aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2012-09-14Disable AVL_PARANOIA code.Rob Austein
svn path=/branches/tk274/; revision=4714
2012-09-14Add AVL index of validation_status database.Rob Austein
svn path=/branches/tk274/; revision=4713
2012-09-12Debug X509.getRFC3779(), add IPv6 support. Will need refactoring onceRob Austein
I see what the ROA code looks like. svn path=/branches/tk274/; revision=4712
2012-09-12CheckpointRob Austein
svn path=/branches/tk274/; revision=4711
2012-09-12CheckpointRob Austein
svn path=/branches/tk274/; revision=4710
2012-09-12Get reference counts right.Rob Austein
svn path=/branches/tk274/; revision=4709
2012-09-12Checkpoint working version of x509_object_get_rfc3779(). HideouslyRob Austein
ugly, still needs work, but appears to return correct results. svn path=/branches/tk274/; revision=4708
2012-09-11Fix exception hierarchy. Add KeyUsage methods; some details willRob Austein
vary, but general approach should work for many (most? all?) other extensions. svn path=/branches/tk274/; revision=4707
2012-09-10Checkpoint after a lot more cleanup and simplification. No longerRob Austein
linking against libssl, only libcrypto. Internal documentation almost matches current reality. A few deliberate harmless compilation warnings to remind me of loose ends that still want cleaning up. svn path=/branches/tk274/; revision=4706
2012-09-08Drag rpki.POW classes kicking and screaming into the 21st century.Rob Austein
Replaced old factory functions with proper (well, I hope they're proper) class __new__() and __init__() methods as appropriate, whack PyTypeObject structures to make it possible to subclass these classes, etcetera. Doc strings for classes and methods are still horribly out of date, but at least it all shows up properly now. Caveat: This is a major change and has not yet been heavily tested. It seems to work, but splitting the old factory functions into __new__() and __init__() methods exposed some corner cases which I may or may not have handled correctly. svn path=/branches/tk274/; revision=4705
2012-09-07Synchronize after updating BPKI.Rob Austein
svn path=/branches/tk274/; revision=4704
2012-09-06Error handling cleanup.Rob Austein
svn path=/branches/tk274/; revision=4703
2012-09-05Prune a whole lot of unused EVP_CIPHER code. The only purpose thatRob Austein
code still served was to support selection of an (optional) encryption algorithm for new RSA private keys; since none of the two dozen algorithms supported by that code were anything one would choose this year, I converted the whole mess just to use AES-256-CBC as the one supported encryption algorithm. Fix this if anything ever cares. svn path=/branches/tk274/; revision=4702
2012-09-05Forgot that POW.pkix uses Asymmetric.sign() and Asymmetric.verify().Rob Austein
Since we can't get rid of them yet, fix them to pass the digest length along to OpenSSL for checking. svn path=/branches/tk274/; revision=4701
2012-09-05Another POW.c cleanup checkpoint.Rob Austein
svn path=/branches/tk274/; revision=4700
2012-09-05Add and use Define_Method() macro to simplify method tables and set upRob Austein
method documentation. Most of the existing method documentation needs editing to for this to be fully useful, but it's a start. svn path=/branches/tk274/; revision=4699
2012-09-05Cleanup checkpoint: METH_NOARGS.Rob Austein
svn path=/branches/tk274/; revision=4698
2012-09-04More pruning.Rob Austein
svn path=/branches/tk274/; revision=4697
2012-09-04As part of dragging POW.c into the 21st century, get rid of hugeRob Austein
swacks of code which either haven't been used in RPKI for years or have never been used in RPKI at all, and which, in either case, I'd rather not have to maintain: SSL/TLS, MD2, RIPEMD160, HMAC. There's almost certainly more to prune, but this was the lowest-hanging fruit. svn path=/branches/tk274/; revision=4696
2012-09-04CleanupRob Austein
svn path=/branches/tk274/; revision=4695
2012-09-03Fix last (?) remaining direct reference to "POWpkix" outside ofRob Austein
rpki.x509 module. svn path=/branches/tk274/; revision=4694
2012-09-03Clean up multi-value RDN handling.Rob Austein
svn path=/branches/tk274/; revision=4693
2012-09-03More useful debugging code.Rob Austein
svn path=/branches/tk274/; revision=4692
2012-09-03Add yamlconf to ruleset.Rob Austein
svn path=/branches/tk274/; revision=4691
2012-09-03Switch X501DN to use (new) POW format internally.Rob Austein
