aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2011-10-14Log "object_accepted" when we decide we are happy with a TA certificate.Rob Austein
svn path=/trunk/; revision=4044
2011-10-14Add authenticated.old symlink for convenience of programs attemptingRob Austein
to understand rcynic's output. svn path=/trunk/; revision=4043
2011-10-14Preserve node creation order in validation status XML output.Rob Austein
svn path=/trunk/; revision=4042
2011-10-13Feh, ARIN is now allocating 8-address special blocks that overlap withRob Austein
other allocations? svn path=/trunk/; revision=4040
2011-10-13Move to WikiRob Austein
svn path=/presentations; revision=4038
2011-10-13use the django.contrib.staticfiles app to serve the django admin site media.Michael Elkins
svn path=/trunk/; revision=4037
2011-10-12Reorganize repository into standard Subversion model (trunk/, etc).Rob Austein
svn path=/Makefile.in; revision=4034
2011-10-12add support for oo setup via portal guiMichael Elkins
svn path=/rpkid/rpki/gui/app/forms.py; revision=4033
2011-10-10Don't allow inversion of syslog facility and priority settings.Rob Austein
svn path=/rtr-origin/rtr-origin.py; revision=4032
2011-10-10Add --syslog option to allow control over syslog facility and priority ↵Rob Austein
levels. This closes #89. svn path=/rtr-origin/rtr-origin.py; revision=4031
2011-10-09update rcynic_xml_iterator to support new attributes for validation_status ↵Michael Elkins
element in rcynic output format svn path=/rpkid/rpki/rcynic.py; revision=4030
2011-10-08rcynic's new timestamped output directory code gets grumpy when rcynicRob Austein
is run twice in less than a second. Granted that this shouldn't happen in the first place, but having seen it happen in testing when something else was broken, detect the problem and handle it by sleeping for one second if and only if necessary. svn path=/rpkid/tests/smoketest.py; revision=4029
2011-10-07Fix bug in [4025], clean up PKCS 10 checking a bit more (see #6).Rob Austein
svn path=/rpkid/rpki/x509.py; revision=4028
2011-10-07Add .self.self_handle to log_repr() constructor, if it's available.Rob Austein
This helps a bit with #54, but is a long way from fully identifying which <self/> is logging at any given moment. svn path=/rpkid/rpki/log.py; revision=4027
2011-10-07Clean up HTTP traceback controls added in [3722], because [4014] doesRob Austein
a better job of handling the traceback problem. See #95. svn path=/rpkid/rpki/http.py; revision=4026
2011-10-07Tighten up PKCS 10 request checking (closes #6).Rob Austein
svn path=/rpkid/rpki/oids.py; revision=4025
2011-10-07qualify csv_writer calls with rpki.myrpki.Michael Elkins
svn path=/rpkid/rpki/gui/app/glue.py; revision=4024
2011-10-07add support for import/export of xml files for rpki setupMichael Elkins
svn path=/rpkid/rpki/gui/app/glue.py; revision=4023
2011-10-07revert rev #3877 so the portal gui writes the csv files when configuring ↵Michael Elkins
resources svn path=/rpkid/rpki/gui/app/forms.py; revision=4022
2011-10-07install copy of example rpki.conf as template for new gui usersMichael Elkins
svn path=/rpkid/portal-gui/Makefile.in; revision=4021
2011-10-07add AC_DATAROOTDIR to dictionary of variables to expand in python config filesMichael Elkins
svn path=/rpkid/Makefile.in; revision=4020
2011-10-06Rework loop in rsync_mgr() that checks for tasks that have becomeRob Austein
runnable. [4018] changed rsync_run()'s behavior slightly, needed to compensate for that to avoid skipping the next entry in the queue when rsync_run() detects a cache hit. See #98 for the original problem. svn path=/rcynic/rcynic.c; revision=4019
2011-10-06Recheck cache just before starting rsync, in case another rsyncRob Austein
retrieved the data we want while this rsync was queued. Fixes #98. svn path=/rcynic/rcynic.c; revision=4018
2011-10-06Move fcntl(F_SETFL, O_NONBLOCK) to after fork().Rob Austein
svn path=/rcynic/rcynic.c; revision=4017
2011-10-06Use Auto_update for all BPKI objects (fixes #68).Rob Austein
svn path=/rpkid/rpki/rootd.py; revision=4016
2011-10-05Stop abusing RuntimeError. This closes #52.Rob Austein
svn path=/rpkid/portal-gui/scripts/load_csv.py; revision=4015
2011-10-05Add global traceback control; this closes #95. Clean up someRob Austein
"except:" clauses that should have been "except Exception:". svn path=/rpkid/rpki-sql-setup.py; revision=4014
2011-10-05Check manifest generation before whining about missing backup objects. This ↵Rob Austein
