aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-10-10Fix length of manifest BIT STRING. Remove extraneous argument fromRob Austein
CMS subclass .sign() method calling sequences. svn path=/branches/tk274/; revision=4764
2012-10-10Fix manifest URI broken a couple of edits ago.Rob Austein
svn path=/branches/tk274/; revision=4763
2012-10-09Delete broken definition of Ghostbusters class (which nothing everRob Austein
noticed, because the working definition overwrote it). Other minor cleanup. Closes #292. svn path=/branches/tk274/; revision=4762
2012-10-09Whack SIA and AIA code to use POW instead of POW.pkix. WhackRob Austein
smoketest repository layout to silence (correct) rcynic whining about objects not in manifest. svn path=/branches/tk274/; revision=4761
2012-10-09Use POW for PKCS #10 generation.Rob Austein
svn path=/branches/tk274/; revision=4760
2012-10-09FIRST allocate, THEN initialize. Doh.Rob Austein
svn path=/branches/tk274/; revision=4759
2012-10-09Calculate SKI directly from POW.Asymmetric object.Rob Austein
svn path=/branches/tk274/; revision=4758
2012-10-05Apparently gcc reserves the right to optimize code to the point whereRob Austein
safe code becomes unsafe, then whines about it. Hmm. svn path=/branches/tk274/; revision=4757
2012-10-05Convert another chunk of Python code to use new POW classes. Clean upRob Austein
PEM and OID code in POW. Add ENTER() macro to make it easier to track down things like borked reference counts. svn path=/branches/tk274/; revision=4756
2012-10-04Pull from trunk/.Rob Austein
svn path=/branches/tk274/; revision=4755
2012-10-03Make new POW.ROA and POW.Manifest subclasses of POW.CMS. This isRob Austein
still a little rough, doesn't set eContentType OIDs automatically, needs more testing, but basic stuff like extracting contents from an existing ROA seems to work. svn path=/branches/tk274/; revision=4753
2012-10-02Cleanup #warnings.Rob Austein
svn path=/branches/tk274/; revision=4752
2012-10-01Convert CRL creation to use POW rather than POW.pkix.Rob Austein
svn path=/branches/tk274/; revision=4748
2012-10-01Use very long BPKI expiration times, so that we canRob Austein
re-run canned experiments without worrying about BPKI expirations. Probably ought to tie all of this back to YAML valid_until settings, but this will do for the moment. svn path=/branches/tk274/; revision=4747
2012-09-30Don't whack installation directories if they already exist. MaybeRob Austein
there's some clever way to autoconf this so users can control whether they want their directories whacked or not, but for now we need to stop doing this because it messes up /usr/local on MacOSX laptops. See #288. svn path=/branches/tk274/; revision=4745
2012-09-30Fix --quiet.Rob Austein
svn path=/branches/tk274/; revision=4744
2012-09-30Add --quietRob Austein
svn path=/branches/tk274/; revision=4743
2012-09-30Try dbm if gdbm fails for horrible debug-only RSA key speedup hack.Rob Austein
svn path=/branches/tk274/; revision=4742
2012-09-30Implement conversion between DER and POW formats for PKCS10 class.Rob Austein
svn path=/branches/tk274/; revision=4741
2012-09-29Convert BasicConstraints to use new POW method.Rob Austein
svn path=/branches/tk274/; revision=4740
2012-09-29Convert a few rpki.x509 methods to use the new rpki.POW code.Rob Austein
svn path=/branches/tk274/; revision=4739
2012-09-29Simplify loop.Rob Austein
svn path=/branches/tk274/; revision=4738
2012-09-29Clean shouldn't remove defstack.h (anymore).Rob Austein
svn path=/branches/tk274/; revision=4737
2012-09-29Clean up AVL_PARANOIA code.Rob Austein
svn path=/branches/tk274/; revision=4736
2012-09-25Clear old extensions from PKCS #10 request before setting new ones.Rob Austein
In most cases there won't be old extensions to clear, but in theory this could happen when modifying an existing request, so get it right. svn path=/branches/tk274/; revision=4735
2012-09-25Add PKCS#10 class.Rob Austein
