aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-02-15First round of silly bugfixes.Rob Austein
svn path=/branches/tk705/; revision=6258
2016-02-15Checkpoint while shuffling stuff around for new installation scheme.Rob Austein
Installation of everything but Debian packages is probably broken, and Debian packages are too at the moment due to (probably) minor errors in buildtools/debian-skeleton, but enough has changed that this really needs a snapshot checked in for backup. svn path=/branches/tk705/; revision=6257
2016-02-14Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6256
2016-02-14Revised rpki-sql-setup approaching something halfway sane. Still needRob Austein
to tweak rpki-confgen.xml and Debian rpki-*.{pre,post}{inst,rm} scripts before we'll know if the new approach really works properly. svn path=/branches/tk705/; revision=6255
2016-02-13Snapshot current almost-working version of rpki-sql-setup,Rob Austein
before whacking it in a slightly different direction. svn path=/branches/tk705/; revision=6254
2016-02-13Add back some logging.Rob Austein
svn path=/branches/tk705/; revision=6253
2016-02-12Update settings.py installation glorp.Rob Austein
svn path=/branches/tk705/; revision=6252
2016-02-12Debug PostgreSQL setup code. Make [rcynic] database optional for now.Rob Austein
svn path=/branches/tk705/; revision=6251
2016-02-12Missing "self" in method definition.Rob Austein
svn path=/branches/tk705/; revision=6250
2016-02-12More MySQL vestiges.Rob Austein
svn path=/branches/tk705/; revision=6249
2016-02-12Rewrite scripts affected by rpki-sql-setup changes.Rob Austein
Change Debian configuration to use PostgreSQL. svn path=/branches/tk705/; revision=6248
2016-02-12Rewrite rpki-sql-setup to handle PostgreSQL and SQLite3 as well asRob Austein
MySQL. Command line syntax changed, so doc and calling scripts need updating. Not yet tested, and some of the stuff for MySQL and PostgreSQL setup is kind of funky, so take with salt. svn path=/branches/tk705/; revision=6247
2016-02-10Debian requires python-lxml as a build dependency after all.Rob Austein
svn path=/branches/tk705/; revision=6246
2016-02-10More dependency updates (development branch). Probably brokeRob Austein
everything, but at least heading towards where we want to be rather than bogged down in what used to work. svn path=/branches/tk705/; revision=6245
2016-02-10Start updating build packaging for brave new world.Rob Austein
svn path=/branches/tk705/; revision=6244
2016-02-09Commit a couple of bugfixes Lachlan Kang found last summer (inRob Austein
research-only code, nothing anyone would use in production) which fell through the cracks somehow. svn path=/branches/tk705/; revision=6243
2016-02-09Handle OpenSSL verification codes that aren't present in older OpenSSL branches.Rob Austein
svn path=/branches/tk705/; revision=6242
2016-02-08Add note on TLS certificate validation.Rob Austein
svn path=/branches/tk705/; revision=6241
2016-01-29Tweaks to handle large RRDP deltas better.Rob Austein
svn path=/branches/tk705/; revision=6240
2016-01-29Whack rcynicng to produce an XML file which rcynic-html can parse:Rob Austein
needs further work, but produces somewhat-useful output now. Start merging command line argument (argparse) and config file (ConfigParser) support into a unified library module, in an attempt to reduce the amount of code duplication and reign in some of the configuration chaos. Trigger for this is all of the RP programs now needing SQL configuration. Whack rpki.rcynicdb.models to work with PostgreSQL, which has length restrictions on indexed columns. svn path=/branches/tk705/; revision=6239
2016-01-28Add HTTPS timeout control.Rob Austein
svn path=/branches/tk705/; revision=6238
2016-01-26Use new rcynicdb iterator for rpki-rtr generation. May need to reviseRob Austein
command line syntax for "rpki-rtr cronjob" command; the current syntax works, but is unnecessarily confusing. svn path=/branches/tk705/; revision=6237
2016-01-26Add (mostly) backwards-compatible iterator which handles findingRob Austein
authenticated RP data via either os.walk() or Django ORM database traversal. svn path=/branches/tk705/; revision=6236
2016-01-23Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6235
2016-01-23Pre-fetch a small number of deltas ahead of what we're currentlyRob Austein
loading in RRDP delta processing loop, to keep the pipe full and avoid sitting idle while processing a long series of deltas. svn path=/branches/tk705/; revision=6234
