aboutsummaryrefslogtreecommitdiff
path: root/rpkid
AgeCommit message (Collapse)Author
2012-08-19Simplify core I/O loop, back to what I originally intended beforeRob Austein
accidently digging myself into a hole with a circular reference that confused Python's garbage collector. See #275. This version is much too noisy, and could use some cleanup, but basic code seems to work, and I want to test it on multiple machines in parallel, so checking it in now. svn path=/branches/tk274/; revision=4642
2012-08-19Typo.Rob Austein
svn path=/branches/tk274/; revision=4641
2012-08-19Refactor rpkid high-level task system to use classes rather thanRob Austein
closures, to make it easier for long-running tasks to yield the CPU periodically. As a side effect, this moves a lot of dense code out of rpki.left_right.self_elt methods and into separate task-specific classes. See #275. svn path=/branches/tk274/; revision=4640
2012-08-18Merge rpkic profiling support from trunk/.Rob Austein
svn path=/branches/tk274/; revision=4639
2012-08-18Add suppot for profiling rpkic.Rob Austein
svn path=/trunk/; revision=4638
2012-08-18CleanupRob Austein
svn path=/trunk/; revision=4637
2012-08-18Add profiling support.Rob Austein
svn path=/trunk/; revision=4636
2012-08-17Checkpoint. New class-based tasks, not yet tested, rest of code notRob Austein
yet adapted to match. svn path=/branches/tk274/; revision=4635
2012-08-17As of [4632], rpki.sql.session._wrap_execute() handles SQL pingsRob Austein
automatically, no need for explict pings elsewhere. svn path=/branches/tk274/; revision=4634
2012-08-17ReformatRob Austein
svn path=/branches/tk274/; revision=4633
2012-08-17Automate SQL pings. Suppress case where ROA regeneration gratuitouslyRob Austein
updated CRL and manifest. More debug logging. svn path=/branches/tk274/; revision=4632
2012-08-14Add POW C function to pull SKI from a certificate, so we can bypassRob Austein
the slower POW.pkix code in what profiling suggests is a serious hotspot during manifest generation. See #20, #274. svn path=/branches/tk274/; revision=4631
2012-08-13Back out [4629], which tests out 50% slower than the code it replaced.Rob Austein
Sigh. svn path=/branches/tk274/; revision=4630
2012-08-13Direct conversion between byte string and long, using scaryRob Austein
ctypes.pythonapi interface. svn path=/branches/tk274/; revision=4629
2012-08-10Add debug-only hack to let us reuse RSA keys from previous test runs.Rob Austein
Totally insecure. DO NOT USE THIS IN PRODUCTION. We may want to remove this before merging this branch back to trunk, but I've tried to make it difficult to hurt oneself with this by accident, and it makes a big difference in CPU time spent generating keys on large test runs. svn path=/branches/tk274/; revision=4628
2012-08-10Add seemingly-pointless .cursor() call, whose real purpose is to runRob Austein
the underlying MySQLdb.Connection.ping() method before we start a new operation. Not sure why this is necessary, I thought Django handled that sort of thing automatically, but ORM support for long-lived servers is a bit sketchy so maybe they missed this one. svn path=/branches/tk274/; revision=4627
2012-08-09Switch rpki.sql.session.cache to use weak references, so that Python'sRob Austein
garbage collector can free up cache entries we're not using for us. Rework update_roas() to be a bit more frugal with memory. See #278. svn path=/branches/tk274/; revision=4626
2012-08-09Sometimes it takes more than one signal to get a subprocess to exit.Rob Austein
svn path=/branches/tk274/; revision=4624
2012-08-08Checkpoint of work to date, see #274 and #275.Rob Austein
svn path=/branches/tk274/; revision=4623
2012-08-07Safe mapping functions for OIDs, now that we're using the same code toRob Austein
deal with BPKI certificates with all the whacky distinguished name fields allowed by X.509, or at least by PKIX. See #279. svn path=/trunk/; revision=4621
2012-08-07add countryName oid. references #279Michael Elkins
svn path=/trunk/; revision=4620
2012-07-31Move rpkic autosync control to rpki.conf.Rob Austein
