Age | Commit message (Collapse) | Author |
|
PublicKey classes, with RSA and ECDSA as subclasses extending
PrivateKey. Revised API not necessarily in final form yet, but good
enough for smoketest to generate ECDSA keys for testing router certs.
svn path=/branches/tk671/; revision=5679
|
|
cert, but not right yet: RSA where should be ECDSA, EKU missing, and
EE certificate class's .reissue() method isn't working properly yet.
svn path=/branches/tk671/; revision=5673
|
|
svn path=/branches/tk671/; revision=5672
|
|
svn path=/branches/tk671/; revision=5671
|
|
Take advantage of YAML's automatic line folding to make the embedded
shell code in some test configurations a bit more readable.
svn path=/branches/tk671/; revision=5670
|
|
svn path=/branches/tk671/; revision=5669
|
|
understood how the globals() function works.
svn path=/branches/tk671/; revision=5652
|
|
svn path=/trunk/; revision=5627
|
|
svn path=/trunk/; revision=5624
|
|
svn path=/trunk/; revision=5621
|
|
svn path=/trunk/; revision=5620
|
|
svn path=/trunk/; revision=5536
|
|
wait for them to exit anyway.
svn path=/trunk/; revision=5535
|
|
svn path=/trunk/; revision=5534
|
|
svn path=/trunk/; revision=5514
|
|
the fly during compilation.
svn path=/trunk/; revision=5335
|
|
svn path=/trunk/; revision=5319
|
|
svn path=/trunk/; revision=5305
|
|
svn path=/trunk/; revision=5304
|
|
child in rpkic, and teach yamltest to use it.
svn path=/trunk/; revision=5301
|
|
svn path=/trunk/; revision=5300
|
|
sharing a single regeneration interval value between certificates and
CRLs just doesn't work, and we can infer the CRL regeneration interval
from crl_interval. Change default value of regen_margin to something
consistent with human-time-scale expectations and the GUI's impending
expiration warning interval. See #347 and #512.
svn path=/trunk/; revision=5297
|
|
rid of a lot of Makefile.in code that no longer serves any useful
purpose.
svn path=/trunk/; revision=5285
|
|
configure_root command; and rename rpkic delete_self to
delete_identity for symmetry. Clean up handling of rpkic command
syntax errors. Exit with non-zero status when rpkic is invoked with
arguments and the given command throws an error. See #466.
svn path=/trunk/; revision=5213
|
|
them, and teach Zookeeper.write_bpki_files() to tolerate being called
with rootd enabled but not yet configured. See #466.
svn path=/trunk/; revision=5211
|
|
svn path=/trunk/; revision=5196
|
|
svn path=/trunk/; revision=5188
|
|
GUI provide its own file-like object as a destination for logging.
See #396.
svn path=/trunk/; revision=4979
|
|
svn path=/trunk/; revision=4886
|
|
svn path=/branches/tk274/; revision=4807
|
|
svn path=/branches/tk274/; revision=4794
|
|
ASN1_TIME, so we can stop mucking about with this conversion in the
Python code.
svn path=/branches/tk274/; revision=4789
|
|
svn path=/branches/tk274/; revision=4786
|
|
svn path=/branches/tk274/; revision=4781
|
|
svn path=/branches/tk274/; revision=4775
|
|
smoketest repository layout to silence (correct) rcynic whining about
objects not in manifest.
svn path=/branches/tk274/; revision=4761
|
|
re-run canned experiments without worrying about BPKI expirations.
Probably ought to tie all of this back to YAML valid_until settings,
but this will do for the moment.
svn path=/branches/tk274/; revision=4747
|
|
svn path=/branches/tk274/; revision=4744
|
|
svn path=/branches/tk274/; revision=4743
|
|
the bug fixed in [4684].
svn path=/branches/tk274/; revision=4686
|
|
svn path=/branches/tk274/; revision=4684
|
|
mode.
svn path=/branches/tk274/; revision=4680
|
|
svn path=/branches/tk274/; revision=4679
|
|
consequence, non-loopback users of yamlconf output will need to call
"rpkic update_bpki" before starting daemons.
svn path=/branches/tk274/; revision=4678
|
|
technically correct, but there are already enough violations of the
naming scheme that one more won't matter.
svn path=/branches/tk274/; revision=4677
|
|
svn path=/branches/tk274/; revision=4671
|
|
svn path=/branches/tk274/; revision=4670
|
|
svn path=/branches/tk274/; revision=4669
|
|
scripts.
svn path=/branches/tk274/; revision=4668
|
|
configurations, to avoid warnings about it being tainted. This is
really a conflict between needing to support rootd and wanting to make
the configuration clean when not running rootd: either we add an extra
directory level to the publication structure which we don't use when
not running rootd, or we move root.cer somewhere else. Since the
latter is simpler except for test configurations which are already
generated for us by programs, we do the latter.
svn path=/branches/tk274/; revision=4667
|