aboutsummaryrefslogtreecommitdiff
path: root/potpourri
AgeCommit message (Collapse)Author
2016-05-25New script to install an RPKI root key salvaged from an old rootdRob Austein
installation on top of the active CADetail of a new-style rootd-less rpkid configuration. This has been tested, but only lightly, and only in the lab. This script is dangerous. Do not run it unless you really know what you are doing, and even then you probably do not want to run it on anything but a brand new installation with no existing RPKI data. See #816. svn path=/branches/tk705/; revision=6438
2016-05-09Add `--root-handle` argument to ca-unpickle to allow manualRob Austein
specification of a handle for the new root entity instead of the default of using a randomly-generated UUID as the name. svn path=/branches/tk705/; revision=6432
2016-05-07Exclude root certificate serial number from last_serial calculation,Rob Austein
as including it ends very badly when the root certificate serial is a randomly-generated 64-bit value. See #814. svn path=/branches/tk705/; revision=6430
2016-05-07Joy. Randy's trunk/ installation is using an ancient backwardsRob Austein
compatability hack which allows irdbd's server host and port to be expressed as a URL. No big deal, except that I wonder how many other relics we're going to find in The Config File That Time Forgot. See #813. svn path=/branches/tk705/; revision=6428
2016-05-07Oops, TeX-style "--" numeric ranges in copyright comments are bad fitRob Austein
for XML. Apparently we were carefully changing just the XML files to use a single "-" to work around this. Enough already, just convert all copyright year ranges to single "-" and have done with this. svn path=/branches/tk705/; revision=6427
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-05-07Copyright notice update, first round: files that are entirely newRob Austein
since copyright holder of record changed. svn path=/branches/tk705/; revision=6425
2016-05-05This time for sure.Rob Austein
We were building the correct management object structure in rpkidb, but not in irdb, so the irdb kept breaking things when it tried to bring them into alignment. What we get for trying to perform an upgrade which requires pushing on a rope. Anyway, result now appears to work. Committing, but letting it run for a while before handing off to the usual alpha testers. svn path=/branches/tk705/; revision=6422
2016-05-05rootd migration finally working right. I think. Could stand more testing.Rob Austein
svn path=/branches/tk705/; revision=6421
2016-05-05Sort out irdb Parent vs rpkid Parent.Rob Austein
No longer throwing nasty errors, but resources still not propegating correctly down from constructed root (yet). svn path=/branches/tk705/; revision=6420
2016-05-04Non-rootd transitions finally appear to work as expected. Too manyRob Austein
rsync URIs in too many places, we had been inconsistent about updating them to match the new environment. In theory, the URI updating code now knows to touch only URIs that refer back to this same set of servers, while leaving URIs referencing external services alone, but this has not (yet) been tested. svn path=/branches/tk705/; revision=6419
2016-05-04Follow that turtle!Rob Austein
svn path=/branches/tk705/; revision=6418
2016-05-04Mostly working. Setup is still finicky, and rootd transition stuffRob Austein
isn't working quite right yet (can't extract root certificate/TAL, so not useful yet), but most of the up-down/left-right/publication protocol now looks to be working with the translated data. svn path=/branches/tk705/; revision=6416
2016-05-02Far too much fun whacking Django to whack the underlying databaseRob Austein
engine to reset SQL SEQUENCEs after we've been fiddling with primary keys directly. OK, I can understand why we ahve to do something, but why does the official API for this expect us to cut and paste (with color control escape sequences, no less)? svn path=/branches/tk705/; revision=6415
2016-05-02Checkpoint. Most of the certificate twiddling is done, but untested.Rob Austein
SIA URI twiddling still needs doing. svn path=/branches/tk705/; revision=6414
2016-04-29Initial stumbling towards rootd -> internal root conversion. NotRob Austein
there yet, but general approach is starting to become clear. svn path=/branches/tk705/; revision=6411
2016-04-29Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6410
2016-04-29ca-unpickle now handles the full set of test pickles generated fromRob Austein
smoketest.1.yaml. Not yet tested in a live server. Rootd transition not yet written, so far just some diagnostics showing some of the data we'll need to use to move the root CA state we must keep into the new internal root object (keys, serial numbers, etc). svn path=/branches/tk705/; revision=6409
2016-04-29Reorganize to support per-database forking, add pubd support.Rob Austein
svn path=/branches/tk705/; revision=6408
2016-04-29Track changes to names of pickled fields.Rob Austein
svn path=/branches/tk705/; revision=6407
2016-04-29First cut at rpkid migration, preliminary data for rootd migration.Rob Austein
Still have irdb and pubd to do. svn path=/branches/tk705/; revision=6406
2016-04-29Throw correct exceptions in container LazyDict container methods, notRob Austein