closes #93. svn path=/rcynic/rcynic.c; revision=4013
2011-10-04More explicit certificate expiration checks in CMS verify (see #94).Rob Austein
svn path=/rcynic/rcynic.c; revision=4012
2011-10-04Add explicit check for certificate expiration in CMS verify (see #94).Rob Austein
svn path=/rpkid/rpki/exceptions.py; revision=4011
2011-10-04Don't spew to stderr if dumpasn1 isn't available when we want to dumpRob Austein
CMS that doesn't validate (see #94). Switch CMS-dumping code to use OpenSSL library code rather than dumpasn1 -- dumpasn1 is prettier, but not enough prettier to be worth making people install yet another freaking program that's only used to diagnose strange failures. svn path=/rpkid/rpki/x509.py; revision=4010
2011-10-04Rework http_queue exception handling not to drop the event chain ifRob Austein
callback handler throws an exception, eg, due to CMS validation failure. This closes #94. svn path=/rpkid/rpki/http.py; revision=4009
2011-10-04Catch IOError when dumping bad CMS (see #94).Rob Austein
svn path=/rpkid/rpki/x509.py; revision=4008
2011-10-03Fixes #93. New config parameter allow-digest-mismatch, default isRob Austein
warn and allow. Digest mismatch is now a warning message only. Missing object that's listed in manifest is now logged as a serious problem. At the moment, we do this for missing objects in both current and backup generations. I'm not sure that's right, might make more sense to log this only for current generation, but let's try running this way for a little while to see what patterns show up. svn path=/rcynic/README; revision=4007
2011-09-30add entitydb_dir to example rpki.conf to make use of path relative to ↵Michael Elkins
configuration_directory svn path=/rpkid/examples/rpki.conf; revision=4006
2011-09-30no longer necessary to create stub rpki.conf for deprecated rpkidemo usersMichael Elkins
svn path=/rpkid/portal-gui/scripts/adduser.py; revision=4005
2011-09-29Tweak logging levels for what's debugging vs what's mergely verboseRob Austein
when logging stuff related to rsync subprocesses. svn path=/rcynic/rcynic.c; revision=4004
2011-09-29Remove gratuitous and incorrect assertion unmasked by [4002].Rob Austein
This fixes #91. svn path=/rcynic/rcynic.c; revision=4003
2011-09-29Add rsync_state_closed: pipe from rsync has closed, but rsync hasn'tRob Austein
exited yet. Dunno why this happens, but it does. Apply upper bound to how long rcynic goes to sleep for any one select(); pity kqueue() isn't portable, that'd be a better solution. This closes #87. svn path=/rcynic/rcynic.c; revision=4002
2011-09-24svn:keywordsRob Austein
svn path=/rcynic/bio_f_linebreak.c; revision=4001
2011-09-24CleanupRob Austein
svn path=/rcynic/bio_f_linebreak.c; revision=4000
2011-09-23Compiler warningRob Austein
svn path=/rcynic/rcynic.c; revision=3999
2011-09-23Minor doc edit, needed to be done, but real purpose of this changesetRob Austein
is to see whether this commit closes #83 properly. svn path=/rcynic/README; revision=3998
2011-09-23Handle multiple CRLs from same issuer properly, or as properly as IRob Austein
know how to manage. Cache values we use on every call to check_x509() in the walk_ctx_t. This closes #83. svn path=/rcynic/rcynic.c; revision=3997
2011-09-21rcynic is now more than one file.Rob Austein
svn path=/rcynic/Doxyfile; revision=3996
2011-09-21Still more #83: rework CRL digest check to allow local policy, addRob Austein
check (warning only) of CRLDPs in other objects against manifest EE certificate CRLDP. svn path=/rcynic/README; revision=3995
2011-09-20fix botch where a child's prefixes were passed instead of asnsMichael Elkins
svn path=/rpkid/rpki/gui/app/glue.py; revision=3994
2011-09-20Further #83: rework check_manifest() to compare manifest numbers,Rob Austein
postpone CRL digest check until we've picked the manifest. svn path=/rcynic/rcynic.c; revision=3993
2011-09-19Progress (not complete) on #83: check CRL numbers rather than justRob Austein
blindly accepting current when both exist, further nit-picky checks (AKI, CRL extensions, CRL and certificate versions). svn path=/rcynic/rcynic.c; revision=3992
2011-09-16Rework CMS checking to use check_x509(). (#82)Rob Austein
Start cleaning up tangled mess of interlocked checks between CRL and manifests. (#83) svn path=/rcynic/README; revision=3991
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-28 12:58:25 +0000