aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2010-10-09Cleanup, add a bit more debug loggingRob Austein
svn path=/rpkid/rpki/http.py; revision=3475
2010-10-09Allow reusing an existing publication relationship for a new parent.Rob Austein
Not sure this is really working yet. svn path=/rpkid/rpki/myrpki.py; revision=3474
2010-10-09https => httpRob Austein
svn path=/portal-gui/scripts/list_resources.py; revision=3473
2010-10-08First cut at a lame picture showing how all the tools fit togetherRob Austein
svn path=/presentations/big-picture.dot; revision=3472
2010-10-08Clean up after TLS flag dayRob Austein
svn path=/rpkid.with_tls; revision=3471
2010-10-08Mismatch between format string and argument count in error message.Rob Austein
svn path=/rcynic/rcynic.c; revision=3470
2010-10-07Use -B to get CREATE DATABASESRob Austein
svn path=/rpkid/backup-sql.py; revision=3469
2010-10-07Script to automate dumping SQL.Rob Austein
svn path=/rpkid/backup-sql.py; revision=3468
2010-10-07Nit in copyright commentRob Austein
svn path=/rpkid/left-right-schema.rng; revision=3467
2010-10-07Nit in copyright commentRob Austein
svn path=/rpkid/left-right-schema.rnc; revision=3466
2010-10-07Merge rpkid.without_tls/ branch to rpkid/ trunk.Rob Austein
svn path=/rpkid/Makefile; revision=3465
2010-10-07Stash a copy of pre-conversion (with TLS) tree temporarily, in case ofRob Austein
problems during switchover. Will clean this up after testbed is back up without TLS. svn path=/rpkid.with_tls; revision=3464
2010-10-06Don't whine in state closingRob Austein
svn path=/rpkid.without_tls/rpki/http.py; revision=3463
2010-10-06Add "configure_daemons" reminder to end of script.Rob Austein
svn path=/scripts/convert-https-to-http.py; revision=3462
2010-10-06Convert SQL too, and log what we're doingRob Austein
svn path=/scripts/convert-https-to-http.py; revision=3461
2010-10-05Hack to remove obsolete elements from entitydb files.Rob Austein
svn path=/scripts/convert-https-to-http.py; revision=3460
2010-10-05Add replay-protection timestamps to SQL (not really using them yet)Rob Austein
svn path=/rpkid.without_tls/doc/Configuration; revision=3459
2010-10-04Doh, forgot to close csv_writer objectRob Austein
svn path=/scripts/arin-to-csv.py; revision=3458
2010-10-04Hack rpki.myrpki.csv_writer to write to a temporary filename, thenRob Austein
rename to the real filename on close. svn path=/rpkid.without_tls/rpki/myrpki.py; revision=3457
2010-10-04.close() doesn't take "force" argument anymore. Handle exceptions inRob Austein
"closing" state as we would for "idle" state. svn path=/rpkid.without_tls/rpki/http.py; revision=3456
2010-10-04Update for XML file that ate ManhattanRob Austein
svn path=/scripts/arin-to-csv.py; revision=3455
2010-10-02Updates to work with ARIN's new bulk-WHOIS service.Rob Austein
ARIN now considers RPSL to be a legacy format, and the XSL that generates RPSL from their XML primary dump format doesn't normalize its output properly, so we get parse errors wherever somebody inserted, eg, newlines into contact phone numbers. For the moment, assume that we don't care about any line which fails to parse, which is a really bad assumption but suffices to get updates running again with the new input files. In the longer term, this script should be replaced by XSL that generates our CSV files directly from XML, bypassing RPSL entirely. svn path=/scripts/arin-to-csv.py; revision=3454
2010-10-01Pull update_bpki command from rpkid/ to rpkid.without_tls/.Rob Austein
svn path=/rpkid.without_tls/rpki/myrpki.py; revision=3453
2010-10-01update_bpki now takes arguments like configure_daemons, so it can doRob Austein
the whole job. svn path=/rpkid/rpki/myrpki.py; revision=3452
2010-10-01Debug update_bpkiRob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3451
2010-10-01First cut at automatic BPKI regenerationRob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3450