that anybody is likely to care. svn path=/branches/tk705/; revision=6405
2016-04-29Cleaner implementation of LazyDict, albeit a bit more verbose.Rob Austein
svn path=/branches/tk705/; revision=6404
2016-04-29Snapshot of incomplete proof of concept. Will need to test finalRob Austein
results, of course, but Django behavior so far suggests that this approach will probably work. svn path=/branches/tk705/; revision=6403
2016-04-28Pull still more ca-pickle hacks from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6402
2016-04-28Pull rootd-specific ca-pickle hacks from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6400
2016-04-28Pull ca-{pickle,unpickle}.py updates from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6398
2016-04-27Pull ca-{pickle,unpickle}.py from trunk/.Rob Austein
svn path=/branches/tk705/; revision=6396
2016-04-27First step of transition mechanism from trunk/ to tk705/: script toRob Austein
encapsulate all (well, we hope) relevant configuration and state from a trunk/ CA in a form we can easily load on another machine, or on the same machine after a software upgrade, or .... Transfer format is an ad hoc Python dictionary, encoded in Python's native "Pickle" format, compressed by "xz" with SHA-256 integrity checking enabled. See #807. svn path=/trunk/; revision=6395
2016-03-10Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6308
2016-02-25Update to track rpki.POW changes.Rob Austein
svn path=/branches/tk705/; revision=6284
2016-02-16Promote rpki-generate-root-certificate to supported status.Rob Austein
svn path=/branches/tk705/; revision=6264
2015-10-26"Any programmer who fails to comply with the standard naming, formatting,Rob Austein
or commenting conventions should be shot. If it so happens that it is inconvenient to shoot him, then he is to be politely requested to recode his program in adherence to the above standard." -- Michael Spier, Digital Equipment Corporation svn path=/branches/tk705/; revision=6152
2015-10-20Apparently exclude-result-prefixes does exactly what we want in theRob Austein
presence of namespace-using content: removes unnecessary prefixes, while retaining those required for this particular output. svn path=/branches/tk705/; revision=6133
2015-10-19XSL transform to translate basic subset of OOB prototocol from oldRob Austein
"myrpki" to new IETF standards track I-D syntax. svn path=/branches/tk705/; revision=6131
2015-10-16Pull from trunk.Rob Austein
svn path=/branches/tk705/; revision=6124
2015-10-11Update to modern Python string formatting. Add date stamp to UMFHRob Austein
"From " line in case that's what's been giving the IRR code indigestion. svn path=/trunk/; revision=6111
2015-10-09Change reduced list of repositories in analysis script to focus on theRob Austein
RIRs and AltCA for now. Perhaps this script should use argparse? svn path=/trunk/; revision=6104
2015-08-06Script to generate root certificates on machines without useful OpenSSL. ↵Rob Austein
See #768. svn path=/trunk/; revision=6090
2015-07-21Start catching up on six months worth of little changes in RRDP.Rob Austein
svn path=/branches/tk705/; revision=6081
2014-11-16Now working against Tim's RRDP repository (really, was working a fewRob Austein
days ago, but forgot to check in changes at the time). svn path=/branches/tk705/; revision=6024
2014-11-13More RRDP retrieval.Rob Austein
svn path=/branches/tk705/; revision=6021
2014-11-08Simplify RRDP schema again: one delta file now contains exactly oneRob Austein
delta rather than a range. svn path=/branches/tk705/; revision=6010
2014-10-05Archive snapshot of work-in-progress on Django South migrations forRob Austein
legacy rpki and pubd databases. svn path=/branches/tk705/; revision=5987
2014-09-16Merge changes from branches/tk713 into branches/tk705. See #705, #713.Rob Austein
svn path=/branches/tk705/; revision=5956
2014-09-13Groundwork for Django ORM world conquest: sort out settings.py mess.Rob Austein
svn path=/branches/tk713/; revision=5948
2014-08-26Pull from trunk.Rob Austein
svn path=/branches/tk705/; revision=5936
2014-08-26Use named indexes to make it possible to add and remove them later.Rob Austein
May have finally gotten the right balance of indexes for basic use. Use various optimizations to let us load large data sets before the heat death of the universe. Some of these optimizations are dangerous, in the sense that if this script crashes while constructing the database, you'll have to rebuild the database from scratch. Probably ought to offer both this and the slow-but-safe approach as command line options, but: - The speed improvements look to be worth at least an order of magnitude in the runtime, - The speed improvements also prevent all the fsync() calls in the safe approach from turning the underlying filesystem into cream cheese while the script is running, and - This script is just a research anlysis tool to begin with. So I think the risk is justified in this case. svn path=/trunk/; revision=5934
2014-08-25Solve several minor problems at once by storing timestamps as ↵Rob Austein
seconds-since-epoch. svn path=/trunk/; revision=5933
2014-08-20Pull from trunk.Rob Austein
svn path=/branches/tk705/; revision=5931
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 05:28:27 +0000