aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-04-01Unterminated quoted string in FreeBSD installation script.Rob Austein
svn path=/branches/tk705/; revision=6344
2016-03-30Clean up and simplify rpkic privilege-dropping code. All sudo voodooRob Austein
is now handled in the outermost script, before rpki.rpkic is even loaded; rpki.rpkic just assumes that euid and ruid have been set up correctly and swaps them temporarily when it needs to do file I/O. svn path=/branches/tk705/; revision=6340
2016-03-30Still more UID-swapped file I/O, and general cleanup of UI file I/O.Rob Austein
GUI no longer uses (an additional layer of) temporary files between itself and zookeeper. Zookeeper file read methods now take file-like objects. rpkic now opens input files as the real UID, then reverts back to the effective UID before handing the resulting file off to the zookeeper. This caught several more instances of rpkic file I/O that were not doing the real/effective UID swap properly while loading CSV and VCard files. As far as I can tell from testing, this didn't break anything that worked before. Whether it fixed all the file I/O problems remains to be seen. svn path=/branches/tk705/; revision=6339
2016-03-29rpkic needs to do uid swapping around XML reads too.Rob Austein
rpki.irdb.zookeeper.etree_read(), the functions that call it, and the functions that call them, could all use a bit of refactoring. At this point pretty much ever caller is jumping through some hoop or another due to the way the code has evolved, and most of it could be simpler. svn path=/branches/tk705/; revision=6338
2016-03-29Initial fixes to rpkigui-rcynic. Still not working, but failing in aRob Austein
more interesting way now. svn path=/branches/tk705/; revision=6335
2016-03-28rpkigui-check-expired needs to run as user rpki. Clean up rpki-caRob Austein
cron job stuff while we're at this. svn path=/branches/tk705/; revision=6334
2016-03-28Apparently we lost DOWNLOAD_DIRECTORY while consolidating the GUI'sRob Austein
Django settings with those of all the other ORM-using programs. svn path=/branches/tk705/; revision=6333
2016-03-26Relatively gratuitous commit to force regeneration of all binary packages.Rob Austein
svn path=/branches/tk705/; revision=6330
2016-03-25Now that the real version of rpki-pbuilder has moved into apt-tools,Rob Austein
remove all the other copies to prevent confusion. svn path=/branches/tk705/; revision=6329
2016-03-24Use undocumented -f option to a2dismod when disabling mod_deflate toRob Austein
stop recent Debian and Ubuntu from whining at the user on installation. svn path=/branches/tk705/; revision=6327
2016-03-23Wrap a MySQL-specific error check so it doesn't cause problems when using ↵Rob Austein
other engines. svn path=/branches/tk705/; revision=6326
2016-03-22Handle Linux .distribution_version in cases like "testing" andRob Austein
"unstable" where there is no numeric version available (yet, or ever, as the case may be). Debian Stretch picked up the mandatory ".conf" suffix for Apache site files; don't (yet) know whether that was already present in Jessie, won't much care until we have working backports of our dependencies for Jessie. svn path=/branches/tk705/; revision=6325
2016-03-21Django API fashion police renamed "mimetype" to be "content_type".Rob Austein
svn path=/branches/tk705/; revision=6324
2016-03-21[6322] broke "make test", fix by allowing rpkic to run with warningRob Austein
when RPKI_USER not found. svn path=/branches/tk705/; revision=6323
2016-03-21Rework rpkic setuid handling to something a bit more robust.Rob Austein
svn path=/branches/tk705/; revision=6322
2016-03-20Clean up rcynic installation, run rcynicng instead of (old) rcynic, clean up ↵Rob Austein
rcynic-cron. NB: rpkigui-rcynic is currently broken and is therefore disabled in rcynic-cron. This needs to be fixed, but it was broken on this branch in any case, no real point in holding up the rest of this waiting for it. svn path=/branches/tk705/; revision=6321
2016-03-19Specify locations of sudo and rrdtool in Debian build to avoid kludgeRob Austein
of having to include them as build dependencies just so that ./configure can figure out their locations. svn path=/branches/tk705/; revision=6320
2016-03-19Internal sudo wrapper to deal with PostgreSQL access control issues.Rob Austein
svn path=/branches/tk705/; revision=6319
2016-03-19Might help to get the ./configure option name right.Rob Austein
svn path=/branches/tk705/; revision=6318
2016-03-19Run rpki.wsgi as user rpki. Closes #788.Rob Austein
svn path=/branches/tk705/; revision=6317
2016-03-19Pull changes from trunk. Closes #784.Rob Austein
svn path=/branches/tk705/; revision=6316
2016-03-19Add rrdtool and sudo to build dependencies temporarily, so thatRob Austein
rpki.autoconf gets the right values. Better fix would be to set these on the ./configure command line in debian/rules, try that later. svn path=/branches/tk705/; revision=6314
