aboutsummaryrefslogtreecommitdiff
path: root/rpki/rpkid.py
AgeCommit message (Collapse)Author
2016-06-26Log resynchronization details.Rob Austein
svn path=/branches/tk705/; revision=6445
2016-05-07Oops, TeX-style "--" numeric ranges in copyright comments are bad fitRob Austein
for XML. Apparently we were carefully changing just the XML files to use a single "-" to work around this. Enough already, just convert all copyright year ranges to single "-" and have done with this. svn path=/branches/tk705/; revision=6427
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-04-29lxml doesn't like None as an attribute value, so use empty string whenRob Austein
reporting AIA extension of a root certificate. See #809. svn path=/branches/tk705/; revision=6412
2016-04-26Further consolidation of config file parsing, command line parsing,Rob Austein
and logging setup. Most programs now use the unified mechanism, although there are still a few holdouts: the GUI, which is a special case because it has no command line, and the rpki-rtr program, which, for historical reasons has its own implementation of the logging setup infrastructure. svn path=/branches/tk705/; revision=6390
2016-04-24Add exception handler of last resort to servers, in an attempt to getRob Austein
startup error messages logged properly if at all possible. See #806. svn path=/branches/tk705/; revision=6387
2016-04-23Internal root working with vastly-simplified implementation.Rob Austein
svn path=/branches/tk705/; revision=6379
2016-04-23Internal root sort of working, but only sort of. It's skipping theRob Austein
worker CA and going straight from the root to certifying children, which is wrong. However...this is far enough along that we can now remove all the rootd glorp, which is a worthwhile simplification in its own right, so checkpoint here, remove rootd glorp, then figure out what's wrong with the internal certificate hierarchy. rcynic does validate the current output, given a manually constructed TAL, even if the current output isn't quite what it should be. So we should also be able to sort out the new TAL generation code now. Yes, checking in a version that works for the wrong reasons is weird, but the current sort-of-broken state lets us confirm that the lower levels of the tree are still correct as we go, which would be much harder if the poor thing just sat there and whimpered until we had the new internal CA code completely finished. svn path=/branches/tk705/; revision=6376
2016-04-23Upon further analysis: Roots and Turtles don't need handles, onlyRob Austein
Parents do, because Roots will be uniquely named by reference to their associated Parent. So move the handle back to Parent. svn path=/branches/tk705/; revision=6370
2016-04-23Swing CA model to link to Turtle instead of Parent.Rob Austein
svn path=/branches/tk705/; revision=6369
2016-04-03Move more programs to integrated config+argparse framework.Rob Austein
svn path=/branches/tk705/; revision=6346
2016-02-26Using a Tornado yield dictionary is elegant (not to mention cute), butRob Austein
using a single bulk IRDB query for all the child data that UpdateChildrenTask needs is a better solution. svn path=/branches/tk705/; revision=6295
2016-02-26Tweak default rpkid timing parameters.Rob Austein
svn path=/branches/tk705/; revision=6293
2016-02-25Major simplifcation of rpkid's internal tasking system.Rob Austein
svn path=/branches/tk705/; revision=6289
2016-02-21Some rpkid tweaks to work better with large data sets.Rob Austein
svn path=/branches/tk705/; revision=6276
2016-02-20Apparently we have to set the timeout in the HTTPRequest object.Rob Austein
svn path=/branches/tk705/; revision=6275
2016-02-19Task system tweaks, see if this fixes hangs on postponed tasks.Rob Austein
svn path=/branches/tk705/; revision=6273
2016-02-19Add http-client-timeout parameter, default to something more patientRob Austein
than one would use in an interactive program. svn path=/branches/tk705/; revision=6272
2015-11-12Add .__repr__() methods to rpkidb models. RewriteRob Austein
.publish_world_now() to something a little less whacky. Consolidate fix for singleton URIs in SIA fields. svn path=/branches/tk705/; revision=6170
2015-11-12More useful log messages on PDU handling exceptions.Rob Austein
Tweak publication callback mechanism to use uri instead of tag. svn path=/branches/tk705/; revision=6169
2015-11-11Configure pylint to use the pylint-django plugin, which (mostly)Rob Austein
understands Django's exotic metaclasses, which in turn allows us to re-enable a number of pylint checks we had disabled. While we were at this, stripped out a bunch of old pylint pragmas, then added back the subset that were really needed. As usual with pylint, this turned up a few real bugs along with an awful lot of noise. svn path=/branches/tk705/; revision=6162
2015-11-10Use a lock to serialize rpkid tasks. Add temporary trace callRob Austein
sequence trace code to rpki.rpkidb.models to assist in simplifying some of the gratuitously complicated method call chains. Various trivial PyLint cleanups. svn path=/branches/tk705/; revision=6161
2015-10-26"Any programmer who fails to comply with the standard naming, formatting,Rob Austein
or commenting conventions should be shot. If it so happens that it is inconvenient to shoot him, then he is to be politely requested to recode his program in adherence to the above standard." -- Michael Spier, Digital Equipment Corporation svn path=/branches/tk705/; revision=6152
2015-10-25Use a weakref dictionary to hold the HTTP client serializationRob Austein
database, so the garbage collector can clean it up automatically. svn path=/branches/tk705/; revision=6148
2015-10-23Serialize HTTP requests to the same URL NetLoc, to comply with theRob Austein
