1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
|
"""
Router origin-authentication update job. Work in progress.
This should be run under cron, after rcynic finishes. It chews over
the data rcynic collected and generates output suitable as input for a
companion server program (not yet written) which serves the resulting
data to the routers.
$Id$
Copyright (C) 2009 Internet Systems Consortium ("ISC")
Permission to use, copy, modify, and distribute this software for any
purpose with or without fee is hereby granted, provided that the above
copyright notice and this permission notice appear in all copies.
THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
PERFORMANCE OF THIS SOFTWARE.
"""
import sys, os, struct, rpki.x509, rpki.ipaddrs, rpki.sundial
class prefix(object):
"""Object representing one prefix. This corresponds closely to one
PDU in the rpki-router protocol, so closely that we use lexical
ordering of the wire format of the PDU as the ordering for this
class.
"""
version = 0 # Protocol version
source = 0 # Source (0 == RPKI)
@classmethod
def from_asn1(cls, asn, t):
"""Read a prefix from a ROA in the tuple format used by our ASN.1 decoder."""
x = 0L
for y in t[0]:
x = (x << 1) | y
for y in xrange(cls.addr_type.bits - len(t[0])):
x = (x << 1)
self = cls()
self.asn = asn
self.prefix = cls.addr_type(x)
self.prefixlen = len(t[0])
self.max_prefixlen = self.prefixlen if t[1] is None else t[1]
self.color = 0
self.pdu = self.to_pdu()
return self
def __str__(self):
return "%s/%s-%s[%s]" % (self.prefix, self.prefixlen, self.max_prefixlen, self.asn)
def __cmp__(self, other):
return cmp(self.pdu, other.pdu)
def to_pdu(self, announce = 1):
"""Generate the wire format PDU for this prefix. The announce bit
is handled via an optional argument because of the way we use it
when generating diffs.
"""
return (struct.pack("!BBHBBBB", self.version, self.pdu_type, self.color, announce, self.prefixlen, self.max_prefixlen, self.source) +
self.prefix.to_bytes() +
struct.pack("!L", self.asn))
@classmethod
def from_pdu_file(cls, f):
"""Read one wire format PDU from a file. This is intended to be
used in an iterator, so it raises StopIteration on end of file.
"""
b = f.read(8)
if b == "":
raise StopIteration
version, pdu_type, color, announce, prefixlen, max_prefixlen, source = struct.unpack("!BBHBBBB", b)
assert version == self.version, "PDU version is %d, expected %d" % (version, self.version)
assert announce == 1 and source == self.source
self = cls.pdu_map[pdu_type]()
self.prefixlen = prefixlen
self.max_prefixlen = max_prefixlen
self.color = color
self.prefix = self.addr_type.from_bytes(f.read(self.addr_type.bits / 8))
self.asn = struct.unpack("!L", f.read(4))
return self
class v4prefix(prefix):
"""IPv4 flavor of a prefix."""
addr_type = rpki.ipaddrs.v4addr
pdu_type = 4
class v6prefix(prefix):
"""IPv6 flavor of a prefix."""
addr_type = rpki.ipaddrs.v6addr
pdu_type = 6
prefix.afi_map = { "\x00\x01" : v4prefix, "\x00\x02" : v6prefix }
prefix.pdu_map = { 4 : v4prefix, 6 : v6prefix }
class prefix_set(list):
"""Object representing a set of prefixes, that is, one versioned and
(theoretically) consistant set of prefixes extracted from rcynic's
output.
"""
@classmethod
def from_rcynic(cls, rcynic_dir):
"""Parse ROAS fetched (and validated!) by rcynic to create a new
prefix_set.
"""
self = cls()
self.timestamp = rpki.sundial.now()
for root, dirs, files in os.walk(rcynic_dir):
for f in files:
if f.endswith(".roa"):
roa = rpki.x509.ROA(DER_file = os.path.join(root, f)).extract().get()
assert roa[0] == 0, "ROA version is %d, expected 0" % roa[0]
asn = roa[1]
for afi, addrs in roa[2]:
for addr in addrs:
self.append(prefix.afi_map[afi].from_asn1(asn, addr))
self.sort()
for i in xrange(len(self) - 2, -1, -1):
if self[i] == self[i + 1]:
del self[i + 1]
return self
prefixes = prefix_set.from_rcynic("../rcynic/rcynic-data/authenticated")
for p in prefixes:
print "%-40s %s" % (p, ":".join(("%02X" % ord(i) for i in p.to_pdu())))
|
