aboutsummaryrefslogtreecommitdiff
path: root/rpkid/rpki/https.py
AgeCommit message (Collapse)Author
2009-07-04Terminate erroneous connections even if they would have beenRob Austein
persistent, on the theory that non-persistent connections have fewer failure modes and we don't care all that much about efficiency when something bad is happening. Reexamine this decision later, as it smells like a potential DoS vector. svn path=/myrpki/myirbe.py; revision=2574
2009-07-04Clean up and consolidate traceback. Add methods to hide (some of the)Rob Austein
mucking about with msg.type variables. Include query PDU tags in reply <report_error/> PDUs. svn path=/rpkid/irbe-setup.py; revision=2571
2009-06-09Cleanup: get rid of <route_origin/> objectRob Austein
svn path=/rpkid/README; revision=2511
2009-06-09CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2508
2009-06-08CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2507
2009-06-04Rototill left-right and publication protocol to replace SQL-assignedRob Austein
numeric identifiers with IRBE-assigned "handles". Daemons and test harness have been converted and seem to work; some tools like irbe_cli haven't been updated yet. svn path=/rpkid/doc/Installation; revision=2493
2009-06-02Fix handling of SystemExit exceptionsRob Austein
svn path=/rpkid/rpki/https.py; revision=2486
2009-06-02Cleanup of POW return values.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2485
2009-06-02Better handling of two-phase TLS shutdown.Rob Austein
svn path=/rpkid/rpki/https.py; revision=2484
2009-06-01POW.Ssl.AddTrust and custom X509 verification handler.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2482
2009-06-01New TLS code mostly working. Only lightly tested so far, but "makeRob Austein
test" ran to completion. svn path=/pow/POW-0.7/POW.c; revision=2481
2009-05-30CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2479
2009-05-26New test case, with deep hostingRob Austein
svn path=/rpkid/Makefile; revision=2449
2009-05-21rpkid hosting (self_id > 1) now working! Not well-tested yet.Rob Austein
testpoke.py really isn't the right tool for some of what testbed.py is doing (wiring class_names into the YAML file causes spurious errors). svn path=/rpkid/rpki/https.py; revision=2447
2009-05-19LintRob Austein
svn path=/rpkid/rpki/https.py; revision=2441
2009-05-17Defer connection attempts until after allowing I/O to run, in caseRob Austein
we've been running compute bound (or otherwise not handling I/O) for long enough that we have connection close events queued up. svn path=/rpkid/rpki/https.py; revision=2438
2009-05-17CheckpointRob Austein
svn path=/rpkid/rpki/exceptions.py; revision=2437
2009-05-16Turn off detailed HTTP logging (for now, anyway)Rob Austein
svn path=/rpkid/rpki/https.py; revision=2434
2009-05-11Cosmetic doc changes.Rob Austein
svn path=/rpkid/irbe-setup.py; revision=2424
2009-05-11Pass ExitNow exceptions through, as signal handlers can raise them at any time.Rob Austein
svn path=/rpkid/irdbd.py; revision=2423
2009-05-10LintRob Austein
svn path=/rpkid/irbe_cli.py; revision=2419
2009-05-10Checkpoint. Conversion to errback() mechanism started, not yetRob Austein
complete. svn path=/rpkid/rootd.py; revision=2418
2009-05-09CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2415
2009-05-08A bit more HTTP client cleanup.Rob Austein
svn path=/rpkid/rpki/https.py; revision=2414
2009-05-08Rototill HTTP client logic. It's still nasty, but cleaner than it was.Rob Austein
svn path=/rpkid/rpki/https.py; revision=2413
2009-05-08CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2411
2009-05-08CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2410
2009-05-08CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2409
2009-05-08CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=2408
2009-05-06Wasn't handling ExitNow correctlyRob Austein
svn path=/rpkid/rpki/https.py; revision=2406
2009-05-06CheckpointRob Austein
svn path=/rpkid/rpki/async.py; revision=2404
2009-05-05CheckpointRob Austein
svn path=/rpkid/rpki/exceptions.py; revision=2403
2009-05-05Clean up properly on client timeout.Rob Austein
svn path=/rpkid/rpki/https.py; revision=2401
2009-05-04Handle missing case that was keeping persistent connections from working.Rob Austein
svn path=/rpkid/rpki/https.py; revision=2399
2009-05-04Rip out old HTTPS code, replace with new asynchronous HTTP code (sic:Rob Austein
replacement does not yet support TLS!), beat on result with stick. At this point the new code passes "make test" with persistent connections disabled (but not with them enabled). Have not yet tried "make all-tests". Currently logs an insane level of detail about HTTP state, to aid in debugging; will need to be squelched later. svn path=/rpkid/rpki/https.py; revision=2398
2009-04-29More lintRob Austein
svn path=/rpkid/Makefile; revision=2373
2009-04-29First pass with pylintRob Austein
svn path=/rpkid/Makefile; revision=2371
2009-04-28CleanupRob Austein
svn path=/rpkid/rpki/exceptions.py; revision=2366
2009-04-26At this point "make all-tests" runs to completion with callbacks.Rob Austein
Haven't done full coverage check yet, but in theory any remaining synchronous calls to the HTTPS client code are oversights, so they should be treated as errors from now on. svn path=/rpkid/rpki/https.py; revision=2359
2009-04-20CheckpointRob Austein
svn path=/rpkid/irdbd.py; revision=2350
2009-04-18Checkpoint. Beginning of refactoring into a callback-basedRob Austein
architecture, to support an event-driven I/O core. WARNING: At this point in the conversion, some of the programs will not run indefinitely, because the partial conversion keeps the call stack from ever unwinding all the way. I'm willing to tolerate this temporarily as this allows me to keep running regression tests during the conversion process, but it does mean that as of this checkin the code is not even remotely suitable for non-testing use until the I/O core rewrite is finished. svn path=/rpkid/rpki/https.py; revision=2345
2008-06-12Apparently Doxygen -does- read module documentation, but only ifRob Austein
nothing preceeds it in the file, not even comments. Reformat to work within this restriction. svn path=/docs/left-right-protocol; revision=1873
2008-06-06Remove unnecessary log messageRob Austein
svn path=/rpkid/rpki/https.py; revision=1851
2008-06-05Wrap signal handlers httpd.server_forever() to allow a clean shutdown,Rob Austein
so that profiling will work properly. svn path=/rpkid/rpki/exceptions.py; revision=1846
2008-05-27CheckpointRob Austein
svn path=/rpkid/Makefile; revision=1821
2008-05-16NitRob Austein
svn path=/rpkid/rpki/https.py; revision=1786
2008-05-15Clean up TLS certificate handling and a lot of debugging code.Rob Austein
svn path=/rpkid/cronjob.py; revision=1778
2008-05-15Tweak TLS cert chain validation to fit BPKI model.Rob Austein
svn path=/rpkid/README; revision=1775
2008-05-12CheckpointRob Austein
svn path=/rpkid/rpki/https.py; revision=1768
2008-05-12Add X509Store.verifyDetailed()Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1767
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-06 18:13:00 +0000