aboutsummaryrefslogtreecommitdiff
path: root/rpkid/rpki/rootd.py
AgeCommit message (Collapse)Author
2014-04-05Source tree reorg, phase 1. Almost everything moved, no file contents changed.Rob Austein
svn path=/branches/tk685/; revision=5757
2014-02-20Whack RSA-specific code to a more general API using PrivateKey andRob Austein
PublicKey classes, with RSA and ECDSA as subclasses extending PrivateKey. Revised API not necessarily in final form yet, but good enough for smoketest to generate ECDSA keys for testing router certs. svn path=/branches/tk671/; revision=5679
2014-01-29Rework PKCS #10 sanity checking code.Rob Austein
svn path=/branches/tk671/; revision=5653
2014-01-29Clean up OID database. Would have done this years ago, had IRob Austein
understood how the globals() function works. svn path=/branches/tk671/; revision=5652
2014-01-09Update more copyrights, clean up module doc blocks.Rob Austein
svn path=/trunk/; revision=5624
2014-01-09getopt -> argparse, update copyright.Rob Austein
svn path=/trunk/; revision=5623
2014-01-07Set notBefore value directly when issuing certificates to avoid raceRob Austein
condition when issuing new manifest EE certificate. See #662. svn path=/trunk/; revision=5614
2013-10-01Map a few more exceptions to proper up-down protocol error codes,Rob Austein
teach rootd to generate same. Whack rootd's lame CRL generation code to account for subject certificates overwritten by rekey and to time entries out of the CRL. svn path=/trunk/; revision=5538
2013-07-17Drop rootd's manifest and CRL interval down to same interval used forRob Austein
regenerating the subject certificate, to avoid confusing GUI expiration checker when rcynic has rsync-early disabled. See #579. svn path=/trunk/; revision=5437
2013-07-17Bump default lifetime of RPKI certificate rootd issues to rpkid up toRob Austein
eight weeks, to play better with GUI's expiration timer. Closes #579. svn path=/trunk/; revision=5436
2013-04-01Clean up various old messes in how we configure listener server andRob Austein
port in daemons. svn path=/trunk/; revision=5251
2013-03-21Record context in CMS replay exceptions. Closes #458.Rob Austein
svn path=/trunk/; revision=5188
2013-01-25Clean up and extend rpki.log.init() to support things like letting theRob Austein
GUI provide its own file-like object as a destination for logging. See #396. svn path=/trunk/; revision=4979
2012-10-18pylintRob Austein
svn path=/branches/tk274/; revision=4786
2012-10-17Make sure we save an updated certificate for an existing ca_detail.Rob Austein
Clean up noisy messes a little faster during RPKI key rollover. svn path=/branches/tk274/; revision=4785
2012-10-10Fix manifest URI broken a couple of edits ago.Rob Austein
svn path=/branches/tk274/; revision=4763
2012-10-09Whack SIA and AIA code to use POW instead of POW.pkix. WhackRob Austein
smoketest repository layout to silence (correct) rcynic whining about objects not in manifest. svn path=/branches/tk274/; revision=4761
2012-10-01Convert CRL creation to use POW rather than POW.pkix.Rob Austein
svn path=/branches/tk274/; revision=4748
2012-09-03Fix last (?) remaining direct reference to "POWpkix" outside ofRob Austein
rpki.x509 module. svn path=/branches/tk274/; revision=4694
2012-08-27Move root.cer to separate rsync module when building testRob Austein
configurations, to avoid warnings about it being tainted. This is really a conflict between needing to support rootd and wanting to make the configuration clean when not running rootd: either we add an extra directory level to the publication structure which we don't use when not running rootd, or we move root.cer somewhere else. Since the latter is simpler except for test configurations which are already generated for us by programs, we do the latter. svn path=/branches/tk274/; revision=4667
2012-07-06Implement CMS-timestamp-based replay protection. Closes #35.Rob Austein
svn path=/trunk/; revision=4586
2012-07-03Stop whining about missing BPKI CRLs when running rootd underRob Austein
smoketest. The real problem is smoketest's antique BPKI model, but fixing that'd be more work than it's worth just to suppress a warning. svn path=/trunk/; revision=4565
2012-05-09Run daemons as, well, daemons. Closes #246.Rob Austein
svn path=/trunk/; revision=4481
2012-03-19Sync from trunk.Rob Austein
svn path=/branches/tk161/; revision=4403
2012-02-29Whack rootd's silly handling of CRL numbers and subject certificateRob Austein
serial numbers, to avoid resetting these values when rootd reboots. rootd is such a kludge. This fixes #214. svn path=/trunk/; revision=4377
2012-02-17Revoke certificates and clean up published objects when processing aRob Austein
left-right destroy action. Clean up empty publication directories on withdrawal. Fix rootd's handling of CRLs and manifests. See #197. svn path=/trunk/; revision=4354
2012-02-16Changed BPKI certification model for rootd with new IRDB means thatRob Austein
rpkid no longer expects to see a BPKI CRL in CMS messages from rootd, so fix rootd to conform to rpkid's expectation. svn path=/branches/tk161/; revision=4344
2012-02-09merge with /trunkMichael Elkins
svn path=/branches/tk161/; revision=4321
2012-02-03Change manifest filename extension from .mnf to .mft, to comply withRob Austein
the soon-to-be RFC. Closes #37. svn path=/trunk/; revision=4288
2012-01-30merge with tk100Michael Elkins
svn path=/branches/tk161/; revision=4272
2012-01-26Manifest EE certificates were not including the SIA signedObject URI,Rob Austein
as required by the current manifest specification. svn path=/trunk/; revision=4266
2012-01-08Checkpoint. New irdbd now work, after some transaction voodoo.Rob Austein
svn path=/branches/tk100/; revision=4147
2011-10-06Use Auto_update for all BPKI objects (fixes #68).Rob Austein
svn path=/rpkid/rpki/rootd.py; revision=4016
2011-10-05Add global traceback control; this closes #95. Clean up someRob Austein
"except:" clauses that should have been "except Exception:". svn path=/rpkid/rpki-sql-setup.py; revision=4014
2011-04-27First whack at some of the silliest logging codeRob Austein
svn path=/rpkid/rpki/async.py; revision=3793
2011-01-20Generate Python executables during compilation rather than fromRob Austein
./configure. Change (almost) all programs to use rpki.conf instead of separate config files for each program, and add support for ${prefix}/etc/rpki.conf like normal system programs. svn path=/buildtools/make-python-executable.py; revision=3620
2010-12-14Move all daemons to modulesRob Austein
svn path=/rpkid/irdbd.py; revision=3569
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-13 03:25:44 +0000