aboutsummaryrefslogtreecommitdiff
path: root/rpki/irdb
AgeCommit message (Collapse)Author
2016-05-07Oops, TeX-style "--" numeric ranges in copyright comments are bad fitRob Austein
for XML. Apparently we were carefully changing just the XML files to use a single "-" to work around this. Enough already, just convert all copyright year ranges to single "-" and have done with this. svn path=/branches/tk705/; revision=6427
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-05-04A Farewell To Turtles.Rob Austein
svn path=/branches/tk705/; revision=6417
2016-05-02Checkpoint. Most of the certificate twiddling is done, but untested.Rob Austein
SIA URI twiddling still needs doing. svn path=/branches/tk705/; revision=6414
2016-04-26Handle non-existant root certificate correctly in rpkic extract_root_* ↵Rob Austein
commands. Fixes #808. svn path=/branches/tk705/; revision=6393
2016-04-23rpkic extract_root_certificate and extract_root_tal commands.Rob Austein
svn path=/branches/tk705/; revision=6378
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
2016-04-23Internal root sort of working, but only sort of. It's skipping theRob Austein
worker CA and going straight from the root to certifying children, which is wrong. However...this is far enough along that we can now remove all the rootd glorp, which is a worthwhile simplification in its own right, so checkpoint here, remove rootd glorp, then figure out what's wrong with the internal certificate hierarchy. rcynic does validate the current output, given a manually constructed TAL, even if the current output isn't quite what it should be. So we should also be able to sort out the new TAL generation code now. Yes, checking in a version that works for the wrong reasons is weird, but the current sort-of-broken state lets us confirm that the lower levels of the tree are still correct as we go, which would be much harder if the poor thing just sat there and whimpered until we had the new internal CA code completely finished. svn path=/branches/tk705/; revision=6376
2016-04-23Initial version of rpki.irdb.models.Root. May end up folding thisRob Austein
into an expanded rpki.irdb.models.Parent, as the two are more alike than I expected them to be, but archive this version first. svn path=/branches/tk705/; revision=6375
2016-04-14Fix bug introduced merging load_roa_requests patch from trunk, sigh.Rob Austein
svn path=/branches/tk705/; revision=6361
2016-04-12Pull rpkic <group> fix from trunk.Rob Austein
I think Subversion's merge tracking data is turning into cream cheese. svn path=/branches/tk705/; revision=6360
2016-03-30Still more UID-swapped file I/O, and general cleanup of UI file I/O.Rob Austein
GUI no longer uses (an additional layer of) temporary files between itself and zookeeper. Zookeeper file read methods now take file-like objects. rpkic now opens input files as the real UID, then reverts back to the effective UID before handing the resulting file off to the zookeeper. This caught several more instances of rpkic file I/O that were not doing the real/effective UID swap properly while loading CSV and VCard files. As far as I can tell from testing, this didn't break anything that worked before. Whether it fixed all the file I/O problems remains to be seen. svn path=/branches/tk705/; revision=6339
2016-03-29rpkic needs to do uid swapping around XML reads too.Rob Austein
rpki.irdb.zookeeper.etree_read(), the functions that call it, and the functions that call them, could all use a bit of refactoring. At this point pretty much ever caller is jumping through some hoop or another due to the way the code has evolved, and most of it could be simpler. svn path=/branches/tk705/; revision=6338
2016-03-21Rework rpkic setuid handling to something a bit more robust.Rob Austein
svn path=/branches/tk705/; revision=6322
2016-01-23Add multiple-URI TAL support to rcynicng.Rob Austein
Whack CA tools with a club until rcynicng works with our CA RRDP implementation. Add makemigrations target to top-level Makefile; this is a bit of a kludge, but sure beats doing this by hand. svn path=/branches/tk705/; revision=6230
2015-11-11Further simplify CRL and manifest code.Rob Austein
svn path=/branches/tk705/; revision=6166
2015-11-11Configure pylint to use the pylint-django plugin, which (mostly)Rob Austein
understands Django's exotic metaclasses, which in turn allows us to re-enable a number of pylint checks we had disabled. While we were at this, stripped out a bunch of old pylint pragmas, then added back the subset that were really needed. As usual with pylint, this turned up a few real bugs along with an awful lot of noise. svn path=/branches/tk705/; revision=6162
2015-11-10Use a lock to serialize rpkid tasks. Add temporary trace callRob Austein
sequence trace code to rpki.rpkidb.models to assist in simplifying some of the gratuitously complicated method call chains. Various trivial PyLint cleanups. svn path=/branches/tk705/; revision=6161
2015-10-28Now working with PostgreSQL.Rob Austein
svn path=/branches/tk705/; revision=6157
2015-10-26"Any programmer who fails to comply with the standard naming, formatting,Rob Austein
or commenting conventions should be shot. If it so happens that it is inconvenient to shoot him, then he is to be politely requested to recode his program in adherence to the above standard." -- Michael Spier, Digital Equipment Corporation svn path=/branches/tk705/; revision=6152
2015-10-24Switched from BlobField to BinaryField, but doesn't seem to haveRob Austein
helped the MySQL UTF-8 whining. Same Python code running with MySQL 5.5 doesn't do this, so it's some kind of upgrade trainwreck. BinaryField uses BLOBs too, just as one would expect, so in theory this can't be happening. So it's an undocumented feature. Yum. But we wanted to move to BinaryField anyway, and doing so doesn't seem to have made the problem worse, so committing the changes. svn path=/branches/tk705/; revision=6145
2015-10-20Change <self/> (etc) to <tenant/> (etc). "self" always was a reallyRob Austein
