aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-09-29Clean shouldn't remove defstack.h (anymore).Rob Austein
svn path=/branches/tk274/; revision=4737
2012-09-29Clean up AVL_PARANOIA code.Rob Austein
svn path=/branches/tk274/; revision=4736
2012-09-25Clear old extensions from PKCS #10 request before setting new ones.Rob Austein
In most cases there won't be old extensions to clear, but in theory this could happen when modifying an existing request, so get it right. svn path=/branches/tk274/; revision=4735
2012-09-25Add PKCS#10 class.Rob Austein
svn path=/branches/tk274/; revision=4734
2012-09-23Add X509.getPublicKey(). Clean up a couple zillion compiler warningsRob Austein
from gcc 4.2 on MacOSX; am not entirely happy about some of the casts required, might want to encapsulate the more common patterns in functions to do controlled casts from one known type to another. svn path=/branches/tk274/; revision=4733
2012-09-22Drag Asymmetric class up to using the EVP_PKEY API, which simplifiesRob Austein
the Asymmetric code considerably and gets us most of the way towards being able to support ECDSA, which, in theory, we'll want for BGPSEC. svn path=/branches/tk274/; revision=4732
2012-09-22Internal TODO comments (easier than a ticket system on airplanes...).Rob Austein
svn path=/branches/tk274/; revision=4731
2012-09-21ROA class.Rob Austein
svn path=/branches/tk274/; revision=4730
2012-09-21Implement RPKI manifests. Raise exceptions properly in ASN1_TIMERob Austein
converters. Clean up internal type names, delete a bunch of symbols nothing uses anymore. svn path=/branches/tk274/; revision=4729
2012-09-20Whack rest of POW's object I/O (x.derRead(), x.derWrite()) to use newRob Austein
class-based methods instead of old module functions. svn path=/branches/tk274/; revision=4728
2012-09-20Clean up conversions between ASN.1 integers and Python integers.Rob Austein
Fix a few cases where code incorrectly assumed that ASN.1 field values would always be small enough to fit in a C integer type. svn path=/branches/tk274/; revision=4727
2012-09-20Add ten gazillion class methods for reading objects. Eventually thisRob Austein
should completely replace the old module derRead() and pemRead() functions, since it's easier to extend and supports subclasses properly. For now, the new and old APIs are both just wrappers around a generic lower-level internal API. svn path=/branches/tk274/; revision=4726
2012-09-19Move ASN.1 definitions for ROAs and Manifests to common header filesRob Austein
used by all the C programs. svn path=/branches/tk274/; revision=4725
2012-09-19Log filesystem timestamps too.Rob Austein
svn path=/branches/tk274/; revision=4724
2012-09-18Add AKI and CRLNumber handlers for CRLs.Rob Austein
svn path=/branches/tk274/; revision=4723
2012-09-18Add CertificatePolicies handlers.Rob Austein
svn path=/branches/tk274/; revision=4722
2012-09-18CRLDP handlers.Rob Austein
svn path=/branches/tk274/; revision=4721
2012-09-18AIA handlers.Rob Austein
svn path=/branches/tk274/; revision=4720
2012-09-18Add SIA handlers.Rob Austein
svn path=/branches/tk274/; revision=4719
2012-09-17Get rid of last(?) vestiges of silly dependencies on OpenSSL'sRob Austein
predeclared OID names. Add BasicConstraints handlers. svn path=/branches/tk274/; revision=4718
2012-09-17Add set methods for AKI and SKI extensions. Whack all derRead helpersRob Austein
to use BIOs. Other minor cleanup. svn path=/branches/tk274/; revision=4717
2012-09-17Teach X509.{get,set}RFC3779() methods to use IPAddress class.Rob Austein
svn path=/branches/tk274/; revision=4716
2012-09-17Add IPAddress class. This is intended to replace the rpki.ipaddrsRob Austein
classes eventually, but may still need to be split into separate IPv4 and IPv6 classes or reimplemented as a subclass of PyLong. Won't know until we try to move away from the rpki.POW.pkix ASN.1 code, and there's more groundwork to do before we can make that jump. svn path=/branches/tk274/; revision=4715
2012-09-14Disable AVL_PARANOIA code.Rob Austein
svn path=/branches/tk274/; revision=4714
2012-09-14Add AVL index of validation_status database.Rob Austein
svn path=/branches/tk274/; revision=4713
2012-09-12Debug X509.getRFC3779(), add IPv6 support. Will need refactoring onceRob Austein
I see what the ROA code looks like. svn path=/branches/tk274/; revision=4712
2012-09-12CheckpointRob Austein
svn path=/branches/tk274/; revision=4711
2012-09-12CheckpointRob Austein
svn path=/branches/tk274/; revision=4710
2012-09-12Get reference counts right.Rob Austein
