aboutsummaryrefslogtreecommitdiff
path: root/rp
AgeCommit message (Collapse)Author
2018-01-09[apnic-deprecated-tas] remove deprecated apnic trust anchorsTom Harrison
2017-01-14ARIN now allows download of their TAL without NDA, so include it.Rob Austein
2017-01-12Kludge to show TAL filename as "hostname" for TAL-related errors.Rob Austein
2016-07-19Implement new recommendation for HTTPS validation: try with validationRob Austein
enabled, if that fails, whine and retry with validation disabled. svn path=/branches/tk705/; revision=6448
2016-06-17Disable email to root when a Django exception occurs, and log it to the ↵Michael Elkins
apache log instead. Make the GUI log level configurable via rpki.conf svn path=/branches/tk705/; revision=6444
2016-06-09Fix badly written XXX_Driver.execute() methods: calling sequence isRob Austein
specified by DB API, just use it, rather than getting clever with variable-length argument sequences. svn path=/branches/tk705/; revision=6442
2016-06-08Bugfixes from Andrew Bradford (thanks!).Rob Austein
svn path=/branches/tk705/; revision=6441
2016-05-26Remove gratuitous None values from status database -- this appears toRob Austein
have been incomplete conversion from an older internal API, back when we still had Generation objects. In any case, status="None" in rcynic.xml is wrong, and has been giving rcynic-html indigestion. svn path=/branches/tk705/; revision=6440
2016-05-25Make rpkigui-import-routes use logging settings from /etc/rpki.conf instead ↵Michael Elkins
of rpki.django_settings.gui Create new rpki.django_settings.gui_script Django settings file with a minimal subset required to use the ORM, to be used in auxillary scripts Add [rpkigui-import-routes] section to rpki.conf Change log level of warning about AS value errors in routeviews dumps to DEBUG svn path=/branches/tk705/; revision=6439
2016-05-24More http:// => https:// changes in documentation links.Rob Austein
svn path=/branches/tk705/; revision=6436
2016-05-07Oops, TeX-style "--" numeric ranges in copyright comments are bad fitRob Austein
for XML. Apparently we were carefully changing just the XML files to use a single "-" to work around this. Enough already, just convert all copyright year ranges to single "-" and have done with this. svn path=/branches/tk705/; revision=6427
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-05-07Copyright notice update, first round: files that are entirely newRob Austein
since copyright holder of record changed. svn path=/branches/tk705/; revision=6425
2016-04-26Convert RP utilities to use common config/argparse/logging setup.Rob Austein
svn path=/branches/tk705/; revision=6392
2016-04-26Further consolidation of config file parsing, command line parsing,Rob Austein
and logging setup. Most programs now use the unified mechanism, although there are still a few holdouts: the GUI, which is a special case because it has no command line, and the rpki-rtr program, which, for historical reasons has its own implementation of the logging setup infrastructure. svn path=/branches/tk705/; revision=6390
2016-04-24Disable TALs for a couple more testbeds as we edge towards consideringRob Austein
the default configuration to be production rather than testing.w svn path=/branches/tk705/; revision=6388
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
2016-04-23Internal root sort of working, but only sort of. It's skipping theRob Austein
worker CA and going straight from the root to certifying children, which is wrong. However...this is far enough along that we can now remove all the rootd glorp, which is a worthwhile simplification in its own right, so checkpoint here, remove rootd glorp, then figure out what's wrong with the internal certificate hierarchy. rcynic does validate the current output, given a manually constructed TAL, even if the current output isn't quite what it should be. So we should also be able to sort out the new TAL generation code now. Yes, checking in a version that works for the wrong reasons is weird, but the current sort-of-broken state lets us confirm that the lower levels of the tree are still correct as we go, which would be much harder if the poor thing just sat there and whimpered until we had the new internal CA code completely finished. svn path=/branches/tk705/; revision=6376
2016-04-21Update the GUI to work with the new rcynicdb.Michael Elkins
svn path=/branches/tk705/; revision=6365
2016-04-03Move more programs to integrated config+argparse framework.Rob Austein
svn path=/branches/tk705/; revision=6346
2016-04-02Teach rcynicng to read command line defaults from rpki.conf. Some ofRob Austein
this takes the form of new rpki.config.parser methods which we may want to use in other programs, particularly the daemons. svn path=/branches/tk705/; revision=6345
2016-03-21[6322] broke "make test", fix by allowing rpkic to run with warningRob Austein
