aboutsummaryrefslogtreecommitdiff
path: root/rpki
AgeCommit message (Collapse)Author
2018-12-13Typo (os.pat.join -> os.path.join).HEADmasterRob Austein
2018-08-26Clean up old code which has been obsolete for years.Rob Austein
smoketest hasn't worked since we converted to Tornado and Django ORM. xml-parse-test hasn't worked since we ripped out the massively redundant XML layer and went to using lxml.etree directly. old_irdbd hasn't worked since we converted to Django ORM. rpki.adns hasn't worked since we converted to Tornado. Various tests in ca/Makefile.in haven't worked since all of the above happened. Some day we may want to resurrect a few bits (in particular, the post-initialization scripting capabilities from smoketest) but for the moment it just confuses people, so away with it.
2018-08-26[max-length] Fix ROA parsing issueTom Harrison
The ROA update and generate methods were parsing the ipv4 and ipv6 instance variables as if they were resource sets, rather than ROA prefix sets. This works as expected when max-length is not being used, but when max-length is used, parsing does not succeed and ROAs cannot be generated or updated. Parsing each variable as if it's a ROA prefix set, and then converting the result to a resource set, appears to fix the problem. Signed-off-by: Rob Austein <sra@hactrn.net>
2017-05-17rpkic delete_identity was triggering an obscure Django exception in rpkid.Rob Austein
2017-01-27Accumulate primary keys instead of objects to work around Django caching.Rob Austein
This is nasty, and I still don't entirely understand it why this was happening. We collect ca_detail objects during bulk ROA processing, so that we can defer manifest and CRL updates until the end of the batch. Somehow, Django's caching code was causing the parent CA's issued serial number to roll back as part of this caching, which caused us to reuse serial numbers. Which is (very) bad. Replacing the collection of ca_detail objects with a collection of primary key values for those same ca_detail objects seems to have worked, presumably because it lets us force creation of a new queryset when it's time for us to process the relevant ca_detail objects. The question is how many other booby traps like this might be lurking.
2017-01-15Wrong Django voodoo in previous fix.Rob Austein
The rubber chicken needs to dance around the circle once, widdershins. Obviously. For future reference, the syntax for forcing queryset evaluation is "list(blarg.all())", not "[blarg.all()]". In this case it doesn't seem to be necessary.
2017-01-15rpkigui-rcynic inheritance handling was broken.Rob Austein
2016-07-20add data import timestamps to the dashboard viewMichael Elkins
closes #838 svn path=/branches/tk705/; revision=6452
2016-07-20use format_html() to build strings returned by custom template tags so that ↵Michael Elkins
the output is not html escaped closes #835 svn path=/branches/tk705/; revision=6451
2016-07-20need to add contenttypes and auth to INSTALLED_APPS even for gui auxillary ↵Michael Elkins
scripts see #825 svn path=/branches/tk705/; revision=6450
2016-07-19add initial migration for the routeview app.Michael Elkins
add --fake-initial option when doing the migrations so that existing installs will ignore the initial migration svn path=/branches/tk705/; revision=6449
2016-07-18Remove "import url from future" from Django templates. Fixes #823.Rob Austein
svn path=/branches/tk705/; revision=6446
2016-06-26Log resynchronization details.Rob Austein
svn path=/branches/tk705/; revision=6445
2016-06-17Disable email to root when a Django exception occurs, and log it to the ↵Michael Elkins
apache log instead. Make the GUI log level configurable via rpki.conf svn path=/branches/tk705/; revision=6444
2016-06-17Remove 'load url from future' as it is no longer needed in recent Django ↵Michael Elkins
versions See #823 svn path=/branches/tk705/; revision=6443
2016-05-25Make rpkigui-import-routes use logging settings from /etc/rpki.conf instead ↵Michael Elkins
of rpki.django_settings.gui Create new rpki.django_settings.gui_script Django settings file with a minimal subset required to use the ORM, to be used in auxillary scripts Add [rpkigui-import-routes] section to rpki.conf Change log level of warning about AS value errors in routeviews dumps to DEBUG svn path=/branches/tk705/; revision=6439
2016-05-07Oops, TeX-style "--" numeric ranges in copyright comments are bad fitRob Austein
for XML. Apparently we were carefully changing just the XML files to use a single "-" to work around this. Enough already, just convert all copyright year ranges to single "-" and have done with this. svn path=/branches/tk705/; revision=6427
2016-05-07More copyright notices, what fun.Rob Austein
svn path=/branches/tk705/; revision=6426
2016-05-07Copyright notice update, first round: files that are entirely newRob Austein
since copyright holder of record changed. svn path=/branches/tk705/; revision=6425
2016-05-05rootd migration finally working right. I think. Could stand more testing.Rob Austein
svn path=/branches/tk705/; revision=6421
2016-05-04A Farewell To Turtles.Rob Austein
svn path=/branches/tk705/; revision=6417
2016-05-02Checkpoint. Most of the certificate twiddling is done, but untested.Rob Austein
SIA URI twiddling still needs doing. svn path=/branches/tk705/; revision=6414
2016-04-29gracefully catch and log exception from zookeeperMichael Elkins
svn path=/branches/tk705/; revision=6413
2016-04-29lxml doesn't like None as an attribute value, so use empty string whenRob Austein
