aboutsummaryrefslogtreecommitdiff
path: root/rpki
AgeCommit message (Collapse)Author
2015-11-16X509Store class removed. X.509 verification moved fromRob Austein
X509Store.verify() to X509.verify(). Result seems to run properly with trivial modification to existing Python BPKI code. RPKI extended validation via this interface (the real point of this exercise) still not tested. svn path=/branches/tk705/; revision=6176
2015-11-16Checkpoint. Basic merge of rcynic.c detailed RPKI checks merged intoRob Austein
POW.c, still totally untested. X.509 certificate validation is in a transitional state, currently spiced with awful kludges so that we're still doing the right thing cryptographically, albeit in a completely disgusting way as far as the API is concerned. Serious cleanup needed, but wanted to get a post-merge version with CMS and X.509 working again after the merge into the repository for backup. svn path=/branches/tk705/; revision=6175
2015-11-14Comment nit.Rob Austein
svn path=/branches/tk705/; revision=6173
2015-11-13Clean up more gratuitous unused magic CRL autoregeneration.Rob Austein
Regenerate EE certificates along with everything else when activating a new CADetail (ie, when rolling a CA key). svn path=/branches/tk705/; revision=6172
2015-11-12Clean up silly automatic-CRL-and-MFT-regeneration-except-when-its-notRob Austein
hacks: in practice, we always bypassed it (except when we forgot...). Make sure we revoke and withdraw the old certs and objects for ROAs and Ghostbusters rather than the new ones during forced reissue. svn path=/branches/tk705/; revision=6171
2015-11-12Add .__repr__() methods to rpkidb models. RewriteRob Austein
.publish_world_now() to something a little less whacky. Consolidate fix for singleton URIs in SIA fields. svn path=/branches/tk705/; revision=6170
2015-11-12More useful log messages on PDU handling exceptions.Rob Austein
Tweak publication callback mechanism to use uri instead of tag. svn path=/branches/tk705/; revision=6169
2015-11-11Clean up yet another screwball constructor. Other minor cleanup.Rob Austein
svn path=/branches/tk705/; revision=6168
2015-11-11Oops, forgot to commit migration for latest schema change.Rob Austein
svn path=/branches/tk705/; revision=6167
2015-11-11Further simplify CRL and manifest code.Rob Austein
svn path=/branches/tk705/; revision=6166
2015-11-11Refactor a few of the ridiculously long rpkidb model methods intoRob Austein
rpkid_task code. Combine and simplify CRL and manifest generation. svn path=/branches/tk705/; revision=6164
2015-11-11regenRob Austein
svn path=/branches/tk705/; revision=6163
2015-11-11Configure pylint to use the pylint-django plugin, which (mostly)Rob Austein
understands Django's exotic metaclasses, which in turn allows us to re-enable a number of pylint checks we had disabled. While we were at this, stripped out a bunch of old pylint pragmas, then added back the subset that were really needed. As usual with pylint, this turned up a few real bugs along with an awful lot of noise. svn path=/branches/tk705/; revision=6162
2015-11-10Use a lock to serialize rpkid tasks. Add temporary trace callRob Austein
sequence trace code to rpki.rpkidb.models to assist in simplifying some of the gratuitously complicated method call chains. Various trivial PyLint cleanups. svn path=/branches/tk705/; revision=6161
2015-11-04Checkpoint some preliminary work along the way to doing full low-levelRob Austein
RPKI validation in POW.c. So far this is mostly notes and the support for the status code mechanism. svn path=/branches/tk705/; revision=6158
2015-10-28Now working with PostgreSQL.Rob Austein
svn path=/branches/tk705/; revision=6157
2015-10-27Reenable vile MySQL "latin1" workaround for now.Rob Austein
svn path=/branches/tk705/; revision=6156
2015-10-27Reimplement rpki.gui.models.IPAddressField as a subclass of CharFieldRob Austein
for portability. With this change, the GUI appears to work with SQLite3. svn path=/branches/tk705/; revision=6155
