aboutsummaryrefslogtreecommitdiff
path: root/rcynic
AgeCommit message (Collapse)Author
2012-05-22First cut at something with sensible pages and a menu bar.Rob Austein
svn path=/trunk/; revision=4505
2012-05-21CleanupRob Austein
svn path=/trunk/; revision=4504
2012-05-21Replacement for show.xsl and show.awk.Rob Austein
svn path=/trunk/; revision=4503
2012-05-21Read from stdin if no filenames given.Rob Austein
svn path=/trunk/; revision=4502
2012-05-19We already use Python pretty heavily in the relying party tools, soRob Austein
start phasing out the silly XSL + AWK hacks. svn path=/trunk/; revision=4501
2012-05-19TypoRob Austein
svn path=/trunk/; revision=4500
2012-05-19Refactor into something a bit easier to maintain and extend. AmongRob Austein
other things, the nasty code to generate HTML tables is now a set of class methods, rather than being replicated inline for each table. svn path=/trunk/; revision=4499
2012-05-18Profiling revealed some very silly design decisions in this script, soRob Austein
fixed those. Also tweaked slightly to use lxml.etree when available, as it's significantly faster than the default pure-Python xml.etree. This script could still use some serious cleanup. svn path=/trunk/; revision=4498
2012-05-16Nail Y axis of graphs at zero. Color coding works better with areasRob Austein
than with lines, so use areas for connection times. svn path=/trunk/; revision=4497
2012-05-16Generate putitively useful error message instead of obscure backtraceRob Austein
if we can't find rrdtool. svn path=/trunk/; revision=4496
2012-05-15Fencepost error parsing options.Rob Austein
svn path=/trunk/; revision=4493
2012-05-15Clean up option parsing.Rob Austein
svn path=/trunk/; revision=4492
2012-05-15rrdtool-based graphing mostly working, needs cleanup. For now thisRob Austein
only supports PNG; will fix this eventually, but not today. This edit includes backwards-incompatible changes to a few undocumented options that, as far as I know, nobody but me ever uses, and I only use them when preparing presentation slides. These options will probably change again as part of the above-mentioned cleanup. svn path=/trunk/; revision=4491
2012-05-07Update TALs.Rob Austein
svn path=/trunk/; revision=4477
2012-04-16Install rcynic.py instead of rcynic.xsl. Disable automatic crontabRob Austein
editing in installation scripts, it doesn't do the right thing for common case and would be better as part of an installation and configuration wizard anyway. Closes #234 and #229. svn path=/trunk/; revision=4426
2012-04-16Clean up README files. Mostly this means changing them to pointers toRob Austein
the real consolidated documentation. Delete old Doxygen-based rpkid manual and stuff that went with it, while retaining ability to generate Doxygen manual of internals for the libraries. This closes #232. svn path=/trunk/; revision=4424
2012-03-21Shut up about skipped rsync connections when rsync is disabled.Rob Austein
svn path=/trunk/; revision=4407
2012-03-09Move AKI checks to precede signature check, as AKI checks are cheaper.Rob Austein
svn path=/trunk/; revision=4392
2012-03-09Fix fencepost error in walk_ctx_loop_next(). This closes #219.Rob Austein
svn path=/trunk/; revision=4391
2012-03-07Start collecting data on how long it takes to run the bits we careRob Austein
about on the relying party side (time to fetch, time to validate). svn path=/trunk/; revision=4389
2012-03-07Break mirroring out of torrent creation, as they may need to run onRob Austein
very different schedules. svn path=/trunk/; revision=4388
2012-03-06Change default host for transmission RPC connection from "localhost"Rob Austein
to "127.0.0.1". Feh. svn path=/trunk/; revision=4387
2012-03-02Add lockfile support, to let us serialize rcynic runs. AllowRob Austein
configuration of our idea of the unauthenticated directory independent of rcynic, to avoid interfering with chroot configuration. svn path=/trunk/; revision=4386
2012-03-02Add keep-lockfile, to simplify process queuing.Rob Austein
svn path=/trunk/; revision=4385
2012-03-02First smoke test of generation and upload code.Rob Austein
svn path=/trunk/; revision=4384
2012-03-01Add seed ratio tweak.Rob Austein
svn path=/trunk/; revision=4383
2012-03-01Record failure when we can't even parse a trust anchor, much lessRob Austein