2010-09-16Preliminary version of rpkid et al with all the TLS code ripped out.Rob Austein
Not quite ready for cutover yet, may need some conversion tools and instructions, but checking this into a branch (well, sort of) so that others can look at the code changes involved, try it out themselves, etc. At some point this will merge back into rpkid/ directory and there will be only one, without TLS, but converting the testbed is going to require a flag day, so need to keep the TLS version around until then. svn path=/rpkid.without_tls; revision=3449
2010-09-15Convert interface between Python and OpenSSL to use GeneralizedTimeRob Austein
syntax for both GeneralizedTime and UTCTime: bad enough that the ASN.1 code has to know about Y2050 madness, there's no sane reason why application code should need to know. svn path=/pow/POW-0.7/POW.c; revision=3448
2010-09-15Make it easier to run yamltest with other configsRob Austein
svn path=/rpkid/tests/Makefile; revision=3447
2010-09-14Don't explode when cleaning up attributes that never existedRob Austein
svn path=/rpkid/rpki/rpki_engine.py; revision=3446
2010-09-10Refactor .wrap()/.unwrap() code prior to adding CMS timestamp checks.Rob Austein
svn path=/rpkid/irdbd.py; revision=3445
2010-09-09Downgrade syslog priority of a few messagesRob Austein
svn path=/rpkid/rpki/https.py; revision=3444
2010-09-08Clean up unnecessarily opaque test condition.Rob Austein
svn path=/rpkid/rpki/rpki_engine.py; revision=3443
2010-09-08Partial (incomplete, written in a hospital waiting room) BPKI revocationn ↵Rob Austein
support. svn path=/rpkid/rpki/myrpki.py; revision=3442
2010-09-07Print CMS signingTime.Rob Austein
svn path=/utils/print_manifest/print_manifest.c; revision=3441
2010-09-07Add support for extracting signingTime from CMS messages.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=3440
2010-09-03Add new "Auto_update" flavor of DER objects: this is like Auto_file,Rob Austein
but saves the filename from which it was loaded, and attempts to reload itself automatically if the file's st_mtime changes. svn path=/rpkid/irdbd.py; revision=3439
2010-09-03Restrict extra identity checks for trusted BPKI EE certificates toRob Austein
subject name and public key, so that things won't come to a grinding halt if BPKI certificates are updated while daemons are running. svn path=/rpkid/rpki/x509.py; revision=3438
2010-09-03We don't really need the *.cacert.cer files.Rob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3437
2010-09-01Clean up old sample trust anchorsRob Austein
svn path=/rcynic/sample-trust-anchors/iana-zsz.cer; revision=3436
2010-08-31regenRob Austein
svn path=/rpkid/publication-schema.rng; revision=3435
2010-08-31Sadly, it turns out that CRLs really can grow large enough to hit theRob Austein
length limits previously set in this schema as a precaution. Remove length limit and cross fingers, at least for now. svn path=/rpkid/publication-schema.rnc; revision=3434
2010-08-30Use correct exception handler in call_pubd()Rob Austein
svn path=/rpkid/rpki/left_right.py; revision=3433
2010-08-30Another dropped exception event, sigh.Rob Austein
svn path=/rpkid/rpki/https.py; revision=3432
2010-08-29Break XML packet dumps into multiple lines when logging schemaRob Austein
validation errors. svn path=/rpkid/rpki/publication.py; revision=3431
2010-08-28Allow disabling summary, mostly for extracting presentation slidesRob Austein
svn path=/rcynic/rcynic.xsl; revision=3430
2010-08-28Add test for withdrawing ROARob Austein
svn path=/rpkid/tests/smoketest.3.yaml; revision=3429
2010-08-28Clean up publication_queue wrapper methodsRob Austein
svn path=/rpkid/rpki/rpki_engine.py; revision=3428
2010-08-28Suppress duplicate roa_requestsRob Austein
svn path=/rpkid/rpki/left_right.py; revision=3427
2010-08-24Roll APNIC sample TA per mail from RobLRob Austein
svn path=/rcynic/sample-trust-anchors/apnic.cer; revision=3426