aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-10-17validation_status.py is both simpler and faster thanRob Austein
validation_status.awk, so delete the latter and make the former a proper script. svn path=/branches/tk274/; revision=4783
2012-10-17If a file doesn't parse as X.509, try parsing as CMS and looking forRob Austein
an embedded EE certificate before giving up. svn path=/branches/tk274/; revision=4782
2012-10-17Use -J (.txz) instead of -z (.tgz) for backup target.Rob Austein
svn path=/branches/tk274/; revision=4781
2012-10-17CRLs work better if one remembers to set the list of certificatesRob Austein
being revoked. Doh. Fixes #295. svn path=/branches/tk274/; revision=4780
2012-10-16Make schema checking configurable at runtime, reenable inbound schemaRob Austein
checking as the default. svn path=/branches/tk274/; revision=4779
2012-10-14CleanupRob Austein
svn path=/branches/tk274/; revision=4778
2012-10-13Consolidate all the IP-version-specific voodoo into a read-only dataRob Austein
structure. svn path=/branches/tk274/; revision=4777
2012-10-12Correct type names (insert package name).Rob Austein
svn path=/branches/tk274/; revision=4776
2012-10-12Deobfuscate.Rob Austein
svn path=/branches/tk274/; revision=4775
2012-10-12Deobfuscate.Rob Austein
svn path=/branches/tk274/; revision=4774
2012-10-12Replace rpki.ipaddrs with rpki.POW.IPAddress.Rob Austein
svn path=/branches/tk274/; revision=4773
2012-10-12Cleanup.Rob Austein
svn path=/branches/tk274/; revision=4772
2012-10-12Rust In Pieces, POW.pkix.Rob Austein
In the end, there can be only one. svn path=/branches/tk274/; revision=4771
2012-10-11Tell OpenSSL to use Python's replacements for libc memory allocationRob Austein
functions, mostly because Python says this will make our teeth whiter. Seems to work. Back this out if it creates portability problems. svn path=/branches/tk274/; revision=4770
2012-10-11Convert rpki.x509.X509._issue() to use POW instead of POW.pkix.Rob Austein
svn path=/branches/tk274/; revision=4769
2012-10-11Use correct OID for EE certificate SIA (id-ad-signedObject, notRob Austein
id-ad-signedObjectRepository). Fix X509.setSerial() to set the serial (doh). Don't set empty RFC 3779 extensions no matter what silly thing the caller does. Set critical flag on Certificate Policies extension. svn path=/branches/tk274/; revision=4768
2012-10-11Use POW instead of POW.pkix to decode certificate resources.Rob Austein
svn path=/branches/tk274/; revision=4767
2012-10-11CleanupRob Austein
svn path=/branches/tk274/; revision=4766
2012-10-10Convert ROAs and manifests to use POW CMS subclasses. Start inchingRob Austein
resource_set towards using POW.IPAddress class. Closes #293. svn path=/branches/tk274/; revision=4765
2012-10-10Fix length of manifest BIT STRING. Remove extraneous argument fromRob Austein
CMS subclass .sign() method calling sequences. svn path=/branches/tk274/; revision=4764
2012-10-10Fix manifest URI broken a couple of edits ago.Rob Austein
svn path=/branches/tk274/; revision=4763
2012-10-09Delete broken definition of Ghostbusters class (which nothing everRob Austein
noticed, because the working definition overwrote it). Other minor cleanup. Closes #292. svn path=/branches/tk274/; revision=4762
2012-10-09Whack SIA and AIA code to use POW instead of POW.pkix. WhackRob Austein
smoketest repository layout to silence (correct) rcynic whining about objects not in manifest. svn path=/branches/tk274/; revision=4761
2012-10-09Use POW for PKCS #10 generation.Rob Austein
svn path=/branches/tk274/; revision=4760
2012-10-09FIRST allocate, THEN initialize. Doh.Rob Austein
svn path=/branches/tk274/; revision=4759
2012-10-09Calculate SKI directly from POW.Asymmetric object.Rob Austein
svn path=/branches/tk274/; revision=4758
2012-10-05Apparently gcc reserves the right to optimize code to the point whereRob Austein
