Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-04-05 | Source tree reorg, phase 1. Almost everything moved, no file contents changed. | Rob Austein | |
svn path=/branches/tk685/; revision=5757 | |||
2014-04-05 | Regen | Rob Austein | |
svn path=/trunk/; revision=5754 | |||
2014-04-05 | Merge tk671 (router certificate support) back to trunk. See #671. | Rob Austein | |
svn path=/trunk/; revision=5753 | |||
2014-04-05 | Add delete_certificate_request and show_certificate_requests to rpkic. | Rob Austein | |
svn path=/branches/tk671/; revision=5751 | |||
2014-04-04 | Regen | Rob Austein | |
svn path=/branches/tk671/; revision=5749 | |||
2014-04-04 | Regen | Rob Austein | |
svn path=/branches/tk671/; revision=5747 | |||
2014-04-03 | Helps to fix the code as well as the comments. | Rob Austein | |
svn path=/branches/tk671/; revision=5742 | |||
2014-04-02 | Need AIA check for signed object certificates too. | Rob Austein | |
svn path=/branches/tk671/; revision=5741 | |||
2014-04-02 | Get AIA comparison right. | Rob Austein | |
svn path=/branches/tk671/; revision=5740 | |||
2014-04-02 | Track changes in URI at which parent publishes our CA certificate, and | Rob Austein | |
propegate those changes to certs we issue. svn path=/branches/tk671/; revision=5739 | |||
2014-04-02 | Pull from trunk. | Rob Austein | |
svn path=/branches/tk671/; revision=5733 | |||
2014-04-02 | Don't throw exception from child_cert_obj.__repr__() when ca_detail isn't set. | Rob Austein | |
svn path=/trunk/; revision=5732 | |||
2014-03-31 | Pull from trunk. | Rob Austein | |
svn path=/branches/tk671/; revision=5722 | |||
2014-03-31 | Remove ancient restriction that rootd operator's handle must match the | Rob Austein | |
handle field in rpki.conf. svn path=/trunk/; revision=5721 | |||
2014-03-30 | First cut at upgrade script for change [5678]. Needs testing. | Rob Austein | |
svn path=/branches/tk671/; revision=5719 | |||
2014-03-16 | Pull from trunk. | Rob Austein | |
svn path=/branches/tk671/; revision=5705 | |||
2014-03-10 | Rollback deletion of cached resource certs when there is an error ↵ | Michael Elkins | |
communicating with rpkid. see #681 svn path=/trunk/; revision=5700 | |||
2014-02-27 | Log ee_cert objects properly. | Rob Austein | |
svn path=/branches/tk671/; revision=5692 | |||
2014-02-26 | Sort OIDs into numerical order. | Rob Austein | |
svn path=/branches/tk671/; revision=5686 | |||
2014-02-26 | id-kp-bgpsec-router assigned by the OID Czar. | Rob Austein | |
svn path=/branches/tk671/; revision=5685 | |||
2014-02-25 | regen | Rob Austein | |
svn path=/branches/tk671/; revision=5684 | |||
2014-02-25 | Router certificates working again after changes to get subject name out of ↵ | Rob Austein | |
the PKCS !#10. svn path=/branches/tk671/; revision=5683 | |||
2014-02-25 | Something broke MySQLdb on my laptop during a recent upgrade, and I | Rob Austein | |
have better things to do than shaving that particular yak today. So I'm committing untested changes (to a development branch that nobody but me is using) so I can test them on a working development platform. svn path=/branches/tk671/; revision=5682 | |||
2014-02-21 | Add EKU when generating router certificates. | Rob Austein | |
svn path=/branches/tk671/; revision=5681 | |||
2014-02-21 | Add router certificate support to yamltest, rpkic, etc. | Rob Austein | |
svn path=/branches/tk671/; revision=5680 | |||
2014-02-20 | Whack RSA-specific code to a more general API using PrivateKey and | Rob Austein | |
PublicKey classes, with RSA and ECDSA as subclasses extending PrivateKey. Revised API not necessarily in final form yet, but good enough for smoketest to generate ECDSA keys for testing router certs. svn path=/branches/tk671/; revision=5679 | |||