2016-01-23Tweak logging. Rewrite object checking loop to be a bit clearer.Rob Austein
svn path=/branches/tk705/; revision=6233
2016-01-23Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6232
2016-01-23Remove last vestiges of "__metaclass__ = models.SubfieldBase"Rob Austein
(deprecated in Django 1.9, scheduled to be removed in Django 1.10). svn path=/branches/tk705/; revision=6231
2016-01-23Add multiple-URI TAL support to rcynicng.Rob Austein
Whack CA tools with a club until rcynicng works with our CA RRDP implementation. Add makemigrations target to top-level Makefile; this is a bit of a kludge, but sure beats doing this by hand. svn path=/branches/tk705/; revision=6230
2016-01-20Process deltas incrementally (one SQL commit per delta) and mutateRob Austein
existing RRDPSnapshot objects while applying deltas rather than creating new ones. This simplifies cleanup, avoids locking out the I/O loop for the duration of a long commit, and allows us to salvage whatever progress we were able to make if a network problem stops us partway through fetching a long series of deltas. svn path=/branches/tk705/; revision=6229
2016-01-20Handle TLS errors. Log a bit more about delta processing.Rob Austein
svn path=/branches/tk705/; revision=6228
2016-01-20Tweak cleanup code again.Rob Austein
svn path=/branches/tk705/; revision=6227
2016-01-16More exception handling (socket.error, IOError, ...).Rob Austein
svn path=/branches/tk705/; revision=6226
2016-01-16Clean up HTTPS error handling. Attempt to work around DjangoRob Austein
limitations copying large sets of related objects. svn path=/branches/tk705/; revision=6225
2016-01-15RRDP seems to work now, at least with RIPE's implementation.Rob Austein
svn path=/branches/tk705/; revision=6224
2016-01-14Rework final_cleanup() to have some chance of working with RRDP.Rob Austein
svn path=/branches/tk705/; revision=6223
2016-01-13Checkpoint of first cut at RRDP client code. RRDP client code not yetRob Austein
tested, and final_cleanup() needs work to avoid trashing RRDP state. svn path=/branches/tk705/; revision=6222
2016-01-11Add (preliminary) database cleanup code.Rob Austein
svn path=/branches/tk705/; revision=6221
2016-01-11Add rcynic-dump as a blunt instrument to let existing file-basedRob Austein
programs use rcynicng's output. Long term, such programs should read the database instead, but being able to diff directory trees is useful while testing. svn path=/branches/tk705/; revision=6220
2016-01-10First apparently-working version of rcynicng using database instead ofRob Austein
disk files. rcynic.xml output looks reasonable. Don't yet have any other tools which know how to walk the result database, so can't (yet) compare results with rcynic. Does not yet do any cleanup of old data, so will eventually consume all disk space in the universe until this is fixed. svn path=/branches/tk705/; revision=6219
2016-01-08Start converting rcynicng to use a database.Rob Austein
svn path=/branches/tk705/; revision=6218
2016-01-06Add minimal HTTPS server to yamltest, for RRDP testing.Rob Austein
svn path=/branches/tk705/; revision=6217
2015-12-08Rewrite questionable address length check in check_roa().Rob Austein
svn path=/branches/tk705/; revision=6216
2015-12-08Fall back to HTTP if we can't find an HTTPS URI for rpkiNotify; theRob Austein
latest specification says HTTPS, but enough of the existing code has not yet caught up that it's useful to see the HTTP URIs when the HTTPS ones are missing. svn path=/branches/tk705/; revision=6215
2015-12-07Finish prying RPKI conformance checks apart from object verification.Rob Austein
svn path=/branches/tk705/; revision=6214
2015-12-07Pull from trunk.Rob Austein
svn path=/branches/tk705/; revision=6213
2015-12-07Update OpenSSL to version 1.0.2e.Rob Austein
svn path=/trunk/; revision=6212
2015-12-07Start decoupling RPKI profile conformance checks from objectRob Austein
verification per se. Clean up nasty mess in profile conformance checks for router certificates. svn path=/branches/tk705/; revision=6211
2015-12-07Move validation callback to Python.Rob Austein
svn path=/branches/tk705/; revision=6210
2015-12-06Clean up RPKI conformance checking of X.509v3 extensions and elliptic curve ↵Rob Austein
keys. svn path=/branches/tk705/; revision=6209
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-11 21:36:51 +0000