aboutsummaryrefslogtreecommitdiff
path: root/ca
AgeCommit message (Collapse)Author
2016-06-08Bugfixes from Andrew Bradford (thanks!).Rob Austein
svn path=/branches/tk705/; revision=6441
2016-05-25Make rpkigui-import-routes use logging settings from /etc/rpki.conf instead ↵Michael Elkins
of rpki.django_settings.gui Create new rpki.django_settings.gui_script Django settings file with a minimal subset required to use the ORM, to be used in auxillary scripts Add [rpkigui-import-routes] section to rpki.conf Change log level of warning about AS value errors in routeviews dumps to DEBUG svn path=/branches/tk705/; revision=6439
2016-05-24More http:// => https:// changes in documentation links.Rob Austein
svn path=/branches/tk705/; revision=6436
2016-05-07Oops, TeX-style "--" numeric ranges in copyright comments are bad fitRob Austein
for XML. Apparently we were carefully changing just the XML files to use a single "-" to work around this. Enough already, just convert all copyright year ranges to single "-" and have done with this. svn path=/branches/tk705/; revision=6427
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-04-26Convert rpki-rtr to use common config/argparse/logging setup.Rob Austein
svn path=/branches/tk705/; revision=6391
2016-04-26Further consolidation of config file parsing, command line parsing,Rob Austein
and logging setup. Most programs now use the unified mechanism, although there are still a few holdouts: the GUI, which is a special case because it has no command line, and the rpki-rtr program, which, for historical reasons has its own implementation of the logging setup infrastructure. svn path=/branches/tk705/; revision=6390
2016-04-24Tidy new rpki-nanny capture code a bit.Rob Austein
svn path=/branches/tk705/; revision=6386
2016-04-24Add code to rpki-nanny to capture misdirected daemon output that goesRob Austein
to stdout or stderr instead of the logging system. svn path=/branches/tk705/; revision=6385
2016-04-23Add yamltest code to set up TAL and root certificate correctly underRob Austein
new scheme. Rewrite pubd code which was whacking top-level certificate files with names other than "root.cer". svn path=/branches/tk705/; revision=6380
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
2016-04-23Internal root sort of working, but only sort of. It's skipping theRob Austein
worker CA and going straight from the root to certifying children, which is wrong. However...this is far enough along that we can now remove all the rootd glorp, which is a worthwhile simplification in its own right, so checkpoint here, remove rootd glorp, then figure out what's wrong with the internal certificate hierarchy. rcynic does validate the current output, given a manually constructed TAL, even if the current output isn't quite what it should be. So we should also be able to sort out the new TAL generation code now. Yes, checking in a version that works for the wrong reasons is weird, but the current sort-of-broken state lets us confirm that the lower levels of the tree are still correct as we go, which would be much harder if the poor thing just sat there and whimpered until we had the new internal CA code completely finished. svn path=/branches/tk705/; revision=6376
2016-04-23Add Root model to rpki.rpkidb and root-related attributes toRob Austein
left-right schema. Not really using of this stuff yet, but haven't broken existing code yet either. svn path=/branches/tk705/; revision=6371
2016-04-23Switch CA daemons to run under rpki-nanny.Rob Austein
This is a transitional version of rpki-nanny: in the long run, the daemons it runs should take care of reading their own log configuration from rpki.conf, but that's a yak for another day. svn path=/branches/tk705/; revision=6366
2016-04-21Update the GUI to work with the new rcynicdb.Michael Elkins
svn path=/branches/tk705/; revision=6365
2016-04-12Pull rpkic <group> fix from trunk.Rob Austein
I think Subversion's merge tracking data is turning into cream cheese. svn path=/branches/tk705/; revision=6360
2016-04-09Avoid setuid antics when starting GUI from yamltest.Rob Austein
svn path=/branches/tk705/; revision=6352
2016-03-30Clean up and simplify rpkic privilege-dropping code. All sudo voodooRob Austein
is now handled in the outermost script, before rpki.rpkic is even loaded; rpki.rpkic just assumes that euid and ruid have been set up correctly and swaps them temporarily when it needs to do file I/O. svn path=/branches/tk705/; revision=6340
2016-03-24Use undocumented -f option to a2dismod when disabling mod_deflate toRob Austein
stop recent Debian and Ubuntu from whining at the user on installation. svn path=/branches/tk705/; revision=6327
2016-03-22Handle Linux .distribution_version in cases like "testing" andRob Austein
"unstable" where there is no numeric version available (yet, or ever, as the case may be). Debian Stretch picked up the mandatory ".conf" suffix for Apache site files; don't (yet) know whether that was already present in Jessie, won't much care until we have working backports of our dependencies for Jessie. svn path=/branches/tk705/; revision=6325
2016-03-21Rework rpkic setuid handling to something a bit more robust.Rob Austein
svn path=/branches/tk705/; revision=6322
2016-03-14Drop Cache-Control: max-age for RRDP notification files to matchRob Austein
current RRDP specification, and get the URI right while we're at it. svn path=/branches/tk705/; revision=6309
2016-02-25Use sys.executable to avoid potential $PATH problem.Rob Austein
svn path=/branches/tk705/; revision=6282
2016-02-24Rewrite rpkic wrapper to avoid running sudo unnecessarily.Rob Austein
svn path=/branches/tk705/; revision=6281