2014-02-20 | All this router certificate stuff requires enough SQL changes that | Rob Austein | |
we're going to need a fancy upgrade script when we merge this to trunk no matter what else we do, so might as well flip the default on the long-awaited `merge_publication_directories` in the router certificate development branch and handle the upgrade actions for that along with everything else when we finally merge back to trunk. See #479. svn path=/branches/tk671/; revision=5678 | |||
2014-02-20 | Missed case where we have to reissue EE certificate because we just | Rob Austein | |
deprecated the issuing ca_detail. svn path=/branches/tk671/; revision=5677 | |||
2014-02-20 | Clean up ee_cert_obj class. | Rob Austein | |
svn path=/branches/tk671/; revision=5676 | |||
2014-02-20 | Checkpoint. Now generating something that looks a bit like a router | Rob Austein | |
cert, but not right yet: RSA where should be ECDSA, EKU missing, and EE certificate class's .reissue() method isn't working properly yet. svn path=/branches/tk671/; revision=5673 | |||
2014-02-19 | Start adding router certificates to test harness. | Rob Austein | |
svn path=/branches/tk671/; revision=5669 | |||
2014-02-19 | Add ee_cert_obj and its maintenance task to rpkid. Not tested yet. | Rob Austein | |
svn path=/branches/tk671/; revision=5668 | |||
2014-02-18 | Add support for setting serialNumber attribute in certificate names, | Rob Austein | |
since the current router certificate specification uses it. svn path=/branches/tk671/; revision=5667 | |||
2014-02-15 | Clean up task queue initialization. | Rob Austein | |
svn path=/branches/tk671/; revision=5666 | |||
2014-02-15 | Rework add_router_certificate_request to parse the XML format. | Rob Austein | |
svn path=/branches/tk671/; revision=5665 | |||
2014-02-15 | Regen | Rob Austein | |
svn path=/branches/tk671/; revision=5664 | |||
2014-02-14 | Fix XML encoding/decoding of <list_ee_certificate_requests_elt/> elements. | Rob Austein | |
svn path=/branches/tk671/; revision=5663 | |||
2014-02-01 | Oops, smoketest.py depends on the DROP TABLE IF EXISTS statements in rpkid.sql. | Rob Austein | |
svn path=/branches/tk671/; revision=5660 | |||
2014-02-01 | Checkpoint: Add ee_cert table to rpkid.sql. Corresponding Python | Rob Austein | |
class not written yet. svn path=/branches/tk671/; revision=5659 | |||
2014-01-31 | Regen | Rob Austein | |
svn path=/branches/tk671/; revision=5658 | |||
2014-01-31 | Checkpoint. Untested implementation of left-right | Rob Austein | |
<list_ee_certificate_requests/> PDU. svn path=/branches/tk671/; revision=5657 | |||
2014-01-30 | Regen | Rob Austein | |
svn path=/branches/tk671/; revision=5656 | |||
2014-01-30 | First cut at RelaxNG schema for router certificate request interchange. | Rob Austein | |
svn path=/branches/tk671/; revision=5655 | |||
2014-01-29 | First cut of zookeeper methods to add router certs and other EE certs. | Rob Austein | |
Likely needs further refactoring before really usable by GUI or CLI. svn path=/branches/tk671/; revision=5654 | |||
2014-01-29 | Rework PKCS #10 sanity checking code. | Rob Austein | |
svn path=/branches/tk671/; revision=5653 | |||
2014-01-29 | Clean up OID database. Would have done this years ago, had I | Rob Austein | |
understood how the globals() function works. svn path=/branches/tk671/; revision=5652 | |||
2014-01-29 | Checkpoint | Rob Austein | |
svn path=/branches/tk671/; revision=5651 | |||
2014-01-26 | Checkpoint. | Rob Austein | |
svn path=/branches/tk671/; revision=5646 | |||
2014-01-25 | Add EECertificateRequest model; untested, except to verify that | Rob Austein | |
refactoring and adding model definitions didn't break anything that already worked. svn path=/branches/tk671/; revision=5645 | |||
2014-01-17 | Cleanup | Rob Austein | |
svn path=/trunk/; revision=5639 |