2015-10-26Whack a few things stale imports and Django 1.6-isms to get GUIRob Austein
running with new code base. Now working with $ yamltest.py --sql mysql --gui smoketest.1.yaml svn path=/branches/tk705/; revision=6153
2015-10-26"Any programmer who fails to comply with the standard naming, formatting,Rob Austein
or commenting conventions should be shot. If it so happens that it is inconvenient to shoot him, then he is to be politely requested to recode his program in adherence to the above standard." -- Michael Spier, Digital Equipment Corporation svn path=/branches/tk705/; revision=6152
2015-10-26Unbound variable in postgresql configuration.Rob Austein
postgresql sort of works with the core daemons and rpkic, well enough to generate RPKI objects if one hand configures it, but one can't even run migrations for the GUI, due to a few non-portable SQL data types, and migrations from earlier version of the IRDB have similar problems. svn path=/branches/tk705/; revision=6151
2015-10-25All SKI operations on issued certificates are really g(SKI)Rob Austein
operations, so simplify code and schema by removing gratuitous transformations to and from binary format. svn path=/branches/tk705/; revision=6150
2015-10-25Tweak binary field types to get SQLite3 working as a Django ORMRob Austein
backend. Switch yamltest's default database configuration to sqlite3. MySQL still has character set issues, which are almost certainly to do with the communication channel rather than the database tables. It's possible that one of the newer DB API drivers for MySQL fixes this, might be worth trying one of them at some point (see the "MySQL notes" discussion of MySQL DB API drivers in the Django documentation). svn path=/branches/tk705/; revision=6149
2015-10-25Use a weakref dictionary to hold the HTTP client serializationRob Austein
database, so the garbage collector can clean it up automatically. svn path=/branches/tk705/; revision=6148
2015-10-25Make SQL engine configurable. Works for MySQL, not yet tested for anything ↵Rob Austein
else. svn path=/branches/tk705/; revision=6147
2015-10-25Force MySQL characterset to Latin1 to suppress constant whining aboutRob Austein
incorrectly coded UTF-8 in BLOB fields holding ASN.1 DER data. This is wrong in so many ways that I don't even know where to start, but, bottom line, forcing Latin1 here is just making MySQL 5.6+ revert to the behavior in MySQL 5.5. This is just a workaround. The real solution is probably to switch to an SQL engine that's not quite such a kludge tower. svn path=/branches/tk705/; revision=6146
2015-10-24Switched from BlobField to BinaryField, but doesn't seem to haveRob Austein
helped the MySQL UTF-8 whining. Same Python code running with MySQL 5.5 doesn't do this, so it's some kind of upgrade trainwreck. BinaryField uses BLOBs too, just as one would expect, so in theory this can't be happening. So it's an undocumented feature. Yum. But we wanted to move to BinaryField anyway, and doing so doesn't seem to have made the problem worse, so committing the changes. svn path=/branches/tk705/; revision=6145
2015-10-23Serialize HTTP requests to the same URL NetLoc, to comply with theRob Austein
up-down protocol specification and, more importantly, avoid spurious CMS Replay errors. svn path=/branches/tk705/; revision=6144
2015-10-23Task system now working with Tornado. Two new problems: some kind ofRob Austein
UTF-8 whining on what are supposed to be binary fields that's probably the result of a MySQL upgrade, and CMS Replay exceptions due to the pseudo-random order in which HTTP client connections run in Tornado. The UTF-8 mess is probably a good reason to change over to Django's native binary field type, which we were going to want to do anyway. The CMS Replay problem is not Tornado's fault: we probably would have seen it in the old code were it not for an accidental side effect of a long-since-abandoned attempt to use persistent HTTP connections. The fix is probably to serialize requests to a particular host using use a tornaodo.queue.Queue() object, or something like that. svn path=/branches/tk705/; revision=6143
