aboutsummaryrefslogtreecommitdiff
path: root/rpkid
AgeCommit message (Collapse)Author
2013-09-10Skip build/ subdirectory when constructing TAGS files.Rob Austein
svn path=/trunk/; revision=5490
2013-09-09set default logging level to ERROR for rpkigui-rcynic script so we don't ↵Michael Elkins
flood the user's mailbox when invokved by cron frequently see #608 svn path=/trunk/; revision=5489
2013-09-03use Python None as default value for ForeignKey field, rather than 0.Michael Elkins
see #607 svn path=/trunk/; revision=5486
2013-09-01Add resource_bag.__nonzero__() method.Rob Austein
svn path=/trunk/; revision=5483
2013-08-28Pass Python exceptions from callback through to caller correctly.Rob Austein
svn path=/trunk/; revision=5473
2013-08-28Cleanup.Rob Austein
svn path=/trunk/; revision=5472
2013-08-28Rework the new certificate validation code to better encapsulate theRob Austein
underlying semantics in a Pythonic wrapper: X509Store.verify() now instantiates X509StoreCTX, and .verify_callback() is now an optional method supplied by the user via subclassing. svn path=/trunk/; revision=5471
2013-08-27X509StoreCTX.getCurrentCertificate() and X509StoreCTX.getChain().Rob Austein
svn path=/trunk/; revision=5470
2013-08-27X509StoreCTX.store property.Rob Austein
svn path=/trunk/; revision=5469
2013-08-27Doh, simpler.Rob Austein
svn path=/trunk/; revision=5468
2013-08-27CleanupRob Austein
svn path=/trunk/; revision=5467
2013-08-27Move most control operations from X509StoreCTX to X509Store.Rob Austein
svn path=/trunk/; revision=5466
2013-08-25Fix various things that required sequences to accept iterables. Fix aRob Austein
few incorrect error messages. svn path=/trunk/; revision=5465
2013-08-25Certificate verification code approaching something usable.Rob Austein
svn path=/trunk/; revision=5464
2013-08-24Basic certificate verification works. Needs a bunch of additionalRob Austein
methods, properties, and constants to be fully useful. svn path=/trunk/; revision=5463
2013-08-23Rip out PEM_converter class, as we no longer need to supportRob Austein
interoperation between three separate ASN.1 packages and our updated rpki.POW PEM functions use the OpenSSL libraries to handle corner cases that PEM_converter did not, like PKCS8. See #603. Fix log-rate-limiting in Auto_update DER objects to be time-based rather than counter based; reorder checks so that daemons will have some chance of recovering when the user does something strange with required .cer or .key files then repairs the error. See #602. svn path=/trunk/; revision=5462
2013-08-23Notes on future work to track OpenSSL's PKCS #1.5 -> PKCS #8 transition.Rob Austein
svn path=/trunk/; revision=5461
2013-08-22First cut at adding a .verify() method back to the X509Store class.Rob Austein
Not done yet, but does have the tricky bit (Python callback). svn path=/trunk/; revision=5460
2013-07-24Pickling support.Rob Austein
svn path=/trunk/; revision=5443
2013-07-23Apparently I never set svn:keywords for this file.Rob Austein
svn path=/trunk/; revision=5442
2013-07-19Push updated BPKI CRL into pubd at the same time as we're pushingRob Austein
updated BSCs into rpkid. svn path=/trunk/; revision=5441
2013-07-18Log stale BPKI CMS CRLs. See #294.Rob Austein
svn path=/trunk/; revision=5438
2013-07-17Drop rootd's manifest and CRL interval down to same interval used forRob Austein
regenerating the subject certificate, to avoid confusing GUI expiration checker when rcynic has rsync-early disabled. See #579. svn path=/trunk/; revision=5437
2013-07-17Bump default lifetime of RPKI certificate rootd issues to rpkid up toRob Austein
eight weeks, to play better with GUI's expiration timer. Closes #579. svn path=/trunk/; revision=5436
2013-07-17Add ability for auto_update DER objects to coast through transientRob Austein
