aboutsummaryrefslogtreecommitdiff
path: root/rpkid
AgeCommit message (Collapse)Author
2010-09-03Restrict extra identity checks for trusted BPKI EE certificates toRob Austein
subject name and public key, so that things won't come to a grinding halt if BPKI certificates are updated while daemons are running. svn path=/rpkid/rpki/x509.py; revision=3438
2010-09-03We don't really need the *.cacert.cer files.Rob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3437
2010-08-31regenRob Austein
svn path=/rpkid/publication-schema.rng; revision=3435
2010-08-31Sadly, it turns out that CRLs really can grow large enough to hit theRob Austein
length limits previously set in this schema as a precaution. Remove length limit and cross fingers, at least for now. svn path=/rpkid/publication-schema.rnc; revision=3434
2010-08-30Use correct exception handler in call_pubd()Rob Austein
svn path=/rpkid/rpki/left_right.py; revision=3433
2010-08-30Another dropped exception event, sigh.Rob Austein
svn path=/rpkid/rpki/https.py; revision=3432
2010-08-29Break XML packet dumps into multiple lines when logging schemaRob Austein
validation errors. svn path=/rpkid/rpki/publication.py; revision=3431
2010-08-28Add test for withdrawing ROARob Austein
svn path=/rpkid/tests/smoketest.3.yaml; revision=3429
2010-08-28Clean up publication_queue wrapper methodsRob Austein
svn path=/rpkid/rpki/rpki_engine.py; revision=3428
2010-08-28Suppress duplicate roa_requestsRob Austein
svn path=/rpkid/rpki/left_right.py; revision=3427
2010-08-24Schema changes a while backRob Austein
svn path=/rpkid/doc/rpkid.dot; revision=3425
2010-08-13Error in assertion messageRob Austein
svn path=/rpkid/rpki/resource_set.py; revision=3423
2010-07-30Doc nitRob Austein
svn path=/rpkid/rpki/__doc__.py.in; revision=3420
2010-07-22Doh. Thanks, Michael.Rob Austein
svn path=/rpkid/tests/smoketest.py; revision=3417
2010-07-16irdbd uses MySQLdb directly, so has to db.ping(reconnect) on its ownRob Austein
to keep SQL connection open. Feh. svn path=/rpkid/irdbd.py; revision=3414
2010-07-16Only regenerate manifest and CRL once for batch ROA updates.Rob Austein
svn path=/rpkid/rpki/left_right.py; revision=3413
2010-07-16Doh, .sql_mark_deleted() works better if it also marks record dirty.Rob Austein
svn path=/rpkid/rpki/sql.py; revision=3412
2010-07-16Duct tape and bailing wire fix for .update_roas(). This isn't rightRob Austein
yet, arguably the underlying design is wrong here, but at least in theory this code should now clean up after itself. svn path=/rpkid/rpki/left_right.py; revision=3411
2010-07-15ParanoiaRob Austein
svn path=/rpkid/rpki/left_right.py; revision=3407
2010-07-15More ROA loggingRob Austein
svn path=/rpkid/rpki/left_right.py; revision=3406
2010-07-15Can't see any reason why roa.asn should ever be NULL either.Rob Austein
svn path=/rpkid/rpkid.sql; revision=3405
2010-07-15I can think of no sane reason to allow roa.roa or roa.cert to be NULL.Rob Austein
svn path=/rpkid/rpkid.sql; revision=3404
2010-07-15Clean up unit testRob Austein
svn path=/rpkid/rpki/adns.py; revision=3403
2010-07-15Rolling expirations testRob Austein
svn path=/rpkid/tests/smoketest.9.yaml; revision=3402
2010-07-15Log reason for deciding to generate a ROA.Rob Austein
svn path=/rpkid/rpki/rpki_engine.py; revision=3401
2010-07-14Use setsockopt() to force normal (ie, BSD-like) IPv6 socket behaviorRob Austein
