aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-04-23rpkic extract_root_certificate and extract_root_tal commands.Rob Austein
svn path=/branches/tk705/; revision=6378
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
2016-04-23Internal root sort of working, but only sort of. It's skipping theRob Austein
worker CA and going straight from the root to certifying children, which is wrong. However...this is far enough along that we can now remove all the rootd glorp, which is a worthwhile simplification in its own right, so checkpoint here, remove rootd glorp, then figure out what's wrong with the internal certificate hierarchy. rcynic does validate the current output, given a manually constructed TAL, even if the current output isn't quite what it should be. So we should also be able to sort out the new TAL generation code now. Yes, checking in a version that works for the wrong reasons is weird, but the current sort-of-broken state lets us confirm that the lower levels of the tree are still correct as we go, which would be much harder if the poor thing just sat there and whimpered until we had the new internal CA code completely finished. svn path=/branches/tk705/; revision=6376
2016-04-23Initial version of rpki.irdb.models.Root. May end up folding thisRob Austein
into an expanded rpki.irdb.models.Parent, as the two are more alike than I expected them to be, but archive this version first. svn path=/branches/tk705/; revision=6375
2016-04-23Parent property methods to handle XML attributes which are really forRob Austein
the companion Root object. svn path=/branches/tk705/; revision=6374
2016-04-23Start fleshing out Parent actions that require poking at companion Root object.Rob Austein
svn path=/branches/tk705/; revision=6373
2016-04-23Generalize the formerly-BSC-specific handling of "readonly"Rob Austein
subelements in left-right responses, so we don't have to duplicate the mechanism used for BSC <pkcs10_request/> subelements when handling Parent <rpki_root_cert/> subelements. svn path=/branches/tk705/; revision=6372
2016-04-23Add Root model to rpki.rpkidb and root-related attributes toRob Austein
left-right schema. Not really using of this stuff yet, but haven't broken existing code yet either. svn path=/branches/tk705/; revision=6371
2016-04-23Upon further analysis: Roots and Turtles don't need handles, onlyRob Austein
Parents do, because Roots will be uniquely named by reference to their associated Parent. So move the handle back to Parent. svn path=/branches/tk705/; revision=6370
2016-04-23Swing CA model to link to Turtle instead of Parent.Rob Austein
svn path=/branches/tk705/; revision=6369
2016-04-23Hack to extract plausible version number from "git svn".Rob Austein
Still need equivalent hack for plain git, later. svn path=/branches/tk705/; revision=6368
2016-04-23Step one of adding internal support for RPKI roots to rpkid: splitRob Austein
Parent model into base Turtle model and derived Parent model. svn path=/branches/tk705/; revision=6367
2016-04-23Switch CA daemons to run under rpki-nanny.Rob Austein
This is a transitional version of rpki-nanny: in the long run, the daemons it runs should take care of reading their own log configuration from rpki.conf, but that's a yak for another day. svn path=/branches/tk705/; revision=6366
2016-04-21Update the GUI to work with the new rcynicdb.Michael Elkins
svn path=/branches/tk705/; revision=6365
2016-04-21Missing dictionary key in a few tests in UpdateChildrenTask.Rob Austein
Fixes #804. svn path=/branches/tk705/; revision=6364
2016-04-15Merge from trunk.Rob Austein
svn path=/branches/tk705/; revision=6363
2016-04-14Fix bug introduced merging load_roa_requests patch from trunk, sigh.Rob Austein
svn path=/branches/tk705/; revision=6361
2016-04-12Pull rpkic <group> fix from trunk.Rob Austein
I think Subversion's merge tracking data is turning into cream cheese. svn path=/branches/tk705/; revision=6360
2016-04-09Avoid setuid antics when starting GUI from yamltest.Rob Austein
svn path=/branches/tk705/; revision=6352
2016-04-08OpenSSL 1.1 compatability, part 1.Rob Austein
OpenSSL 1.1 will include some backwards-compatible API changes. In some cases, the new API won't be available until OpenSSL 1.1, but a lot of the new API already exists in OpenSSL 1.0.2. This commit switches the parts that can be switched with OpenSSL 1.0. Other changes deferred until OpenSSL 1.1 public release. svn path=/branches/tk705/; revision=6351
2016-04-08Bump OpenSSL to 1.0.2g.Rob Austein
svn path=/branches/tk705/; revision=6350
2016-04-06Start getting ready for OpenSSL 1.1, one deprecated piece of theRob Austein
OpenSSL API at a time. svn path=/branches/tk705/; revision=6349
2016-04-06Runtime version dependency for Tornado is 4.2 or higher.Rob Austein
svn path=/branches/tk705/; revision=6348
2016-04-03Debian tools on Ubuntu Xentic really want to update autoconf config.*Rob Austein
files to something from the current decade. Let them, but as a separate commit, so we can back this out if it breaks something. svn path=/branches/tk705/; revision=6347
2016-04-03Move more programs to integrated config+argparse framework.Rob Austein
svn path=/branches/tk705/; revision=6346
2016-04-02Teach rcynicng to read command line defaults from rpki.conf. Some ofRob Austein
this takes the form of new rpki.config.parser methods which we may want to use in other programs, particularly the daemons. svn path=/branches/tk705/; revision=6345
