aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-05-07Copyright notice update, first round: files that are entirely newRob Austein
since copyright holder of record changed. svn path=/branches/tk705/; revision=6425
2016-05-05OpenSSL 1.0.2h.Rob Austein
svn path=/branches/tk705/; revision=6424
2016-05-05OpenSSL 1.0.2h.Rob Austein
svn path=/trunk/; revision=6423
2016-05-05This time for sure.Rob Austein
We were building the correct management object structure in rpkidb, but not in irdb, so the irdb kept breaking things when it tried to bring them into alignment. What we get for trying to perform an upgrade which requires pushing on a rope. Anyway, result now appears to work. Committing, but letting it run for a while before handing off to the usual alpha testers. svn path=/branches/tk705/; revision=6422
2016-05-05rootd migration finally working right. I think. Could stand more testing.Rob Austein
svn path=/branches/tk705/; revision=6421
2016-05-05Sort out irdb Parent vs rpkid Parent.Rob Austein
No longer throwing nasty errors, but resources still not propegating correctly down from constructed root (yet). svn path=/branches/tk705/; revision=6420
2016-05-04Non-rootd transitions finally appear to work as expected. Too manyRob Austein
rsync URIs in too many places, we had been inconsistent about updating them to match the new environment. In theory, the URI updating code now knows to touch only URIs that refer back to this same set of servers, while leaving URIs referencing external services alone, but this has not (yet) been tested. svn path=/branches/tk705/; revision=6419
2016-05-04Follow that turtle!Rob Austein
svn path=/branches/tk705/; revision=6418
2016-05-04A Farewell To Turtles.Rob Austein
svn path=/branches/tk705/; revision=6417
2016-05-04Mostly working. Setup is still finicky, and rootd transition stuffRob Austein
isn't working quite right yet (can't extract root certificate/TAL, so not useful yet), but most of the up-down/left-right/publication protocol now looks to be working with the translated data. svn path=/branches/tk705/; revision=6416
2016-05-02Far too much fun whacking Django to whack the underlying databaseRob Austein
engine to reset SQL SEQUENCEs after we've been fiddling with primary keys directly. OK, I can understand why we ahve to do something, but why does the official API for this expect us to cut and paste (with color control escape sequences, no less)? svn path=/branches/tk705/; revision=6415
2016-05-02Checkpoint. Most of the certificate twiddling is done, but untested.Rob Austein
SIA URI twiddling still needs doing. svn path=/branches/tk705/; revision=6414
2016-04-29gracefully catch and log exception from zookeeperMichael Elkins
svn path=/branches/tk705/; revision=6413
2016-04-29lxml doesn't like None as an attribute value, so use empty string whenRob Austein
reporting AIA extension of a root certificate. See #809. svn path=/branches/tk705/; revision=6412
2016-04-29Initial stumbling towards rootd -> internal root conversion. NotRob Austein
there yet, but general approach is starting to become clear. svn path=/branches/tk705/; revision=6411
2016-04-29Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6410
2016-04-29ca-unpickle now handles the full set of test pickles generated fromRob Austein
smoketest.1.yaml. Not yet tested in a live server. Rootd transition not yet written, so far just some diagnostics showing some of the data we'll need to use to move the root CA state we must keep into the new internal root object (keys, serial numbers, etc). svn path=/branches/tk705/; revision=6409
2016-04-29Reorganize to support per-database forking, add pubd support.Rob Austein
svn path=/branches/tk705/; revision=6408
2016-04-29Track changes to names of pickled fields.Rob Austein
svn path=/branches/tk705/; revision=6407
2016-04-29First cut at rpkid migration, preliminary data for rootd migration.Rob Austein
Still have irdb and pubd to do. svn path=/branches/tk705/; revision=6406
2016-04-29Throw correct exceptions in container LazyDict container methods, notRob Austein
that anybody is likely to care. svn path=/branches/tk705/; revision=6405
2016-04-29Cleaner implementation of LazyDict, albeit a bit more verbose.Rob Austein
svn path=/branches/tk705/; revision=6404
2016-04-29Snapshot of incomplete proof of concept. Will need to test finalRob Austein
results, of course, but Django behavior so far suggests that this approach will probably work. svn path=/branches/tk705/; revision=6403