2015-10-22Fix a couple of places where we were calling coroutines as if theyRob Austein
were ordinary functions. May want some kind of naming scheme or other convention to make it easier to avoid this sort of thing. svn path=/branches/tk705/; revision=6142
2015-10-22Lint cleanup.Rob Austein
svn path=/branches/tk705/; revision=6140
2015-10-22First cut at replacing rpkid's HTTP and I/O system with Tornado. NotRob Austein
quite working perfectly yet (cron is a bit wonky) but manages to produce an initial set of ROAs without thowing any exceptions, and code is already much cleaner than the old callback-based horror. svn path=/branches/tk705/; revision=6139
2015-10-20Regen.Rob Austein
svn path=/branches/tk705/; revision=6138
2015-10-20Fat fingers broke schema in previous revision.Rob Austein
svn path=/branches/tk705/; revision=6137
2015-10-20Regen.Rob Austein
svn path=/branches/tk705/; revision=6135
2015-10-20Change <self/> (etc) to <tenant/> (etc). "self" always was a reallyRob Austein
bad choice for something implemented in Python, holdover from an older specification, but Django ORM's troubles with "self" as a keyword argument were the last straw. Enough already. Backwards compatability should be a straightforward data migration. svn path=/branches/tk705/; revision=6134
2015-10-19Whoops, missed creating a migration for field name change.Rob Austein
svn path=/branches/tk705/; revision=6129
2015-10-19Amputate old SQL code out of rpkid with a fire axe, replacing it withRob Austein
Django ORM. Duct tape and bailing wire everywhere, much clean-up left to do, but basic "make yamltest" suite runs. Much of the clean-up isn't worth doing until after revamping the I/O system, as it'll all change again at that point anyway. svn path=/branches/tk705/; revision=6127
2015-10-16RegenRob Austein
svn path=/branches/tk705/; revision=6126
2015-10-16PyLint. As usual, a lot of noise and a handful of real, albeit minor, bugs.Rob Austein
svn path=/branches/tk705/; revision=6123
2015-10-16.delete() -> .destroy() to avoid built-in ORM .delete() methods.Rob Austein
svn path=/branches/tk705/; revision=6122
2015-10-16Doh, forgot to include rrdp_notification_uri in old-style SQL template.Rob Austein
svn path=/branches/tk705/; revision=6121
2015-10-16Replace RRDP wired-in-URL kludge with proper support in OOB andRob Austein
left-right protocol and irdb and rpkidb models. Not fully working yet, RRDP URI isn't yet showing up everywhere it should, but this is probably more an indication that the previous hack was incomplete than that the replacement broke something. svn path=/branches/tk705/; revision=6120
2015-10-15Convert zookeeper to use new (IETF standards track I-D) out-of-bandRob Austein
configuration protocol instead of the crufty ancient "myrpki" version. Semantics largely unchanged, differences are primarily syntax and cleanup of historical baggage, but only the new protocol includes RRDP support, which we're gonna need. At some point we should write XSL transforms that map between the useful portions of the old protocol and the modern equivalent. svn path=/branches/tk705/; revision=6119
2015-10-15Update Zookeeper OOB setup XML code to something approximating current ↵Rob Austein
coding practice. svn path=/branches/tk705/; revision=6118
2015-10-15Extend rpki.irdb.zookeeper.etree_read() to support reading directlyRob Austein
from an etree_wrapper object, bypassing the filesystem entirely. svn path=/branches/tk705/; revision=6117
2015-10-14Checkpoint.0Rob Austein
svn path=/branches/tk705/; revision=6116
2015-10-14Checkpoint.Rob Austein
svn path=/branches/tk705/; revision=6115
2015-10-13Checkpoint.Rob Austein
svn path=/branches/tk705/; revision=6114
2015-10-12Checkpoint while porting old create/set actions to ORM models.Rob Austein
svn path=/branches/tk705/; revision=6113
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-11 23:22:51 +0000