aboutsummaryrefslogtreecommitdiff
path: root/rpkid/rpki/up_down.py
AgeCommit message (Collapse)Author
2014-04-05Source tree reorg, phase 1. Almost everything moved, no file contents changed.Rob Austein
svn path=/branches/tk685/; revision=5757
2014-01-29Rework PKCS #10 sanity checking code.Rob Austein
svn path=/branches/tk671/; revision=5653
2014-01-09Update more copyrights, clean up module doc blocks.Rob Austein
svn path=/trunk/; revision=5624
2013-10-01Map a few more exceptions to proper up-down protocol error codes,Rob Austein
teach rootd to generate same. Whack rootd's lame CRL generation code to account for subject certificates overwritten by rekey and to time entries out of the CRL. svn path=/trunk/; revision=5538
2013-04-20Force new manifest EE certificate, manifest, and CRL when parentRob Austein
reissues our CA certificate. Fixes #519. svn path=/trunk/; revision=5303
2012-10-18pylintRob Austein
svn path=/branches/tk274/; revision=4786
2012-10-12Deobfuscate.Rob Austein
svn path=/branches/tk274/; revision=4774
2012-10-09Use POW for PKCS #10 generation.Rob Austein
svn path=/branches/tk274/; revision=4760
2012-08-29Bad things happen when __str__() methods forget to return the string.Rob Austein
svn path=/branches/tk274/; revision=4675
2012-07-06Implement CMS-timestamp-based replay protection. Closes #35.Rob Austein
svn path=/trunk/; revision=4586
2012-05-05Debugging code to say why we're failing to issue. See #247. Rob Austein
svn path=/branches/tk33/; revision=4471
2012-02-03Clean up exceptions in rpki.x509.CMS_object.verify().Rob Austein
Up-down specification explictly allows certificates and CRLs we consider extraneous to be included in CMS messages. I think that any verification model which relies on these is flawed, so I don't use them, in fact, nobody does, but I was unable to convince my co-authors to change the specification. Sigh. So the up-down code has to allow these. In theory, OpenSSL's verification code should have no problem picking the useful bits out of the garbage, since that's a normal part of OpenSSL's job when acting as a TLS client, so we just pass the mess along to OpenSSL and let OpenSSL sort it out. This closes #9. svn path=/trunk/; revision=4287
2011-03-27Handle past-expiration IRDB entries properlyRob Austein
svn path=/rpkid/rpki/left_right.py; revision=3746
2011-03-21First cut at Ghostbusters support.Rob Austein
svn path=/rpkid/irdbd.sql; revision=3730
2011-03-18Merge rpki.rpki_engine into rpki.rpkid.Rob Austein
svn path=/rpkid/left-right-schema.rng; revision=3727
2011-03-18Add @property decorators to a bunch of methods that are just syntacticRob Austein
sugar around cached SQL object fetches. Checkpoint of incomplete support for Ghostbusters reords. Clean up a few extraneous imports. svn path=/rpkid/Makefile.in; revision=3725
2010-11-14Implement "reissue" left-right operation. Reformat some doc strings.Rob Austein
svn path=/rpkid/irbe_cli.py; revision=3551
2010-10-07Merge rpkid.without_tls/ branch to rpkid/ trunk.Rob Austein
svn path=/rpkid/Makefile; revision=3465
2010-08-29Break XML packet dumps into multiple lines when logging schemaRob Austein
validation errors. svn path=/rpkid/rpki/publication.py; revision=3431
2010-04-06Log handle of parent we're querying.Rob Austein
svn path=/rpkid/rpki/up_down.py; revision=3162
2010-03-28Log a bit more on up-down queries.Rob Austein
svn path=/rpkid/rpki/up_down.py; revision=3144
2010-03-16Update copyright noticesRob Austein
svn path=/rpkid/irbe_cli.py; revision=3107
2010-01-07Cleanup of substring checks.Rob Austein
svn path=/myrpki/arin-rootcert.py; revision=2935
