aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-02-21Add router certificate support to yamltest, rpkic, etc.Rob Austein
svn path=/branches/tk671/; revision=5680
2014-02-20Whack RSA-specific code to a more general API using PrivateKey andRob Austein
PublicKey classes, with RSA and ECDSA as subclasses extending PrivateKey. Revised API not necessarily in final form yet, but good enough for smoketest to generate ECDSA keys for testing router certs. svn path=/branches/tk671/; revision=5679
2014-02-20All this router certificate stuff requires enough SQL changes thatRob Austein
we're going to need a fancy upgrade script when we merge this to trunk no matter what else we do, so might as well flip the default on the long-awaited `merge_publication_directories` in the router certificate development branch and handle the upgrade actions for that along with everything else when we finally merge back to trunk. See #479. svn path=/branches/tk671/; revision=5678
2014-02-20Missed case where we have to reissue EE certificate because we justRob Austein
deprecated the issuing ca_detail. svn path=/branches/tk671/; revision=5677
2014-02-20Clean up ee_cert_obj class.Rob Austein
svn path=/branches/tk671/; revision=5676
2014-02-20Pull from trunk.Rob Austein
svn path=/branches/tk671/; revision=5675
2014-02-20Checkpoint. Now generating something that looks a bit like a routerRob Austein
cert, but not right yet: RSA where should be ECDSA, EKU missing, and EE certificate class's .reissue() method isn't working properly yet. svn path=/branches/tk671/; revision=5673
2014-02-20Remove dead code (old .is_leaf property, not used for years now).Rob Austein
svn path=/branches/tk671/; revision=5672
2014-02-20Reformat some bits that were so bad I couldn't read them.Rob Austein
svn path=/branches/tk671/; revision=5671
2014-02-19Add router_cert specification to a test configuration.Rob Austein
Take advantage of YAML's automatic line folding to make the embedded shell code in some test configurations a bit more readable. svn path=/branches/tk671/; revision=5670
2014-02-19Start adding router certificates to test harness.Rob Austein
svn path=/branches/tk671/; revision=5669
2014-02-19Add ee_cert_obj and its maintenance task to rpkid. Not tested yet.Rob Austein
svn path=/branches/tk671/; revision=5668
2014-02-18Add support for setting serialNumber attribute in certificate names,Rob Austein
since the current router certificate specification uses it. svn path=/branches/tk671/; revision=5667
2014-02-15Clean up task queue initialization.Rob Austein
svn path=/branches/tk671/; revision=5666
2014-02-15Rework add_router_certificate_request to parse the XML format.Rob Austein
svn path=/branches/tk671/; revision=5665
2014-02-15RegenRob Austein
svn path=/branches/tk671/; revision=5664
2014-02-14Fix XML encoding/decoding of <list_ee_certificate_requests_elt/> elements.Rob Austein
svn path=/branches/tk671/; revision=5663
2014-02-13Better way to handle _object_exception_helper() failures.Rob Austein
svn path=/branches/tk671/; revision=5662
2014-02-13Failure of one of the _extension_helper() functions isn't really anRob Austein
assertion failure, it's bad input data. OK, it's bad input data that we should never see and would indicate an OpenSSL bug, but still. svn path=/branches/tk671/; revision=5661
2014-02-01Oops, smoketest.py depends on the DROP TABLE IF EXISTS statements in rpkid.sql.Rob Austein
svn path=/branches/tk671/; revision=5660
2014-02-01Checkpoint: Add ee_cert table to rpkid.sql. Corresponding PythonRob Austein
class not written yet. svn path=/branches/tk671/; revision=5659
2014-01-31RegenRob Austein
svn path=/branches/tk671/; revision=5658
2014-01-31Checkpoint. Untested implementation of left-rightRob Austein
<list_ee_certificate_requests/> PDU. svn path=/branches/tk671/; revision=5657
2014-01-30RegenRob Austein
svn path=/branches/tk671/; revision=5656
2014-01-30First cut at RelaxNG schema for router certificate request interchange.Rob Austein
svn path=/branches/tk671/; revision=5655
2014-01-29First cut of zookeeper methods to add router certs and other EE certs.Rob Austein
Likely needs further refactoring before really usable by GUI or CLI. svn path=/branches/tk671/; revision=5654
2014-01-29Rework PKCS #10 sanity checking code.Rob Austein
svn path=/branches/tk671/; revision=5653
2014-01-29Clean up OID database. Would have done this years ago, had IRob Austein
understood how the globals() function works. svn path=/branches/tk671/; revision=5652
2014-01-29CheckpointRob Austein
svn path=/branches/tk671/; revision=5651
2014-01-28More consolidation of extension handling code. DebugRob Austein
*_extension_helper() methods. Rework assertion handling. svn path=/branches/tk671/; revision=5650
2014-01-28Add ExtendedKeyUsage, refactor extension handling code.Rob Austein
svn path=/branches/tk671/; revision=5649
2014-01-27Pull from trunk.Rob Austein
svn path=/branches/tk671/; revision=5648
2014-01-26Checkpoint.Rob Austein
svn path=/branches/tk671/; revision=5646
2014-01-25Add EECertificateRequest model; untested, except to verify thatRob Austein
refactoring and adding model definitions didn't break anything that already worked. svn path=/branches/tk671/; revision=5645
2014-01-22Tool to dump all object dates.Rob Austein
svn path=/trunk/; revision=5642
2014-01-22Add --help and long option names to rcynic.Rob Austein
svn path=/trunk/; revision=5641
2014-01-21Add --help support to all of the C programs in $top/utils/*.Rob Austein
svn path=/trunk/; revision=5640
2014-01-17CleanupRob Austein
svn path=/trunk/; revision=5639
2014-01-15Doh, helps to import errno module before using it. See #661.Rob Austein
svn path=/trunk/; revision=5638
2014-01-15Add lock file and abort timer. See #661.Rob Austein
svn path=/trunk/; revision=5637
2014-01-15Typo in format string was throwing exception-within-exception inRob Austein
DeadDrop.dump(). svn path=/trunk/; revision=5636
2014-01-15Add subject names to show_bpki output.Rob Austein
svn path=/trunk/; revision=5635
2014-01-15Add show_bpki command to list BPKI dates and SKIs.Rob Austein
svn path=/trunk/; revision=5634
2014-01-13str.split() -> shlex.split(), cleanup.Rob Austein
svn path=/trunk/; revision=5633
2014-01-12Use argparse for all command parsing, both argv and internal commandRob Austein
processor. Integrate inline help with argparse's help system. Use subparsers to provide coherent structure in non-interactive mode. Once necessary infrastructure for this is in place, it has the happy side effect of simplifying parsing for any individual command. svn path=/trunk/; revision=5632
2014-01-11getopt -> argparse. Rewrite code that was still trying to use oldRob Austein
rpki.POW.pkix API, removed some time back. svn path=/trunk/; revision=5631
2014-01-11getopt -> argparseRob Austein
svn path=/trunk/; revision=5630
2014-01-11Even more getopt -> argparse. Clean up some old conversion scripts.Rob Austein
svn path=/trunk/; revision=5629
2014-01-11getopt -> argparse; rework with proper dispatch mechanism.Rob Austein
svn path=/trunk/; revision=5628
2014-01-10Even more getopt -> argparse.Rob Austein
svn path=/trunk/; revision=5627
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-31 18:55:10 +0000