aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-01-23Remove last vestiges of "__metaclass__ = models.SubfieldBase"Rob Austein
(deprecated in Django 1.9, scheduled to be removed in Django 1.10). svn path=/branches/tk705/; revision=6231
2016-01-23Add multiple-URI TAL support to rcynicng.Rob Austein
Whack CA tools with a club until rcynicng works with our CA RRDP implementation. Add makemigrations target to top-level Makefile; this is a bit of a kludge, but sure beats doing this by hand. svn path=/branches/tk705/; revision=6230
2016-01-20Process deltas incrementally (one SQL commit per delta) and mutateRob Austein
existing RRDPSnapshot objects while applying deltas rather than creating new ones. This simplifies cleanup, avoids locking out the I/O loop for the duration of a long commit, and allows us to salvage whatever progress we were able to make if a network problem stops us partway through fetching a long series of deltas. svn path=/branches/tk705/; revision=6229
2016-01-20Handle TLS errors. Log a bit more about delta processing.Rob Austein
svn path=/branches/tk705/; revision=6228
2016-01-20Tweak cleanup code again.Rob Austein
svn path=/branches/tk705/; revision=6227
2016-01-16More exception handling (socket.error, IOError, ...).Rob Austein
svn path=/branches/tk705/; revision=6226
2016-01-16Clean up HTTPS error handling. Attempt to work around DjangoRob Austein
limitations copying large sets of related objects. svn path=/branches/tk705/; revision=6225
2016-01-15RRDP seems to work now, at least with RIPE's implementation.Rob Austein
svn path=/branches/tk705/; revision=6224
2016-01-14Rework final_cleanup() to have some chance of working with RRDP.Rob Austein
svn path=/branches/tk705/; revision=6223
2016-01-13Checkpoint of first cut at RRDP client code. RRDP client code not yetRob Austein
tested, and final_cleanup() needs work to avoid trashing RRDP state. svn path=/branches/tk705/; revision=6222
2016-01-11Add (preliminary) database cleanup code.Rob Austein
svn path=/branches/tk705/; revision=6221
2016-01-11Add rcynic-dump as a blunt instrument to let existing file-basedRob Austein
programs use rcynicng's output. Long term, such programs should read the database instead, but being able to diff directory trees is useful while testing. svn path=/branches/tk705/; revision=6220
2016-01-10First apparently-working version of rcynicng using database instead ofRob Austein
disk files. rcynic.xml output looks reasonable. Don't yet have any other tools which know how to walk the result database, so can't (yet) compare results with rcynic. Does not yet do any cleanup of old data, so will eventually consume all disk space in the universe until this is fixed. svn path=/branches/tk705/; revision=6219
2016-01-08Start converting rcynicng to use a database.Rob Austein
svn path=/branches/tk705/; revision=6218
2016-01-06Add minimal HTTPS server to yamltest, for RRDP testing.Rob Austein
svn path=/branches/tk705/; revision=6217
2015-12-08Rewrite questionable address length check in check_roa().Rob Austein
svn path=/branches/tk705/; revision=6216
2015-12-08Fall back to HTTP if we can't find an HTTPS URI for rpkiNotify; theRob Austein
latest specification says HTTPS, but enough of the existing code has not yet caught up that it's useful to see the HTTP URIs when the HTTPS ones are missing. svn path=/branches/tk705/; revision=6215
2015-12-07Finish prying RPKI conformance checks apart from object verification.Rob Austein
svn path=/branches/tk705/; revision=6214
2015-12-07Pull from trunk.Rob Austein
svn path=/branches/tk705/; revision=6213
2015-12-07Update OpenSSL to version 1.0.2e.Rob Austein
svn path=/trunk/; revision=6212
2015-12-07Start decoupling RPKI profile conformance checks from objectRob Austein
verification per se. Clean up nasty mess in profile conformance checks for router certificates. svn path=/branches/tk705/; revision=6211
2015-12-07Move validation callback to Python.Rob Austein
svn path=/branches/tk705/; revision=6210
2015-12-06Clean up RPKI conformance checking of X.509v3 extensions and elliptic curve ↵Rob Austein
keys. svn path=/branches/tk705/; revision=6209
2015-12-06Fix rcynicng directory rotation code. Checkpoint along the way toRob Austein
cleanup of POW.c RPKI conformance checking code. svn path=/branches/tk705/; revision=6208
2015-11-29Fix confused handling of staleness flags.Rob Austein
svn path=/branches/tk705/; revision=6207
2015-11-29Simplify main object checking loop by moving loop over objectRob Austein