check it (eg, recent AfriNIC incident). Fixes #187. svn path=/trunk/; revision=4382
2012-03-01Work around atomic-rename problem using OpenSSH-specific extension.Rob Austein
svn path=/trunk/; revision=4381
2012-03-01Ignore atomic installation issue for now. Maybe ask author ofRob Austein
paramiko about it some day. svn path=/trunk/; revision=4380
2012-03-01Generation of new torrents almost working, except that SFTP doesn'tRob Austein
support atomic rename without a protocol extension which paramiko doesn't support (yet?). Yeargh. svn path=/trunk/; revision=4379
2012-02-29CheckpointRob Austein
svn path=/trunk/; revision=4378
2012-02-29CheckpointRob Austein
svn path=/trunk/; revision=4376
2012-02-28CheckpointRob Austein
svn path=/trunk/; revision=4375
2012-02-28CheckpointRob Austein
svn path=/trunk/; revision=4374
2012-02-28Checkpoint of rcynic-over-BitTorrent hack, using transmission-daemonRob Austein
as the BitTorrent engine. This is a work in progress, and doesn't yet include the hacks either to generate torrents or to follow multiple torrents in parallel. svn path=/trunk/; revision=4372
2012-02-26Allow configuration of authenticated and unauthenticated directoriesRob Austein
from command line, to simplify use with alternate fetch mechanisms. svn path=/trunk/; revision=4371
2012-02-15Factor XML generation code out of main(), and don't overwrite old XMLRob Austein
file when we can't run to completion, eg, when some other process is sitting on our lock file. This closes #184. svn path=/trunk/; revision=4335
2012-02-14Downgrade "AIA doesn't match issuer" to a warning. Closes #188.Rob Austein
svn path=/trunk/; revision=4334
2012-02-14Apparently an old version of the res-certs specification allowedRob Austein
1024-bit RSA keys for EE certificates, or so some of the implementors believe, so downgrade that error to a warning for now. This is configurable using the "allow-1024-bit-ee-key" option and defaults to allowing such keys with a warning for now, but that default is subject to change. svn path=/trunk/; revision=4331
2012-02-03"Multiple rsync URIs in extension" should be warning, not error.Rob Austein
svn path=/trunk/; revision=4284
2012-02-02Add --suppress_backup_whining: Suppress whining about bad backupRob Austein
objects when the current objects at the same URL are OK. Enabled (whining suppressed) by default, use the switch if you prefer the old behavior. See #177. svn path=/trunk/; revision=4281
2012-02-02Tweak AIA/SIA/CRLDP checking again: don't accidently reject just forRob Austein
having an alternate URI, do check the whole extension rather than stopping on first success. svn path=/trunk/; revision=4280
2012-02-01AKI checks still weren't quite right.Rob Austein
svn path=/trunk/; revision=4277
2012-01-31Refactor CMS checks, which have gotten complex enough to be worthRob Austein
attempting to share between different kinds of signed objects. This closes #82. svn path=/trunk/; revision=4276
2012-01-31AKI extension is optional for self-signed RPKI certificates.Rob Austein
svn path=/trunk/; revision=4275
2012-01-26Back out over-zealous change introduced as part of [4267] --Rob Austein
apparently ASID extensions are legal in EE certificates for ROAs, although given the other constraints I can't think of a sane reason why this is allowed when so much else is nailed down. svn path=/trunk/; revision=4269
2012-01-26Conformance: Check SKI value.Rob Austein
svn path=/trunk/; revision=4268
2012-01-26Conformance: Check CMS SID against EE SKI in ROAs.Rob Austein
Use ASN1_INTEGER_cmp() instead of ASN1_INTEGER_get(), the latter's behavior is too quirky. Add config variable allowing compatability with manifest EE certs that have no SIA extension, which is a technical violation of the spec, albeit a harmless one as far as I can tell; at present, the default for this variable allows these manifests, at some point the default will flip to disallow, as a first step towards phasing this out. svn path=/trunk/; revision=4267
2012-01-26Conformance tests: tighter checking of AIA and SIA extension values.Rob Austein
svn path=/trunk/; revision=4265
2012-01-25Conformance testing: negative serial numbers, wrong date encoding.Rob Austein
svn path=/trunk/; revision=4264
generated by cgit v1.2.3 (git 2.25.1) at 2025-06-03 09:43:05 +0000