when RPKI_USER not found. svn path=/branches/tk705/; revision=6323
2016-03-20Clean up rcynic installation, run rcynicng instead of (old) rcynic, clean up ↵Rob Austein
rcynic-cron. NB: rpkigui-rcynic is currently broken and is therefore disabled in rcynic-cron. This needs to be fixed, but it was broken on this branch in any case, no real point in holding up the rest of this waiting for it. svn path=/branches/tk705/; revision=6321
2016-03-19Internal sudo wrapper to deal with PostgreSQL access control issues.Rob Austein
svn path=/branches/tk705/; revision=6319
2016-03-19Pull changes from trunk. Closes #784.Rob Austein
svn path=/branches/tk705/; revision=6316
2016-03-03Speed up snapshot loading and cleanup with huge data sets.Rob Austein
svn path=/branches/tk705/; revision=6307
2016-03-01Fix bug introduced while refactoring bulk SQL insertion.Rob Austein
svn path=/branches/tk705/; revision=6306
2016-03-01Somewhat cleaner version of bulk snapshot loader.Rob Austein
svn path=/branches/tk705/; revision=6305
2016-03-01Much faster loading of large RRDP snapshots. Code is messy and needsRob Austein
cleanup, but runs more than an order of magnitude faster in common case where the vast majority of objects in the snapshot are new, and (in theory) should not be significantly slower than what we were doing already in more complicated mixtures. svn path=/branches/tk705/; revision=6303
2016-02-29Doh, "session_id", not "uuid".Rob Austein
svn path=/branches/tk705/; revision=6302
2016-02-29Tighter syntax checks on snapshots and deltas, in lieu of RelaxNG validation.Rob Austein
svn path=/branches/tk705/; revision=6301
2016-02-29Use lxml.etree.iterparse() for delta files too.Rob Austein
svn path=/branches/tk705/; revision=6300
2016-02-29Stash unparsed XML in a temporary file so we can get off the phoneRob Austein
quickly when processing large snapshots which take (much) longer to load into SQL than to pull down from the net. Given this change, lxml.etree.iterparse() is a more suitable API than lxml.etree.XMLPullParser, so switch. This version can download and process a 120,000 object snapshot, albeit hideously slowly. svn path=/branches/tk705/; revision=6299
2016-02-27Helps to get the field names right when cleaning up.Rob Austein
svn path=/branches/tk705/; revision=6298
2016-02-27Use an incremental parser for snapshot files.Rob Austein
svn path=/branches/tk705/; revision=6297
2016-02-19Add rp_key_dir, mostly to simplify testing with yamltest.Rob Austein
svn path=/branches/tk705/; revision=6271
2016-02-18Dedupe to avoid backing up the same database more than once.Rob Austein
svn path=/branches/tk705/; revision=6268
2016-02-17Add PostgreSQL and SQLite3 backup templates.Rob Austein
svn path=/branches/tk705/; revision=6267
2016-02-16Tweak file locations for root RPKI key, certificate, and TAL.Rob Austein
svn path=/branches/tk705/; revision=6265
2016-02-16Promote rpki-generate-root-certificate to supported status.Rob Austein
svn path=/branches/tk705/; revision=6264
2016-02-16Finally builds and installs properly on Ubuntu again;Rob Austein
no serious runtime testing yet. svn path=/branches/tk705/; revision=6262
2016-02-15Snapshot before whacking migrations.Rob Austein
svn path=/branches/tk705/; revision=6259
2016-02-15First round of silly bugfixes.Rob Austein
svn path=/branches/tk705/; revision=6258
2016-02-15Checkpoint while shuffling stuff around for new installation scheme.Rob Austein
Installation of everything but Debian packages is probably broken, and Debian packages are too at the moment due to (probably) minor errors in buildtools/debian-skeleton, but enough has changed that this really needs a snapshot checked in for backup. svn path=/branches/tk705/; revision=6257
2016-02-08Add note on TLS certificate validation.Rob Austein
svn path=/branches/tk705/; revision=6241
2016-01-29Tweaks to handle large RRDP deltas better.Rob Austein
svn path=/branches/tk705/; revision=6240
2016-01-29Whack rcynicng to produce an XML file which rcynic-html can parse:Rob Austein
needs further work, but produces somewhat-useful output now. Start merging command line argument (argparse) and config file (ConfigParser) support into a unified library module, in an attempt to reduce the amount of code duplication and reign in some of the configuration chaos. Trigger for this is all of the RP programs now needing SQL configuration. Whack rpki.rcynicdb.models to work with PostgreSQL, which has length restrictions on indexed columns. svn path=/branches/tk705/; revision=6239
2016-01-28Add HTTPS timeout control.Rob Austein
svn path=/branches/tk705/; revision=6238
2016-01-26Add (mostly) backwards-compatible iterator which handles findingRob Austein
authenticated RP data via either os.walk() or Django ORM database traversal. svn path=/branches/tk705/; revision=6236
2016-01-23Cleanup.Rob Austein
svn path=/branches/tk705/; revision=6235
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 05:31:36 +0000