_name { xsd:token { maxLength="1024" } },
+ attribute cert_url { xsd:anyURI { maxLength="1024" } },
+ attribute cert_ski { xsd:token { maxLength="1024" } },
+ attribute resource_set_as { xsd:string { maxLength="512000" pattern="[0-9]+(,[0-9]+)?" } },
+ attribute resource_set_ipv4 { xsd:string { maxLength="512000" pattern="([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+" } },
+ attribute resource_set_ipv6 { xsd:string { maxLength="512000" } },
+ attribute suggested_sia_head { xsd:string { maxLength="1024" } }?,
+ element certificate {
+ attribute cert_url { xsd:anyURI { maxLength="1024" } },
+ attribute cert_ski { xsd:token { maxLength="1024" } },
+ attribute cert_aki { xsd:token { maxLength="1024" } },
+ attribute cert_serial { xsd:positiveInteger },
+ attribute resource_set_as { xsd:string { maxLength="512000" pattern="[0-9]+(,[0-9]+)?" } },
+ attribute resource_set_ipv4 { xsd:string { maxLength="512000" pattern="([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+" } },
+ attribute resource_set_ipv6 { xsd:string { maxLength="512000" } },
+ attribute req_resource_set_as { xsd:string { maxLength="512000" pattern="[0-9]+(,[0-9]+)?" } }?,
+ attribute req_resource_set_ipv4 { xsd:string { maxLength="512000" pattern="([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+" } }?,
+ attribute req_resource_set_ipv6 { xsd:string { maxLength="512000" } }?,
+ attribute status { "undersize" | "match" | "oversize" },
+ xsd:base64Binary { maxLength="512000" }
+ }*,
+ element issuer { xsd:base64Binary { maxLength="512000" } }
+ }
+
+ issue_request = element request {
+ attribute class_name { xsd:token { maxLength="1024" } },
+ attribute req_resource_set_as { xsd:string { maxLength="512000" pattern="[0-9]+(,[0-9]+)?" } }?,
+ attribute req_resource_set_ipv4 { xsd:string { maxLength="512000" pattern="([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+" } }?,
+ attribute req_resource_set_ipv6 { xsd:string { maxLength="512000" } }?,
+ xsd:base64Binary { maxLength="512000" }
+ }
+ issue_response = class
+
+ revoke_request = revocation
+ revoke_response = revocation
+
+ revocation = element key {
+ attribute class_name { xsd:token { maxLength="1024" } },
+ attribute ski { xsd:token { maxLength="1024" } }
+ }
+
+ error_response =
+ element status { xsd:positiveInteger { maxInclusive="999999999999999" } },
+ element last_msg_processed { xsd:positiveInteger { maxInclusive="999999999999999" } }?,
+ element description { attribute xml:lang { xsd:language }, xsd:string { maxLength="1024" } }?
+ }
diff --git a/scripts/up-down-tighter-schema.rng b/scripts/up-down-tighter-schema.rng
new file mode 100644
index 00000000..50dbbe90
--- /dev/null
+++ b/scripts/up-down-tighter-schema.rng
@@ -0,0 +1,284 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+ $Id$
+ Automatically generated from up-down-tighter-schema.pl
+-->
+<grammar ns="http://www.apnic.net/specs/rescerts/up-down/" xmlns="http://relaxng.org/ns/structure/1.0" datatypeLibrary="http://www.w3.org/2001/XMLSchema-datatypes">
+ <start>
+ <element name="message">
+ <attribute name="version">
+ <data type="positiveInteger">
+ <param name="maxInclusive">1</param>
+ </data>
+ </attribute>
+ <attribute name="sender">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="recipient">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="msg_ref">
+ <data type="positiveInteger">
+ <param name="maxInclusive">999999999999999</param>
+ </data>
+ </attribute>
+ <ref name="payload"/>
+ </element>
+ </start>
+ <define name="payload" combine="choice">
+ <attribute name="type">
+ <value>list</value>
+ </attribute>
+ <ref name="list_request"/>
+ </define>
+ <define name="payload" combine="choice">
+ <attribute name="type">
+ <value>list_response</value>
+ </attribute>
+ <ref name="list_response"/>
+ </define>
+ <define name="payload" combine="choice">
+ <attribute name="type">
+ <value>issue</value>
+ </attribute>
+ <ref name="issue_request"/>
+ </define>
+ <define name="payload" combine="choice">
+ <attribute name="type">
+ <value>issue_response</value>
+ </attribute>
+ <ref name="issue_response"/>
+ </define>
+ <define name="payload" combine="choice">
+ <attribute name="type">
+ <value>revoke</value>
+ </attribute>
+ <ref name="revoke_request"/>
+ </define>
+ <define name="payload" combine="choice">
+ <attribute name="type">
+ <value>revoke_response</value>
+ </attribute>
+ <ref name="revoke_response"/>
+ </define>
+ <define name="payload" combine="choice">
+ <attribute name="type">
+ <value>error_response</value>
+ </attribute>
