aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-09-20Apache 2.4 support. Closes #616.Rob Austein
svn path=/trunk/; revision=5507
2013-09-20Fix obscure reference count oops in IPAddress arithmetic operationRob Austein
coercion code. svn path=/trunk/; revision=5505
2013-09-20use resource_range_ip.min.bits instead of resource_range_ip.datum_type.bits ↵Michael Elkins
to get the max bits for the IP address closes #576 svn path=/trunk/; revision=5504
2013-09-20add +/- for each roa to given visual feedback about how the roa affects the ↵Michael Elkins
given route svn path=/trunk/; revision=5503
2013-09-19delete existing objects that were previously accepted if they were not ↵Michael Elkins
accepted during the most recent run. see #588 refactor much of the code in process_cache() into save_statuses() to make it simpler to handle the garbage collection. first we collected all statuses, then save them all at once. svn path=/trunk/; revision=5502
2013-09-19Apache-version-agnosticism, part 1: fix autoconf, FreeBSD portRob Austein
skeleton, rcynic-cron. rpkigui-apache-confgen still needs work to support 2.4 syntax, but we should be tracking the Apache version number correctly for the version-dependent pathnames on FreeBSD. See #616. svn path=/trunk/; revision=5501
2013-09-19new cli script rpkigui-query-routes to query the web portal's ↵Michael Elkins
routeview/rcynic db for route validity svn path=/trunk/; revision=5500
2013-09-19garbage collect ROAPrefixV* objects when there are no associated ROAsMichael Elkins
closes #620 svn path=/trunk/; revision=5499
2013-09-19import cacheview.models directly instead of cacheviewMichael Elkins
svn path=/trunk/; revision=5498
2013-09-19resource_range_ip has a .min element, not .prefix_minMichael Elkins
svn path=/trunk/; revision=5497
2013-09-19update cacheview interface to match the style of the main appMichael Elkins
svn path=/trunk/; revision=5496
2013-09-18remove default=None from the migration removing null=True from the ↵Michael Elkins
ResourceCert.conf field. see #612 svn path=/trunk/; revision=5495
2013-09-18Add support for keeping a SQLite database of incoming data when inRob Austein
client mode. Only lightly tested so far. svn path=/trunk/; revision=5494
2013-09-13add favicon for RPKI web portalMichael Elkins
see #614 svn path=/trunk/; revision=5493
2013-09-11Zookeeper.synchronize_bpki() was only synchronizing a subset of theRob Austein
BPKI material that Zookeeper.update_bpki() was updating. Fixes #611. svn path=/trunk/; revision=5492
2013-09-11Fix outdated error message.Rob Austein
svn path=/trunk/; revision=5491
2013-09-10Skip build/ subdirectory when constructing TAGS files.Rob Austein
svn path=/trunk/; revision=5490
2013-09-09set default logging level to ERROR for rpkigui-rcynic script so we don't ↵Michael Elkins
flood the user's mailbox when invokved by cron frequently see #608 svn path=/trunk/; revision=5489
2013-09-09Send mail from rcynic-cron to root, not rcynic. Closes #610.Rob Austein
svn path=/trunk/; revision=5488
2013-09-07Well, this script now generates something that looks like aRob Austein
certificate tree and validates. Not at all certain that what we generate is right yet. svn path=/trunk/; revision=5487
2013-09-03use Python None as default value for ForeignKey field, rather than 0.Michael Elkins
see #607 svn path=/trunk/; revision=5486
2013-09-03Disable parallel builds. See #604.Rob Austein
svn path=/trunk/; revision=5485
2013-09-02Checkpoint.Rob Austein
svn path=/trunk/; revision=5484
2013-09-01Add resource_bag.__nonzero__() method.Rob Austein
svn path=/trunk/; revision=5483
2013-08-31Constraint class.Rob Austein
svn path=/trunk/; revision=5482
2013-08-31Checkpoint.Rob Austein
svn path=/trunk/; revision=5481
2013-08-31Automatic pull of documentation from Wiki.RPKI Documentation Robot
svn path=/trunk/; revision=5480
2013-08-30Cleanup.Rob Austein
svn path=/trunk/; revision=5479
2013-08-30Refactor X.509 verification code to add "nested set" tree markings toRob Austein
SQL as we go; since the expensive part of the SQL marking algorithm is the tree traversal and we have to do the same tree walk anyway while checking certificates, we might as well do both tasks at once. svn path=/trunk/; revision=5478
2013-08-29Cleanup.Rob Austein
svn path=/trunk/; revision=5477
2013-08-29Cleanup.Rob Austein
svn path=/trunk/; revision=5476
2013-08-29Now that we have a Python interface to the OpenSSL certificateRob Austein
validation code, use it to sanitize our database. svn path=/trunk/; revision=5475
2013-08-28Checkpoint.Rob Austein
svn path=/trunk/; revision=5474
2013-08-28Pass Python exceptions from callback through to caller correctly.Rob Austein
svn path=/trunk/; revision=5473
2013-08-28Cleanup.Rob Austein
svn path=/trunk/; revision=5472
2013-08-28Rework the new certificate validation code to better encapsulate theRob Austein
underlying semantics in a Pythonic wrapper: X509Store.verify() now instantiates X509StoreCTX, and .verify_callback() is now an optional method supplied by the user via subclassing. svn path=/trunk/; revision=5471
2013-08-27X509StoreCTX.getCurrentCertificate() and X509StoreCTX.getChain().Rob Austein
svn path=/trunk/; revision=5470
2013-08-27X509StoreCTX.store property.Rob Austein
svn path=/trunk/; revision=5469
2013-08-27Doh, simpler.Rob Austein
svn path=/trunk/; revision=5468
2013-08-27CleanupRob Austein
svn path=/trunk/; revision=5467
2013-08-27Move most control operations from X509StoreCTX to X509Store.Rob Austein
svn path=/trunk/; revision=5466
2013-08-25Fix various things that required sequences to accept iterables. Fix aRob Austein
few incorrect error messages. svn path=/trunk/; revision=5465
2013-08-25Certificate verification code approaching something usable.Rob Austein
svn path=/trunk/; revision=5464
2013-08-24Basic certificate verification works. Needs a bunch of additionalRob Austein
methods, properties, and constants to be fully useful. svn path=/trunk/; revision=5463
2013-08-23Rip out PEM_converter class, as we no longer need to supportRob Austein
interoperation between three separate ASN.1 packages and our updated rpki.POW PEM functions use the OpenSSL libraries to handle corner cases that PEM_converter did not, like PKCS8. See #603. Fix log-rate-limiting in Auto_update DER objects to be time-based rather than counter based; reorder checks so that daemons will have some chance of recovering when the user does something strange with required .cer or .key files then repairs the error. See #602. svn path=/trunk/; revision=5462
2013-08-23Notes on future work to track OpenSSL's PKCS #1.5 -> PKCS #8 transition.Rob Austein
svn path=/trunk/; revision=5461
2013-08-22First cut at adding a .verify() method back to the X509Store class.Rob Austein
Not done yet, but does have the tricky bit (Python callback). svn path=/trunk/; revision=5460
2013-08-20Checkpoint.Rob Austein
svn path=/trunk/; revision=5459
2013-08-20Checkpoint.Rob Austein
svn path=/trunk/; revision=5458
2013-08-18CheckpointRob Austein
svn path=/trunk/; revision=5457
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-03 20:27:21 +0000