Age | Commit message (Collapse) | Author |
|
svn path=/trunk/; revision=6048
|
|
Most of the vulnerabilities fixed are in TLS and DTLS code we don't
use, and all of them are minor, see OpenSSL release notes if you care.
svn path=/trunk/; revision=6046
|
|
allow configuration of either old or new in up-down client code. For
the moment, client defaults to using the old Content-Type, to avoid
breaking deployed services, but this will change at some point.
See #747.
svn path=/trunk/; revision=6045
|
|
svn path=/trunk/; revision=6044
|
|
svn path=/trunk/; revision=6043
|
|
svn path=/trunk/; revision=6042
|
|
with a rpki.gui.cacheview.ROAPrefixV4. closes #744
svn path=/trunk/; revision=6041
|
|
svn path=/trunk/; revision=6040
|
|
name rather than the Python module name to look up the URL via reverse(). closes #739
svn path=/trunk/; revision=6039
|
|
file was invalid. closes #736
svn path=/trunk/; revision=6038
|
|
blank form. closes #734
svn path=/trunk/; revision=6037
|
|
provide any useful functionality and makes the code more complex
svn path=/trunk/; revision=6035
|
|
logged by the root logger.
svn path=/trunk/; revision=6034
|
|
missing children, and allow the user to skip missing children in the import form. see #735
Catch rpki.csv_util.BadCSVSyntax and display an error to the user.
svn path=/trunk/; revision=6033
|
|
svn path=/trunk/; revision=6032
|
|
svn path=/trunk/; revision=6031
|
|
.call_rpkid()
svn path=/trunk/; revision=6030
|
|
see #681
svn path=/trunk/; revision=6029
|
|
svn path=/trunk/; revision=6028
|
|
rpki.irdb.Zookeeper() to avoid problems when running in environments
like mod_wsgi which have strong opinions about what code is and is not
allowed to handle signals. This may result in some noise in log
files, but there's not much we can do about that if we're not allowed
to clean up when terminated, so be it. See #681.
svn path=/trunk/; revision=6027
|
|
svn path=/trunk/; revision=6026
|
|
to allow rcynic to accept certificates containing certificates
containing RRDP SIA URIs, which it would otherwise reject as profile
violations.
svn path=/trunk/; revision=6020
|
|
svn path=/trunk/; revision=6016
|
|
This needs rewriting, but doing it properly requires a minor database
schema change, and I'm trying to get a test case running by tomorrow
morning.
svn path=/trunk/; revision=6015
|
|
svn path=/trunk/; revision=6008
|
|
svn path=/trunk/; revision=6007
|
|
the entire table. closes #731
svn path=/trunk/; revision=6001
|
|
svn path=/trunk/; revision=5999
|
|
Old method of passing the Conf object to ROARequestForm was brittle due to overriding a private method in BaseFormSet.
New method is to use a closure to embed the Conf object within a class generated on the fly.
See #709
svn path=/trunk/; revision=5997
|
|
svn path=/trunk/; revision=5996
|
|
configuration on Precise was a false positive caused by an orphaned
symlink. Rewrite again to separate Debian and Ubuntu so we can do
version number checks in a halfway sane fashion.
Most likely the real underlying issue is Debian-family packaging for
Apache 2.2 vs Apache 2.4, so there may be possible to simplify this
again at some point, but in theory this will do for now.
Need to re-test on Trusty and Wheezy to make sure the fix for Precise
didn't break them. See #720.
svn path=/trunk/; revision=5995
|
|
svn path=/trunk/; revision=5994
|
|
svn path=/trunk/; revision=5993
|
|
See #720.
svn path=/trunk/; revision=5992
|
|
svn path=/trunk/; revision=5991
|
|
MIDDLEWARE_CLASSES. Fixes #717.
svn path=/trunk/; revision=5986
|
|
svn path=/trunk/; revision=5985
|
|
packages when nothing had changed.
svn path=/trunk/; revision=5980
|
|
svn path=/trunk/; revision=5978
|
|
supported platforms.
svn path=/trunk/; revision=5977
|
|
staying current.
svn path=/trunk/; revision=5975
|
|
suffix on the site configuration filename. Need to check whether this
breaks older distributions, if so will need to something version
dependent.
svn path=/trunk/; revision=5973
|
|
svn path=/trunk/; revision=5972
|
|
Builds for Ubuntu Precise Pangolin (12.04) disabled, either for good
or until we figure out how to convince reprepo to accept the same
package compiled for two different releases (sigh). See #712.
svn path=/trunk/; revision=5971
|
|
svn path=/trunk/; revision=5945
|
|
May have finally gotten the right balance of indexes for basic use.
Use various optimizations to let us load large data sets before the
heat death of the universe. Some of these optimizations are
dangerous, in the sense that if this script crashes while constructing
the database, you'll have to rebuild the database from scratch.
Probably ought to offer both this and the slow-but-safe approach as
command line options, but:
- The speed improvements look to be worth at least an order of
magnitude in the runtime,
- The speed improvements also prevent all the fsync() calls in the
safe approach from turning the underlying filesystem into cream
cheese while the script is running, and
- This script is just a research anlysis tool to begin with.
So I think the risk is justified in this case.
svn path=/trunk/; revision=5934
|
|
seconds-since-epoch.
svn path=/trunk/; revision=5933
|
|
svn path=/trunk/; revision=5930
|
|
svn path=/trunk/; revision=5928
|
|
svn path=/trunk/; revision=5927
|