aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-04-29Track changes to names of pickled fields.Rob Austein
svn path=/branches/tk705/; revision=6407
2016-04-29First cut at rpkid migration, preliminary data for rootd migration.Rob Austein
Still have irdb and pubd to do. svn path=/branches/tk705/; revision=6406
2016-04-29Throw correct exceptions in container LazyDict container methods, notRob Austein
that anybody is likely to care. svn path=/branches/tk705/; revision=6405
2016-04-29Cleaner implementation of LazyDict, albeit a bit more verbose.Rob Austein
svn path=/branches/tk705/; revision=6404
2016-04-29Snapshot of incomplete proof of concept. Will need to test finalRob Austein
results, of course, but Django behavior so far suggests that this approach will probably work. svn path=/branches/tk705/; revision=6403
2016-04-28Pull still more ca-pickle hacks from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6402
2016-04-28Pull rootd-specific ca-pickle hacks from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6400
2016-04-28Pull ca-{pickle,unpickle}.py updates from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6398
2016-04-27Pull ca-{pickle,unpickle}.py from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6396
2016-04-27First step of transition mechanism from trunk/ to tk705/: script toRob Austein
encapsulate all (well, we hope) relevant configuration and state from a trunk/ CA in a form we can easily load on another machine, or on the same machine after a software upgrade, or .... Transfer format is an ad hoc Python dictionary, encoded in Python's native "Pickle" format, compressed by "xz" with SHA-256 integrity checking enabled. See #807. svn path=/trunk/; revision=6395
2016-04-27Catch exceptions from Zookeeper to gracefully continue when we can't talk to ↵Michael Elkins
rpkid. closes #805 svn path=/branches/tk705/; revision=6394
2016-04-26Handle non-existant root certificate correctly in rpkic extract_root_* ↵Rob Austein
commands. Fixes #808. svn path=/branches/tk705/; revision=6393
2016-04-26Convert RP utilities to use common config/argparse/logging setup.Rob Austein
svn path=/branches/tk705/; revision=6392
2016-04-26Convert rpki-rtr to use common config/argparse/logging setup.Rob Austein
svn path=/branches/tk705/; revision=6391
2016-04-26Further consolidation of config file parsing, command line parsing,Rob Austein
and logging setup. Most programs now use the unified mechanism, although there are still a few holdouts: the GUI, which is a special case because it has no command line, and the rpki-rtr program, which, for historical reasons has its own implementation of the logging setup infrastructure. svn path=/branches/tk705/; revision=6390
2016-04-26Update trunk/FreeBSD port from django14 to django16.Rob Austein
svn path=/trunk/; revision=6389
2016-04-24Disable TALs for a couple more testbeds as we edge towards consideringRob Austein
the default configuration to be production rather than testing.w svn path=/branches/tk705/; revision=6388
2016-04-24Add exception handler of last resort to servers, in an attempt to getRob Austein
startup error messages logged properly if at all possible. See #806. svn path=/branches/tk705/; revision=6387
2016-04-24Tidy new rpki-nanny capture code a bit.Rob Austein
svn path=/branches/tk705/; revision=6386
2016-04-24Add code to rpki-nanny to capture misdirected daemon output that goesRob Austein
to stdout or stderr instead of the logging system. svn path=/branches/tk705/; revision=6385
2016-04-23Tweak version number generation for git-svn-based test builds.Rob Austein
svn path=/branches/tk705/; revision=6384
2016-04-23.up_down_query_root() must pick out the right CADetail by g(SKI).Rob Austein
.up_down_query() must handle errors signaled by .up_down_query_root() correctly. svn path=/branches/tk705/; revision=6383
2016-04-23Missing dictionary key in a few tests in UpdateChildrenTask.Rob Austein
svn path=/branches/tk705/; revision=6382
2016-04-23"KeyError: u'manager'" turns out to be Django's way of saying:Rob Austein
"Try adding .all(), idiot." svn path=/branches/tk705/; revision=6381
2016-04-23Add yamltest code to set up TAL and root certificate correctly underRob Austein
new scheme. Rewrite pubd code which was whacking top-level certificate files with names other than "root.cer". svn path=/branches/tk705/; revision=6380
2016-04-23Internal root working with vastly-simplified implementation.Rob Austein
svn path=/branches/tk705/; revision=6379
2016-04-23rpkic extract_root_certificate and extract_root_tal commands.Rob Austein
svn path=/branches/tk705/; revision=6378
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
2016-04-23Internal root sort of working, but only sort of. It's skipping theRob Austein
