aboutsummaryrefslogtreecommitdiff
path: root/rpki/rpkic.py
AgeCommit message (Collapse)Author
2016-05-07Oops, TeX-style "--" numeric ranges in copyright comments are bad fitRob Austein
for XML. Apparently we were carefully changing just the XML files to use a single "-" to work around this. Enough already, just convert all copyright year ranges to single "-" and have done with this. svn path=/branches/tk705/; revision=6427
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-05-05rootd migration finally working right. I think. Could stand more testing.Rob Austein
svn path=/branches/tk705/; revision=6421
2016-04-26Handle non-existant root certificate correctly in rpkic extract_root_* ↵Rob Austein
commands. Fixes #808. svn path=/branches/tk705/; revision=6393
2016-04-26Further consolidation of config file parsing, command line parsing,Rob Austein
and logging setup. Most programs now use the unified mechanism, although there are still a few holdouts: the GUI, which is a special case because it has no command line, and the rpki-rtr program, which, for historical reasons has its own implementation of the logging setup infrastructure. svn path=/branches/tk705/; revision=6390
2016-04-23rpkic extract_root_certificate and extract_root_tal commands.Rob Austein
svn path=/branches/tk705/; revision=6378
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
2016-04-23Initial version of rpki.irdb.models.Root. May end up folding thisRob Austein
into an expanded rpki.irdb.models.Parent, as the two are more alike than I expected them to be, but archive this version first. svn path=/branches/tk705/; revision=6375
2016-03-30Clean up and simplify rpkic privilege-dropping code. All sudo voodooRob Austein
is now handled in the outermost script, before rpki.rpkic is even loaded; rpki.rpkic just assumes that euid and ruid have been set up correctly and swaps them temporarily when it needs to do file I/O. svn path=/branches/tk705/; revision=6340
2016-03-30Still more UID-swapped file I/O, and general cleanup of UI file I/O.Rob Austein
GUI no longer uses (an additional layer of) temporary files between itself and zookeeper. Zookeeper file read methods now take file-like objects. rpkic now opens input files as the real UID, then reverts back to the effective UID before handing the resulting file off to the zookeeper. This caught several more instances of rpkic file I/O that were not doing the real/effective UID swap properly while loading CSV and VCard files. As far as I can tell from testing, this didn't break anything that worked before. Whether it fixed all the file I/O problems remains to be seen. svn path=/branches/tk705/; revision=6339
2016-03-29rpkic needs to do uid swapping around XML reads too.Rob Austein
rpki.irdb.zookeeper.etree_read(), the functions that call it, and the functions that call them, could all use a bit of refactoring. At this point pretty much ever caller is jumping through some hoop or another due to the way the code has evolved, and most of it could be simpler. svn path=/branches/tk705/; revision=6338
2016-03-21[6322] broke "make test", fix by allowing rpkic to run with warningRob Austein
when RPKI_USER not found. svn path=/branches/tk705/; revision=6323
2016-03-21Rework rpkic setuid handling to something a bit more robust.Rob Austein
svn path=/branches/tk705/; revision=6322
2015-11-11Configure pylint to use the pylint-django plugin, which (mostly)Rob Austein
understands Django's exotic metaclasses, which in turn allows us to re-enable a number of pylint checks we had disabled. While we were at this, stripped out a bunch of old pylint pragmas, then added back the subset that were really needed. As usual with pylint, this turned up a few real bugs along with an awful lot of noise. svn path=/branches/tk705/; revision=6162
2015-10-26"Any programmer who fails to comply with the standard naming, formatting,Rob Austein
or commenting conventions should be shot. If it so happens that it is inconvenient to shoot him, then he is to be politely requested to recode his program in adherence to the above standard." -- Michael Spier, Digital Equipment Corporation svn path=/branches/tk705/; revision=6152
2015-10-22First cut at replacing rpkid's HTTP and I/O system with Tornado. NotRob Austein
quite working perfectly yet (cron is a bit wonky) but manages to produce an initial set of ROAs without thowing any exceptions, and code is already much cleaner than the old callback-based horror. svn path=/branches/tk705/; revision=6139
2015-10-20Change <self/> (etc) to <tenant/> (etc). "self" always was a reallyRob Austein
bad choice for something implemented in Python, holdover from an older specification, but Django ORM's troubles with "self" as a keyword argument were the last straw. Enough already. Backwards compatability should be a straightforward data migration. svn path=/branches/tk705/; revision=6134
2015-10-16PyLint. As usual, a lot of noise and a handful of real, albeit minor, bugs.Rob Austein
svn path=/branches/tk705/; revision=6123
2015-10-10Merge what's left of rpki.xml_utils into what's left ofRob Austein
rpki.left_right and start pruning the result down to figure out how much really needs to be ported over to the new models. svn path=/branches/tk705/; revision=6108
2015-10-08Upgrade to new way of doing WSGI. Silence ten zillion deprecationRob Austein
warnings: Django 1.8 has a really obscure way of saying "Please don't import your models into your apps' __init__.py files, thanks." svn path=/branches/tk705/; revision=6101
2015-10-08Initial sorta-mostly-working with Django 1.8. Incredibly noisy due toRob Austein
incomprehensible advance depreciation warnings for Django 1.9. svn path=/branches/tk705/; revision=6100
2015-10-07Discard Django router in favor of separate settings files tailored toRob Austein
particular programs (see #713). svn path=/branches/tk705/; revision=6098
2014-11-08Clean up unused exceptions left over from some refactoring expeditionRob Austein
or another. svn path=/branches/tk705/; revision=6013
2014-11-07Yet another SAX -> ETree nit.Rob Austein
svn path=/branches/tk705/; revision=6009
2014-11-03Another SAX -> ETree fix.Rob Austein
svn path=/branches/tk705/; revision=6003
2014-10-05Pull from trunk.Rob Austein
svn path=/branches/tk705/; revision=5988
2014-10-05Address incompatible API changes in Django 1.7: apps.populate(),Rob Austein
MIDDLEWARE_CLASSES. Fixes #717. svn path=/trunk/; revision=5986
2014-09-14Start backing out all the old settings.configure() calls, which wereRob Austein
indeed masking the new migration stuff. yamltest now runs migrations as part of setting up test CAs; still need to decide whether running migrations in production is something that should be handled explicitly via rpki-manage or should be bundled into rpki-sql-setup. Old settings.configure() code still present as a trail of breadcrumbs to follow when backing out the rest of the tortuous startup sequence required by the old way of doing things. svn path=/branches/tk713/; revision=5950
2014-09-13Groundwork for Django ORM world conquest: sort out settings.py mess.Rob Austein
svn path=/branches/tk713/; revision=5948
2014-05-30Pylint did find a couple of trivial but real bugs under all the noise.Rob Austein
svn path=/trunk/; revision=5849
2014-05-29PyLintRob Austein
svn path=/trunk/; revision=5845
2014-05-28Rework logging initialization code.Rob Austein
svn path=/trunk/; revision=5836
2014-04-05Source tree reorg, phase 1. Almost everything moved, no file contents changed.Rob Austein
svn path=/branches/tk685/; revision=5757
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 07:33:33 +0000