2016-02-18Whack yamltest.py until it works again with latest changes to rpkic, etc.Rob Austein
svn path=/branches/tk705/; revision=6269
2016-02-16Finally builds and installs properly on Ubuntu again;Rob Austein
no serious runtime testing yet. svn path=/branches/tk705/; revision=6262
2016-02-15Snapshot before whacking migrations.Rob Austein
svn path=/branches/tk705/; revision=6259
2016-02-15Checkpoint while shuffling stuff around for new installation scheme.Rob Austein
Installation of everything but Debian packages is probably broken, and Debian packages are too at the moment due to (probably) minor errors in buildtools/debian-skeleton, but enough has changed that this really needs a snapshot checked in for backup. svn path=/branches/tk705/; revision=6257
2016-02-14Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6256
2016-02-14Revised rpki-sql-setup approaching something halfway sane. Still needRob Austein
to tweak rpki-confgen.xml and Debian rpki-*.{pre,post}{inst,rm} scripts before we'll know if the new approach really works properly. svn path=/branches/tk705/; revision=6255
2016-02-13Snapshot current almost-working version of rpki-sql-setup,Rob Austein
before whacking it in a slightly different direction. svn path=/branches/tk705/; revision=6254
2016-02-13Add back some logging.Rob Austein
svn path=/branches/tk705/; revision=6253
2016-02-12Debug PostgreSQL setup code. Make [rcynic] database optional for now.Rob Austein
svn path=/branches/tk705/; revision=6251
2016-02-12Missing "self" in method definition.Rob Austein
svn path=/branches/tk705/; revision=6250
2016-02-12Rewrite scripts affected by rpki-sql-setup changes.Rob Austein
Change Debian configuration to use PostgreSQL. svn path=/branches/tk705/; revision=6248
2016-02-12Rewrite rpki-sql-setup to handle PostgreSQL and SQLite3 as well asRob Austein
MySQL. Command line syntax changed, so doc and calling scripts need updating. Not yet tested, and some of the stuff for MySQL and PostgreSQL setup is kind of funky, so take with salt. svn path=/branches/tk705/; revision=6247
2016-01-23Add multiple-URI TAL support to rcynicng.Rob Austein
Whack CA tools with a club until rcynicng works with our CA RRDP implementation. Add makemigrations target to top-level Makefile; this is a bit of a kludge, but sure beats doing this by hand. svn path=/branches/tk705/; revision=6230
2016-01-06Add minimal HTTPS server to yamltest, for RRDP testing.Rob Austein
svn path=/branches/tk705/; revision=6217
2015-11-11Configure pylint to use the pylint-django plugin, which (mostly)Rob Austein
understands Django's exotic metaclasses, which in turn allows us to re-enable a number of pylint checks we had disabled. While we were at this, stripped out a bunch of old pylint pragmas, then added back the subset that were really needed. As usual with pylint, this turned up a few real bugs along with an awful lot of noise. svn path=/branches/tk705/; revision=6162
2015-11-10Add router certificate to test.Rob Austein
svn path=/branches/tk705/; revision=6160
2015-10-26Add warning about CSRF issues when simulating multiple GUI instancesRob Austein
under yamltest. No obvious way to tell Django's CSRF protection to allow this, not entirely sure we'd want to do so even if we could. svn path=/branches/tk705/; revision=6154
2015-10-26Whack a few things stale imports and Django 1.6-isms to get GUIRob Austein
running with new code base. Now working with $ yamltest.py --sql mysql --gui smoketest.1.yaml svn path=/branches/tk705/; revision=6153
2015-10-26"Any programmer who fails to comply with the standard naming, formatting,Rob Austein
or commenting conventions should be shot. If it so happens that it is inconvenient to shoot him, then he is to be politely requested to recode his program in adherence to the above standard." -- Michael Spier, Digital Equipment Corporation svn path=/branches/tk705/; revision=6152
2015-10-25Tweak binary field types to get SQLite3 working as a Django ORMRob Austein
backend. Switch yamltest's default database configuration to sqlite3. MySQL still has character set issues, which are almost certainly to do with the communication channel rather than the database tables. It's possible that one of the newer DB API drivers for MySQL fixes this, might be worth trying one of them at some point (see the "MySQL notes" discussion of MySQL DB API drivers in the Django documentation). svn path=/branches/tk705/; revision=6149
2015-10-25Make SQL engine configurable. Works for MySQL, not yet tested for anything ↵Rob Austein
else. svn path=/branches/tk705/; revision=6147
2015-10-22Timing tweaks to a kludgy test script. Didn't help, might have doneRob Austein
so on a faster machine. svn path=/branches/tk705/; revision=6141
2015-10-22First cut at replacing rpkid's HTTP and I/O system with Tornado. NotRob Austein
quite working perfectly yet (cron is a bit wonky) but manages to produce an initial set of ROAs without thowing any exceptions, and code is already much cleaner than the old callback-based horror. svn path=/branches/tk705/; revision=6139
2015-10-20Left-right test cases updated to track [6120].Rob Austein
svn path=/branches/tk705/; revision=6136
2015-10-20Change <self/> (etc) to <tenant/> (etc). "self" always was a reallyRob Austein
bad choice for something implemented in Python, holdover from an older specification, but Django ORM's troubles with "self" as a keyword argument were the last straw. Enough already. Backwards compatability should be a straightforward data migration. svn path=/branches/tk705/; revision=6134
2015-10-19Tweak test scripts.Rob Austein
svn path=/branches/tk705/; revision=6130
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 19:02:26 +0000