aboutsummaryrefslogtreecommitdiff
path: root/rpkid/rpki/rpkid.py
AgeCommit message (Collapse)Author
2014-04-05Source tree reorg, phase 1. Almost everything moved, no file contents changed.Rob Austein
svn path=/branches/tk685/; revision=5757
2014-04-03Helps to fix the code as well as the comments.Rob Austein
svn path=/branches/tk671/; revision=5742
2014-04-02Need AIA check for signed object certificates too.Rob Austein
svn path=/branches/tk671/; revision=5741
2014-04-02Get AIA comparison right.Rob Austein
svn path=/branches/tk671/; revision=5740
2014-04-02Track changes in URI at which parent publishes our CA certificate, andRob Austein
propegate those changes to certs we issue. svn path=/branches/tk671/; revision=5739
2014-04-02Pull from trunk.Rob Austein
svn path=/branches/tk671/; revision=5733
2014-02-27Log ee_cert objects properly.Rob Austein
svn path=/branches/tk671/; revision=5692
2014-02-25Router certificates working again after changes to get subject name out of ↵Rob Austein
the PKCS !#10. svn path=/branches/tk671/; revision=5683
2014-02-21Add EKU when generating router certificates.Rob Austein
svn path=/branches/tk671/; revision=5681
2014-02-20Whack RSA-specific code to a more general API using PrivateKey andRob Austein
PublicKey classes, with RSA and ECDSA as subclasses extending PrivateKey. Revised API not necessarily in final form yet, but good enough for smoketest to generate ECDSA keys for testing router certs. svn path=/branches/tk671/; revision=5679
2014-02-20All this router certificate stuff requires enough SQL changes thatRob Austein
we're going to need a fancy upgrade script when we merge this to trunk no matter what else we do, so might as well flip the default on the long-awaited `merge_publication_directories` in the router certificate development branch and handle the upgrade actions for that along with everything else when we finally merge back to trunk. See #479. svn path=/branches/tk671/; revision=5678
2014-02-20Missed case where we have to reissue EE certificate because we justRob Austein
deprecated the issuing ca_detail. svn path=/branches/tk671/; revision=5677
2014-02-20Clean up ee_cert_obj class.Rob Austein
svn path=/branches/tk671/; revision=5676
2014-02-20Checkpoint. Now generating something that looks a bit like a routerRob Austein
cert, but not right yet: RSA where should be ECDSA, EKU missing, and EE certificate class's .reissue() method isn't working properly yet. svn path=/branches/tk671/; revision=5673
2014-02-19Add ee_cert_obj and its maintenance task to rpkid. Not tested yet.Rob Austein
svn path=/branches/tk671/; revision=5668
2014-01-10`pidfile` is a field in `args`, not a global. Fixes #666.Rob Austein
svn path=/trunk/; revision=5626
2014-01-09Update more copyrights, clean up module doc blocks.Rob Austein
svn path=/trunk/; revision=5624
2014-01-09getopt -> argparse, update copyright.Rob Austein
svn path=/trunk/; revision=5623
2013-10-01Remove unnecessary and incorrect assertion.Rob Austein
svn path=/trunk/; revision=5537
2013-07-16Send exceptions in irdb_query() to the errback handler rather thanRob Austein
letting them propagate. See #580. svn path=/trunk/; revision=5432
2013-06-26Don't allow exceptions (eg, MySQL connection errors) to prevent usRob Austein
from scheduling next cron cycle. Closes #560. svn path=/trunk/; revision=5416
2013-04-20Consider updating ROAs and Ghostbusters when CA certificate changes.Rob Austein
svn path=/trunk/; revision=5305
2013-04-20Force new manifest EE certificate, manifest, and CRL when parentRob Austein
reissues our CA certificate. Fixes #519. svn path=/trunk/; revision=5303
2013-04-19Throw exception when asked to issue a certificate with notAfter <=Rob Austein
notBefore. Don't stomp ghostbuster_obj if we've just reused it. Clean up properly when deleting a ca_detail. Don't reissue expiring certificate if IRDB valid_until field says it's supposed to expire. svn path=/trunk/; revision=5302
2013-04-01Clean up various old messes in how we configure listener server andRob Austein
port in daemons. svn path=/trunk/; revision=5251
2013-03-21Clean up if construct_sia_uri() throws an exception while we'reRob Austein
creating a CA object. We really ought to hold off on saving the CA to SQL until after constructing the URI, but we can't as long as URI includes the SQL ID (bletch). Enabling merge_publication_directories [4823] would fix this, but there may be a backwards compatabiilty issue to be resolved there first. Closes #46. svn path=/trunk/; revision=5195
2013-03-21Record context in CMS replay exceptions. Closes #458.Rob Austein