failures like missing files. Closes #580. svn path=/trunk/; revision=5435
2013-07-16Send exceptions in irdb_query() to the errback handler rather thanRob Austein
letting them propagate. See #580. svn path=/trunk/; revision=5432
2013-07-16Wrap ridiculously long lines.Rob Austein
svn path=/trunk/; revision=5431
2013-07-15Try not to stomp on existing Apache configurations during initialRob Austein
install, add comments explaining our configuration in case user has to sort this out by hand. svn path=/trunk/; revision=5428
2013-07-02Document web_portal::allowed-hosts. Closes #567.Rob Austein
svn path=/trunk/; revision=5422
2013-06-27add button to delete all alertsMichael Elkins
rpkigui-reset-demo will clear all alerts for labuser* accounts see #562 svn path=/trunk/; revision=5421
2013-06-26Don't allow exceptions (eg, MySQL connection errors) to prevent usRob Austein
from scheduling next cron cycle. Closes #560. svn path=/trunk/; revision=5416
2013-06-25Handling of start_{rpkid,irdbd} options was inverted. See #559.Rob Austein
svn path=/trunk/; revision=5415
2013-06-18Synchronize BSCs after updating BPKI, closes #555.Rob Austein
Expanded calling sequence to Zookeeper.call_{pubd,rpkid}() methods to include sequences and generators, simplifying the calling code. svn path=/trunk/; revision=5412
2013-06-14fix bug in roa confirmation page where routes that overlap with the roa, but ↵Michael Elkins
are not covered, were mistakenly included in the list of affected routes closes #553 svn path=/trunk/; revision=5407
2013-06-13display rpki.net software version in the gui toolbarMichael Elkins
see #543 svn path=/trunk/; revision=5403
2013-06-13add current resource holder name to page title so it appears in the browser tab.Michael Elkins
closes #546 svn path=/trunk/; revision=5402
2013-06-13handle exception thrown when there are no matching routes to displayMichael Elkins
see #548 svn path=/trunk/; revision=5401
2013-06-13fix botched decoration of the alert class-based views where the self ↵Michael Elkins
argument was omitted, and the wrong parent class was used in super() due to copy+paste closes #549 svn path=/trunk/; revision=5400
2013-06-10decorate alert views to require a user to be logged in and a resource handle ↵Michael Elkins
selected closes #542 svn path=/trunk/; revision=5388
2013-06-10need to access ResourceHolderCA via the GUI's proxy model to pass to ↵Michael Elkins
list_received_resources() see #544 svn path=/trunk/; revision=5386
2013-06-10rpki.version hack and rpkic command to display it.Rob Austein
See #543. svn path=/trunk/; revision=5384
2013-06-07use {% load url from future %} to support older versions of django prior to ↵Michael Elkins
the syntax change see #528 svn path=/trunk/; revision=5381
2013-06-07expand link to resource holder creation page with {% url %} rather than ↵Michael Elkins
hardcoding it (duh) see #528 svn path=/trunk/; revision=5380
2013-06-06add Help link to navigation bar which points to rpki.net wiki pageMichael Elkins
closes #521 svn path=/trunk/; revision=5376
2013-06-06Add a link to the resource holder creation page if the current user is a ↵Michael Elkins
superuser and there are no resource holders defined. closes #528 svn path=/trunk/; revision=5375
2013-06-04"ubunutu" => "ubuntu", sigh. Fixes #540.Rob Austein
svn path=/trunk/; revision=5368
2013-06-04.lower(), not .downcase(). Fixes #539.Rob Austein
svn path=/trunk/; revision=5366
2013-06-04Markup tweak.Rob Austein
svn path=/trunk/; revision=5363
2013-06-04Finally got wiki page header right? Warning comment is a lot moreRob Austein
obvious now, anyway. svn path=/trunk/; revision=5362
2013-06-04Use a subsection for each option instead of an indented list.Rob Austein
svn path=/trunk/; revision=5360