2016-04-01Unterminated quoted string in FreeBSD installation script.Rob Austein
svn path=/branches/tk705/; revision=6344
2016-03-30Clean up and simplify rpkic privilege-dropping code. All sudo voodooRob Austein
is now handled in the outermost script, before rpki.rpkic is even loaded; rpki.rpkic just assumes that euid and ruid have been set up correctly and swaps them temporarily when it needs to do file I/O. svn path=/branches/tk705/; revision=6340
2016-03-30Still more UID-swapped file I/O, and general cleanup of UI file I/O.Rob Austein
GUI no longer uses (an additional layer of) temporary files between itself and zookeeper. Zookeeper file read methods now take file-like objects. rpkic now opens input files as the real UID, then reverts back to the effective UID before handing the resulting file off to the zookeeper. This caught several more instances of rpkic file I/O that were not doing the real/effective UID swap properly while loading CSV and VCard files. As far as I can tell from testing, this didn't break anything that worked before. Whether it fixed all the file I/O problems remains to be seen. svn path=/branches/tk705/; revision=6339
2016-03-29rpkic needs to do uid swapping around XML reads too.Rob Austein
rpki.irdb.zookeeper.etree_read(), the functions that call it, and the functions that call them, could all use a bit of refactoring. At this point pretty much ever caller is jumping through some hoop or another due to the way the code has evolved, and most of it could be simpler. svn path=/branches/tk705/; revision=6338
2016-03-29Initial fixes to rpkigui-rcynic. Still not working, but failing in aRob Austein
more interesting way now. svn path=/branches/tk705/; revision=6335
2016-03-28rpkigui-check-expired needs to run as user rpki. Clean up rpki-caRob Austein
cron job stuff while we're at this. svn path=/branches/tk705/; revision=6334
2016-03-28Apparently we lost DOWNLOAD_DIRECTORY while consolidating the GUI'sRob Austein
Django settings with those of all the other ORM-using programs. svn path=/branches/tk705/; revision=6333
2016-03-26Relatively gratuitous commit to force regeneration of all binary packages.Rob Austein
svn path=/branches/tk705/; revision=6330
2016-03-25Now that the real version of rpki-pbuilder has moved into apt-tools,Rob Austein
remove all the other copies to prevent confusion. svn path=/branches/tk705/; revision=6329
2016-03-24Use undocumented -f option to a2dismod when disabling mod_deflate toRob Austein
stop recent Debian and Ubuntu from whining at the user on installation. svn path=/branches/tk705/; revision=6327
2016-03-23Wrap a MySQL-specific error check so it doesn't cause problems when using ↵Rob Austein
other engines. svn path=/branches/tk705/; revision=6326
2016-03-22Handle Linux .distribution_version in cases like "testing" andRob Austein
"unstable" where there is no numeric version available (yet, or ever, as the case may be). Debian Stretch picked up the mandatory ".conf" suffix for Apache site files; don't (yet) know whether that was already present in Jessie, won't much care until we have working backports of our dependencies for Jessie. svn path=/branches/tk705/; revision=6325
2016-03-21Django API fashion police renamed "mimetype" to be "content_type".Rob Austein
svn path=/branches/tk705/; revision=6324
2016-03-21[6322] broke "make test", fix by allowing rpkic to run with warningRob Austein
when RPKI_USER not found. svn path=/branches/tk705/; revision=6323
2016-03-21Rework rpkic setuid handling to something a bit more robust.Rob Austein
svn path=/branches/tk705/; revision=6322
2016-03-20Clean up rcynic installation, run rcynicng instead of (old) rcynic, clean up ↵Rob Austein
rcynic-cron. NB: rpkigui-rcynic is currently broken and is therefore disabled in rcynic-cron. This needs to be fixed, but it was broken on this branch in any case, no real point in holding up the rest of this waiting for it. svn path=/branches/tk705/; revision=6321
2016-03-19Specify locations of sudo and rrdtool in Debian build to avoid kludgeRob Austein
of having to include them as build dependencies just so that ./configure can figure out their locations. svn path=/branches/tk705/; revision=6320
2016-03-19Internal sudo wrapper to deal with PostgreSQL access control issues.Rob Austein
svn path=/branches/tk705/; revision=6319
2016-03-19Might help to get the ./configure option name right.Rob Austein
svn path=/branches/tk705/; revision=6318
2016-03-19Run rpki.wsgi as user rpki. Closes #788.Rob Austein
svn path=/branches/tk705/; revision=6317
2016-03-19Pull changes from trunk. Closes #784.Rob Austein
svn path=/branches/tk705/; revision=6316
2016-03-19Add rrdtool and sudo to build dependencies temporarily, so thatRob Austein
rpki.autoconf gets the right values. Better fix would be to set these on the ./configure command line in debian/rules, try that later. svn path=/branches/tk705/; revision=6314
2016-03-18Switch rsync upload to use daemon mode over ssh, to give server betterRob Austein
control over precisely what this rsync client is allowed to do. svn path=/branches/tk705/; revision=6313
2016-03-18rpki-pbuilder.py hacked for multiple repositories, now passes initial tests.Rob Austein
svn path=/branches/tk705/; revision=6312
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-12 01:18:01 +0000