diff options
| author | Rob Austein <sra@hactrn.net> | 2012-07-06 05:17:08 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2012-07-06 05:17:08 +0000 |
| commit | aedaacf9aed490ce053c65c98a7cf6d18383ba60 (patch) | |
| tree | 710dd9baa257ae7fe4a02e39053e66aedf1c5d36 /rpkid/rpki/pubd.py | |
| parent | 617838817ef21db22f8699ab126e41f6ba090a02 (diff) | |
Implement CMS-timestamp-based replay protection. Closes #35.
svn path=/trunk/; revision=4586
Diffstat (limited to 'rpkid/rpki/pubd.py')
| -rw-r--r-- | rpkid/rpki/pubd.py | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/rpkid/rpki/pubd.py b/rpkid/rpki/pubd.py index 555a4d6e..0bf811db 100644 --- a/rpkid/rpki/pubd.py +++ b/rpkid/rpki/pubd.py @@ -68,6 +68,7 @@ class main(object): self.cfg_file = None self.profile = False self.foreground = False + self.irbe_cms_timestamp = None opts, argv = getopt.getopt(sys.argv[1:], "c:dfhp:?", ["config=", "debug", "foreground", "help", "profile="]) @@ -136,7 +137,12 @@ class main(object): self.sql.sweep() cb(reply) - q_msg = rpki.publication.cms_msg(DER = query).unwrap(certs) + q_cms = rpki.publication.cms_msg(DER = query) + q_msg = q_cms.unwrap(certs) + if client is None: + self.irbe_cms_timestamp = q_cms.check_replay(self.irbe_cms_timestamp) + else: + q_cms.check_replay_sql(client) q_msg.serve_top_level(self, client, done) def control_handler(self, query, path, cb): |