svn path=/branches/tk274/; revision=4709
2012-09-12Checkpoint working version of x509_object_get_rfc3779(). HideouslyRob Austein
ugly, still needs work, but appears to return correct results. svn path=/branches/tk274/; revision=4708
2012-09-11Fix exception hierarchy. Add KeyUsage methods; some details willRob Austein
vary, but general approach should work for many (most? all?) other extensions. svn path=/branches/tk274/; revision=4707
2012-09-10Checkpoint after a lot more cleanup and simplification. No longerRob Austein
linking against libssl, only libcrypto. Internal documentation almost matches current reality. A few deliberate harmless compilation warnings to remind me of loose ends that still want cleaning up. svn path=/branches/tk274/; revision=4706
2012-09-08Drag rpki.POW classes kicking and screaming into the 21st century.Rob Austein
Replaced old factory functions with proper (well, I hope they're proper) class __new__() and __init__() methods as appropriate, whack PyTypeObject structures to make it possible to subclass these classes, etcetera. Doc strings for classes and methods are still horribly out of date, but at least it all shows up properly now. Caveat: This is a major change and has not yet been heavily tested. It seems to work, but splitting the old factory functions into __new__() and __init__() methods exposed some corner cases which I may or may not have handled correctly. svn path=/branches/tk274/; revision=4705
2012-09-07Synchronize after updating BPKI.Rob Austein
svn path=/branches/tk274/; revision=4704
2012-09-06Error handling cleanup.Rob Austein
svn path=/branches/tk274/; revision=4703
2012-09-05Prune a whole lot of unused EVP_CIPHER code. The only purpose thatRob Austein
code still served was to support selection of an (optional) encryption algorithm for new RSA private keys; since none of the two dozen algorithms supported by that code were anything one would choose this year, I converted the whole mess just to use AES-256-CBC as the one supported encryption algorithm. Fix this if anything ever cares. svn path=/branches/tk274/; revision=4702
2012-09-05Forgot that POW.pkix uses Asymmetric.sign() and Asymmetric.verify().Rob Austein
Since we can't get rid of them yet, fix them to pass the digest length along to OpenSSL for checking. svn path=/branches/tk274/; revision=4701
2012-09-05Another POW.c cleanup checkpoint.Rob Austein
svn path=/branches/tk274/; revision=4700
2012-09-05Add and use Define_Method() macro to simplify method tables and set upRob Austein
method documentation. Most of the existing method documentation needs editing to for this to be fully useful, but it's a start. svn path=/branches/tk274/; revision=4699
2012-09-05Cleanup checkpoint: METH_NOARGS.Rob Austein
svn path=/branches/tk274/; revision=4698
2012-09-04More pruning.Rob Austein
svn path=/branches/tk274/; revision=4697
2012-09-04As part of dragging POW.c into the 21st century, get rid of hugeRob Austein
swacks of code which either haven't been used in RPKI for years or have never been used in RPKI at all, and which, in either case, I'd rather not have to maintain: SSL/TLS, MD2, RIPEMD160, HMAC. There's almost certainly more to prune, but this was the lowest-hanging fruit. svn path=/branches/tk274/; revision=4696
2012-09-04CleanupRob Austein
svn path=/branches/tk274/; revision=4695
2012-09-03Fix last (?) remaining direct reference to "POWpkix" outside ofRob Austein
rpki.x509 module. svn path=/branches/tk274/; revision=4694
2012-09-03Clean up multi-value RDN handling.Rob Austein
svn path=/branches/tk274/; revision=4693
2012-09-03More useful debugging code.Rob Austein
svn path=/branches/tk274/; revision=4692
2012-09-03Add yamlconf to ruleset.Rob Austein
svn path=/branches/tk274/; revision=4691
2012-09-03Switch X501DN to use (new) POW format internally.Rob Austein
svn path=/branches/tk274/; revision=4690
2012-09-02Checkpoint of tweaks to rpki.x509.X501DN class prior to flipping thatRob Austein
class to use POW instead of POW.pkix. svn path=/branches/tk274/; revision=4689
2012-09-02Whack X509_NAME code to use an encoding compatible with multi-valueRob Austein
RDNs, for compatability with other X.509-aware Python code that uses this encoding. We don't really expect to see multi-value RDNs in RPKI, nor do we fully support them yet; for the moment, the goal is just to get to a point where we can rewrite the rpki.x509 subject and issuer name functions to use POW rather than POW.pkix. svn path=/branches/tk274/; revision=4688
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-20 17:11:36 +0000