aboutsummaryrefslogtreecommitdiff
path: root/myrpki.rototill/arin-rootcert.py
diff options
context:
space:
mode:
authorRob Austein <sra@hactrn.net>2010-04-12 17:27:37 +0000
committerRob Austein <sra@hactrn.net>2010-04-12 17:27:37 +0000
commit60f64d920a7920fdf7e4ee6409be0147e4500185 (patch)
treef12f884e462493b4f8a5a525f700e2839c5f9281 /myrpki.rototill/arin-rootcert.py
parent59458a3c119aa1c100f5bdce783d0d852f27d7e7 (diff)
Cleanup of testbed tools, step 1.
svn path=/myrpki.rototill/PLAN; revision=3183
Diffstat (limited to 'myrpki.rototill/arin-rootcert.py')
-rw-r--r--myrpki.rototill/arin-rootcert.py69
1 files changed, 0 insertions, 69 deletions
diff --git a/myrpki.rototill/arin-rootcert.py b/myrpki.rototill/arin-rootcert.py
deleted file mode 100644
index 41369056..00000000
--- a/myrpki.rototill/arin-rootcert.py
+++ /dev/null
@@ -1,69 +0,0 @@
-"""
-Generate config for a test RPKI root certificate for resources
-specified in asns.csv and prefixes.csv.
-
-This script is separate from arin-to-csv.py so that we can convert on
-the fly rather than having to pull the entire database into memory.
-
-$Id$
-
-Copyright (C) 2009-2010 Internet Systems Consortium ("ISC")
-
-Permission to use, copy, modify, and distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
-REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
-AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
-INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
-LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
-OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-PERFORMANCE OF THIS SOFTWARE.
-"""
-
-import csv, myrpki, sys
-
-holder = "arin"
-
-if len(sys.argv) == 2:
- holder = sys.argv[1]
-elif len(sys.argv) > 1:
- raise RuntimeError, "Usage: %s [holder]" % sys.argv[0]
-
-print '''\
-[req]
-default_bits = 2048
-default_md = sha256
-distinguished_name = req_dn
-prompt = no
-encrypt_key = no
-
-[req_dn]
-CN = Pseudo-%(HOLDER)s testbed root RPKI certificate
-
-[x509v3_extensions]
-basicConstraints = critical,CA:true
-subjectKeyIdentifier = hash
-keyUsage = critical,keyCertSign,cRLSign
-subjectInfoAccess = 1.3.6.1.5.5.7.48.5;URI:rsync://%(holder)s.rpki.net/rpki/%(holder)s/,1.3.6.1.5.5.7.48.10;URI:rsync://%(holder)s.rpki.net/rpki/%(holder)s/root.mnf
-certificatePolicies = critical,1.3.6.1.5.5.7.14.2
-sbgp-autonomousSysNum = critical,@rfc3779_asns
-sbgp-ipAddrBlock = critical,@rfc3997_addrs
-
-[rfc3779_asns]
-''' % { "holder" : holder.lower(),
- "HOLDER" : holder.upper() }
-
-for i, asn in enumerate(asn for handle, asn in myrpki.csv_reader("asns.csv", columns = 2)):
- print "AS.%d = %s" % (i, asn)
-
-print '''\
-
-[rfc3997_addrs]
-
-'''
-
-for i, prefix in enumerate(prefix for handle, prefix in myrpki.csv_reader("prefixes.csv", columns = 2)):
- v = 6 if ":" in prefix else 4
- print "IPv%d.%d = %s" % (v, i, prefix)