even on Linux. svn path=/rpkid/rpki/https.py; revision=3400
2010-07-14Fix several Linux-related problems found during last workshop:Rob Austein
1) rpki.https.http_listener() didn't handle .bind() failure properly, which left asyncore in a weird state. 2) On Linux, sockaddr.getaddr() can return duplicate records. This is insane, but the maintainers appear to consider this a feature, so we have to suppress it. 3) Linux's support for IPv4 mapped addresses in IPv6 is so whacked that it's impossible to tell whether a socket.bind() failure is real or an artifact of Linux's whacked API without checking the value of a magic sysctl. This is just too much fun for words, so IPv6 listeners are now disabled by default on Linux; feel free to turn them on yourself, but don't blame me if they bite you. svn path=/rpkid/rpki/https.py; revision=3399
2010-07-11regenRob Austein
svn path=/rpkid/doc/Installation; revision=3390
2010-07-11Stale filenameRob Austein
svn path=/rpkid/rpki/__doc__.py.in; revision=3388
2010-07-11Sanitized config for early portal GUI debugRob Austein
svn path=/rpkid/tests/smoketest.8.yaml; revision=3386
2010-07-11RegenRob Austein
svn path=/rpkid/doc/manual.pdf; revision=3384
2010-07-11Fix linksRob Austein
svn path=/rpkid/rpki/__doc__.py.in; revision=3383
2010-07-11Ok, redirection takes a few seconds...Rob Austein
svn path=/rpkid/doc/manual.html; revision=3382
2010-07-11Try adding pointer to autogenerated HTMLRob Austein
svn path=/rpkid/doc/manual.html; revision=3381
2010-07-11regenRob Austein
svn path=/rpkid/doc/Installation; revision=3379
2010-07-11Clean up uses of RuntimeError exceptionRob Austein
svn path=/rpkid/irdbd.py; revision=3378
2010-07-11html2text did something weird, work around itRob Austein
svn path=/rpkid/rpki/__doc__.py.in; revision=3377
2010-07-11Stale build instructionsRob Austein
svn path=/rpkid/rpki/__doc__.py.in; revision=3376
2010-07-10Forgot to update test data for extended <list_received_resources/> syntaxRob Austein
svn path=/rpkid/tests/left-right-protocol-samples.xml; revision=3375
2010-07-08Make myrpki.csv_writer() an object, per Michael's requestRob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3368
2010-07-08.from_strings() methodsRob Austein
svn path=/rpkid/rpki/resource_set.py; revision=3366
2010-07-07More refactoring and cleanupRob Austein
svn path=/rpkid/rpki/exceptions.py; revision=3362
2010-07-07Refactor .parse_str() methodsRob Austein
svn path=/rpkid/rpki/resource_set.py; revision=3356
2010-07-07Make resource_range_ip.prefixlen() a public method.Rob Austein
svn path=/rpkid/rpki/resource_set.py; revision=3355
2010-07-07Fixed runtime test hack I forgot to check in.Rob Austein
svn path=/rpkid/tests/yamltest-test-all.sh; revision=3354
2010-07-06Clean up yamltest.dir tooRob Austein
svn path=/rpkid/tests/Makefile; revision=3346
2010-07-06Add rpki.ipaddrs.parse().Rob Austein
svn path=/rpkid/rpki/ipaddrs.py; revision=3345
2010-07-04Forgot to update this for revised directory structureRob Austein
svn path=/rpkid/tests/yamltest-test-all.sh; revision=3335
2010-07-04Handle nested hosting cases properly.Rob Austein
svn path=/rpkid/rpki/myrpki.py; revision=3324
2010-07-03Set "run_rpkid" correctly. This exposes a structural problem withRob Austein
yamltest's initialization sequence, which needs to be fixed, but at least this way myrpki knows that yamltest is doing something screwy. svn path=/rpkid/tests/yamltest.py; revision=3322