svn path=/trunk/; revision=5188
2013-02-05Reissue CA's own manifest certificate when doing forced reissue ofRob Austein
everything else. See #406. svn path=/trunk/; revision=5029
2013-01-25Clean up and extend rpki.log.init() to support things like letting theRob Austein
GUI provide its own file-like object as a destination for logging. See #396. svn path=/trunk/; revision=4979
2012-11-19Retry failed publication, general case. Closes #306.Rob Austein
svn path=/trunk/; revision=4887
2012-11-09Add "merge_publication_directories" option to let Iain do some testingRob Austein
with better hierarchical publication. Eventually this will likely become the default and this option can go away, but not today. svn path=/branches/tk274/; revision=4823
2012-11-08Doh, logging for new recovery code works better when committed to repository.Rob Austein
svn path=/branches/tk274/; revision=4816
2012-11-07Retry apparently failed publication of manifest and CRL whenRob Austein
publishing new objects. This should be generalized to cover all objects issued by this ca_detail, but that's more code. See #306. svn path=/branches/tk274/; revision=4806
2012-10-18pylintRob Austein
svn path=/branches/tk274/; revision=4786
2012-10-17Make sure we save an updated certificate for an existing ca_detail.Rob Austein
Clean up noisy messes a little faster during RPKI key rollover. svn path=/branches/tk274/; revision=4785
2012-10-12Deobfuscate.Rob Austein
svn path=/branches/tk274/; revision=4774
2012-10-12Rust In Pieces, POW.pkix.Rob Austein
In the end, there can be only one. svn path=/branches/tk274/; revision=4771
2012-10-09Whack SIA and AIA code to use POW instead of POW.pkix. WhackRob Austein
smoketest repository layout to silence (correct) rcynic whining about objects not in manifest. svn path=/branches/tk274/; revision=4761
2012-10-01Convert CRL creation to use POW rather than POW.pkix.Rob Austein
svn path=/branches/tk274/; revision=4748
2012-08-29Add a lot of __repr__() methods in an attempt to make the logs moreRob Austein
useful. Add rpki.sql.cache_reference decorator, to give the garbage collector some guidance about linkages between active objects now that the SQL cache uses weak references. Other minor cleanup. svn path=/branches/tk274/; revision=4676
2012-08-20Rewrite voluntary scheduler yield code to be in terms of elapsed timeRob Austein
rather than number of objects processed or published. In theory, the new code should be reusable in other task classes. svn path=/branches/tk274/; revision=4650
2012-08-20Gigabytes of logs recording the state of the task queue when hostingRob Austein
thousands of <self/> objects is perhaps a bit excessive. svn path=/branches/tk274/; revision=4645
2012-08-19CleanupRob Austein
svn path=/branches/tk274/; revision=4643
2012-08-19Refactor rpkid high-level task system to use classes rather thanRob Austein
closures, to make it easier for long-running tasks to yield the CPU periodically. As a side effect, this moves a lot of dense code out of rpki.left_right.self_elt methods and into separate task-specific classes. See #275. svn path=/branches/tk274/; revision=4640
2012-08-17As of [4632], rpki.sql.session._wrap_execute() handles SQL pingsRob Austein
automatically, no need for explict pings elsewhere. svn path=/branches/tk274/; revision=4634
2012-08-17Automate SQL pings. Suppress case where ROA regeneration gratuitouslyRob Austein
updated CRL and manifest. More debug logging. svn path=/branches/tk274/; revision=4632
2012-08-09Switch rpki.sql.session.cache to use weak references, so that Python'sRob Austein
garbage collector can free up cache entries we're not using for us. Rework update_roas() to be a bit more frugal with memory. See #278. svn path=/branches/tk274/; revision=4626
2012-08-08Checkpoint of work to date, see #274 and #275.Rob Austein
svn path=/branches/tk274/; revision=4623
2012-07-31First cut at allowing I/O loop to run during processing of massiveRob Austein
batches of ROA requests. Not yet well tested, preliminary results look good and I have people waiting for this patch, so checking in now while continuing testing. See #275. svn path=/trunk/; revision=4615
2012-07-26Add profiling support to yamltest; fix profiling support in daemons.Rob Austein
Tweak yamltest to force one ROA request per prefix regardless of how the user expressed it; we may want to revisit this eventually, but it's more useful this way for now. svn path=/trunk/; revision=4609
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-11 01:27:55 +0000