svn path=/trunk/; revision=4617
2012-07-31Somehow we got an exception whose string expansion was the nullRob Austein
string. Huh? Log exception class name in cae this ever happens again. svn path=/trunk/; revision=4616
2012-07-31First cut at allowing I/O loop to run during processing of massiveRob Austein
batches of ROA requests. Not yet well tested, preliminary results look good and I have people waiting for this patch, so checking in now while continuing testing. See #275. svn path=/trunk/; revision=4615
2012-07-30Remove -s from getopt string too.Rob Austein
svn path=/trunk/; revision=4612
2012-07-30Add --stop_after_configRob Austein
svn path=/trunk/; revision=4611
2012-07-30Switch to Django ORM .raw() query interface for a few queries whichRob Austein
were showing .deepcopy() hot spots under profiling. See #274. svn path=/trunk/; revision=4610
2012-07-26Add profiling support to yamltest; fix profiling support in daemons.Rob Austein
Tweak yamltest to force one ROA request per prefix regardless of how the user expressed it; we may want to revisit this eventually, but it's more useful this way for now. svn path=/trunk/; revision=4609
2012-07-25Add profiling support.Rob Austein
svn path=/trunk/; revision=4608
2012-07-25Clean up SQL cache when it gets big, break up huge batches of ROARob Austein
requests to avoid timeouts. See #274. svn path=/trunk/; revision=4607
2012-07-23Use TAL instead of TA.Rob Austein
svn path=/trunk/; revision=4606
2012-07-16simplify exiting the scriptMichael Elkins
svn path=/trunk/; revision=4604
2012-07-16catch socket.error and print a friendlier message when we can't talk to ↵Michael Elkins
rpkid. fixes #268 svn path=/trunk/; revision=4603
2012-07-13send_email() should have been send_mail()Michael Elkins
svn path=/trunk/; revision=4602
2012-07-13fix pep8 warningsMichael Elkins
svn path=/trunk/; revision=4601
2012-07-13fix missing importsMichael Elkins
svn path=/trunk/; revision=4600
2012-07-13fetch list of published objects from rpkid, and check for valid->invalid ↵Michael Elkins
transitions, emailing an alert when a problem is detected. references #257 svn path=/trunk/; revision=4599
2012-07-12move fetching of admin email addresses to the glue library so it can be used ↵Michael Elkins
by rpkigui-rcynic as well svn path=/trunk/; revision=4598
2012-07-10add option to not send email report; useful for cli debuggingMichael Elkins
svn path=/trunk/; revision=4593
2012-07-09in addition to logging to stdout, send email notifications to addresses ↵Michael Elkins
listed in published ghostbuster records for each user. remove -v (verbose) option svn path=/trunk/; revision=4592
2012-07-06use the client_handle specified in the <list_published_objects/> response to ↵Michael Elkins
determine child. references #104. svn path=/trunk/; revision=4590
2012-07-06RegenRob Austein
svn path=/trunk/; revision=4589
2012-07-06Add control interface to clear CMS-timestamp-based replay protection,Rob Austein
so we can recover from misconfigured clocks. Closes #265. Add child_handle attribute to <list_published_objects/> response. Closes #266. svn path=/trunk/; revision=4588
2012-07-06add support for checking child resource certsMichael Elkins
make the expire time configurable allow the user to optionally specify a list of resource handles to check svn path=/trunk/; revision=4587
2012-07-06Implement CMS-timestamp-based replay protection. Closes #35.Rob Austein
svn path=/trunk/; revision=4586
2012-07-06force update of received resources cache prior to checking for rescert ↵Michael Elkins
expiration svn path=/trunk/; revision=4584
2012-07-06remove debug msg to stdout from rpki.gui.app.glue.list_received_resourcesMichael Elkins
svn path=/trunk/; revision=4583
2012-07-05add current handle name to each warning messageMichael Elkins
svn path=/trunk/; revision=4582
2012-07-05use str() to print to detail of each Certificate subclass when displaying a ↵Michael Elkins
warning message svn path=/trunk/; revision=4581
2012-07-05fix __unicode__ method for HostedCAMichael Elkins
svn path=/trunk/; revision=4580