reporting AIA extension of a root certificate. See #809. svn path=/branches/tk705/; revision=6412
2016-04-27Catch exceptions from Zookeeper to gracefully continue when we can't talk to ↵Michael Elkins
rpkid. closes #805 svn path=/branches/tk705/; revision=6394
2016-04-26Handle non-existant root certificate correctly in rpkic extract_root_* ↵Rob Austein
commands. Fixes #808. svn path=/branches/tk705/; revision=6393
2016-04-26Convert rpki-rtr to use common config/argparse/logging setup.Rob Austein
svn path=/branches/tk705/; revision=6391
2016-04-26Further consolidation of config file parsing, command line parsing,Rob Austein
and logging setup. Most programs now use the unified mechanism, although there are still a few holdouts: the GUI, which is a special case because it has no command line, and the rpki-rtr program, which, for historical reasons has its own implementation of the logging setup infrastructure. svn path=/branches/tk705/; revision=6390
2016-04-24Add exception handler of last resort to servers, in an attempt to getRob Austein
startup error messages logged properly if at all possible. See #806. svn path=/branches/tk705/; revision=6387
2016-04-23.up_down_query_root() must pick out the right CADetail by g(SKI).Rob Austein
.up_down_query() must handle errors signaled by .up_down_query_root() correctly. svn path=/branches/tk705/; revision=6383
2016-04-23Missing dictionary key in a few tests in UpdateChildrenTask.Rob Austein
svn path=/branches/tk705/; revision=6382
2016-04-23"KeyError: u'manager'" turns out to be Django's way of saying:Rob Austein
"Try adding .all(), idiot." svn path=/branches/tk705/; revision=6381
2016-04-23Add yamltest code to set up TAL and root certificate correctly underRob Austein
new scheme. Rewrite pubd code which was whacking top-level certificate files with names other than "root.cer". svn path=/branches/tk705/; revision=6380
2016-04-23Internal root working with vastly-simplified implementation.Rob Austein
svn path=/branches/tk705/; revision=6379
2016-04-23rpkic extract_root_certificate and extract_root_tal commands.Rob Austein
svn path=/branches/tk705/; revision=6378
2016-04-23Remove a whole lotta rootd stuff.Rob Austein
svn path=/branches/tk705/; revision=6377
2016-04-23Internal root sort of working, but only sort of. It's skipping theRob Austein
worker CA and going straight from the root to certifying children, which is wrong. However...this is far enough along that we can now remove all the rootd glorp, which is a worthwhile simplification in its own right, so checkpoint here, remove rootd glorp, then figure out what's wrong with the internal certificate hierarchy. rcynic does validate the current output, given a manually constructed TAL, even if the current output isn't quite what it should be. So we should also be able to sort out the new TAL generation code now. Yes, checking in a version that works for the wrong reasons is weird, but the current sort-of-broken state lets us confirm that the lower levels of the tree are still correct as we go, which would be much harder if the poor thing just sat there and whimpered until we had the new internal CA code completely finished. svn path=/branches/tk705/; revision=6376
2016-04-23Initial version of rpki.irdb.models.Root. May end up folding thisRob Austein
into an expanded rpki.irdb.models.Parent, as the two are more alike than I expected them to be, but archive this version first. svn path=/branches/tk705/; revision=6375
2016-04-23Parent property methods to handle XML attributes which are really forRob Austein
the companion Root object. svn path=/branches/tk705/; revision=6374
2016-04-23Start fleshing out Parent actions that require poking at companion Root object.Rob Austein
svn path=/branches/tk705/; revision=6373
2016-04-23Generalize the formerly-BSC-specific handling of "readonly"Rob Austein
subelements in left-right responses, so we don't have to duplicate the mechanism used for BSC <pkcs10_request/> subelements when handling Parent <rpki_root_cert/> subelements. svn path=/branches/tk705/; revision=6372
2016-04-23Add Root model to rpki.rpkidb and root-related attributes toRob Austein
left-right schema. Not really using of this stuff yet, but haven't broken existing code yet either. svn path=/branches/tk705/; revision=6371
2016-04-23Upon further analysis: Roots and Turtles don't need handles, onlyRob Austein
Parents do, because Roots will be uniquely named by reference to their associated Parent. So move the handle back to Parent. svn path=/branches/tk705/; revision=6370
2016-04-23Swing CA model to link to Turtle instead of Parent.Rob Austein
svn path=/branches/tk705/; revision=6369
2016-04-23Step one of adding internal support for RPKI roots to rpkid: splitRob Austein
Parent model into base Turtle model and derived Parent model. svn path=/branches/tk705/; revision=6367
2016-04-21Update the GUI to work with the new rcynicdb.Michael Elkins
svn path=/branches/tk705/; revision=6365
2016-04-21Missing dictionary key in a few tests in UpdateChildrenTask.Rob Austein
Fixes #804. svn path=/branches/tk705/; revision=6364
2016-04-15Merge from trunk.Rob Austein
svn path=/branches/tk705/; revision=6363
2016-04-14Fix bug introduced merging load_roa_requests patch from trunk, sigh.Rob Austein
svn path=/branches/tk705/; revision=6361
2016-04-12Pull rpkic <group> fix from trunk.Rob Austein
I think Subversion's merge tracking data is turning into cream cheese. svn path=/branches/tk705/; revision=6360
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-10 05:31:35 +0000