generations inside the loop over manifest entries. svn path=/branches/tk705/; revision=6206
2015-11-29Move more trivial tests from C to Python.Rob Austein
svn path=/branches/tk705/; revision=6205
2015-11-29rcynicng caught a bug in rpkid! Router certificates are forbiddenRob Austein
from having SIA extensions, unlike all other RPKI certificates which are required to have them. Start moving RPKI conformance checks which can be performed in Python out of POW.c, tag a bunch more for consideration. svn path=/branches/tk705/; revision=6204
2015-11-28yield when putting to task queue even though we expect the future toRob Austein
resolve immediately, just in case something throws an exception. Don't try to be clever about when to yield in main object checking loop: just trusting Tornado's scheduler to do the right thing seems to give better rsync throughput. svn path=/branches/tk705/; revision=6203
2015-11-28Clean up CheckTALTask.Rob Austein
svn path=/branches/tk705/; revision=6202
2015-11-28Handle staleness and staleness-tainting checks in Python.Rob Austein
svn path=/branches/tk705/; revision=6201
2015-11-28Record staleness tainting.Rob Austein
svn path=/branches/tk705/; revision=6200
2015-11-28Rework StatusCodeDB.normalize(). Apparently order of set operationsRob Austein
matters more when object has a __str__() method. svn path=/branches/tk705/; revision=6199
2015-11-27Simplify manifest walking code: we don't need to walk both current andRob Austein
backup manifests, we just need to walk the best manifest we can find, twice. svn path=/branches/tk705/; revision=6198
2015-11-27Don't dump core if check_aki() is called with an issuer certificateRob Austein
which hasn't previously had X509_check_ca() called on it. svn path=/branches/tk705/; revision=6197
2015-11-27Tweaks to bring rcynicng more into line with rcynic's behavior.Rob Austein
svn path=/branches/tk705/; revision=6196
2015-11-26Oops, RRDP now mandates HTTPS instead of HTTP.Rob Austein
svn path=/branches/tk705/; revision=6195
2015-11-25Starting to look like a validator. Still gets different somewhatRob Austein
results from the original rcynic, still some loose ends and unfinished bits, and no support for RRDP yet (which was sort of the ultimate point of the exercise), but approaching the point of being usable, and about an order of magnitude shorter than the C original. svn path=/branches/tk705/; revision=6194
2015-11-24Yet another private Django config that needed to be kludged to charsetRob Austein
latin1 to work around MySQL 5.6 insanity. Fixes #782 (again). svn path=/trunk/; revision=6193
2015-11-24Add charset=latin1 kludge for GUI too. Fixes #782.Rob Austein
svn path=/trunk/; revision=6192
2015-11-24Add stack forking. At this point the basic tasking structure looks complete.Rob Austein
svn path=/branches/tk705/; revision=6191
2015-11-23Kludge that works around characterset madness with MySQL 5.6 breaksRob Austein
MySQL 5.5, so try the kludge, whine if it fails, then blunder ahead. Fixes #781. svn path=/trunk/; revision=6190
2015-11-23Doh, rpkic is using Django, so we need the Django version of the MySQLRob Austein
5.6 Latin1 kludge. svn path=/trunk/; revision=6189
2015-11-23Horrible kludge to work around MySQL bug: As of MySQL 5.6, the defaultRob Austein
character set is UTF8 (fine so far), which causes MySQL to reject ASN.1 DER stored in BLOBs (or, more likely, any operations against such columns) on the grounds that ASN.1 DER is not well-formed UTF8. svn path=/trunk/; revision=6188
2015-11-23first pass on XML output. Incomplete, but enough to get a usefulRob Austein
summary from rcynic-text. svn path=/branches/tk705/; revision=6187
2015-11-23Sort out swamp of multiple generations of manifests and picking best CRL.Rob Austein
svn path=/branches/tk705/; revision=6186
2015-11-23Add CRL.isRevoked() method. General minor cleanup.Rob Austein
svn path=/branches/tk705/; revision=6185
2015-11-22Convert certificate tree walking code to use new tasking model.Rob Austein
Get full rsync code working, history cache and all. svn path=/branches/tk705/; revision=6184
2015-11-22Don't hand null pointer to OpenSSL if we can't find a plausibleRob Austein
issuer. Not sure we really need the complex issuer-finding code at all anymore, but dumping core is not an appropriate form of social criticism. svn path=/branches/tk705/; revision=6183
2015-11-20Checkpoint. Not useful yet, but starting to come together. Tornado is awesome.Rob Austein
svn path=/branches/tk705/; revision=6182
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-11 22:16:12 +0000