RPKI Engine 1.0
|
Public Member Functions | |
def | activate |
def | ca |
def | child_certs |
def | create |
def | crl_published_callback |
def | crl_uri |
def | crl_uri_tail |
def | delete |
def | fetch_child_certs |
def | generate_crl |
def | generate_manifest |
def | generate_manifest_cert |
def | ghostbusters |
def | has_expired |
def | issue |
def | issue_ee |
def | manifest_published_callback |
def | manifest_uri |
def | reissue |
def | revoke |
def | revoked_certs |
def | roas |
def | sql_decode |
def | update |
Public Attributes | |
ca_cert_uri | |
ca_id | |
gctx | |
latest_crl | |
latest_manifest | |
latest_manifest_cert | |
manifest_private_key_id | |
manifest_public_key | |
private_key_id | |
public_key | |
state | |
Static Public Attributes | |
crl_published = None | |
latest_ca_cert = None | |
manifest_published = None | |
tuple | sql_template |
Internal CA detail object.
Definition at line 653 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.activate | ( | self, | |
ca, | |||
cert, | |||
uri, | |||
callback, | |||
errback, | |||
predecessor = None |
|||
) |
Activate this ca_detail.
Definition at line 755 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.ca | ( | self | ) |
Fetch CA object to which this ca_detail links.
Definition at line 688 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.child_certs | ( | self | ) |
Fetch all child_cert objects that link to this ca_detail.
Definition at line 701 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.create | ( | cls, | |
ca | |||
) |
Create a new ca_detail object for a specified CA.
Definition at line 913 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.crl_published_callback | ( | self, | |
pdu | |||
) |
Check result of CRL publication.
Definition at line 1036 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.crl_uri | ( | self | ) |
Return publication URI for this ca_detail's CRL.
Definition at line 729 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.crl_uri_tail | ( | self | ) |
Return tail (filename portion) of publication URI for this ca_detail's CRL.
Definition at line 736 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.delete | ( | self, | |
ca, | |||
publisher, | |||
allow_failure = False |
|||
) |
Delete this ca_detail and all of the certs it issued. If allow_failure is true, we clean up as much as we can but don't raise an exception.
Definition at line 782 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.fetch_child_certs | ( | self, | |
child = None , |
|||
ski = None , |
|||
unique = False |
|||
) |
Fetch all child_cert objects that link to this ca_detail.
Definition at line 694 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.generate_crl | ( | self, | |
publisher, | |||
nextUpdate = None |
|||
) |
Generate a new CRL for this ca_detail. At the moment this is unconditional, that is, it is up to the caller to decide whether a new CRL is needed.
Definition at line 1000 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.generate_manifest | ( | self, | |
publisher, | |||
nextUpdate = None |
|||
) |
Generate a new manifest for this ca_detail.
Definition at line 1044 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.generate_manifest_cert | ( | self | ) |
Generate a new manifest certificate for this ca_detail.
Definition at line 948 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.ghostbusters | ( | self | ) |
Fetch all Ghostbuster objects that link to this ca_detail.
Definition at line 722 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.has_expired | ( | self | ) |
Return whether this ca_detail's certificate has expired.
Definition at line 749 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.issue | ( | self, | |
ca, | |||
child, | |||
subject_key, | |||
sia, | |||
resources, | |||
publisher, | |||
child_cert = None |
|||
) |
Issue a new certificate to a child. Optional child_cert argument specifies an existing child_cert object to update in place; if not specified, we create a new one. Returns the child_cert object containing the newly issued cert.
Definition at line 956 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.issue_ee | ( | self, | |
ca, | |||
resources, | |||
subject_key, | |||
sia = None |
|||
) |
Issue a new EE certificate.
Definition at line 931 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.manifest_published_callback | ( | self, | |
pdu | |||
) |
Check result of manifest publication.
Definition at line 1079 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.manifest_uri | ( | self | ) |
Return publication URI for this ca_detail's manifest.
Definition at line 743 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.reissue | ( | self, | |
cb, | |||
eb | |||
) |
Reissue all current certificates issued by this ca_detail.
Definition at line 1087 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.revoke | ( | self, | |
cb, | |||
eb | |||
) |
Request revocation of all certificates whose SKI matches the key for this ca_detail. Tasks: - Request revocation of old keypair by parent. - Revoke all child certs issued by the old keypair. - Generate a final CRL, signed with the old keypair, listing all the revoked certs, with a next CRL time after the last cert or CRL signed by the old keypair will have expired. - Generate a corresponding final manifest. - Destroy old keypairs. - Leave final CRL and manifest in place until their nextupdate time has passed.
Definition at line 816 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.revoked_certs | ( | self | ) |
Fetch all revoked_cert objects that link to this ca_detail.
Definition at line 708 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.roas | ( | self | ) |
Fetch all ROA objects that link to this ca_detail.
Definition at line 715 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.sql_decode | ( | self, | |
vals | |||
) |
Extra assertions for SQL decode of a ca_detail_obj.
Reimplemented from rpki.sql.sql_persistent.
Definition at line 679 of file rpki/rpkid.py.
def rpki.rpkid.ca_detail_obj.update | ( | self, | |
parent, | |||
ca, | |||
rc, | |||
sia_uri_changed, | |||
old_resources, | |||
callback, | |||
errback | |||
) |
Need to get a new certificate for this ca_detail and perhaps frob children of this ca_detail.
Definition at line 888 of file rpki/rpkid.py.
Definition at line 757 of file rpki/rpkid.py.
Definition at line 915 of file rpki/rpkid.py.
rpki.rpkid.ca_detail_obj.crl_published = None [static] |
Definition at line 675 of file rpki/rpkid.py.
Reimplemented from rpki.sql.sql_persistent.
Definition at line 915 of file rpki/rpkid.py.
rpki.rpkid.ca_detail_obj.latest_ca_cert = None [static] |
Definition at line 677 of file rpki/rpkid.py.
Definition at line 1004 of file rpki/rpkid.py.
Definition at line 1046 of file rpki/rpkid.py.
Definition at line 836 of file rpki/rpkid.py.
Definition at line 836 of file rpki/rpkid.py.
Definition at line 836 of file rpki/rpkid.py.
rpki.rpkid.ca_detail_obj.manifest_published = None [static] |
Definition at line 676 of file rpki/rpkid.py.
Definition at line 836 of file rpki/rpkid.py.
Definition at line 915 of file rpki/rpkid.py.
tuple rpki.rpkid.ca_detail_obj.sql_template [static] |
rpki.sql.template( "ca_detail", "ca_detail_id", ("private_key_id", rpki.x509.RSA), ("public_key", rpki.x509.RSApublic), ("latest_ca_cert", rpki.x509.X509), ("manifest_private_key_id", rpki.x509.RSA), ("manifest_public_key", rpki.x509.RSApublic), ("latest_manifest_cert", rpki.x509.X509), ("latest_manifest", rpki.x509.SignedManifest), ("latest_crl", rpki.x509.CRL), ("crl_published", rpki.sundial.datetime), ("manifest_published", rpki.sundial.datetime), "state", "ca_cert_uri", "ca_id")
Definition at line 658 of file rpki/rpkid.py.
Definition at line 757 of file rpki/rpkid.py.