worker CA and going straight from the root to certifying children, which is wrong. However...this is far enough along that we can now remove all the rootd glorp, which is a worthwhile simplification in its own right, so checkpoint here, remove rootd glorp, then figure out what's wrong with the internal certificate hierarchy. rcynic does validate the current output, given a manually constructed TAL, even if the current output isn't quite what it should be. So we should also be able to sort out the new TAL generation code now. Yes, checking in a version that works for the wrong reasons is weird, but the current sort-of-broken state lets us confirm that the lower levels of the tree are still correct as we go, which would be much harder if the poor thing just sat there and whimpered until we had the new internal CA code completely finished. svn path=/branches/tk705/; revision=6376
2016-04-23Initial version of rpki.irdb.models.Root. May end up folding thisRob Austein
into an expanded rpki.irdb.models.Parent, as the two are more alike than I expected them to be, but archive this version first. svn path=/branches/tk705/; revision=6375
2016-04-23Parent property methods to handle XML attributes which are really forRob Austein
the companion Root object. svn path=/branches/tk705/; revision=6374
2016-04-23Start fleshing out Parent actions that require poking at companion Root object.Rob Austein
svn path=/branches/tk705/; revision=6373
2016-04-23Generalize the formerly-BSC-specific handling of "readonly"Rob Austein
subelements in left-right responses, so we don't have to duplicate the mechanism used for BSC <pkcs10_request/> subelements when handling Parent <rpki_root_cert/> subelements. svn path=/branches/tk705/; revision=6372
2016-04-23Add Root model to rpki.rpkidb and root-related attributes toRob Austein
left-right schema. Not really using of this stuff yet, but haven't broken existing code yet either. svn path=/branches/tk705/; revision=6371
2016-04-23Upon further analysis: Roots and Turtles don't need handles, onlyRob Austein
Parents do, because Roots will be uniquely named by reference to their associated Parent. So move the handle back to Parent. svn path=/branches/tk705/; revision=6370
2016-04-23Swing CA model to link to Turtle instead of Parent.Rob Austein
svn path=/branches/tk705/; revision=6369
2016-04-23Hack to extract plausible version number from "git svn".Rob Austein
Still need equivalent hack for plain git, later. svn path=/branches/tk705/; revision=6368
2016-04-23Step one of adding internal support for RPKI roots to rpkid: splitRob Austein
Parent model into base Turtle model and derived Parent model. svn path=/branches/tk705/; revision=6367
2016-04-23Switch CA daemons to run under rpki-nanny.Rob Austein
This is a transitional version of rpki-nanny: in the long run, the daemons it runs should take care of reading their own log configuration from rpki.conf, but that's a yak for another day. svn path=/branches/tk705/; revision=6366
2016-04-21Update the GUI to work with the new rcynicdb.Michael Elkins
svn path=/branches/tk705/; revision=6365
2016-04-21Missing dictionary key in a few tests in UpdateChildrenTask.Rob Austein
Fixes #804. svn path=/branches/tk705/; revision=6364
2016-04-15Merge from trunk.Rob Austein
svn path=/branches/tk705/; revision=6363
2016-04-15Use logger rather than stderr if rpki-rtr server mode tries and failsRob Austein
to chdir(), to avoid confusing clients if inetd decides to merge stderr into stdout (text error messages don't parse well as PDUs). svn path=/trunk/; revision=6362
2016-04-14Fix bug introduced merging load_roa_requests patch from trunk, sigh.Rob Austein
svn path=/branches/tk705/; revision=6361
2016-04-12Pull rpkic <group> fix from trunk.Rob Austein
I think Subversion's merge tracking data is turning into cream cheese. svn path=/branches/tk705/; revision=6360
2016-04-12Change default handling of <group> when parsing ROA requests from CSV:Rob Austein
if <group> column is omitted, we now use the <pnm> value as the <group>, in effect requesting a separate ROA for each ROA request, which is almost certainly what the user wanted. Explictly specifying the <group> value should still work, in case anybody still needs multi-prefix ROAs for testing or other purposes. svn path=/trunk/; revision=6359
2016-04-09Avoid setuid antics when starting GUI from yamltest.Rob Austein
svn path=/branches/tk705/; revision=6352
2016-04-08OpenSSL 1.1 compatability, part 1.Rob Austein
OpenSSL 1.1 will include some backwards-compatible API changes. In some cases, the new API won't be available until OpenSSL 1.1, but a lot of the new API already exists in OpenSSL 1.0.2. This commit switches the parts that can be switched with OpenSSL 1.0. Other changes deferred until OpenSSL 1.1 public release. svn path=/branches/tk705/; revision=6351
2016-04-08Bump OpenSSL to 1.0.2g.Rob Austein
svn path=/trunk/; revision=6350
2016-04-08Bump OpenSSL to 1.0.2g.Rob Austein
svn path=/branches/tk705/; revision=6350
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 21:30:06 +0000