aboutsummaryrefslogtreecommitdiff
path: root/rpkid/rpki
AgeCommit message (Collapse)Author
2014-04-05Source tree reorg, phase 1. Almost everything moved, no file contents changed.Rob Austein
svn path=/branches/tk685/; revision=5757
2014-04-05RegenRob Austein
svn path=/trunk/; revision=5754
2014-04-05Merge tk671 (router certificate support) back to trunk. See #671.Rob Austein
svn path=/trunk/; revision=5753
2014-04-05Add delete_certificate_request and show_certificate_requests to rpkic.Rob Austein
svn path=/branches/tk671/; revision=5751
2014-04-04RegenRob Austein
svn path=/branches/tk671/; revision=5749
2014-04-04RegenRob Austein
svn path=/branches/tk671/; revision=5747
2014-04-03Helps to fix the code as well as the comments.Rob Austein
svn path=/branches/tk671/; revision=5742
2014-04-02Need AIA check for signed object certificates too.Rob Austein
svn path=/branches/tk671/; revision=5741
2014-04-02Get AIA comparison right.Rob Austein
svn path=/branches/tk671/; revision=5740
2014-04-02Track changes in URI at which parent publishes our CA certificate, andRob Austein
propegate those changes to certs we issue. svn path=/branches/tk671/; revision=5739
2014-04-02Pull from trunk.Rob Austein
svn path=/branches/tk671/; revision=5733
2014-04-02Don't throw exception from child_cert_obj.__repr__() when ca_detail isn't set.Rob Austein
svn path=/trunk/; revision=5732
2014-03-31Pull from trunk.Rob Austein
svn path=/branches/tk671/; revision=5722
2014-03-31Remove ancient restriction that rootd operator's handle must match theRob Austein
handle field in rpki.conf. svn path=/trunk/; revision=5721
2014-03-30First cut at upgrade script for change [5678]. Needs testing.Rob Austein
svn path=/branches/tk671/; revision=5719
2014-03-16Pull from trunk.Rob Austein
svn path=/branches/tk671/; revision=5705
2014-03-10Rollback deletion of cached resource certs when there is an error ↵Michael Elkins
communicating with rpkid. see #681 svn path=/trunk/; revision=5700
2014-02-27Log ee_cert objects properly.Rob Austein
svn path=/branches/tk671/; revision=5692
2014-02-26Sort OIDs into numerical order.Rob Austein
svn path=/branches/tk671/; revision=5686
2014-02-26id-kp-bgpsec-router assigned by the OID Czar.Rob Austein
svn path=/branches/tk671/; revision=5685
2014-02-25regenRob Austein
svn path=/branches/tk671/; revision=5684
2014-02-25Router certificates working again after changes to get subject name out of ↵Rob Austein
the PKCS !#10. svn path=/branches/tk671/; revision=5683
2014-02-25Something broke MySQLdb on my laptop during a recent upgrade, and IRob Austein
have better things to do than shaving that particular yak today. So I'm committing untested changes (to a development branch that nobody but me is using) so I can test them on a working development platform. svn path=/branches/tk671/; revision=5682
2014-02-21Add EKU when generating router certificates.Rob Austein
svn path=/branches/tk671/; revision=5681
2014-02-21Add router certificate support to yamltest, rpkic, etc.Rob Austein
svn path=/branches/tk671/; revision=5680
2014-02-20Whack RSA-specific code to a more general API using PrivateKey andRob Austein
PublicKey classes, with RSA and ECDSA as subclasses extending PrivateKey. Revised API not necessarily in final form yet, but good enough for smoketest to generate ECDSA keys for testing router certs. svn path=/branches/tk671/; revision=5679
2014-02-20All this router certificate stuff requires enough SQL changes thatRob Austein
we're going to need a fancy upgrade script when we merge this to trunk no matter what else we do, so might as well flip the default on the long-awaited `merge_publication_directories` in the router certificate development branch and handle the upgrade actions for that along with everything else when we finally merge back to trunk. See #479. svn path=/branches/tk671/; revision=5678
2014-02-20Missed case where we have to reissue EE certificate because we justRob Austein
deprecated the issuing ca_detail. svn path=/branches/tk671/; revision=5677
2014-02-20Clean up ee_cert_obj class.Rob Austein
svn path=/branches/tk671/; revision=5676
2014-02-20Checkpoint. Now generating something that looks a bit like a routerRob Austein
cert, but not right yet: RSA where should be ECDSA, EKU missing, and EE certificate class's .reissue() method isn't working properly yet. svn path=/branches/tk671/; revision=5673
2014-02-19Start adding router certificates to test harness.Rob Austein
svn path=/branches/tk671/; revision=5669
2014-02-19Add ee_cert_obj and its maintenance task to rpkid. Not tested yet.Rob Austein
svn path=/branches/tk671/; revision=5668
2014-02-18Add support for setting serialNumber attribute in certificate names,Rob Austein
since the current router certificate specification uses it. svn path=/branches/tk671/; revision=5667
2014-02-15Clean up task queue initialization.Rob Austein
svn path=/branches/tk671/; revision=5666
2014-02-15Rework add_router_certificate_request to parse the XML format.Rob Austein
svn path=/branches/tk671/; revision=5665
2014-02-15RegenRob Austein
svn path=/branches/tk671/; revision=5664
2014-02-14Fix XML encoding/decoding of <list_ee_certificate_requests_elt/> elements.Rob Austein
svn path=/branches/tk671/; revision=5663
2014-02-01Oops, smoketest.py depends on the DROP TABLE IF EXISTS statements in rpkid.sql.Rob Austein
svn path=/branches/tk671/; revision=5660
2014-02-01Checkpoint: Add ee_cert table to rpkid.sql. Corresponding PythonRob Austein
class not written yet. svn path=/branches/tk671/; revision=5659
2014-01-31RegenRob Austein
svn path=/branches/tk671/; revision=5658
2014-01-31Checkpoint. Untested implementation of left-rightRob Austein
<list_ee_certificate_requests/> PDU. svn path=/branches/tk671/; revision=5657
2014-01-30RegenRob Austein
svn path=/branches/tk671/; revision=5656
2014-01-30First cut at RelaxNG schema for router certificate request interchange.Rob Austein
svn path=/branches/tk671/; revision=5655
2014-01-29First cut of zookeeper methods to add router certs and other EE certs.Rob Austein
Likely needs further refactoring before really usable by GUI or CLI. svn path=/branches/tk671/; revision=5654
2014-01-29Rework PKCS #10 sanity checking code.Rob Austein
svn path=/branches/tk671/; revision=5653
2014-01-29Clean up OID database. Would have done this years ago, had IRob Austein
understood how the globals() function works. svn path=/branches/tk671/; revision=5652
2014-01-29CheckpointRob Austein
svn path=/branches/tk671/; revision=5651
2014-01-26Checkpoint.Rob Austein
svn path=/branches/tk671/; revision=5646
2014-01-25Add EECertificateRequest model; untested, except to verify thatRob Austein
refactoring and adding model definitions didn't break anything that already worked. svn path=/branches/tk671/; revision=5645
2014-01-17CleanupRob Austein
svn path=/trunk/; revision=5639