2009-11-04Use batch-mode publication in rpkid. Fix FOREIGN KEY constraints.Rob Austein
svn path=/myrpki/myirbe.py; revision=2876
2009-09-29Add left-right "revoke_forgotten" command to clean up certs that theRob Austein
parent remembers but the child has forgotten. svn path=/rpkid/left-right-schema.rnc; revision=2793
2009-09-14Rework call_pubd() error handlingRob Austein
svn path=/rpkid/rpki/https.py; revision=2751
2009-09-11CleanupRob Austein
svn path=/rpkid/rpki/async.py; revision=2748
2009-09-09Back out accidental commit of local hackRob Austein
svn path=/rpkid/rpki/up_down.py; revision=2744
2009-09-09Log SKI of generated subject certificateRob Austein
svn path=/rpkid/rootd.py; revision=2743
2009-09-03Log up-down queriesRob Austein
svn path=/rpkid/rootd.py; revision=2728
2009-07-17Handle BSC objects that are still under construction a bit more gracefully.Rob Austein
svn path=/rpkid/rpki/exceptions.py; revision=2634
2009-07-17CleanupRob Austein
svn path=/rpkid/rpki/https.py; revision=2630
2009-07-04Clean up and consolidate traceback. Add methods to hide (some of the)Rob Austein
mucking about with msg.type variables. Include query PDU tags in reply <report_error/> PDUs. svn path=/rpkid/irbe-setup.py; revision=2571
2009-06-07CheckpointRob Austein
svn path=/rpkid/rpki/left_right.py; revision=2499
2009-06-04Rototill left-right and publication protocol to replace SQL-assignedRob Austein
numeric identifiers with IRBE-assigned "handles". Daemons and test harness have been converted and seem to work; some tools like irbe_cli haven't been updated yet. svn path=/rpkid/doc/Installation; revision=2493
2009-06-01New TLS code mostly working. Only lightly tested so far, but "makeRob Austein
test" ran to completion. svn path=/pow/POW-0.7/POW.c; revision=2481
2009-05-27Update copyright notices in files edited this yearRob Austein
svn path=/rcynic/rcynic.c; revision=2452
2009-05-19LintRob Austein
svn path=/rpkid/rpki/https.py; revision=2441
2009-05-11Cosmetic doc changes.Rob Austein
svn path=/rpkid/irbe-setup.py; revision=2424
2009-05-11Pass ExitNow exceptions through, as signal handlers can raise them at any time.Rob Austein
svn path=/rpkid/irdbd.py; revision=2423
2009-05-10LintRob Austein
svn path=/rpkid/irbe_cli.py; revision=2419
2009-05-10Checkpoint. Conversion to errback() mechanism started, not yetRob Austein
complete. svn path=/rpkid/rootd.py; revision=2418
2009-04-29More lintRob Austein
svn path=/rpkid/Makefile; revision=2373
2009-04-29First pass with pylintRob Austein
svn path=/rpkid/Makefile; revision=2371
2009-04-25Fix exception handling in error_response PDU generationRob Austein
svn path=/rpkid/rpki/up_down.py; revision=2356
2009-04-24CheckpointRob Austein
svn path=/rpkid/pubd.py; revision=2355
2008-10-16Minor logging cleanups. Don't show backtrace in testpoke unlessRob Austein
debugging. "valid_until" -> "valid_for" in test suite. svn path=/rpkid/rpki/rpki_engine.py; revision=2021
2008-10-13Fix a few string formatting goofs in logging and error messages.Rob Austein
svn path=/rpkid/rootd.py; revision=2014
2008-07-16I should try goofing up the IRDB expiration date more often, all sortsRob Austein
of intersting things blew up when I did that by accident. svn path=/rpkid/rpki/exceptions.py; revision=2000
2008-06-12Apparently Doxygen -does- read module documentation, but only ifRob Austein
nothing preceeds it in the file, not even comments. Reformat to work within this restriction. svn path=/docs/left-right-protocol; revision=1873
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-06 12:34:04 +0000