svn path=/branches/tk274/; revision=4734
2012-09-23Add X509.getPublicKey(). Clean up a couple zillion compiler warningsRob Austein
from gcc 4.2 on MacOSX; am not entirely happy about some of the casts required, might want to encapsulate the more common patterns in functions to do controlled casts from one known type to another. svn path=/branches/tk274/; revision=4733
2012-09-22Drag Asymmetric class up to using the EVP_PKEY API, which simplifiesRob Austein
the Asymmetric code considerably and gets us most of the way towards being able to support ECDSA, which, in theory, we'll want for BGPSEC. svn path=/branches/tk274/; revision=4732
2012-09-22Internal TODO comments (easier than a ticket system on airplanes...).Rob Austein
svn path=/branches/tk274/; revision=4731
2012-09-21ROA class.Rob Austein
svn path=/branches/tk274/; revision=4730
2012-09-21Implement RPKI manifests. Raise exceptions properly in ASN1_TIMERob Austein
converters. Clean up internal type names, delete a bunch of symbols nothing uses anymore. svn path=/branches/tk274/; revision=4729
2012-09-20Whack rest of POW's object I/O (x.derRead(), x.derWrite()) to use newRob Austein
class-based methods instead of old module functions. svn path=/branches/tk274/; revision=4728
2012-09-20Clean up conversions between ASN.1 integers and Python integers.Rob Austein
Fix a few cases where code incorrectly assumed that ASN.1 field values would always be small enough to fit in a C integer type. svn path=/branches/tk274/; revision=4727
2012-09-20Add ten gazillion class methods for reading objects. Eventually thisRob Austein
should completely replace the old module derRead() and pemRead() functions, since it's easier to extend and supports subclasses properly. For now, the new and old APIs are both just wrappers around a generic lower-level internal API. svn path=/branches/tk274/; revision=4726
2012-09-19Move ASN.1 definitions for ROAs and Manifests to common header filesRob Austein
used by all the C programs. svn path=/branches/tk274/; revision=4725
2012-09-19Log filesystem timestamps too.Rob Austein
svn path=/branches/tk274/; revision=4724
2012-09-18Add AKI and CRLNumber handlers for CRLs.Rob Austein
svn path=/branches/tk274/; revision=4723
2012-09-18Add CertificatePolicies handlers.Rob Austein
svn path=/branches/tk274/; revision=4722
2012-09-18CRLDP handlers.Rob Austein
svn path=/branches/tk274/; revision=4721
2012-09-18AIA handlers.Rob Austein
svn path=/branches/tk274/; revision=4720
2012-09-18Add SIA handlers.Rob Austein
svn path=/branches/tk274/; revision=4719
2012-09-17Get rid of last(?) vestiges of silly dependencies on OpenSSL'sRob Austein
predeclared OID names. Add BasicConstraints handlers. svn path=/branches/tk274/; revision=4718
2012-09-17Add set methods for AKI and SKI extensions. Whack all derRead helpersRob Austein
to use BIOs. Other minor cleanup. svn path=/branches/tk274/; revision=4717
2012-09-17Teach X509.{get,set}RFC3779() methods to use IPAddress class.Rob Austein
svn path=/branches/tk274/; revision=4716
2012-09-17Add IPAddress class. This is intended to replace the rpki.ipaddrsRob Austein
classes eventually, but may still need to be split into separate IPv4 and IPv6 classes or reimplemented as a subclass of PyLong. Won't know until we try to move away from the rpki.POW.pkix ASN.1 code, and there's more groundwork to do before we can make that jump. svn path=/branches/tk274/; revision=4715
2012-09-14Disable AVL_PARANOIA code.Rob Austein
svn path=/branches/tk274/; revision=4714
2012-09-14Add AVL index of validation_status database.Rob Austein
svn path=/branches/tk274/; revision=4713
2012-09-12Debug X509.getRFC3779(), add IPv6 support. Will need refactoring onceRob Austein
I see what the ROA code looks like. svn path=/branches/tk274/; revision=4712
2012-09-12CheckpointRob Austein
svn path=/branches/tk274/; revision=4711
2012-09-12CheckpointRob Austein
svn path=/branches/tk274/; revision=4710