aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2015-02-24/usr/ports/Mk/ voodoo changed, USE_PYTHON=v is now USES=python:v.Rob Austein
svn path=/trunk/; revision=6048
2015-01-28Pull latest release on OpenSSL 1.0.1 branch, just to keep current.Rob Austein
Most of the vulnerabilities fixed are in TLS and DTLS code we don't use, and all of them are minor, see OpenSSL release notes if you care. svn path=/trunk/; revision=6046
2014-12-19Accept either old or new MIME Content-Type in up-down server code, andRob Austein
allow configuration of either old or new in up-down client code. For the moment, client defaults to using the old Content-Type, to avoid breaking deployed services, but this will change at some point. See #747. svn path=/trunk/; revision=6045
2014-12-19Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=6044
2014-12-19Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=6043
2014-12-14Log manifest URI if we can't find a URI in walk context. See #745.Rob Austein
svn path=/trunk/; revision=6042
2014-12-11add inner loop to iterate over all rpki.gui.cacheview.ROA objects associated ↵Michael Elkins
with a rpki.gui.cacheview.ROAPrefixV4. closes #744 svn path=/trunk/; revision=6041
2014-12-11Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=6040
2014-12-09set the URL name on the various password reset URLs as the code uses the ↵Michael Elkins
name rather than the Python module name to look up the URL via reverse(). closes #739 svn path=/trunk/; revision=6039
2014-11-26catch lxml.etree.XMLSyntaxError and notify the user when the uploaded XML ↵Michael Elkins
file was invalid. closes #736 svn path=/trunk/; revision=6038
2014-11-26check formset.has_changed() in roa creation form to detect submission of ↵Michael Elkins
blank form. closes #734 svn path=/trunk/; revision=6037
2014-11-21remove support for form deletion in roa_create_multi since it doesn't ↵Michael Elkins
provide any useful functionality and makes the code more complex svn path=/trunk/; revision=6035
2014-11-21re-enable propogate on the django and django.request loggers so they get ↵Michael Elkins
logged by the root logger. svn path=/trunk/; revision=6034
2014-11-20Catch exception when the user attempts to import prefix/asn CSV files with ↵Michael Elkins
missing children, and allow the user to skip missing children in the import form. see #735 Catch rpki.csv_util.BadCSVSyntax and display an error to the user. svn path=/trunk/; revision=6033
2014-11-20avoid double output of logging.Michael Elkins
svn path=/trunk/; revision=6032
2014-11-20disable signal handlers for all .run_rpkid_now() callsMichael Elkins
svn path=/trunk/; revision=6031
2014-11-19disable_signal_handlers is an arg to the Zookeeper constructor, not ↵Michael Elkins
.call_rpkid() svn path=/trunk/; revision=6030
2014-11-19configure root logger to route WARNING or above to the appropriate handlers. ↵Michael Elkins
see #681 svn path=/trunk/; revision=6029
2014-11-19disable signal handlers for Zookeeper to avoid mod_wsgi warnings.Michael Elkins
svn path=/trunk/; revision=6028
2014-11-19Add disable_signal_handlers option to rpki.async.sync_wrapper andRob Austein
rpki.irdb.Zookeeper() to avoid problems when running in environments like mod_wsgi which have strong opinions about what code is and is not allowed to handle signals. This may result in some noise in log files, but there's not much we can do about that if we're not allowed to clean up when terminated, so be it. See #681. svn path=/trunk/; revision=6027
2014-11-19enable logging rpki.async to the apache log file. see #681Michael Elkins
svn path=/trunk/; revision=6026
2014-11-12Add minimal RRDP support. This isn't enough to use RRDP, just enoughRob Austein
to allow rcynic to accept certificates containing certificates containing RRDP SIA URIs, which it would otherwise reject as profile violations. svn path=/trunk/; revision=6020
2014-11-12Argh, back out unintended change to trunk.Rob Austein
svn path=/trunk/; revision=6016
2014-11-12Initial (awful kludge) version of adding RRDP URIs to SIA extension.Rob Austein
This needs rewriting, but doing it properly requires a minor database schema change, and I'm trying to get a test case running by tomorrow morning. svn path=/trunk/; revision=6015
2014-11-07Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=6008
2014-11-07Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=6007
2014-10-31test for empty prefix list when filtering routing table to avoid returning ↵Michael Elkins