2016-04-28Pull still more ca-pickle hacks from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6402
2016-04-28Truncate pickle file before rewriting it, to keep Python from beingRob Austein
confused by old data if we update in place. Use shorter names in the top-level dict to remove visual clutter in unpickling code. svn path=/trunk/; revision=6401
2016-04-28Pull rootd-specific ca-pickle hacks from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6400
2016-04-28And of course rootd does everything just a little differently, so weRob Austein
need a few rootd-specific hacks in the pickling script to make sure we pick up all the certificate files rootd has issued. svn path=/trunk/; revision=6399
2016-04-28Pull ca-{pickle,unpickle}.py updates from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6398
2016-04-28dict() of dict()s turns out to be easier to work with than a singleRob Austein
layer dict() with a tuple key. svn path=/trunk/; revision=6397
2016-04-27Pull ca-{pickle,unpickle}.py from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6396
2016-04-27First step of transition mechanism from trunk/ to tk705/: script toRob Austein
encapsulate all (well, we hope) relevant configuration and state from a trunk/ CA in a form we can easily load on another machine, or on the same machine after a software upgrade, or .... Transfer format is an ad hoc Python dictionary, encoded in Python's native "Pickle" format, compressed by "xz" with SHA-256 integrity checking enabled. See #807. svn path=/trunk/; revision=6395
2016-04-27Catch exceptions from Zookeeper to gracefully continue when we can't talk to ↵Michael Elkins
rpkid. closes #805 svn path=/branches/tk705/; revision=6394
2016-04-26Handle non-existant root certificate correctly in rpkic extract_root_* ↵Rob Austein
commands. Fixes #808. svn path=/branches/tk705/; revision=6393
2016-04-26Convert RP utilities to use common config/argparse/logging setup.Rob Austein
svn path=/branches/tk705/; revision=6392
2016-04-26Convert rpki-rtr to use common config/argparse/logging setup.Rob Austein
svn path=/branches/tk705/; revision=6391
2016-04-26Further consolidation of config file parsing, command line parsing,Rob Austein
and logging setup. Most programs now use the unified mechanism, although there are still a few holdouts: the GUI, which is a special case because it has no command line, and the rpki-rtr program, which, for historical reasons has its own implementation of the logging setup infrastructure. svn path=/branches/tk705/; revision=6390
2016-04-26Update trunk/FreeBSD port from django14 to django16.Rob Austein
svn path=/trunk/; revision=6389
2016-04-24Disable TALs for a couple more testbeds as we edge towards consideringRob Austein
the default configuration to be production rather than testing.w svn path=/branches/tk705/; revision=6388
2016-04-24Add exception handler of last resort to servers, in an attempt to getRob Austein
startup error messages logged properly if at all possible. See #806. svn path=/branches/tk705/; revision=6387
2016-04-24Tidy new rpki-nanny capture code a bit.Rob Austein
svn path=/branches/tk705/; revision=6386
2016-04-24Add code to rpki-nanny to capture misdirected daemon output that goesRob Austein
to stdout or stderr instead of the logging system. svn path=/branches/tk705/; revision=6385
2016-04-23Tweak version number generation for git-svn-based test builds.Rob Austein
svn path=/branches/tk705/; revision=6384
2016-04-23.up_down_query_root() must pick out the right CADetail by g(SKI).Rob Austein
.up_down_query() must handle errors signaled by .up_down_query_root() correctly. svn path=/branches/tk705/; revision=6383
2016-04-23Missing dictionary key in a few tests in UpdateChildrenTask.Rob Austein
svn path=/branches/tk705/; revision=6382
2016-04-23"KeyError: u'manager'" turns out to be Django's way of saying:Rob Austein
"Try adding .all(), idiot." svn path=/branches/tk705/; revision=6381
2016-04-23Add yamltest code to set up TAL and root certificate correctly underRob Austein
new scheme. Rewrite pubd code which was whacking top-level certificate files with names other than "root.cer". svn path=/branches/tk705/; revision=6380
2016-04-23Internal root working with vastly-simplified implementation.Rob Austein
svn path=/branches/tk705/; revision=6379
2016-04-23rpkic extract_root_certificate and extract_root_tal commands.Rob Austein
svn path=/branches/tk705/; revision=6378
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 23:21:44 +0000