aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-09-23Handle multiple CRLs from same issuer properly, or as properly as IRob Austein
know how to manage. Cache values we use on every call to check_x509() in the walk_ctx_t. This closes #83. svn path=/rcynic/rcynic.c; revision=3997
2011-09-21rcynic is now more than one file.Rob Austein
svn path=/rcynic/Doxyfile; revision=3996
2011-09-21Still more #83: rework CRL digest check to allow local policy, addRob Austein
check (warning only) of CRLDPs in other objects against manifest EE certificate CRLDP. svn path=/rcynic/README; revision=3995
2011-09-20fix botch where a child's prefixes were passed instead of asnsMichael Elkins
svn path=/rpkid/rpki/gui/app/glue.py; revision=3994
2011-09-20Further #83: rework check_manifest() to compare manifest numbers,Rob Austein
postpone CRL digest check until we've picked the manifest. svn path=/rcynic/rcynic.c; revision=3993
2011-09-19Progress (not complete) on #83: check CRL numbers rather than justRob Austein
blindly accepting current when both exist, further nit-picky checks (AKI, CRL extensions, CRL and certificate versions). svn path=/rcynic/rcynic.c; revision=3992
2011-09-16Rework CMS checking to use check_x509(). (#82)Rob Austein
Start cleaning up tangled mess of interlocked checks between CRL and manifests. (#83) svn path=/rcynic/README; revision=3991
2011-09-16Minor rework of main program. Send --show output to stdout, withoutRob Austein
timestamps and without nasty EPIPE backtrace. svn path=/rtr-origin/rtr-origin.py; revision=3990
2011-09-16Rework separation between fatal and non-fatal rpki-rtr error codes.Rob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3989
2011-09-15Consolidate and rationalize validation status codes. (#81)Rob Austein
svn path=/rcynic/rcynic.c; revision=3988
2011-09-15Check TAL URI properly. (#80)Rob Austein
Clean up a bit of dead code. svn path=/rcynic/rcynic.c; revision=3987
2011-09-15Update smoketest to track rcynicRob Austein
svn path=/rpkid/tests/smoketest.py; revision=3986
2011-09-15Merge rcynic-ng/ back into rcynic/. Used svn merge --ignore-ancestryRob Austein
to minimize problems for people mirroring the repository. svn path=/configure; revision=3985
2011-09-14Better support for migration from old-style output directories.Rob Austein
svn path=/rcynic-ng/rcynic.c; revision=3984
2011-09-14Fix test in upgraded_from_pre_symlink_rcynic()Rob Austein
svn path=/rcynic-ng/rcynic.c; revision=3983
2011-09-14Silence compiler warningRob Austein
svn path=/rcynic-ng/rcynic.c; revision=3982
2011-09-14Forgot doc update. No biscuit.Rob Austein
svn path=/rcynic-ng/README; revision=3981
2011-09-14Rework output directory scheme to do atomic instalation of new resultsRob Austein
via the ancient rename-symlink-to-directory hack. (#61) svn path=/rcynic-ng/rcynic.c; revision=3980
2011-09-13Comment nit.Rob Austein
svn path=/rcynic-ng/rcynic.c; revision=3979
2011-09-13Clean up handling of stale certificates and manifests.Rob Austein
svn path=/rcynic-ng/rcynic.c; revision=3978
2011-09-12Add (non-zero) default for rsync-timeout. Update documentation. (#40)Rob Austein
svn path=/rcynic-ng/README; revision=3977
2011-09-10Check for exception select() throws on bad file descriptor, to avoidRob Austein
going into a spin loop. (#69) Preserve old signal handlers even if we do have to restart the I/O loop. Minor clean up. svn path=/rpkid/rpki/async.py; revision=3976
2011-09-07Handle client close events and exceptions a bit more quietly andRob Austein
aggressively in rpki-rtr server. svn path=/rtr-origin/rtr-origin.py; revision=3975
2011-09-07Fix handling of HTTPTimeout. (#70)Rob Austein
Crank down HTTP timeout values. svn path=/rpkid/rpki/http.py; revision=3974
2011-09-07Change [3245] should have applied to sql-dumper.py too.Rob Austein
svn path=/rpkid/tests/sql-dumper.py; revision=3973
2011-09-06CleanupRob Austein