up-down protocol specification and, more importantly, avoid spurious CMS Replay errors. svn path=/branches/tk705/; revision=6144
2015-10-23Task system now working with Tornado. Two new problems: some kind ofRob Austein
UTF-8 whining on what are supposed to be binary fields that's probably the result of a MySQL upgrade, and CMS Replay exceptions due to the pseudo-random order in which HTTP client connections run in Tornado. The UTF-8 mess is probably a good reason to change over to Django's native binary field type, which we were going to want to do anyway. The CMS Replay problem is not Tornado's fault: we probably would have seen it in the old code were it not for an accidental side effect of a long-since-abandoned attempt to use persistent HTTP connections. The fix is probably to serialize requests to a particular host using use a tornaodo.queue.Queue() object, or something like that. svn path=/branches/tk705/; revision=6143
2015-10-22Lint cleanup.Rob Austein
svn path=/branches/tk705/; revision=6140
2015-10-22First cut at replacing rpkid's HTTP and I/O system with Tornado. NotRob Austein
quite working perfectly yet (cron is a bit wonky) but manages to produce an initial set of ROAs without thowing any exceptions, and code is already much cleaner than the old callback-based horror. svn path=/branches/tk705/; revision=6139
2015-10-20Change <self/> (etc) to <tenant/> (etc). "self" always was a reallyRob Austein
bad choice for something implemented in Python, holdover from an older specification, but Django ORM's troubles with "self" as a keyword argument were the last straw. Enough already. Backwards compatability should be a straightforward data migration. svn path=/branches/tk705/; revision=6134
2015-10-19Amputate old SQL code out of rpkid with a fire axe, replacing it withRob Austein
Django ORM. Duct tape and bailing wire everywhere, much clean-up left to do, but basic "make yamltest" suite runs. Much of the clean-up isn't worth doing until after revamping the I/O system, as it'll all change again at that point anyway. svn path=/branches/tk705/; revision=6127
2015-10-16PyLint. As usual, a lot of noise and a handful of real, albeit minor, bugs.Rob Austein
svn path=/branches/tk705/; revision=6123
2015-10-16.delete() -> .destroy() to avoid built-in ORM .delete() methods.Rob Austein
svn path=/branches/tk705/; revision=6122
2015-10-16Replace RRDP wired-in-URL kludge with proper support in OOB andRob Austein
left-right protocol and irdb and rpkidb models. Not fully working yet, RRDP URI isn't yet showing up everywhere it should, but this is probably more an indication that the previous hack was incomplete than that the replacement broke something. svn path=/branches/tk705/; revision=6120
2015-10-14Checkpoint.Rob Austein
svn path=/branches/tk705/; revision=6115
2015-10-13Checkpoint.Rob Austein
svn path=/branches/tk705/; revision=6114
2015-10-12Checkpoint while porting old create/set actions to ORM models.Rob Austein
svn path=/branches/tk705/; revision=6113
2015-10-11Checkpoint updated XML code.Rob Austein
svn path=/branches/tk705/; revision=6112
2015-10-10Merge what's left of rpki.xml_utils into what's left ofRob Austein
rpki.left_right and start pruning the result down to figure out how much really needs to be ported over to the new models. svn path=/branches/tk705/; revision=6108
2015-10-10Clean still more old XML-related classes. Rob Austein
At this point, all the classes remaining in rpki.left_right pertain are the pre-Django equivalents of models, and they're the only things left still using rpki.xml_utils. Some old test code remains broken (not yet converted). GUI code that I know about has been converted but not tested (not all that much to convert there, mostly the GUI just invokes the Zookeeper. svn path=/branches/tk705/; revision=6107
2015-10-09Unwind more of the left_right XML processing from the oldRob Austein
rpki.left_right classes. svn path=/branches/tk705/; revision=6106
2015-10-09Baby steps towards using new rpkidb models. Now that SAX is gone,Rob Austein
clean up some of the corresponding mess. svn path=/branches/tk705/; revision=6105
2015-10-08Add an initial set of rpkidb models and confirm that Django is willingRob Austein
to parse them and generate migrations for them. Not actually using them for anything yet, but code still runs with this present so haven't broken anything yet.... svn path=/branches/tk705/; revision=6103
2015-10-07Apparently I broke router certificate generation on this branch a while ago ↵Rob Austein
and didn't notice. svn path=/branches/tk705/; revision=6097
2015-07-21Last batch of catch-up merges. Still need to test, but this is aRob Austein
development branch, so committing the merge before testing shouldn't break anything. svn path=/branches/tk705/; revision=6084
2014-11-12Initial (awful kludge) version of adding RRDP URIs to SIA extension.Rob Austein
This needs rewriting, but doing it properly requires a minor database schema change, and I'm trying to get a test case running by tomorrow morning. svn path=/branches/tk705/; revision=6015
2014-11-09rpkic force_publication working on tk705 again.Rob Austein
svn path=/branches/tk705/; revision=6014
2014-10-02Whittle one small chunk off the left-right protocol SAX mess.Rob Austein
svn path=/branches/tk705/; revision=5981
2014-09-25Convert remaining rpkid up-down code from SAX to etree.Rob Austein
svn path=/branches/tk705/; revision=5970
2014-09-24Start converting rpkid's up-down implementation to use lxml.etree instead of ↵Rob Austein
SAX. svn path=/branches/tk705/; revision=5969
2014-09-17Clean out last vestiges of SAX-based publication protocol code.Rob Austein
svn path=/branches/tk705/; revision=5960
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 22:53:42 +0000