aboutsummaryrefslogtreecommitdiff
path: root/rcynic
AgeCommit message (Expand)Author
2014-03-06Clang found a few issues.Rob Austein
2014-02-27More router certificate checks.Rob Austein
2014-02-26Add EKU checks for BGPSEC router certificates, now that we have aRob Austein
2014-01-22Add --help and long option names to rcynic.Rob Austein
2014-01-10Even more getopt -> argparse.Rob Austein
2014-01-10Still more getopt -> argparse.Rob Austein
2014-01-09Update more copyrights, clean up module doc blocks.Rob Austein
2013-12-19Rewrite all uses of readdir() to avoid using on dirent d_type field.Rob Austein
2013-12-17Handle subprocess exit codes more gracefully.Rob Austein
2013-11-23Emit better(?) error message when we hit can't open a TAL file. Fixes #113.Rob Austein
2013-11-22Add object count table, per ancient request from Keyur. See #10.Rob Austein
2013-11-22Conformance: Make sure CMS contains exactly one certificate and thatRob Austein
2013-11-22Check certificate policy for qualifiers: allow id-qt-cps with aRob Austein
2013-11-22Add NIDs for OIDs OpenSSL doesn't know about, convert all use ofRob Austein
2013-11-21TypoRob Austein
2013-11-07More precise checking of attributes in CMS SignerInfos. Fixes #644.Rob Austein
2013-11-07Check manifest validity dates against its EE certificate. Fixes #651.Rob Austein
2013-11-07Don't allow EKU in signed objects. Fixes #645.Rob Austein
2013-11-07JPNIC is now under APNIC testbed, so remove old jpnic.tal.Rob Austein
2013-11-06Check ROA max prefix length against prefix length. Fixes #648.Rob Austein
2013-11-06Check certificates for non-null SAFI. While we're at it, check forRob Austein
2013-11-06Check for manifestNumber too big. Fixes #652.Rob Austein
2013-11-06Check for certificate serial number too big. Fixes #642.Rob Austein
2013-11-06RFC 5280 restriction to 20 octets is 20 octets in two's complement, soRob Austein
2013-10-09Fix inconsistent names for rpki-rtr's data directory. Fixes #635.Rob Austein
2013-09-09Send mail from rcynic-cron to root, not rcynic. Closes #610.Rob Austein
2013-07-30Log a warning if we accept an EE certificate whenRob Austein
2013-07-18GCC warning.Rob Austein
2013-07-17Sigh, RIPE's web page is confusing, going with what Tim said on theRob Austein
2013-07-17RIPE's hosted pilot (different from RIPE's non-hosted pilot, which isRob Austein
2013-07-16Save rcynic-html for last in rcynic-cron, as it's less critical thanRob Austein
2013-07-16Outdated comment.Rob Austein
2013-07-06Switch rpki-rtr sockets directory from being owned by "nobody" toRob Austein
2013-07-03APNIC's testbed TAL.Rob Austein
2013-06-27Report what we're doing before blocking select().Rob Austein
2013-06-27Flip default for allow-object-not-in-manifest to false.Rob Austein
2013-06-27Don't whine about stale CRLs and manifests that are only stale becauseRob Austein
2013-06-19Name correction from JPNIC.Rob Austein
2013-06-18".der" is not a legal filename suffix for a trust anchor certificate.Rob Austein
2013-06-14Pruning now keys off the validation_status database rather than theRob Austein
2013-06-14Experimental feature: skip rsync_tree() if we have a valid manifestRob Austein
2013-06-14[5389] removed code that installed default TALs as side effect ofRob Austein
2013-06-11Add mild degree of parallelism to default rcynic configuration.Rob Austein
2013-06-10Switch default configuration to use trust-anchor-directory.Rob Austein
2013-06-07NitRob Austein
2013-06-07Forgot a globfree().Rob Austein
2013-06-06Consolidate to a single event loop, queue up all TALs at start. ThisRob Austein
2013-06-06Type signatures of rsync_*() and task_*() frameworkss should not be soRob Austein
2013-06-06Reorganize TA handling code, add trust-anchor-directory directive.Rob Austein
2013-06-04We missed updating rcynic-cron when rpkigui-rcynic moved toRob Austein