aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-06-05Preliminary asynchronous DNS and IPv6 support for rpkid et al.Rob Austein
Asynchronous DNS disabled by default for now, pending further testing ("localhost" is not a DNS lookup, so usual regression tests don't tell us anything useful here). IPv6 servers are enabled by default; for now, IPv6 clients are disabled by default. svn path=/rpkid/rpki/adns.py; revision=3273
2010-06-05Add rpki.adns.getaddrinfo()Rob Austein
svn path=/rpkid/rpki/adns.py; revision=3272
2010-06-05CleanupRob Austein
svn path=/rpkid/rpki/adns.py; revision=3271
2010-06-04Preliminary support for asynchronous DNS.Rob Austein
svn path=/rpkid/rpki/https.py; revision=3270
2010-06-04Initial version of asynchronous DNS codeRob Austein
svn path=/rpkid/rpki/adns.py; revision=3269
2010-05-31Better fix for timer.cancel().Rob Austein
svn path=/rpkid/rpki/async.py; revision=3268
2010-05-31Preliminary fix to timer.cancel(). Right fix may be to changeRob Austein
__cmp__() method and use an explicit sort key, but this works. svn path=/rpkid/rpki/async.py; revision=3267
2010-05-28SimplifyRob Austein
svn path=/rcynic/make-ita.sh; revision=3266
2010-05-28Script to generate indirect trust anchor files.Rob Austein
svn path=/rcynic/make-ita.sh; revision=3265
2010-05-27Current RIPE static trust anchorRob Austein
svn path=/rcynic/sample-trust-anchors/ripe.cer; revision=3264
2010-05-26Update task status.Rob Austein
svn path=/rpkid/README; revision=3263
2010-05-26Paranoia: Clean up trust anchor BIOs properly. Almost certainlyRob Austein
doesn't matter unless one has an implausibly large number of trust anchors, but let's keep things tidy. svn path=/rcynic/rcynic.c; revision=3262
2010-05-26indirect-trust-anchorRob Austein
svn path=/rcynic/README; revision=3261
2010-05-24Bugfix from Gary Kennedy: handle HTTPS close event properly if itRob Austein
arrives while client thinks it's still reading the response. svn path=/rpkid/rpki/https.py; revision=3260
2010-05-20Regenerate CRL and manifest when revoking child certs.Rob Austein
svn path=/rpkid/rpki/left_right.py; revision=3258
2010-05-20Obsolete calling sequence to child_cert.revoke(), oops.Rob Austein
svn path=/rpkid/rpki/left_right.py; revision=3257
2010-05-20Add delete_{child,parent,repository,publication_client} commands.Rob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3256
2010-05-20CleanupRob Austein
svn path=/rpkid/rpki/cli.py; revision=3255
2010-05-19Add alternate all-on-one-line format ("-s" option).Rob Austein
svn path=/utils/uri/uri.c; revision=3254
2010-05-19Recheck resources we're reissuing to child against our currentRob Austein
ca_detail cert. This is probably needless paranoia, but better safe. svn path=/rpkid/rpki/left_right.py; revision=3253
2010-05-19CleanupRob Austein
svn path=/rpkid/rpki/left_right.py; revision=3252
2010-05-18Revoke child certificate without renewing it if child's resources haveRob Austein
become the null set. svn path=/rpkid/rpki/left_right.py; revision=3251
2010-05-14Update to current (-05) draft.Rob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3250
2010-05-14Preserve a copy conforming to draft -03, for old clientsRob Austein
svn path=/rtr-origin/rtr-origin-old.py; revision=3249
2010-05-13Try to avoid stale CRLs and manifests, by using self.regen_margin asRob Austein
lead time for regenerating them. I suppose some day we might need to control lead time for these separately from ROA EE certificates, but seems unlikely. svn path=/rpkid/doc/Left-Right; revision=3248
2010-05-13Clean up a couple of bits of bad coding I found while looking forRob Austein
something else. svn path=/rpkid/rpki/rpki_engine.py; revision=3247
2010-05-12Scale self_regen_margin to self_crl_interval automatically.Rob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3246
2010-05-12Don't attempt to clean databases other than the ones used by the testRob Austein
scripts. svn path=/rpkid/tests/sql-cleaner.py; revision=3245
2010-05-10Add --email and --from options to support fake email header forRob Austein
irr_rpsl_submit. svn path=/scripts/roa-to-irr.py; revision=3244
2010-05-07Base filenames on prefixes and ASNs rather than URIs.Rob Austein
svn path=/scripts/roa-to-irr.py; revision=3243
2010-05-07Doh, helps to read the filename from argvRob Austein
svn path=/scripts/roa-to-irr.py; revision=3242
2010-05-06Tweak usage message.Rob Austein
svn path=/scripts/roa-to-irr.py; revision=3241
2010-05-06Generate route and route6 objects from validated ROAs.Rob Austein
svn path=/scripts/roa-to-irr.py; revision=3240
2010-05-05More fun with the same data.Rob Austein
svn path=/rcynic/rcynic.xsl; revision=3239
2010-05-05Add classification of the ten zillion codes to XML output, use that toRob Austein
do a bit more color coding. svn path=/rcynic/rcynic.c; revision=3238
2010-05-05Forgot to update copyright noticeRob Austein
svn path=/rcynic/rcynic.xsl; revision=3237
2010-05-05Having jumped off the CSS cliff, let's try a few colors.Rob Austein
svn path=/rcynic/rcynic.xsl; revision=3236
2010-05-04Add per-URI validation status to XML output.Rob Austein
svn path=/rcynic/rcynic.c; revision=3235
2010-05-04Suppress all but the first whine about a particular manifest or CRLRob Austein
being stale. svn path=/rcynic/rcynic.c; revision=3234
2010-04-30Rewrite many logging invocation messages in an attempt to impose someRob Austein
consistancy. All concious decisions to reject an object now say so explictly. Well, that's the intent, anyway. svn path=/rcynic/rcynic.c; revision=3233
2010-04-30Better error message for validation failures.Rob Austein
svn path=/rcynic/rcynic.c; revision=3232
2010-04-30Update notesRob Austein
svn path=/rpkid/README; revision=3231
2010-04-30Update status of a few tasksRob Austein
svn path=/rpkid/README; revision=3230
2010-04-30Update instructions after debugging with this week's version of sshd.Rob Austein
svn path=/rtr-origin/README; revision=3229
2010-04-29Apparently sshd has a compile-time option that causes it to invokeRob Austein
subsystem code with two unidirectional pipes rather than a single bidirectional socketpair, in which case treating file descriptor zero as a bidirectional socket doesn't work so well. Rewrite server mode code to use a pair of unidirectional channels to compensate. svn path=/rtr-origin/rtr-origin.py; revision=3228
2010-04-29CleanupRob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3227
2010-04-29D'oh, CSV handles are not callable objectsRob Austein
svn path=/scripts/translate-handles.py; revision=3226
2010-04-29Better usage message.Rob Austein
svn path=/rtr-origin/rtr-origin.py; revision=3225
2010-04-29Minimal documentation, perhaps better than nothing. In a couple ofRob Austein
cases the code should be fixed before further documentation updates, since the documented behavior is gratuitously silly. svn path=/rtr-origin/README; revision=3224
2010-04-26Update list of systems on which rcynic has been tested. No doubt thisRob Austein
is still incomplete, but at least it doesn't just say "FreeBSD" anymore. svn path=/rcynic/README; revision=3223