svn path=/branches/tk274/; revision=4690
2012-09-02Checkpoint of tweaks to rpki.x509.X501DN class prior to flipping thatRob Austein
class to use POW instead of POW.pkix. svn path=/branches/tk274/; revision=4689
2012-09-02Whack X509_NAME code to use an encoding compatible with multi-valueRob Austein
RDNs, for compatability with other X.509-aware Python code that uses this encoding. We don't really expect to see multi-value RDNs in RPKI, nor do we fully support them yet; for the moment, the goal is just to get to a point where we can rewrite the rpki.x509 subject and issuer name functions to use POW rather than POW.pkix. svn path=/branches/tk274/; revision=4688
2012-09-02Clean up a lot of gratuitous use of dynamic memory.Rob Austein
svn path=/branches/tk274/; revision=4687
2012-09-01Don't write .csv files when in --skip_config mode. This was maskingRob Austein
the bug fixed in [4684]. svn path=/branches/tk274/; revision=4686
2012-09-01Clean up X509_object_helper_set_name() and teach it to deal withRob Austein
numeric OIDs. svn path=/branches/tk274/; revision=4685
2012-09-01Whoops, need to dump CSV files even for hosted entities.Rob Austein
svn path=/branches/tk274/; revision=4684
2012-08-31More cleanup.Rob Austein
svn path=/branches/tk274/; revision=4683
2012-08-31Clean up X509_object_helper_get_name().Rob Austein
svn path=/branches/tk274/; revision=4682
2012-08-31Merge from trunk.Rob Austein
svn path=/branches/tk274/; revision=4681
2012-08-31Don't whack publication_base_directory when not running in --loopbackRob Austein
mode. svn path=/branches/tk274/; revision=4680
2012-08-31Tweak shutdown to give children more time to save profile data.Rob Austein
svn path=/branches/tk274/; revision=4679
2012-08-30Leave BPKI directory setting alone when not in loopback mode. As aRob Austein
consequence, non-loopback users of yamlconf output will need to call "rpkic update_bpki" before starting daemons. svn path=/branches/tk274/; revision=4678
2012-08-30Iain really wants "irdbd.sql" instead of "irdb.sql". The latter isRob Austein
technically correct, but there are already enough violations of the naming scheme that one more won't matter. svn path=/branches/tk274/; revision=4677
2012-08-29Add a lot of __repr__() methods in an attempt to make the logs moreRob Austein
useful. Add rpki.sql.cache_reference decorator, to give the garbage collector some guidance about linkages between active objects now that the SQL cache uses weak references. Other minor cleanup. svn path=/branches/tk274/; revision=4676
2012-08-29Bad things happen when __str__() methods forget to return the string.Rob Austein
svn path=/branches/tk274/; revision=4675
2012-08-29Bad things happen when __str__() methods forget to return the string.Rob Austein
svn path=/branches/tk274/; revision=4674
2012-08-29Clean up excessive debug logging.Rob Austein
svn path=/branches/tk274/; revision=4673
2012-08-29Simplify iterator core.Rob Austein
svn path=/branches/tk274/; revision=4672
2012-08-29Nit: print file's name, not repr of file object.Rob Austein
svn path=/branches/tk274/; revision=4671
2012-08-29Switch from getopt to argparse.Rob Austein
svn path=/branches/tk274/; revision=4670
2012-08-28Split yamlconf profiling out into separate Makefile target.Rob Austein
svn path=/branches/tk274/; revision=4669
2012-08-28Make a few more things configurable, for compatability with Iain'sRob Austein
scripts. svn path=/branches/tk274/; revision=4668
2012-08-27Move root.cer to separate rsync module when building testRob Austein
configurations, to avoid warnings about it being tainted. This is really a conflict between needing to support rootd and wanting to make the configuration clean when not running rootd: either we add an extra directory level to the publication structure which we don't use when not running rootd, or we move root.cer somewhere else. Since the latter is simpler except for test configurations which are already generated for us by programs, we do the latter. svn path=/branches/tk274/; revision=4667
2012-08-27Create missing SQL databases if given MySQL root password, otherwiseRob Austein
check for missing databases and clean existing databases if found. Dump SQL to files at end of run. svn path=/branches/tk274/; revision=4666
2012-08-27NitRob Austein
svn path=/branches/tk274/; revision=4665
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-13 16:23:40 +0000