+ <ref name="error_response"/>
+ </define>
+ <define name="list_request">
+ <empty/>
+ </define>
+ <define name="list_response">
+ <zeroOrMore>
+ <ref name="class"/>
+ </zeroOrMore>
+ </define>
+ <define name="class">
+ <element name="class">
+ <attribute name="class_name">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="cert_url">
+ <data type="anyURI">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="cert_ski">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="resource_set_as">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">[0-9]+(,[0-9]+)?</param>
+ </data>
+ </attribute>
+ <attribute name="resource_set_ipv4">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+</param>
+ </data>
+ </attribute>
+ <attribute name="resource_set_ipv6">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ </data>
+ </attribute>
+ <optional>
+ <attribute name="suggested_sia_head">
+ <data type="string">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ </optional>
+ <zeroOrMore>
+ <element name="certificate">
+ <attribute name="cert_url">
+ <data type="anyURI">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="cert_ski">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="cert_aki">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="cert_serial">
+ <data type="positiveInteger"/>
+ </attribute>
+ <attribute name="resource_set_as">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">[0-9]+(,[0-9]+)?</param>
+ </data>
+ </attribute>
+ <attribute name="resource_set_ipv4">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+</param>
+ </data>
+ </attribute>
+ <attribute name="resource_set_ipv6">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ </data>
+ </attribute>
+ <optional>
+ <attribute name="req_resource_set_as">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">[0-9]+(,[0-9]+)?</param>
+ </data>
+ </attribute>
+ </optional>
+ <optional>
+ <attribute name="req_resource_set_ipv4">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+</param>
+ </data>
+ </attribute>
+ </optional>
+ <optional>
+ <attribute name="req_resource_set_ipv6">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ </data>
+ </attribute>
+ </optional>
+ <attribute name="status">
+ <choice>
+ <value>undersize</value>
+ <value>match</value>
+ <value>oversize</value>
+ </choice>
+ </attribute>
+ <data type="base64Binary">
+ <param name="maxLength">512000</param>
+ </data>
+ </element>
+ </zeroOrMore>
+ <element name="issuer">
+ <data type="base64Binary">
+ <param name="maxLength">512000</param>
+ </data>
+ </element>
+ </element>
+ </define>
+ <define name="issue_request">
+ <element name="request">
+ <attribute name="class_name">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <optional>
+ <attribute name="req_resource_set_as">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">[0-9]+(,[0-9]+)?</param>
+ </data>
+ </attribute>
+ </optional>
+ <optional>
+ <attribute name="req_resource_set_ipv4">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ <param name="pattern">([0-9]+\.){3}[0-9]+/[0-9]+|([0-9]+\.){3}[0-9]+-([0-9]+\.){3}[0-9]+</param>
+ </data>
+ </attribute>
+ </optional>
+ <optional>
+ <attribute name="req_resource_set_ipv6">
+ <data type="string">
+ <param name="maxLength">512000</param>
+ </data>
+ </attribute>
+ </optional>
+ <data type="base64Binary">
+ <param name="maxLength">512000</param>
+ </data>
+ </element>
+ </define>
+ <define name="issue_response">
+ <ref name="class"/>
+ </define>
+ <define name="revoke_request">
+ <ref name="revocation"/>
+ </define>
+ <define name="revoke_response">
+ <ref name="revocation"/>
+ </define>
+ <define name="revocation">
+ <element name="key">
+ <attribute name="class_name">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ <attribute name="ski">
+ <data type="token">
+ <param name="maxLength">1024</param>
+ </data>
+ </attribute>
+ </element>
+ </define>
+ <define name="error_response">
+ <element name="status">
+ <data type="positiveInteger">
+ <param name="maxInclusive">999999999999999</param>
+ </data>
+ </element>
+ <optional>
+ <element name="last_msg_processed">
+ <data type="positiveInteger">
+ <param name="maxInclusive">999999999999999</param>
+ </data>
+ </element>
+ </optional>
+ <optional>
+ <element name="description">
+ <attribute name="xml:lang">
+ <data type="language"/>
+ </attribute>
+ <data type="string">
+ <param name="maxLength">1024</param>
+ </data>
+ </element>
+ </optional>
+ </define>
+</grammar>
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-20 07:27:21 +0000