svn path=/scripts/Old/apnic-test-3.tgz; revision=3972
2011-09-06Non-blocking connect needs timeout. (#70)Rob Austein
svn path=/rpkid/rpki/http.py; revision=3971
2011-09-06Upgrade to OpenSSL 1.0.0e (CVE-2011-3207).Rob Austein
svn path=/openssl/Makefile.in; revision=3970
2011-09-05Rudamentary script for extracting XML from pcap files.Rob Austein
svn path=/scripts/pcap-to-xml.sh; revision=3969
2011-09-01Implement rsync_state_conflict_wait (#12).Rob Austein
svn path=/rcynic-ng/rcynic.c; revision=3968
2011-09-01Fix problem where rsync_ctx objects representing connections that hadRob Austein
timed out would get stomped and restarted. Handle timeouts as failure, and put repositories on which we've timed out into the dead_host list. Rework rsync_mgr() yet again, still trying to juggle the three-way wait for timeouts, subprocess I/O, and exiting subprocesses. Parse the warning message rsyncd sends when we've hit its per-module connection limit, as a first step towards per-repository connection limits (not that this helps when a repository is behind a firewall that starts whacking connections at the transport layer...). svn path=/rcynic-ng/rcynic.c; revision=3967
2011-09-01Oops, memchr() is ISO C but memrchr() isn't.Rob Austein
svn path=/rcynic-ng/bio_f_linebreak.c; revision=3966
2011-09-01Clean up old APNIC trust anchor, long since replaced by TAL.Rob Austein
svn path=/rcynic-ng/sample-trust-anchors/apnic.cer; revision=3965
2011-09-01Add BIO_f_linebreak filter to work around OpenSSL's strange Base64Rob Austein
limitations. (#2) svn path=/rcynic-ng/Makefile.in; revision=3964
2011-08-30Restrict subject and issuer names per draft-ietf-sidr-res-certs 4.4Rob Austein
and 4.5. At least for now, we just generate warnings on violations, we don't reject certificates just for failing this test. svn path=/rcynic-ng/rcynic.c; revision=3963
2011-08-24myrpki.conf delenda estRob Austein
svn path=/rpkid/examples/rpki.conf; revision=3962
2011-08-24Server needs to handle Error Report PDU received from client. DragRob Austein
other aspects of Error Report PDU implementation up to current spec while we're at it. (#36) svn path=/rtr-origin/rtr-origin.py; revision=3961
2011-08-23Move TODO list to ticket system.Rob Austein
svn path=/rpkid/README; revision=3960
2011-08-22Update ancient TODO before transfering what's left of it to ticket systemRob Austein
svn path=/rpkid/README; revision=3959
2011-08-22Add ${myrpki::configuration-directory} to make it easier to useRob Austein
absolute filenames. svn path=/rpkid/examples/rpki.conf; revision=3958
2011-08-22Cleaner version of host,port tagging kludgeRob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3957
2011-08-21Rework server logging code to support stunnel and to log local portRob Austein
when available. svn path=/rtr-origin/rtr-origin.py; revision=3956
2011-08-20Oops, log client address in --bgpdump_server mode, like --server.Rob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3955
2011-08-19Add run-rsync config flag and rsync_skipped validation status code, toRob Austein
handle cases where rcynic chooses not to run rsync at all, for whatever reason. (#5, #13) svn path=/rcynic-ng/README; revision=3954
2011-08-18Initial implementation of dead host cache. (#5)Rob Austein
svn path=/rcynic-ng/rcynic.c; revision=3953
2011-08-16Use syslog for bgpdump_serverRob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3952
2011-08-16Debug --bgpdump_server modeRob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3951
2011-08-16More fun with bgpdump testing.Rob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3950
2011-08-12Don't drop cron event when mysqld is down. (#3)Rob Austein
svn path=/rpkid/rpki/rpkid.py; revision=3949
2011-08-12Set noexecstack to avoid problems with SELinux (#7)Rob Austein
svn path=/configure; revision=3948
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-03 18:35:53 +0000