the entire table. closes #731 svn path=/trunk/; revision=6001
2014-10-15Track OpenSSL even though Poodle doesn't affect us.Rob Austein
svn path=/trunk/; revision=5999
2014-10-09Fix validation problem when creating a ROA.Michael Elkins
Old method of passing the Conf object to ROARequestForm was brittle due to overriding a private method in BaseFormSet. New method is to use a closure to embed the Conf object within a class generated on the fly. See #709 svn path=/trunk/; revision=5997
2014-10-07Feh, [14,4] != (14,4).Rob Austein
svn path=/trunk/; revision=5996
2014-10-07Seems that the earlier istallation success with new ApacheRob Austein
configuration on Precise was a false positive caused by an orphaned symlink. Rewrite again to separate Debian and Ubuntu so we can do version number checks in a halfway sane fashion. Most likely the real underlying issue is Debian-family packaging for Apache 2.2 vs Apache 2.4, so there may be possible to simplify this again at some point, but in theory this will do for now. Need to re-test on Trusty and Wheezy to make sure the fix for Precise didn't break them. See #720. svn path=/trunk/; revision=5995
2014-10-07Ancient de-installation code broke on Trusty.Rob Austein
svn path=/trunk/; revision=5994
2014-10-06Braino in initial patch. See #720.Rob Austein
svn path=/trunk/; revision=5993
2014-10-06Make sites-enabled configuration filename dependent on distribution, sigh.Rob Austein
See #720. svn path=/trunk/; revision=5992
2014-10-06Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=5991
2014-10-05Address incompatible API changes in Django 1.7: apps.populate(),Rob Austein
MIDDLEWARE_CLASSES. Fixes #717. svn path=/trunk/; revision=5986
2014-10-03Add router cert request support to the GUI.Michael Elkins
svn path=/trunk/; revision=5985
2014-09-30Overly enthusiastic cleanup was causing script to regenerate sourceRob Austein
packages when nothing had changed. svn path=/trunk/; revision=5980
2014-09-30Add hack to yamltest to let Mike extract private keys for BGPSEC testing.Rob Austein
svn path=/trunk/; revision=5978
2014-09-29Tweak version numbering scheme to let us build binary packages for allRob Austein
supported platforms. svn path=/trunk/; revision=5977
2014-09-29Update to OpenSSL 1.0.1i. Not a security issue in our case, justRob Austein
staying current. svn path=/trunk/; revision=5975
2014-09-28Apparently a2ensite now (as of Ubuntu trusty, anyway) requires a .confRob Austein
suffix on the site configuration filename. Need to check whether this breaks older distributions, if so will need to something version dependent. svn path=/trunk/; revision=5973
2014-09-28self.Rob Austein
svn path=/trunk/; revision=5972
2014-09-28Rewrite pbuilder script, add support for Ubutu Trusty Tahir (14.04).Rob Austein
Builds for Ubuntu Precise Pangolin (12.04) disabled, either for good or until we figure out how to convince reprepo to accept the same package compiled for two different releases (sigh). See #712. svn path=/trunk/; revision=5971
2014-09-12Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=5945
2014-08-26Use named indexes to make it possible to add and remove them later.Rob Austein
May have finally gotten the right balance of indexes for basic use. Use various optimizations to let us load large data sets before the heat death of the universe. Some of these optimizations are dangerous, in the sense that if this script crashes while constructing the database, you'll have to rebuild the database from scratch. Probably ought to offer both this and the slow-but-safe approach as command line options, but: - The speed improvements look to be worth at least an order of magnitude in the runtime, - The speed improvements also prevent all the fsync() calls in the safe approach from turning the underlying filesystem into cream cheese while the script is running, and - This script is just a research anlysis tool to begin with. So I think the risk is justified in this case. svn path=/trunk/; revision=5934
2014-08-25Solve several minor problems at once by storing timestamps as ↵Rob Austein
seconds-since-epoch. svn path=/trunk/; revision=5933
2014-08-20Get final db.close() right, even if it is unnecessary.Rob Austein
svn path=/trunk/; revision=5930
2014-08-20Typo in copyright line.Rob Austein
svn path=/trunk/; revision=5928
2014-08-20Restructure, use Message-ID instead of filename when reading Maildir.Rob Austein
svn path=/trunk/; revision=5927