2016-03-18Switch rsync upload to use daemon mode over ssh, to give server betterRob Austein
control over precisely what this rsync client is allowed to do. svn path=/branches/tk705/; revision=6313
2016-03-18rpki-pbuilder.py hacked for multiple repositories, now passes initial tests.Rob Austein
svn path=/branches/tk705/; revision=6312
2016-03-17Create log directory when missing.Rob Austein
svn path=/branches/tk705/; revision=6310
2016-03-14Drop Cache-Control: max-age for RRDP notification files to matchRob Austein
current RRDP specification, and get the URI right while we're at it. svn path=/branches/tk705/; revision=6309
2016-03-10Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6308
2016-03-03Speed up snapshot loading and cleanup with huge data sets.Rob Austein
svn path=/branches/tk705/; revision=6307
2016-03-01Fix bug introduced while refactoring bulk SQL insertion.Rob Austein
svn path=/branches/tk705/; revision=6306
2016-03-01Somewhat cleaner version of bulk snapshot loader.Rob Austein
svn path=/branches/tk705/; revision=6305
2016-03-01Clean up after switching from XMLPullParser to iterparse: put modelsRob Austein
back the way they were before we started with XMLPullParser. svn path=/branches/tk705/; revision=6304
2016-03-01Much faster loading of large RRDP snapshots. Code is messy and needsRob Austein
cleanup, but runs more than an order of magnitude faster in common case where the vast majority of objects in the snapshot are new, and (in theory) should not be significantly slower than what we were doing already in more complicated mixtures. svn path=/branches/tk705/; revision=6303
2016-02-29Doh, "session_id", not "uuid".Rob Austein
svn path=/branches/tk705/; revision=6302
2016-02-29Tighter syntax checks on snapshots and deltas, in lieu of RelaxNG validation.Rob Austein
svn path=/branches/tk705/; revision=6301
2016-02-29Use lxml.etree.iterparse() for delta files too.Rob Austein
svn path=/branches/tk705/; revision=6300
2016-02-29Stash unparsed XML in a temporary file so we can get off the phoneRob Austein
quickly when processing large snapshots which take (much) longer to load into SQL than to pull down from the net. Given this change, lxml.etree.iterparse() is a more suitable API than lxml.etree.XMLPullParser, so switch. This version can download and process a 120,000 object snapshot, albeit hideously slowly. svn path=/branches/tk705/; revision=6299
2016-02-27Helps to get the field names right when cleaning up.Rob Austein
svn path=/branches/tk705/; revision=6298
2016-02-27Use an incremental parser for snapshot files.Rob Austein
svn path=/branches/tk705/; revision=6297
2016-02-26Tweak UpdateROAsTask to create new ROAs before worrying about updating old ones.Rob Austein
svn path=/branches/tk705/; revision=6296
2016-02-26Using a Tornado yield dictionary is elegant (not to mention cute), butRob Austein
using a single bulk IRDB query for all the child data that UpdateChildrenTask needs is a better solution. svn path=/branches/tk705/; revision=6295
2016-02-26Simplify UpdateChildrenTask.Rob Austein
svn path=/branches/tk705/; revision=6294
2016-02-26Tweak default rpkid timing parameters.Rob Austein
svn path=/branches/tk705/; revision=6293
2016-02-25Helps to add task back into the queue when postponing, doh.Rob Austein
svn path=/branches/tk705/; revision=6292
2016-02-25Tweak postponement code so that, if everything in the task queue hasRob Austein
already been postponed at least once, we stay with the current task rather than doing a forced round-robin. This may require further tweaks, eg, to flush the publication queue at regular intervals even if we're not postponing, but the intent is to allow tasks with complex setup to run to completion while remaining responsive, to avoid wasting all of our time on repeated setup overhead. svn path=/branches/tk705/; revision=6291
2016-02-25Need to pass PostponeTask exception up the line for it to work properly.Rob Austein
svn path=/branches/tk705/; revision=6290
2016-02-25Major simplifcation of rpkid's internal tasking system.Rob Austein
svn path=/branches/tk705/; revision=6289
2016-02-25Clean up allocation of CRL/manifest numbers. We might want to putRob Austein
both this and certificate serial number allocation under a lock, but doing so would require converting a lot of plain methods into coroutines, so postpone that decision until we're done with revisions to the task scheduler. svn path=/branches/tk705/; revision=6288
2016-02-25Fix inverted loop variables in orphaned resource class destructor.Rob Austein
svn path=/branches/tk705/; revision=6287
2016-02-25Have to supply inception time explicitly when creating manifest EERob Austein
certificate, to make certain that it is not later than manifest thisUpdate value. svn path=/branches/tk705/; revision=6286
2016-02-25Dumb error in install options.Rob Austein
svn path=/branches/tk705/; revision=6285
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 23:26:49 +0000