safe code becomes unsafe, then whines about it. Hmm. svn path=/branches/tk274/; revision=4757
2012-10-05Convert another chunk of Python code to use new POW classes. Clean upRob Austein
PEM and OID code in POW. Add ENTER() macro to make it easier to track down things like borked reference counts. svn path=/branches/tk274/; revision=4756
2012-10-04Pull from trunk/.Rob Austein
svn path=/branches/tk274/; revision=4755
2012-10-03Make new POW.ROA and POW.Manifest subclasses of POW.CMS. This isRob Austein
still a little rough, doesn't set eContentType OIDs automatically, needs more testing, but basic stuff like extracting contents from an existing ROA seems to work. svn path=/branches/tk274/; revision=4753
2012-10-02Cleanup #warnings.Rob Austein
svn path=/branches/tk274/; revision=4752
2012-10-01Convert CRL creation to use POW rather than POW.pkix.Rob Austein
svn path=/branches/tk274/; revision=4748
2012-10-01Use very long BPKI expiration times, so that we canRob Austein
re-run canned experiments without worrying about BPKI expirations. Probably ought to tie all of this back to YAML valid_until settings, but this will do for the moment. svn path=/branches/tk274/; revision=4747
2012-09-30Don't whack installation directories if they already exist. MaybeRob Austein
there's some clever way to autoconf this so users can control whether they want their directories whacked or not, but for now we need to stop doing this because it messes up /usr/local on MacOSX laptops. See #288. svn path=/branches/tk274/; revision=4745
2012-09-30Fix --quiet.Rob Austein
svn path=/branches/tk274/; revision=4744
2012-09-30Add --quietRob Austein
svn path=/branches/tk274/; revision=4743
2012-09-30Try dbm if gdbm fails for horrible debug-only RSA key speedup hack.Rob Austein
svn path=/branches/tk274/; revision=4742
2012-09-30Implement conversion between DER and POW formats for PKCS10 class.Rob Austein
svn path=/branches/tk274/; revision=4741
2012-09-29Convert BasicConstraints to use new POW method.Rob Austein
svn path=/branches/tk274/; revision=4740
2012-09-29Convert a few rpki.x509 methods to use the new rpki.POW code.Rob Austein
svn path=/branches/tk274/; revision=4739
2012-09-29Simplify loop.Rob Austein
svn path=/branches/tk274/; revision=4738
2012-09-29Clean shouldn't remove defstack.h (anymore).Rob Austein
svn path=/branches/tk274/; revision=4737
2012-09-29Clean up AVL_PARANOIA code.Rob Austein
svn path=/branches/tk274/; revision=4736
2012-09-25Clear old extensions from PKCS #10 request before setting new ones.Rob Austein
In most cases there won't be old extensions to clear, but in theory this could happen when modifying an existing request, so get it right. svn path=/branches/tk274/; revision=4735
2012-09-25Add PKCS#10 class.Rob Austein
svn path=/branches/tk274/; revision=4734
2012-09-23Add X509.getPublicKey(). Clean up a couple zillion compiler warningsRob Austein
from gcc 4.2 on MacOSX; am not entirely happy about some of the casts required, might want to encapsulate the more common patterns in functions to do controlled casts from one known type to another. svn path=/branches/tk274/; revision=4733
2012-09-22Drag Asymmetric class up to using the EVP_PKEY API, which simplifiesRob Austein
the Asymmetric code considerably and gets us most of the way towards being able to support ECDSA, which, in theory, we'll want for BGPSEC. svn path=/branches/tk274/; revision=4732
2012-09-22Internal TODO comments (easier than a ticket system on airplanes...).Rob Austein
svn path=/branches/tk274/; revision=4731
2012-09-21ROA class.Rob Austein
svn path=/branches/tk274/; revision=4730
2012-09-21Implement RPKI manifests. Raise exceptions properly in ASN1_TIMERob Austein
converters. Clean up internal type names, delete a bunch of symbols nothing uses anymore. svn path=/branches/tk274/; revision=4729
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-30 23:29:19 +0000