bad choice for something implemented in Python, holdover from an older specification, but Django ORM's troubles with "self" as a keyword argument were the last straw. Enough already. Backwards compatability should be a straightforward data migration. svn path=/branches/tk705/; revision=6134
2015-10-19Amputate old SQL code out of rpkid with a fire axe, replacing it withRob Austein
Django ORM. Duct tape and bailing wire everywhere, much clean-up left to do, but basic "make yamltest" suite runs. Much of the clean-up isn't worth doing until after revamping the I/O system, as it'll all change again at that point anyway. svn path=/branches/tk705/; revision=6127
2015-10-16PyLint. As usual, a lot of noise and a handful of real, albeit minor, bugs.Rob Austein
svn path=/branches/tk705/; revision=6123
2015-10-16Replace RRDP wired-in-URL kludge with proper support in OOB andRob Austein
left-right protocol and irdb and rpkidb models. Not fully working yet, RRDP URI isn't yet showing up everywhere it should, but this is probably more an indication that the previous hack was incomplete than that the replacement broke something. svn path=/branches/tk705/; revision=6120
2015-10-15Convert zookeeper to use new (IETF standards track I-D) out-of-bandRob Austein
configuration protocol instead of the crufty ancient "myrpki" version. Semantics largely unchanged, differences are primarily syntax and cleanup of historical baggage, but only the new protocol includes RRDP support, which we're gonna need. At some point we should write XSL transforms that map between the useful portions of the old protocol and the modern equivalent. svn path=/branches/tk705/; revision=6119
2015-10-15Update Zookeeper OOB setup XML code to something approximating current ↵Rob Austein
coding practice. svn path=/branches/tk705/; revision=6118
2015-10-15Extend rpki.irdb.zookeeper.etree_read() to support reading directlyRob Austein
from an etree_wrapper object, bypassing the filesystem entirely. svn path=/branches/tk705/; revision=6117
2015-10-09Baby steps towards using new rpkidb models. Now that SAX is gone,Rob Austein
clean up some of the corresponding mess. svn path=/branches/tk705/; revision=6105
2015-10-08Upgrade to new way of doing WSGI. Silence ten zillion deprecationRob Austein
warnings: Django 1.8 has a really obscure way of saying "Please don't import your models into your apps' __init__.py files, thanks." svn path=/branches/tk705/; revision=6101
2015-10-08Initial sorta-mostly-working with Django 1.8. Incredibly noisy due toRob Austein
incomprehensible advance depreciation warnings for Django 1.9. svn path=/branches/tk705/; revision=6100
2015-10-07@django.db.transaction.commit_on_success => @django.db.transaction.atomic.Rob Austein
svn path=/branches/tk705/; revision=6096
2014-11-26Pull from trunk.Rob Austein
svn path=/branches/tk705/; revision=6036
2014-11-08It may be time to pylint this code again.Rob Austein
svn path=/branches/tk705/; revision=6012
2014-10-03Whittle another chunk off the SAX monster.Rob Austein
svn path=/branches/tk705/; revision=5983
2014-09-21Add CMS goo to simple CMS client, remove need for async HTTP in Zookeeper.Rob Austein
svn path=/branches/tk705/; revision=5966
2014-09-16Merge changes from branches/tk713 into branches/tk705. See #705, #713.Rob Austein
svn path=/branches/tk705/; revision=5956
2014-09-14Start backing out all the old settings.configure() calls, which wereRob Austein
indeed masking the new migration stuff. yamltest now runs migrations as part of setting up test CAs; still need to decide whether running migrations in production is something that should be handled explicitly via rpki-manage or should be bundled into rpki-sql-setup. Old settings.configure() code still present as a trail of breadcrumbs to follow when backing out the rest of the tortuous startup sequence required by the old way of doing things. svn path=/branches/tk713/; revision=5950
2014-09-13Initial schema migration for irdb. I expected this to break yamltest,Rob Austein
but it sails blithely along, suggesting that I've forgotten some bit of startup voodoo that it's doing. Regardless, the migration should be harmless, and now we know that South thinks it can read the IRDB models, which is progress. The current requirement to have a valid rpki.conf before one can run rpki-manage schemamigration etc is a bit of a pain, may need to do something about that. svn path=/branches/tk713/; revision=5949
2014-09-13Groundwork for Django ORM world conquest: sort out settings.py mess.Rob Austein
svn path=/branches/tk713/; revision=5948
2014-08-06rootd with publciation protocol mostly working with modern IRDB.Rob Austein
svn path=/branches/tk705/; revision=5913
2014-07-18Pull changes from trunk.Rob Austein
svn path=/branches/tk705/; revision=5903
2014-07-18Pull XML namespaces and so forth from schemas where possible.Rob Austein
svn path=/trunk/; revision=5902
2014-07-07Checkpoint of SQL-based publish and withdraw processing. Doesn'tRob Austein
handle publish-with-overwrite correctly yet, not generating RRDP files yet, but passes "make test" without doing anything obviously insane. svn path=/branches/tk705/; revision=5887
2014-07-03Get rid of the <config/> element of the publication-control protocol, it's a ↵Rob Austein
historical relic. Update example PDUs for publication and publication-control protocols. svn path=/branches/tk705/; revision=5883
2014-07-03Convert to current IETF I-D version of publication protocol. See #705.Rob Austein
svn path=/branches/tk705/; revision=5881
2014-05-30Pylint did find a couple of trivial but real bugs under all the noise.Rob Austein
svn path=/trunk/; revision=5849
2014-05-29PyLintRob Austein
svn path=/trunk/; revision=5845
2014-05-29Python style police: instantiate exceptions before raising themRob Austein
(convert two-expression form of "raise" to one-expression form). svn path=/trunk/; revision=5844
2014-04-05Source tree reorg, phase 1. Almost everything moved, no file contents changed.Rob Austein
svn path=/branches/tk685/; revision=5757
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 08:37:41 +0000