Add control interface to clear CMS-timestamp-based replay protection,

so we can recover from misconfigured clocks.  Closes #265.

Add child_handle attribute to <list_published_objects/> response.
Closes #266.

svn path=/trunk/; revision=4588

1 files changed, 14 insertions, 0 deletions

diff --git a/rpkid/rpki/rpkic.py b/rpkid/rpki/rpkic.py
index 6b860200..3ea44689 100644
--- a/rpkid/rpki/rpkic.py
+++ b/rpkid/rpki/rpkic.py
@@ -605,3 +605,17 @@ class main(rpki.cli.Cmd):
       raise BadCommandSyntax("Unexpected argument(s): %r" % arg)
 
     self.zoo.revoke_forgotten()
+
+
+  def do_clear_all_sql_cms_replay_protection(self, arg):
+    """
+    Tell rpkid and pubd to clear replay protection for all SQL-based
+    entities.  This is a fairly blunt instrument, but as we don't
+    expect this to be necessary except in the case of gross
+    misconfiguration, it should suffice
+    """
+
+    if arg:
+      raise BadCommandSyntax("Unexpected argument(s): %r" % arg)
+
+    self.zoo.clear_all_sql_cms_replay_protection()